This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft File: qfCsl7nBjDLiFpwBpJhsemwlX_4.mft (raw, json) Hash identifier: it6g2D8+miLwuryF6oAzFVnyPgD4p7VjcLwttizGRYU= Subject key identifier: 09:1F:E4:A5:5A:96:68:D3:58:14:48:4D:66:88:6A:EC:2B:E4:0C:8E Authority key identifier: A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE Certificate issuer: /CN=A91585F0/serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft Manifest number: 51 Signing time: Sun 21 Dec 2025 06:18:30 +0000 Manifest this update: Sun 21 Dec 2025 06:18:30 +0000 Manifest next update: Sun 28 Dec 2025 06:18:30 +0000 Files and hashes: 1: qfCsl7nBjDLiFpwBpJhsemwlX_4.crl (hash: 8af73PHcdOG1jU0Rd+4gE14tD1zGioH963VHklBM1YU=) 2: C9479880646611F0B371D156C4F9AE02.roa (hash: ebNb1cqmZBUz7WL9tCF2PExl+FU65/gDmGjSUW9LYDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91585F0, serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE Validity Not Before: Dec 21 06:18:30 2025 GMT Not After : Dec 28 06:18:30 2025 GMT Subject: CN=69479136-a09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d3:4b:e8:93:fd:88:c8:dd:06:fb:92:f7:4a: 36:8c:b3:9b:3f:89:7e:3b:00:4c:78:21:a6:d8:1a: 56:74:22:2d:97:0e:eb:a7:28:d9:e1:83:de:01:aa: c4:b0:4a:9f:87:b6:5b:bf:95:be:a6:f2:50:e4:28: 3a:8e:ab:40:8a:82:f0:db:65:33:e2:8a:ff:6e:23: 43:af:fe:a8:23:a8:69:4e:56:78:eb:5f:ef:6c:54: ce:de:1a:72:14:28:5c:0e:e0:a6:79:95:ce:71:02: 10:3d:f2:48:38:98:96:e7:42:da:e8:10:b7:99:35: eb:6d:96:a2:82:b2:89:c8:bf:a6:7f:e7:54:4a:18: 10:87:d9:38:73:c0:65:aa:60:6c:23:9a:06:4e:b1: ce:74:04:99:f8:95:86:d4:de:16:df:43:b5:4f:6f: 37:c7:05:44:1f:05:c3:35:a0:8d:9f:3a:bf:9c:4c: ea:a4:f4:5d:56:34:d6:8c:20:3b:55:70:46:7e:a9: 59:7b:e2:83:00:af:5f:9a:0c:93:ca:79:9d:f0:9e: 3a:f3:f7:05:79:3f:e2:57:00:a0:f4:b0:aa:d7:03: 69:a1:6b:12:e4:fd:ed:0f:3c:5c:7e:99:43:d4:db: 7e:66:8b:37:8a:fc:c0:92:f2:07:dd:ba:b5:be:5c: 9c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1F:E4:A5:5A:96:68:D3:58:14:48:4D:66:88:6A:EC:2B:E4:0C:8E X509v3 Authority Key Identifier: keyid:A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:9f:8e:cb:c7:bd:e0:b8:21:d3:d0:6b:be:4a:f1:c5:1b:34: be:8b:bb:21:25:d8:4c:3c:71:4b:5a:09:cc:ef:ba:1b:5f:ad: a3:25:b7:71:51:80:5a:d4:f0:b2:8d:d7:48:b5:b1:e9:9b:e0: 92:eb:2a:7b:e4:d5:05:f8:60:09:4b:87:77:ae:d6:97:3b:bc: 1a:db:79:f3:84:0d:47:c3:e9:f4:7e:d7:e4:16:ed:5c:4b:71: 9c:d9:7b:26:44:98:2e:84:3a:2f:15:8a:69:01:79:47:c7:d6: 8c:15:d8:a0:17:6b:7b:29:f7:cf:3f:a3:7b:98:93:0c:0f:50: 7b:58:fe:f4:ef:29:9c:26:d1:6f:ba:a4:d4:04:4f:5b:47:40: 55:b6:ab:d8:90:7b:ff:b5:1b:e2:54:1a:70:69:30:f1:7d:4b: f5:5c:9b:d8:88:e6:30:16:b0:b3:c2:c4:56:69:d3:c3:de:1a: 3a:e8:f7:63:2e:42:be:ce:fb:4c:4a:4b:19:e0:36:7e:ff:3b: 75:42:92:ff:7e:0b:99:e2:52:e5:0a:50:0b:b6:b7:20:eb:c9: 16:ba:28:42:1f:8d:32:f3:48:b4:7b:e3:c6:c1:3b:5e:e5:e1: 58:db:82:3f:20:19:59:f4:a5:c6:ee:ac:2d:bc:c9:ac:6a:23: 6e:af:9d:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODVGMDExMC8GA1UEBRMoQTlGMEFDOTdCOUMxOEMzMkUyMTY5QzAxQTQ5ODZDN0E2 QzI1NUZGRTAeFw0yNTEyMjEwNjE4MzBaFw0yNTEyMjgwNjE4MzBaMBgxFjAUBgNV BAMMDTY5NDc5MTM2LWEwOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCB00vok/2IyN0G+5L3SjaMs5s/iX47AEx4IabYGlZ0Ii2XDuunKNnhg94BqsSw Sp+Htlu/lb6m8lDkKDqOq0CKgvDbZTPiiv9uI0Ov/qgjqGlOVnjrX+9sVM7eGnIU KFwO4KZ5lc5xAhA98kg4mJbnQtroELeZNettlqKCsonIv6Z/51RKGBCH2ThzwGWq YGwjmgZOsc50BJn4lYbU3hbfQ7VPbzfHBUQfBcM1oI2fOr+cTOqk9F1WNNaMIDtV cEZ+qVl74oMAr1+aDJPKeZ3wnjrz9wV5P+JXAKD0sKrXA2mhaxLk/e0PPFx+mUPU 235mizeK/MCS8gfdurW+XJzjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCR/kpVqW aNNYFEhNZohq7CvkDI4wHwYDVR0jBBgwFoAUqfCsl7nBjDLiFpwBpJhsemwlX/4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NUYwLzU2MzU2Q0Q0NjQw MDExRjBCMUExRDU3RUM0RjlBRTAyL3FmQ3NsN25CakRMaUZwd0JwSmhzZW13bFhf NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWZDc2w3bkJqRExpRnB3QnBKaHNlbXdsWF80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NUYwLzU2MzU2Q0Q0NjQwMDExRjBCMUExRDU3RUM0RjlBRTAyL3FmQ3NsN25CakRM aUZwd0JwSmhzZW13bFhfNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHCfjsvHveC4IdPQa75K8cUbNL6LuyEl2Ew8cUtaCczvuhtfraMlt3FR gFrU8LKN10i1semb4JLrKnvk1QX4YAlLh3eu1pc7vBrbefOEDUfD6fR+1+QW7VxL cZzZeyZEmC6EOi8VimkBeUfH1owV2KAXa3sp988/o3uYkwwPUHtY/vTvKZwm0W+6 pNQET1tHQFW2q9iQe/+1G+JUGnBpMPF9S/Vcm9iI5jAWsLPCxFZp08PeGjro92Mu Qr7O+0xKSxngNn7/O3VCkv9+C5niUuUKUAu2tyDryRa6KEIfjTLzSLR748bBO17l 4Vjbgj8gGVn0pcburC28yaxqI26vnS4= -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:34 2025 by rpki-client