This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft File: Qg-DHM6albTzE1seVXeDqyAsa68.mft (raw, json) Hash identifier: P9aSEtUjHNj+AqCvDpBJRJMaOdBl+ofmVhQ4Uyr+Tgg= Subject key identifier: E7:3C:10:0E:D5:04:3D:E0:84:47:14:BA:4E:D4:0A:F7:D7:EF:F5:FC Authority key identifier: 42:0F:83:1C:CE:9A:95:B4:F3:13:5B:1E:55:77:83:AB:20:2C:6B:AF Certificate issuer: /CN=A913E614/serialNumber=420F831CCE9A95B4F3135B1E557783AB202C6BAF Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg-DHM6albTzE1seVXeDqyAsa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft Manifest number: 12 Signing time: Fri 19 Dec 2025 06:49:30 +0000 Manifest this update: Fri 19 Dec 2025 06:49:29 +0000 Manifest next update: Fri 26 Dec 2025 06:49:29 +0000 Files and hashes: 1: Qg-DHM6albTzE1seVXeDqyAsa68.crl (hash: lKEO3QWVO+CoJwTAUyrHmRVphXn7B9l8eE8hIYWR04k=) 2: CAFFD8E6C6D511F09C4D4F76C4F9AE02.roa (hash: LxjilRVcBRn1uZ3KLrjzsRj18qwxRaPtFbLfUU5tlx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.crl rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg-DHM6albTzE1seVXeDqyAsa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E614, serialNumber=420F831CCE9A95B4F3135B1E557783AB202C6BAF Validity Not Before: Dec 19 06:49:29 2025 GMT Not After : Dec 26 06:49:29 2025 GMT Subject: CN=6944f579-877f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bc:9e:25:3b:80:29:7c:d7:08:ff:52:ff:eb: 0d:c4:15:28:9f:ac:a4:2f:cc:d7:98:5c:f1:b5:18: 74:a1:64:b5:4e:64:3b:19:d9:22:09:d1:0d:09:18: 0f:2f:05:fe:93:a5:c0:18:c0:d9:4d:1e:49:25:66: b5:21:eb:81:55:3c:b3:6e:de:e7:99:17:da:18:eb: bb:18:a5:47:b2:58:7e:55:2b:6e:45:0c:68:19:28: 2c:5a:c9:01:50:95:e7:2e:84:7c:7d:25:b2:dc:ff: e3:ed:3e:83:7c:fd:22:07:7c:64:86:79:f0:5e:6e: 1d:5a:d5:69:cf:06:18:07:0c:f3:75:4a:2f:59:0c: 01:52:ae:2e:21:0c:c7:38:e9:3a:a1:5c:e0:2b:ae: fa:e4:d1:3e:cf:80:21:22:6c:64:83:3c:64:eb:dd: e7:1b:0b:42:0e:4a:c8:eb:12:62:bd:37:ad:62:20: be:76:2c:cc:c2:92:d7:86:d5:32:ad:25:41:a0:62: 29:0c:d5:1a:11:86:ce:a9:d6:d9:cd:02:89:b7:31: 91:bb:8b:50:f2:6f:df:9b:da:34:ce:c3:4d:ce:ae: a3:c1:e1:a7:18:0b:38:29:75:ae:08:f7:f9:6a:c0: 7c:b8:de:08:16:81:f4:86:2a:0d:51:8b:f5:a5:0f: a4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3C:10:0E:D5:04:3D:E0:84:47:14:BA:4E:D4:0A:F7:D7:EF:F5:FC X509v3 Authority Key Identifier: keyid:42:0F:83:1C:CE:9A:95:B4:F3:13:5B:1E:55:77:83:AB:20:2C:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg-DHM6albTzE1seVXeDqyAsa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:94:24:47:56:bf:4c:45:ab:4c:25:e8:50:40:dc:5e:21:12: 