This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft File: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft (raw, json) Hash identifier: t3iIbGEq/PTm0i8rltts4i/ORFU2/3ht++LsbMGyeII= Subject key identifier: 46:F5:25:14:F3:16:7B:35:4D:BE:72:18:4F:D0:FE:29:BA:99:07:6B Authority key identifier: D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 Certificate issuer: /CN=A914A49B/serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft Manifest number: 0139 Signing time: Sun 21 Dec 2025 03:40:41 +0000 Manifest this update: Sun 21 Dec 2025 03:40:40 +0000 Manifest next update: Sun 28 Dec 2025 03:40:40 +0000 Files and hashes: 1: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl (hash: 6p+O6o8Tn4MzvohQd04BcxvD4rhjtNeR+MtvOCpY/Iw=) 2: 2907520205DA11EF974A6A0BC4F9AE02.roa (hash: ewrjscJpS/Xz/iKI0GqdO+oPSijzuVXsC0vnRwXLRmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A49B, serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Validity Not Before: Dec 21 03:40:40 2025 GMT Not After : Dec 28 03:40:40 2025 GMT Subject: CN=69476c39-a7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:dd:4a:79:da:f0:3d:7f:80:95:3c:f0:06: 69:3a:8e:50:d6:81:cf:e1:65:2f:5b:29:57:54:08: bd:7f:44:77:b7:35:fa:80:e7:41:75:1f:46:d0:8c: a0:01:2d:36:42:af:5f:4d:24:d0:a7:8c:88:35:1d: df:b9:cd:11:c1:e8:44:05:34:f0:cd:89:d6:d6:5e: 10:c0:63:73:07:e9:73:3e:21:b2:d2:fc:c3:22:ea: 8e:22:25:f9:84:4c:93:06:ab:2d:dd:55:75:73:fe: 00:6e:5e:80:8c:db:c3:ae:f6:46:28:ce:77:95:03: 2e:25:2b:11:d4:dd:92:96:0e:7c:cd:3f:be:b5:b7: f1:86:15:13:45:e3:e4:6a:f7:72:b6:dd:29:90:dd: 29:26:7d:65:b2:52:3b:34:c3:b2:b3:01:b3:86:50: e9:75:82:1b:00:44:0d:eb:85:27:19:6a:b6:47:cf: c9:2f:60:c2:bc:8f:23:3f:a0:7e:23:58:a1:2d:17: dc:6b:37:e5:bf:3b:48:24:0d:30:c3:48:ec:b4:8b: 41:94:76:26:63:07:97:9f:b3:53:6d:8e:0b:e3:22: 9b:12:e8:d1:14:cf:67:4a:e8:06:8d:d1:f7:bb:2c: d5:4d:e5:ae:0e:87:72:bc:0f:89:88:c9:5b:3d:91: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F5:25:14:F3:16:7B:35:4D:BE:72:18:4F:D0:FE:29:BA:99:07:6B X509v3 Authority Key Identifier: keyid:D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:2e:5d:75:95:42:d6:ed:34:12:4b:08:fb:dd:d2:82:3b:65: a7:b5:79:97:44:7a:f5:41:d3:ad:a2:0c:0c:34:38:26:00:1d: 81:fb:71:c1:68:c6:9f:e5:55:e8:ab:c0:3e:f5:23:76:13:61: 9d:3b:48:2a:9c:63:4b:8b:77:e2:87:44:3d:d9:dd:c0:3c:47: 78:18:a5:da:64:62:0d:0d:39:07:cf:83:86:cd:67:9a:35:64: b3:59:f6:03:74:75:9f:87:da:bf:17:0c:6c:7b:92:d0:5f:db: 6e:4e:4e:16:cc:ee:d1:5c:68:f3:34:a5:90:36:d0:23:fc:e0: 8f:d8:77:68:5b:30:d7:54:ee:ce:3c:82:9b:ef:47:85:14:93: e1:85:d7:9e:02:75:b4:2c:bc:40:cb:a3:c8:16:67:b3:c8:99: 0f:1a:0e:38:ca:1e:33:3d:1d:60:0d:26:3c:54:7b:78:95:1a: 2b:c6:b6:3f:ba:13:e6:1e:f2:12:1a:6a:4d:e9:98:e1:d9:90: 8d:33:c8:0c:c1:9f:0c:e0:51:12:c1:0c:4b:f3:52:32:36:c3: b8:a6:d0:e7:78:de:9f:19:30:20:05:c5:58:3d:03:8f:ce:13: cb:fa:31:d1:6a:9c:f8:24:0b:49:cd:c9:57:c5:1c:e7:cd:c6: 19:45:d9:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0OUIxMTAvBgNVBAUTKEQ1MDM3QUY5NjlDOEFDRUEwMUI1NzBGQzY0QURENDgy OEFDMDY0MTQwHhcNMjUxMjIxMDM0MDQwWhcNMjUxMjI4MDM0MDQwWjAYMRYwFAYD VQQDDA02OTQ3NmMzOS1hN2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAum7dSnna8D1/gJU88AZpOo5Q1oHP4WUvWylXVAi9f0R3tzX6gOdBdR9G0Iyg AS02Qq9fTSTQp4yINR3fuc0RwehEBTTwzYnW1l4QwGNzB+lzPiGy0vzDIuqOIiX5 hEyTBqst3VV1c/4Abl6AjNvDrvZGKM53lQMuJSsR1N2Slg58zT++tbfxhhUTRePk avdytt0pkN0pJn1lslI7NMOyswGzhlDpdYIbAEQN64UnGWq2R8/JL2DCvI8jP6B+ I1ihLRfcazflvztIJA0ww0jstItBlHYmYweXn7NTbY4L4yKbEujRFM9nSugGjdH3 uyzVTeWuDodyvA+JiMlbPZGaPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEb1JRTz Fns1Tb5yGE/Q/im6mQdrMB8GA1UdIwQYMBaAFNUDevlpyKzqAbVw/GSt1IKKwGQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ5Qi9COTRGNjkzNjAx NTExMUVGOTg1N0MwMUVDNEY5QUUwMi8xUU42LVduSXJPb0J0WEQ4WkszVWdvckFa QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRTjYtV25Jck9vQnRYRDhaSzNVZ29yQVpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ5Qi9COTRGNjkzNjAxNTExMUVGOTg1N0MwMUVDNEY5QUUwMi8xUU42LVduSXJP b0J0WEQ4WkszVWdvckFaQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCELl11lULW7TQSSwj73dKCO2WntXmXRHr1QdOtogwMNDgmAB2B+3HB aMaf5VXoq8A+9SN2E2GdO0gqnGNLi3fih0Q92d3APEd4GKXaZGINDTkHz4OGzWea NWSzWfYDdHWfh9q/Fwxse5LQX9tuTk4WzO7RXGjzNKWQNtAj/OCP2HdoWzDXVO7O PIKb70eFFJPhhdeeAnW0LLxAy6PIFmezyJkPGg44yh4zPR1gDSY8VHt4lRorxrY/ uhPmHvISGmpN6Zjh2ZCNM8gMwZ8M4FESwQxL81IyNsO4ptDneN6fGTAgBcVYPQOP zhPL+jHRapz4JAtJzclXxRznzcYZRdlt -----END CERTIFICATE-----Generated at Sun Dec 21 18:58:07 2025 by rpki-client