This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json) Hash identifier: WLnboqRjDOcRqOk2jgZC/n0JFara9Y9cPC6hp4RTGV4= Subject key identifier: 41:57:9C:9D:EE:A6:87:18:84:B5:EF:74:D7:49:47:1E:FB:23:FE:17 Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 082D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft Manifest number: 0787 Signing time: Tue 30 Dec 2025 13:18:15 +0000 Manifest this update: Tue 30 Dec 2025 13:18:15 +0000 Manifest next update: Tue 06 Jan 2026 13:18:15 +0000 Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: KbArlHfhHGoJPnftODbBX9//A5EaJAOnfqsGuFKMa4w=) 2: 632982C478E411F0B36C2173C4F9AE02.roa (hash: DqMi1I/Izzb5oOVCjzKuAyd4KmWH/EJc0rOqPfPKcVQ=) 3: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: 4LAsvPxFJVP/38iRypn40TaMOPz9lx58IyU7j8BYYnw=) 4: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: EzJu4NrWpukbz30ZMeSBC7xmaD1jBqVwT6Irau+K5pk=) 5: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (hash: br5hnwr7X9iQ5fc1Xg9U2WlH0RLjpT/ZZ2U312LM138=) 6: 03BA8B36824411EF94479387C4F9AE02.roa (hash: J+iY4JEtmySFwOCqaP72SvJVDZLPvNEiLKvI7NyNzmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 13:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2093 (0x82d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Dec 30 13:18:15 2025 GMT Not After : Jan 6 13:18:15 2026 GMT Subject: CN=6953d117-6e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:e8:a4:17:6f:f2:1f:40:56:db:03:c2:52: 82:11:b4:2c:57:f7:b7:5f:a2:9c:42:e6:4c:15:48: f8:b9:2f:c8:60:36:13:ed:8b:38:26:62:5e:8b:14: 0d:7e:e6:f0:5a:76:67:5a:c7:03:36:7b:37:86:5f: 80:a7:e3:b8:cb:31:27:d3:bd:ca:20:8e:b4:6e:a6: 48:9c:64:e7:11:99:25:86:c4:fb:a3:22:7f:c8:46: cd:93:2d:dd:f6:92:da:40:a7:06:0c:79:af:b5:94: 6d:b6:43:73:bd:c8:45:96:55:d2:f9:9f:53:1e:a7: b9:8f:3a:c7:4b:53:01:51:56:87:52:d6:9d:e7:18: 59:8d:cf:a7:ec:49:77:1e:7d:97:1b:09:c2:c5:3d: 7b:6b:f7:05:7b:c4:c5:e9:59:4b:29:7c:fd:3f:09: 8d:6c:44:e7:22:7d:b6:28:e7:46:4c:ca:44:42:07: 6f:02:fb:74:a9:65:20:ef:9d:f4:2d:16:35:54:ad: 55:38:e4:bb:61:d3:c8:e2:e4:75:5e:03:e1:9b:bc: 76:ae:2b:ca:47:f4:b6:db:e0:20:67:e3:57:7d:c4: 21:3d:ff:de:a6:92:4f:15:4e:2a:fd:ca:61:63:95: 20:23:2c:08:fe:fa:7d:40:18:f2:e7:62:e0:c7:f6: e1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:57:9C:9D:EE:A6:87:18:84:B5:EF:74:D7:49:47:1E:FB:23:FE:17 X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:f1:47:74:9c:a8:8e:af:42:64:b3:25:26:dc:96:f1:52:8c: d1:7e:cd:8d:c9:f1:02:57:be:e9:8e:86:48:ec:80:27:33:2f: 6a:ed:17:44:da:e8:13:ac:e0:6d:fc:a4:68:02:8c:6c:b0:aa: 08:2c:39:c8:34:ed:d8:78:1a:b9:a1:fa:8a:23:ea:91:9d:c3: ce:0e:d4:f6:e2:2c:31:b6:37:dc:21:98:4b:90:46:b0:be:c0: f8:2f:c1:c1:c9:16:02:3e:2e:e4:1a:39:9e:77:36:95:bd:4c: fb:f4:ab:f8:90:e1:1e:c8:8a:55:24:99:59:6b:ec:07:3c:72: ee:61:c0:a7:46:cd:b6:7a:dc:af:44:15:b6:51:55:24:bd:0b: f2:d5:0b:13:95:11:e9:3b:70:b6:6b:54:59:1e:af:8d:e3:36: 9d:af:17:d3:71:c1:63:f7:f1:16:b0:ce:5c:14:e7:1b:86:ed: 47:60:7a:88:a9:58:c5:f3:eb:b4:e0:ad:f3:b6:ab:e0:3e:b1: 05:61:1f:35:f8:2a:e5:f8:6d:32:ab:61:c1:6f:c1:37:70:eb: c1:48:d9:af:28:3c:1a:a1:4b:d8:d4:10:ea:97:b9:71:0e:d7: 6c:ef:a1:09:b8:f1:66:5e:25:c4:4c:d4:d4:c4:6d:0b:85:6c: e0:85:3f:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjUxMjMwMTMxODE1WhcNMjYwMTA2MTMxODE1WjAYMRYwFAYD VQQDDA02OTUzZDExNy02ZTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwnopBdv8h9AVtsDwlKCEbQsV/e3X6KcQuZMFUj4uS/IYDYT7Ys4JmJeixQN fubwWnZnWscDNns3hl+Ap+O4yzEn073KII60bqZInGTnEZklhsT7oyJ/yEbNky3d 9pLaQKcGDHmvtZRttkNzvchFllXS+Z9THqe5jzrHS1MBUVaHUtad5xhZjc+n7El3 Hn2XGwnCxT17a/cFe8TF6VlLKXz9PwmNbETnIn22KOdGTMpEQgdvAvt0qWUg7530 LRY1VK1VOOS7YdPI4uR1XgPhm7x2rivKR/S22+AgZ+NXfcQhPf/eppJPFU4q/cph Y5UgIywI/vp9QBjy52Lgx/bhoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFXnJ3u pocYhLXvdNdJRx77I/4XMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q3QS81RERDQ0NDNjk5MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRx QS16OFliRmJwTzhTT1FNM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo8Ud0nKiOr0JksyUm3JbxUozRfs2NyfECV77pjoZI7IAnMy9q7RdE 2ugTrOBt/KRoAoxssKoILDnINO3YeBq5ofqKI+qRncPODtT24iwxtjfcIZhLkEaw vsD4L8HByRYCPi7kGjmedzaVvUz79Kv4kOEeyIpVJJlZa+wHPHLuYcCnRs22etyv RBW2UVUkvQvy1QsTlRHpO3C2a1RZHq+N4zadrxfTccFj9/EWsM5cFOcbhu1HYHqI qVjF8+u04K3ztqvgPrEFYR81+Crl+G0yq2HBb8E3cOvBSNmvKDwaoUvY1BDql7lx Dtds76EJuPFmXiXETNTUxG0LhWzghT+0 -----END CERTIFICATE-----Generated at Tue Dec 30 18:41:06 2025 by rpki-client