This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json) Hash identifier: kmb6wJ+hNoVqMFh/91p9qMC2xXSlhYdSJAuSAsFLshs= Subject key identifier: 44:7F:9F:83:E3:2E:7A:40:3C:13:CF:E8:B7:56:05:1F:84:5D:3A:3F Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 0402 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft Manifest number: 03EE Signing time: Sat 20 Dec 2025 23:49:29 +0000 Manifest this update: Sat 20 Dec 2025 23:49:29 +0000 Manifest next update: Sat 27 Dec 2025 23:49:29 +0000 Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: TSe/Q1t8jCpSHfT4E/i03925tcWpQqZbbYVDOJ821dI=) 2: 332B4C6ABA7011F088893F1DC4F9AE02.roa (hash: QRYhDleOd8jLpze9qYmgI1TLfowDVW7d5fsN6Y1oV1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1026 (0x402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Validity Not Before: Dec 20 23:49:29 2025 GMT Not After : Dec 27 23:49:29 2025 GMT Subject: CN=69473609-b41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:90:0d:48:6d:4e:90:65:ac:b3:d9:cd:0a:5b: 91:e2:50:1c:ed:35:35:75:c0:34:d9:87:a2:ec:27: 21:1c:53:d1:15:80:d0:4d:d8:db:8a:af:87:3e:ff: c2:73:38:b2:a2:81:9a:c0:3d:d1:34:9f:e5:d1:e8: da:98:f7:cc:e7:94:5a:39:19:f1:66:5c:2e:a8:ac: b1:40:d0:79:28:e6:62:a4:09:46:e7:98:99:35:a2: ea:04:25:f3:32:b0:5c:42:0f:78:33:5d:7b:dd:49: dd:39:86:71:64:49:48:02:e4:a4:36:87:e1:aa:c9: 64:33:e3:e6:93:2b:23:6f:be:05:6b:a2:e0:ab:f8: ba:64:b1:d3:c7:2b:5a:1b:7c:92:12:ed:d4:14:f9: 68:31:c4:ee:fc:24:bd:7e:14:99:d5:78:3d:66:4e: 56:c3:d6:b2:52:84:8b:2a:6a:b1:e0:64:27:88:34: 13:94:96:aa:f8:d0:85:22:10:99:41:72:0f:87:37: 32:69:57:bc:69:1a:50:7b:31:75:5e:b1:b4:38:8b: f6:3a:12:d2:a5:f6:e6:77:87:2a:ae:47:87:2b:96: 1c:23:58:87:c7:d4:f8:01:58:75:db:14:ab:5f:27: 96:5e:b1:ce:45:62:ad:d3:2c:4f:fd:7d:f2:57:e7: 71:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7F:9F:83:E3:2E:7A:40:3C:13:CF:E8:B7:56:05:1F:84:5D:3A:3F X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ce:ce:08:af:a0:19:f2:73:75:17:24:fb:ac:06:8d:ea:a6: 2f:c0:48:d1:21:40:a1:3b:25:0f:77:b2:c1:66:67:0b:2e:7c: 11:bf:97:3e:1c:ab:df:d3:ce:23:25:d0:16:3a:16:bb:d4:a2: b6:21:3f:45:96:7f:54:3f:68:8c:3e:cc:c0:01:95:de:14:5b: a3:1c:95:64:98:a3:d9:6d:49:65:a6:6f:d2:ed:f0:94:91:61: ef:79:25:b2:ab:e8:e0:47:04:a2:18:19:a0:19:61:18:a2:f3: 92:6d:3d:e9:00:42:99:ed:6d:c3:da:ea:f1:e5:05:36:3a:d7: 14:83:4d:82:fd:41:48:2d:aa:17:2d:fd:c1:d7:da:79:93:da: 2b:c7:32:90:fc:91:d3:6b:b5:0e:40:37:cd:7e:fd:f6:43:38: f0:10:25:1d:46:84:b5:9b:56:70:25:18:90:44:9f:5c:70:7d: 82:b7:fb:5f:d6:5b:ba:30:02:14:7a:13:1d:00:59:f0:a9:e4: 47:3d:b2:41:19:0f:b6:3d:14:83:24:a9:ce:6f:a6:9e:7a:49: 6f:8d:ce:39:b0:d7:cb:d1:1b:87:e9:21:57:5e:bd:60:5a:24: be:d8:a0:0b:78:98:3d:55:11:dc:87:1b:99:78:d4:38:f4:46: 5c:9e:dc:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjUxMjIwMjM0OTI5WhcNMjUxMjI3MjM0OTI5WjAYMRYwFAYD VQQDDA02OTQ3MzYwOS1iNDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZANSG1OkGWss9nNCluR4lAc7TU1dcA02Yei7CchHFPRFYDQTdjbiq+HPv/C cziyooGawD3RNJ/l0ejamPfM55RaORnxZlwuqKyxQNB5KOZipAlG55iZNaLqBCXz MrBcQg94M1173UndOYZxZElIAuSkNofhqslkM+Pmkysjb74Fa6Lgq/i6ZLHTxyta G3ySEu3UFPloMcTu/CS9fhSZ1Xg9Zk5Ww9ayUoSLKmqx4GQniDQTlJaq+NCFIhCZ QXIPhzcyaVe8aRpQezF1XrG0OIv2OhLSpfbmd4cqrkeHK5YcI1iHx9T4AVh12xSr XyeWXrHORWKt0yxP/X3yV+dxPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFER/n4Pj LnpAPBPP6LdWBR+EXTo/MB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9DRjIwNUM2MEFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3 Qk8yQkk4YU9YQXphOWRCYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8zs4Ir6AZ8nN1FyT7rAaN6qYvwEjRIUChOyUPd7LBZmcLLnwRv5c+ HKvf084jJdAWOha71KK2IT9Fln9UP2iMPszAAZXeFFujHJVkmKPZbUllpm/S7fCU kWHveSWyq+jgRwSiGBmgGWEYovOSbT3pAEKZ7W3D2urx5QU2OtcUg02C/UFILaoX Lf3B19p5k9orxzKQ/JHTa7UOQDfNfv32QzjwECUdRoS1m1ZwJRiQRJ9ccH2Ct/tf 1lu6MAIUehMdAFnwqeRHPbJBGQ+2PRSDJKnOb6aeeklvjc45sNfL0RuH6SFXXr1g WiS+2KALeJg9VRHchxuZeNQ49EZcntzo -----END CERTIFICATE-----Generated at Sun Dec 21 02:28:26 2025 by rpki-client