9d:99:8f:87:79:9a:bb:fe:bc:22:24:43:1c:3f:bb:17:9d:8c: 52:69:17:f4:f0:43:b6:3e:72:d6:bd:68:a9:ea:de:4f:dc:b1: fd:db:3d:b1:cf:5c:a8:61:4e:bd:81:6d:63:0c:f7:fd:1f:da: 88:fb:c5:2b:9a:a8:ea:ad:1a:fe:2a:68:66:47:f1:be:e8:2e: 04:8e:f7:f7:bc:1b:a4:3f:c4:0d:59:fc:60:b3:66:ce:72:66: aa:cf:53:44:e1:a9:24:fd:2c:13:97:66:0b:75:56:ae:1a:2f: 4a:4a:77:b2:96:cb:58:b6:9c:eb:bc:10:61:86:d1:1f:4d:20: 85:90:91:63:2e:ee:8d:9f:80:0d:4b:bc:0c:d2:35:32:d2:84: 3f:dc:cb:c5:06:89:5d:b2:2a:ef:29:64:77:eb:dc:d6:9c:a0: 27:35:42:be:cf:e2:f6:31:5e:78:ca:8a:3c:9a:7d:c5:66:98: 37:f8:cc:dc:ba:fe:df:bd:4d:72:12:0a:ac:90:2f:de:8d:e6: 0b:1e:7d:ef:37:e0:63:c8:c5:1a:e3:71:14:9f:10:0e:dd:75: 17:2d:10:c0:92:65:23:e7:d3:96:90:73:d6:3a:3f:d6:5f:f2: 03:e5:a0:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYxNDExMC8GA1UEBRMoNDIwRjgzMUNDRTlBOTVCNEYzMTM1QjFFNTU3NzgzQUIy MDJDNkJBRjAeFw0yNTEyMTkwNjQ5MjlaFw0yNTEyMjYwNjQ5MjlaMBgxFjAUBgNV BAMMDTY5NDRmNTc5LTg3N2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRvJ4lO4ApfNcI/1L/6w3EFSifrKQvzNeYXPG1GHShZLVOZDsZ2SIJ0Q0JGA8v Bf6TpcAYwNlNHkklZrUh64FVPLNu3ueZF9oY67sYpUeyWH5VK25FDGgZKCxayQFQ lecuhHx9JbLc/+PtPoN8/SIHfGSGefBebh1a1WnPBhgHDPN1Si9ZDAFSri4hDMc4 6TqhXOArrvrk0T7PgCEibGSDPGTr3ecbC0IOSsjrEmK9N61iIL52LMzCkteG1TKt JUGgYikM1RoRhs6p1tnNAom3MZG7i1Dyb9+b2jTOw03OrqPB4acYCzgpda4I9/lq wHy43ggWgfSGKg1Ri/WlD6QlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5zwQDtUE PeCERxS6TtQK99fv9fwwHwYDVR0jBBgwFoAUQg+DHM6albTzE1seVXeDqyAsa68w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjE0LzM4RTIxRDUyQzNB MTExRjBCNzQ0QzMzOUM0RjlBRTAyL1FnLURITTZhbGJUekUxc2VWWGVEcXlBc2E2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUWctREhNNmFsYlR6RTFzZVZYZURxeUFzYTY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NjE0LzM4RTIxRDUyQzNBMTExRjBCNzQ0QzMzOUM0RjlBRTAyL1FnLURITTZhbGJU ekUxc2VWWGVEcXlBc2E2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJqUJEdWv0xFq0wl6FBA3F4hEp2Zj4d5mrv+vCIkQxw/uxedjFJpF/Tw Q7Y+cta9aKnq3k/csf3bPbHPXKhhTr2BbWMM9/0f2oj7xSuaqOqtGv4qaGZH8b7o LgSO9/e8G6Q/xA1Z/GCzZs5yZqrPU0ThqST9LBOXZgt1Vq4aL0pKd7KWy1i2nOu8 EGGG0R9NIIWQkWMu7o2fgA1LvAzSNTLShD/cy8UGiV2yKu8pZHfr3NacoCc1Qr7P 4vYxXnjKijyafcVmmDf4zNy6/t+9TXISCqyQL96N5gsefe834GPIxRrjcRSfEA7d dRctEMCSZSPn05aQc9Y6P9Zf8gPloJ0= -----END CERTIFICATE-----Generated at Fri Dec 19 18:45:49 2025 by rpki-client