This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft File: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json) Hash identifier: +ma0oxwa0J/mBXmVbO4IkiMNp7WUusY25qa0eXsIfRc= Subject key identifier: 17:27:1C:21:B9:64:03:00:B9:20:DD:8C:36:C2:96:D3:AD:76:95:8A Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 Certificate issuer: /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Certificate serial: 281E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft Manifest number: 280E Signing time: Thu 18 Dec 2025 15:33:50 +0000 Manifest this update: Thu 18 Dec 2025 15:33:49 +0000 Manifest next update: Thu 25 Dec 2025 15:33:49 +0000 Files and hashes: 1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: MEPSnZsmNLB2ArNvruRuvcVthU6pWnFS5EXUhoihu4M=) 2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: h5hXtP9IbSxqcG/aS1dzRp2AGDqGhZ3NxNAa9bJM38Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10270 (0x281e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Validity Not Before: Dec 18 15:33:49 2025 GMT Not After : Dec 25 15:33:49 2025 GMT Subject: CN=69441ede-868e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:82:7d:88:05:71:08:a1:88:4c:73:ef:eb: 90:32:fa:54:40:96:7e:59:1c:38:16:b5:aa:94:39: 55:21:b9:99:62:e8:e0:a2:43:eb:77:fb:56:8f:62: a0:83:cd:a6:4e:fa:27:50:2a:db:a4:b1:0b:5f:df: 81:52:5d:34:8d:cc:dc:0f:2b:32:a5:12:bf:97:b3: 21:c7:db:ed:7d:9a:69:ad:33:9e:2d:e0:e7:bf:a7: 1c:92:b1:54:80:b4:32:7d:68:ad:d9:9c:16:ce:ff: 5b:7d:9e:b3:c1:a9:52:84:fd:37:b3:93:88:a6:62: 93:be:74:aa:ec:ba:d7:9b:85:61:f9:8a:9d:2f:0b: f2:15:05:0b:df:2a:d0:97:9f:1b:1c:1d:e9:f6:92: b8:b4:b9:d7:6c:74:b9:1c:5f:77:9c:6b:b2:5a:0d: fc:74:e9:d2:bb:2f:f1:38:6f:7d:7d:75:35:1b:46: 7e:8a:b5:df:c7:9e:1b:f5:f1:2c:61:14:70:f6:ff: e0:3f:d5:ca:dc:32:8b:72:56:3b:ac:7c:f4:50:1f: 9f:d2:9b:7c:e3:04:3d:b8:b5:87:c7:8b:7a:11:19: 9d:c8:e6:14:d2:0e:6c:ef:68:ad:61:c7:ae:af:e8: 38:f5:9b:85:1f:62:0c:63:21:b6:b8:92:cd:7e:22: 37:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:27:1C:21:B9:64:03:00:B9:20:DD:8C:36:C2:96:D3:AD:76:95:8A X509v3 Authority Key Identifier: keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:21:9b:72:48:43:24:4c:aa:c7:11:b6:0f:60:fa:78:95:17: 64:41:a7:b2:45:0f:76:85:cf:dc:07:49:da:51:9e:10:d4:e8: b9:4c:ac:49:a1:1e:56:e5:7f:f6:7d:0f:01:c9:b9:b5:4f:15: 67:f8:cf:4b:68:90:d1:21:53:80:a0:fa:04:cb:4c:ac:b8:67: 9e:32:96:60:03:0d:c9:28:22:38:86:99:69:97:ab:52:d1:dc: e9:59:65:7d:a6:f3:db:19:eb:9f:bb:95:22:90:b5:0c:44:0d: f3:6f:66:d0:67:c9:26:43:18:a0:b7:a3:1b:e8:8d:19:db:0c: 67:07:39:1e:98:0d:5d:ea:fd:9d:0e:d5:f3:e6:b3:f1:43:16: 4a:05:2b:56:3f:ee:30:9e:ad:22:9c:8e:db:37:05:a9:9f:3b: 1b:f7:61:7b:cd:fe:ea:82:90:32:b1:e7:cf:d5:5c:cc:3d:a2: 16:73:0a:07:00:a9:d4:03:75:97:0b:ec:1f:43:1a:12:fd:19: eb:d1:8c:72:09:44:d8:ce:57:51:1c:39:1e:99:02:ba:60:8c: 3b:7f:fa:6e:49:bb:69:7c:47:a9:49:6c:2d:1e:0b:cf:e5:e5: a8:18:b4:23:67:20:f2:fb:6a:ed:a8:43:38:7b:86:a8:79:45: 89:db:ff:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQ0YxMTAvBgNVBAUTKDQzODE5NTVFMjY1QTI4M0Y4NURDOUE0NEU5RDUxMzcz MTI3QTI0MTIwHhcNMjUxMjE4MTUzMzQ5WhcNMjUxMjI1MTUzMzQ5WjAYMRYwFAYD VQQDDA02OTQ0MWVkZS04NjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPaCfYgFcQihiExz7+uQMvpUQJZ+WRw4FrWqlDlVIbmZYujgokPrd/tWj2Kg g82mTvonUCrbpLELX9+BUl00jczcDysypRK/l7Mhx9vtfZpprTOeLeDnv6cckrFU gLQyfWit2ZwWzv9bfZ6zwalShP03s5OIpmKTvnSq7LrXm4Vh+YqdLwvyFQUL3yrQ l58bHB3p9pK4tLnXbHS5HF93nGuyWg38dOnSuy/xOG99fXU1G0Z+irXfx54b9fEs YRRw9v/gP9XK3DKLclY7rHz0UB+f0pt84wQ9uLWHx4t6ERmdyOYU0g5s72itYceu r+g49ZuFH2IMYyG2uJLNfiI3ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcnHCG5 ZAMAuSDdjDbCltOtdpWKMB8GA1UdIwQYMBaAFEOBlV4mWig/hdyaROnVE3MSeiQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDRi9ENjFGRUE5RUE3 NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtELUYzSnBFNmRVVGN4SjZK QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0R1ZYaVphS0QtRjNKcEU2ZFVUY3hKNkpCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDRi9ENjFGRUE5RUE3NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtE LUYzSnBFNmRVVGN4SjZKQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlIZtySEMkTKrHEbYPYPp4lRdkQaeyRQ92hc/cB0naUZ4Q1Oi5TKxJ oR5W5X/2fQ8Bybm1TxVn+M9LaJDRIVOAoPoEy0ysuGeeMpZgAw3JKCI4hplpl6tS 0dzpWWV9pvPbGeufu5UikLUMRA3zb2bQZ8kmQxigt6Mb6I0Z2wxnBzkemA1d6v2d DtXz5rPxQxZKBStWP+4wnq0inI7bNwWpnzsb92F7zf7qgpAysefP1VzMPaIWcwoH AKnUA3WXC+wfQxoS/Rnr0YxyCUTYzldRHDkemQK6YIw7f/puSbtpfEepSWwtHgvP 5eWoGLQjZyDy+2rtqEM4e4aoeUWJ2/+n -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:20 2025 by rpki-client