This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft File: qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft (raw, json) Hash identifier: V7ctzBOjMckDnXtE+vfKjFegoJagV0959o3ONsvpGew= Subject key identifier: B7:8D:8E:AA:52:04:1C:26:B3:96:06:83:FD:88:6B:65:96:2C:7E:F3 Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft Manifest number: 52 Signing time: Fri 19 Dec 2025 06:12:28 +0000 Manifest this update: Fri 19 Dec 2025 06:12:27 +0000 Manifest next update: Fri 26 Dec 2025 06:12:27 +0000 Files and hashes: 1: qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl (hash: Sipx4FtUl1PBd8UYabwCuNUhQTRHfIq7Uy0s5YR8NLM=) 2: C869343A5FE011F0ABA4A158C4F9AE02.roa (hash: 1m3AATxdBvNaAbP3EbhkZoZi/9NKKO+rrYQbsiCKglc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Validity Not Before: Dec 19 06:12:27 2025 GMT Not After : Dec 26 06:12:27 2025 GMT Subject: CN=6944eccc-c572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ef:43:f6:10:5a:20:a7:75:7b:c6:88:bf:dc: a2:c2:50:3e:53:91:ad:cc:23:a6:e5:f5:59:a1:77: 6d:13:9d:6e:4d:76:19:00:fc:39:57:61:a5:3d:99: f4:68:a2:0e:97:4a:24:c5:e9:c7:1e:b2:be:7e:0b: 25:8c:69:d1:b8:4d:3a:57:f1:42:09:bf:38:b7:99: c1:f0:c3:bf:f6:00:4d:0d:ba:95:ef:03:08:fd:e7: 70:89:e0:f2:95:bb:b7:de:2a:da:0d:d9:cb:be:9c: c0:bf:5c:c6:96:16:11:bd:51:aa:04:bb:4a:bf:ad: a5:e1:7b:b1:e3:3a:8a:94:65:2d:72:ec:ef:0e:4c: ef:2d:52:04:cd:dd:a0:47:36:91:ed:0d:94:51:d0: de:0c:8e:a6:0b:e4:80:6b:f9:ab:25:18:82:a3:87: 2e:c2:ef:0f:3f:ba:12:d7:09:9c:9d:70:c0:24:f4: 11:72:ea:f5:d6:65:59:2a:e5:8d:f6:e9:ca:ca:fd: fe:c0:02:9a:6e:65:0f:4b:1f:54:61:b7:23:ff:d4: af:0b:d6:5b:44:0b:2e:d1:54:fd:5a:be:bf:d1:37: 42:d5:28:0f:a7:aa:db:21:41:bb:8b:03:62:d7:df: c2:da:5e:50:81:4b:e7:94:76:10:02:b8:70:37:48: e1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8D:8E:AA:52:04:1C:26:B3:96:06:83:FD:88:6B:65:96:2C:7E:F3 X509v3 Authority Key Identifier: keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:a0:7b:89:03:74:c6:62:7d:2a:cd:a6:36:fd:a7:90:e8:f2: 63:54:7d:bd:e6:96:72:f4:7c:a5:c7:11:cc:9b:66:9c:95:c3: 6d:e4:60:b7:da:d0:5e:b5:7c:31:dc:76:bc:f6:cb:b0:94:61: c9:44:f1:d0:88:db:35:56:73:05:7a:58:44:e5:0a:5d:a7:d3: 8d:b9:a7:47:9e:7e:f3:f8:07:d9:d0:18:2b:67:f3:f1:b9:8f: 9c:60:e2:c6:ad:ac:c8:a6:52:f6:17:56:2d:a3:dd:ea:02:d3: 1d:00:c5:85:81:bf:d1:b3:79:c5:55:75:50:a9:0d:39:e7:64: 97:90:cf:da:60:44:05:31:93:9b:f8:22:fc:e9:9e:c9:33:57: 47:1f:58:53:72:ad:14:30:ad:7e:d3:09:e0:46:64:2a:b9:92: 1f:cd:36:4d:d2:fb:f4:8c:37:38:98:73:20:99:5c:54:e3:36: 2f:ef:10:71:57:16:13:a9:13:9b:ad:d4:a8:39:3f:97:51:29: 43:e9:42:64:c0:ce:2f:84:48:2e:d4:5f:ae:95:3f:0e:e1:39: fa:ee:65:8e:66:d1:1b:73:b7:60:d4:71:e0:0d:6e:5c:d4:0d: 92:3c:85:ae:40:c8:20:39:9d:e2:33:01:d2:e3:3a:a5:2b:34: 68:ab:aa:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzBENjExMC8GA1UEBRMoQUFDMzlGRDk2M0RFMTczMUQwREEzRDQxNDFFNEExRTQ2 OUU5ODUyMzAeFw0yNTEyMTkwNjEyMjdaFw0yNTEyMjYwNjEyMjdaMBgxFjAUBgNV BAMMDTY5NDRlY2NjLWM1NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp70P2EFogp3V7xoi/3KLCUD5Tka3MI6bl9Vmhd20TnW5NdhkA/DlXYaU9mfRo og6XSiTF6ccesr5+CyWMadG4TTpX8UIJvzi3mcHww7/2AE0NupXvAwj953CJ4PKV u7feKtoN2cu+nMC/XMaWFhG9UaoEu0q/raXhe7HjOoqUZS1y7O8OTO8tUgTN3aBH NpHtDZRR0N4MjqYL5IBr+aslGIKjhy7C7w8/uhLXCZydcMAk9BFy6vXWZVkq5Y32 6crK/f7AAppuZQ9LH1RhtyP/1K8L1ltECy7RVP1avr/RN0LVKA+nqtshQbuLA2LX 38LaXlCBS+eUdhACuHA3SOHFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt42OqlIE HCazlgaD/YhrZZYsfvMwHwYDVR0jBBgwFoAUqsOf2WPeFzHQ2j1BQeSh5GnphSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzMEQ2LzE3RjA2QTI0NUZF MDExRjBCMkZEOEY1N0M0RjlBRTAyL3FzT2YyV1BlRnpIUTJqMUJRZVNoNUducGhT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXNPZjJXUGVGekhRMmoxQlFlU2g1R25waFNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz MEQ2LzE3RjA2QTI0NUZFMDExRjBCMkZEOEY1N0M0RjlBRTAyL3FzT2YyV1BlRnpI UTJqMUJRZVNoNUducGhTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIKge4kDdMZifSrNpjb9p5Do8mNUfb3mlnL0fKXHEcybZpyVw23kYLfa 0F61fDHcdrz2y7CUYclE8dCI2zVWcwV6WETlCl2n0425p0eefvP4B9nQGCtn8/G5 j5xg4satrMimUvYXVi2j3eoC0x0AxYWBv9GzecVVdVCpDTnnZJeQz9pgRAUxk5v4 IvzpnskzV0cfWFNyrRQwrX7TCeBGZCq5kh/NNk3S+/SMNziYcyCZXFTjNi/vEHFX FhOpE5ut1Kg5P5dRKUPpQmTAzi+ESC7UX66VPw7hOfruZY5m0Rtzt2DUceANblzU DZI8ha5AyCA5neIzAdLjOqUrNGirquM= -----END CERTIFICATE-----Generated at Sat Dec 20 00:54:59 2025 by rpki-client