This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft File: QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json) Hash identifier: NaVaL96gnikYIGyLb40fN36YJwxT7vn31Z5Ul4AD1Go= Subject key identifier: 8B:A8:DB:3E:93:9E:92:54:AA:3B:11:E0:D6:77:E6:D0:4A:E3:12:74 Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69 Certificate issuer: /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft Manifest number: 0147 Signing time: Sun 21 Dec 2025 03:35:13 +0000 Manifest this update: Sun 21 Dec 2025 03:35:12 +0000 Manifest next update: Sun 28 Dec 2025 03:35:12 +0000 Files and hashes: 1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: eKsm1Pb7sh0ZQ5ObBKCUZrfmHJX5DTpLUSxZqJpdJYc=) 2: 47142068221311EFB680F113C4F9AE02.roa (hash: eOIRibnSZ7zb8zXpiC5OYpXytGwFP6zwa+/fbeAxOO4=) 3: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: k3OjV98AN2SowkZ89FdDV3rmcUlNd8FyOaF8PHB5wqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69 Validity Not Before: Dec 21 03:35:12 2025 GMT Not After : Dec 28 03:35:12 2025 GMT Subject: CN=69476af1-94a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:83:08:24:c8:19:3a:8f:2b:ec:ba:e8:d9: c8:f6:78:cc:97:bd:11:8f:3c:c1:8c:fb:12:fd:77: ca:29:a1:8b:8e:16:51:69:93:62:b8:77:7c:e2:f8: 85:08:40:aa:4d:ec:4f:a9:23:75:f4:b7:e2:9e:79: b8:ae:5a:40:c3:43:42:07:11:b1:bf:66:c0:9c:74: ca:45:eb:03:76:99:46:3d:42:2f:41:82:e1:9c:0a: b8:2f:55:d6:e6:1b:9e:69:85:53:20:42:89:96:68: 51:22:ed:b2:d0:ed:a4:5c:23:b9:bc:a0:c8:3e:80: e9:45:d5:d9:2d:1c:0f:01:71:1d:fb:99:17:f4:86: 7a:28:76:c3:34:9f:94:b1:95:3b:ff:0b:09:3c:f1: d6:99:78:c3:ff:6c:63:97:a4:49:d5:16:87:dd:6f: ab:96:52:02:91:72:4f:6a:92:d0:76:34:73:ae:05: b0:ef:b6:0f:e3:34:fb:c8:ca:3a:f1:3f:43:c4:b8: 76:b2:97:36:e8:74:8a:e2:fa:ea:b0:b1:13:fe:fd: 1c:11:55:b2:d3:7c:2f:67:67:99:92:05:49:b0:f2: 1a:ef:b0:65:a6:87:1a:d1:91:23:d3:cd:ef:7f:2f: 22:68:c6:9c:b7:61:18:b4:20:6e:07:5d:3d:78:84: 9d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A8:DB:3E:93:9E:92:54:AA:3B:11:E0:D6:77:E6:D0:4A:E3:12:74 X509v3 Authority Key Identifier: keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:33:00:92:fb:a5:db:16:e6:55:90:a2:4f:f8:89:76:34:88: 32:d7:52:bc:2d:78:ee:d7:c5:70:26:ed:3b:b3:33:fa:27:db: 3c:33:66:f3:b9:e1:53:5c:54:32:b7:e0:ef:68:a1:09:2d:df: ed:4d:de:c5:8f:33:71:96:a7:62:10:3f:fa:f7:2e:73:aa:92: 74:4b:de:c8:c1:d9:04:49:11:b5:ef:fe:73:95:bd:d5:12:bc: d1:d9:f3:bc:7e:fe:6e:ea:1c:ea:dc:d1:59:ed:d6:f2:40:e9: 0b:98:6b:fa:fc:a6:72:61:34:65:21:8b:69:a9:aa:bb:a3:c5: cc:31:d4:25:b9:3b:a4:b5:da:af:00:66:4a:4a:73:1a:c2:15: 27:b7:0d:53:85:42:d9:3a:73:c1:f0:56:e1:52:52:2a:da:b3: 01:41:50:4e:b3:71:7a:2a:b3:e9:77:0c:13:e7:be:89:6d:4a: c4:65:85:3e:07:b2:5c:29:fb:41:d2:97:3b:3e:18:79:78:0c: f7:13:4f:47:24:67:64:17:25:51:e5:4a:64:56:20:1d:b4:f4: ee:01:83:2c:25:c9:8c:3c:4c:0c:f8:8f:52:bb:21:f2:5a:19: 59:6c:ad:35:94:99:be:9c:75:11:5a:28:56:9b:99:86:77:ed: 3f:c3:a6:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDQxMjEzQjJGNUYyNDI5RkMzMjhFQzNGNEU5NUQ1ODg2 NDAyRkVCNjkwHhcNMjUxMjIxMDMzNTEyWhcNMjUxMjI4MDMzNTEyWjAYMRYwFAYD VQQDDA02OTQ3NmFmMS05NGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPmDCCTIGTqPK+y66NnI9njMl70RjzzBjPsS/XfKKaGLjhZRaZNiuHd84viF CECqTexPqSN19Lfinnm4rlpAw0NCBxGxv2bAnHTKResDdplGPUIvQYLhnAq4L1XW 5hueaYVTIEKJlmhRIu2y0O2kXCO5vKDIPoDpRdXZLRwPAXEd+5kX9IZ6KHbDNJ+U sZU7/wsJPPHWmXjD/2xjl6RJ1RaH3W+rllICkXJPapLQdjRzrgWw77YP4zT7yMo6 8T9DxLh2spc26HSK4vrqsLET/v0cEVWy03wvZ2eZkgVJsPIa77Blpoca0ZEj083v fy8iaMact2EYtCBuB109eISdLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuo2z6T npJUqjsR4NZ35tBK4xJ0MB8GA1UdIwQYMBaAFEEhOy9fJCn8Mo7D9OldWIZAL+tp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80NTlCMEM2NEYy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tmd3lqc1AwNlYxWWhrQXY2 MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FTRTdMMThrS2Z3eWpzUDA2VjFZaGtBdjYyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80NTlCMEM2NEYyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tm d3lqc1AwNlYxWWhrQXY2MmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2MwCS+6XbFuZVkKJP+Il2NIgy11K8LXju18VwJu07szP6J9s8M2bz ueFTXFQyt+DvaKEJLd/tTd7FjzNxlqdiED/69y5zqpJ0S97IwdkESRG17/5zlb3V ErzR2fO8fv5u6hzq3NFZ7dbyQOkLmGv6/KZyYTRlIYtpqaq7o8XMMdQluTuktdqv AGZKSnMawhUntw1ThULZOnPB8FbhUlIq2rMBQVBOs3F6KrPpdwwT576JbUrEZYU+ B7JcKftB0pc7Phh5eAz3E09HJGdkFyVR5UpkViAdtPTuAYMsJcmMPEwM+I9SuyHy WhlZbK01lJm+nHURWihWm5mGd+0/w6az -----END CERTIFICATE-----Generated at Sun Dec 21 07:36:58 2025 by rpki-client