This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft File: QMW9PelSuS6VkhpP1t99sHtKKSE.mft (raw, json) Hash identifier: gh9CLrDa/miaEHbei30jt4xSbDiBNYyatXQrB9EOpuA= Subject key identifier: EB:FD:CA:00:8E:B0:68:56:AC:EE:E0:ED:AE:EF:61:4D:F7:CD:E8:74 Authority key identifier: 40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21 Certificate issuer: /CN=A915D963/serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921 Certificate serial: 06A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft Manifest number: 082C Signing time: Wed 31 Dec 2025 21:57:09 +0000 Manifest this update: Wed 31 Dec 2025 21:57:08 +0000 Manifest next update: Wed 07 Jan 2026 21:57:08 +0000 Files and hashes: 1: QMW9PelSuS6VkhpP1t99sHtKKSE.crl (hash: MmHuVjKtTFm6uXPt/w46DR8t6rVubZDIRWabUeNWlAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 21:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1703 (0x6a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D963, serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921 Validity Not Before: Dec 31 21:57:08 2025 GMT Not After : Jan 7 21:57:08 2026 GMT Subject: CN=69559c34-a845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:40:10:56:fd:d2:83:22:b7:70:e1:32:22:3b: 01:86:06:83:d7:28:7e:a9:20:01:3b:30:5b:75:81: 06:11:74:99:e6:fe:c3:de:74:5b:4a:b6:9a:e9:ad: f0:5e:7f:6a:4f:3b:8c:2c:89:c8:24:f8:11:55:54: ba:c6:5f:d5:96:2c:b1:e1:8e:11:a8:e1:96:d7:87: c7:27:ac:16:4d:dc:ca:42:9f:ab:08:32:37:07:bd: 7d:11:89:68:8b:39:0a:3f:6a:29:a3:aa:fc:da:df: 89:32:85:c6:95:41:a4:86:01:63:a3:0d:3d:28:a6: 7a:5d:2b:ec:ac:af:d1:fc:1b:54:86:fb:cd:f9:77: ce:41:99:bd:e5:46:36:c1:1f:82:7b:be:99:43:fa: 78:74:97:b3:b1:fa:b2:29:eb:e4:38:c2:da:47:b4: 79:2d:89:58:73:f3:92:5a:46:47:b2:54:64:60:07: f2:e4:4b:42:df:78:45:62:97:8e:b2:90:55:58:17: cd:cc:d8:89:a1:f3:0a:ad:4f:59:40:50:1d:53:e5: c2:80:93:2d:ce:88:b3:8c:c7:cb:15:a8:a0:15:24: e9:d9:9a:31:32:44:a3:22:8e:e9:f2:d9:7e:8c:0d: a9:20:c4:85:28:fb:6b:3a:c6:ed:15:5d:75:56:c4: 48:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FD:CA:00:8E:B0:68:56:AC:EE:E0:ED:AE:EF:61:4D:F7:CD:E8:74 X509v3 Authority Key Identifier: keyid:40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:76:e1:ac:3b:1e:7b:24:f6:6f:e9:38:6f:ea:75:0c:08:a0: 80:1e:fc:2a:69:86:28:38:f2:c2:72:c4:d0:31:66:a9:a2:b3: c4:d3:25:f9:39:0c:6f:9a:7a:24:38:35:e7:e1:a1:36:fa:f8: a6:ff:6b:23:29:97:88:ad:ae:76:0f:00:b6:52:35:aa:da:8c: 88:99:27:06:d0:34:fc:23:2b:13:82:1f:2d:ad:70:58:23:69: 78:9c:9c:73:56:a2:67:7f:68:2d:de:5d:a1:d5:0d:0e:a6:ba: 60:dc:09:ca:c6:5d:1a:ca:6d:4d:26:8b:01:ba:34:b7:74:6c: c5:26:e4:40:ee:cb:71:be:3a:6e:6f:ca:0a:54:f8:28:75:e6: 05:a3:31:33:ef:35:9d:57:60:7c:64:be:f7:44:9c:77:3c:b4: b7:ab:66:d2:2d:fc:ae:0b:dd:37:8b:7a:c4:f1:92:89:bd:fe: 8d:e1:86:18:05:13:78:6f:17:2e:0a:c4:21:2b:62:e8:15:62: 6e:17:68:ba:33:57:d7:7b:29:8b:46:9c:a3:9b:5d:37:8e:47: 55:75:c8:4b:b7:81:66:e8:f0:a8:52:3d:9b:04:78:6b:85:22: 9f:d9:e8:ec:c3:0e:68:95:72:e7:20:0a:57:c6:6c:03:1b:d4: be:b8:e6:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ5NjMxMTAvBgNVBAUTKDQwQzVCRDNERTk1MkI5MkU5NTkyMUE0RkQ2REY3REIw N0I0QTI5MjEwHhcNMjUxMjMxMjE1NzA4WhcNMjYwMTA3MjE1NzA4WjAYMRYwFAYD VQQDDA02OTU1OWMzNC1hODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UAQVv3SgyK3cOEyIjsBhgaD1yh+qSABOzBbdYEGEXSZ5v7D3nRbSraa6a3w Xn9qTzuMLInIJPgRVVS6xl/Vliyx4Y4RqOGW14fHJ6wWTdzKQp+rCDI3B719EYlo izkKP2opo6r82t+JMoXGlUGkhgFjow09KKZ6XSvsrK/R/BtUhvvN+XfOQZm95UY2 wR+Ce76ZQ/p4dJezsfqyKevkOMLaR7R5LYlYc/OSWkZHslRkYAfy5EtC33hFYpeO spBVWBfNzNiJofMKrU9ZQFAdU+XCgJMtzoizjMfLFaigFSTp2ZoxMkSjIo7p8tl+ jA2pIMSFKPtrOsbtFV11VsRIzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOv9ygCO sGhWrO7g7a7vYU33zeh0MB8GA1UdIwQYMBaAFEDFvT3pUrkulZIaT9bffbB7Sikh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDk2My85MEU4MEJDODk3 RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9RTVc5UGVsU3VTNlZraHBQMXQ5OXNIdEtL U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FNVzlQZWxTdVM2VmtocFAxdDk5c0h0S0tTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDk2My85MEU4MEJDODk3RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9RTVc5UGVsU3VT NlZraHBQMXQ5OXNIdEtLU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8duGsOx57JPZv6Thv6nUMCKCAHvwqaYYoOPLCcsTQMWaporPE0yX5 OQxvmnokODXn4aE2+vim/2sjKZeIra52DwC2UjWq2oyImScG0DT8IysTgh8trXBY I2l4nJxzVqJnf2gt3l2h1Q0Oprpg3AnKxl0aym1NJosBujS3dGzFJuRA7stxvjpu b8oKVPgodeYFozEz7zWdV2B8ZL73RJx3PLS3q2bSLfyuC903i3rE8ZKJvf6N4YYY BRN4bxcuCsQhK2LoFWJuF2i6M1fXeymLRpyjm103jkdVdchLt4Fm6PCoUj2bBHhr hSKf2ejsww5olXLnIApXxmwDG9S+uOaW -----END CERTIFICATE-----Generated at Fri Jan 2 08:16:51 2026 by rpki-client