This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft File: QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft (raw, json) Hash identifier: rtHDl0ku9Jx4y3VaovmKFzUQ9NFeM8xi6wXzoSpDClE= Subject key identifier: 64:C6:DD:8A:06:7C:51:D5:6D:8A:D8:5C:F1:BF:29:D1:C1:30:1C:8E Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 Certificate issuer: /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Certificate serial: 08C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft Manifest number: 08AF Signing time: Thu 18 Dec 2025 20:01:50 +0000 Manifest this update: Thu 18 Dec 2025 20:01:49 +0000 Manifest next update: Thu 25 Dec 2025 20:01:49 +0000 Files and hashes: 1: QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl (hash: qq4XBCeCEZIRwYZdrfAYJ8bHZ45Sw9yjPeWxRQnAI2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2240 (0x8c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914740F, serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Validity Not Before: Dec 18 20:01:49 2025 GMT Not After : Dec 25 20:01:49 2025 GMT Subject: CN=69445dae-ea4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:f7:84:be:1f:4f:bc:e0:26:fd:d3:61:ff: 35:76:2e:94:50:93:8a:63:90:e8:ab:59:3b:42:81: a6:0e:16:06:e0:fc:84:c3:22:c7:b4:67:8f:7e:a4: fa:44:5d:7e:dd:aa:73:0e:d7:03:0e:c2:ef:eb:0c: c9:b1:c0:aa:c9:8b:89:02:2e:d6:86:37:6a:0e:d8: b8:53:ee:7b:de:13:63:94:52:23:3d:f0:15:a1:71: 67:d6:b7:43:2c:94:c2:cb:9b:dc:dc:e5:dd:78:44: e0:f8:a0:91:13:96:58:95:0a:b1:f5:1a:d9:66:05: 98:37:34:99:3e:81:f1:f0:63:8b:87:df:49:8c:44: b7:c3:de:d7:9e:67:1c:b1:55:b1:b2:80:68:04:15: 5a:d3:7e:bf:72:1b:49:c4:89:37:40:c3:4c:e6:3d: 88:ea:63:04:b5:2f:75:dd:c7:c2:d8:7c:c6:e9:2a: f0:5d:7a:36:9b:c4:c3:d3:c8:c0:61:1b:ee:ec:86: cf:4b:7e:03:2c:77:85:da:3d:3d:07:ba:1c:bb:24: 82:b4:ff:b2:f6:80:ce:b4:0c:a5:e5:06:83:5b:b0: c2:17:2b:87:5e:26:78:b0:e2:88:34:ea:61:c6:ca: ca:37:9c:8c:81:b0:aa:10:6a:3c:fd:27:f4:d7:4f: c7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C6:DD:8A:06:7C:51:D5:6D:8A:D8:5C:F1:BF:29:D1:C1:30:1C:8E X509v3 Authority Key Identifier: keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1d:c9:79:c5:f8:c3:4d:7b:c6:da:cb:bb:10:c1:72:d4:37: 32:45:5b:3d:aa:82:20:57:41:52:24:09:33:41:57:a4:58:14: 6a:16:52:a0:1c:cf:ed:1e:cb:a0:ef:76:1b:95:21:aa:c8:ca: c4:66:7f:5b:ab:f0:f7:a5:a0:8b:a4:6f:1d:66:a5:46:b4:66: 67:a8:5b:d7:db:d0:2b:f5:3c:0f:77:28:0c:7e:cd:6f:88:12: da:89:2d:a2:5e:c6:22:7a:0e:ff:62:6f:3f:8c:f7:56:a5:5c: 4d:1a:7a:3f:34:e2:12:be:a1:d0:52:e9:8e:b9:a5:26:8b:c6: 65:28:85:e9:08:7a:9b:76:20:f4:b3:e4:9e:18:76:b9:90:0b: 0c:d1:4f:54:14:d2:71:02:9c:0c:49:3a:db:0f:6b:b9:7d:42: 4f:3f:3c:f9:5c:51:3d:94:1f:b4:62:66:93:f1:58:45:1d:0d: 0d:5e:18:75:c7:91:1c:43:3b:b5:e4:2a:98:a2:b9:10:6a:74: c0:63:1e:c5:93:b5:4d:39:1a:6b:29:76:26:00:1e:bf:bf:90: a1:a9:0c:cb:02:07:92:a3:80:e0:d8:68:3b:ca:f1:1b:29:cb: 5e:14:3b:da:77:f5:9a:9e:53:ff:b5:0f:bf:9b:a7:59:5f:2d: a1:45:5d:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0MEYxMTAvBgNVBAUTKDQxNUNERkMzRTZDRTY1MzMwNkVBOTVBRDE2N0QyRTg5 NzVDNUU0MDMwHhcNMjUxMjE4MjAwMTQ5WhcNMjUxMjI1MjAwMTQ5WjAYMRYwFAYD VQQDDA02OTQ0NWRhZS1lYTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqz3hL4fT7zgJv3TYf81di6UUJOKY5Doq1k7QoGmDhYG4PyEwyLHtGePfqT6 RF1+3apzDtcDDsLv6wzJscCqyYuJAi7WhjdqDti4U+573hNjlFIjPfAVoXFn1rdD LJTCy5vc3OXdeETg+KCRE5ZYlQqx9RrZZgWYNzSZPoHx8GOLh99JjES3w97Xnmcc sVWxsoBoBBVa036/chtJxIk3QMNM5j2I6mMEtS913cfC2HzG6SrwXXo2m8TD08jA YRvu7IbPS34DLHeF2j09B7ocuySCtP+y9oDOtAyl5QaDW7DCFyuHXiZ4sOKINOph xsrKN5yMgbCqEGo8/Sf010/H8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTG3YoG fFHVbYrYXPG/KdHBMByOMB8GA1UdIwQYMBaAFEFc38PmzmUzBuqVrRZ9Lol1xeQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQwRi80MTQyRDUwRUND OTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pUTUc2cFd0Rm4wdWlYWEY1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWemZ3LWJPWlRNRzZwV3RGbjB1aVhYRjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQwRi80MTQyRDUwRUNDOTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pU TUc2cFd0Rm4wdWlYWEY1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9Hcl5xfjDTXvG2su7EMFy1DcyRVs9qoIgV0FSJAkzQVekWBRqFlKg HM/tHsug73YblSGqyMrEZn9bq/D3paCLpG8dZqVGtGZnqFvX29Ar9TwPdygMfs1v iBLaiS2iXsYieg7/Ym8/jPdWpVxNGno/NOISvqHQUumOuaUmi8ZlKIXpCHqbdiD0 s+SeGHa5kAsM0U9UFNJxApwMSTrbD2u5fUJPPzz5XFE9lB+0YmaT8VhFHQ0NXhh1 x5EcQzu15CqYorkQanTAYx7Fk7VNORprKXYmAB6/v5ChqQzLAgeSo4Dg2Gg7yvEb KcteFDvad/WanlP/tQ+/m6dZXy2hRV1J -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:46 2025 by rpki-client