This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft File: QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft (raw, json) Hash identifier: yzaeiP+DnIYOzXoUMqU2TapEHnlkX1nsKWEDSjfSSI8= Subject key identifier: 47:78:3D:09:94:8E:A3:C7:22:14:82:6E:42:B9:DB:5B:AD:C7:C0:FA Authority key identifier: 40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12 Certificate issuer: /CN=A917FACB/serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft Manifest number: CA Signing time: Wed 31 Dec 2025 04:53:51 +0000 Manifest this update: Wed 31 Dec 2025 04:53:50 +0000 Manifest next update: Wed 07 Jan 2026 04:53:50 +0000 Files and hashes: 1: QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl (hash: bNsppj0yEF4h/6uc0BQJ/h53BWy8VsnmYoKXJ4UknG4=) 2: 817FDF1EB46511EF86BEAC6BC4F9AE02.roa (hash: wJ3laQ7nVagMEJPomzazSfS6B/Yq1uHmjJhmSe/2HtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 04:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB, serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812 Validity Not Before: Dec 31 04:53:50 2025 GMT Not After : Jan 7 04:53:50 2026 GMT Subject: CN=6954ac5e-1c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4e:b7:7b:77:28:dd:0b:6e:2f:cd:93:c2:5f: 50:c3:8f:d0:e9:7e:99:e0:7d:c5:8a:a8:fc:3e:77: 66:ae:d1:53:5e:5c:8e:80:a1:ce:f2:49:b0:e8:e2: 37:86:0c:b5:07:67:ab:11:69:3b:00:2e:a1:5f:5e: d1:41:b8:e4:01:d1:29:17:ff:ca:e8:96:e9:c4:38: 6a:98:8b:37:08:ef:14:f3:9f:b0:ba:1f:94:0d:d9: 0c:09:16:c6:99:31:92:de:fc:70:fb:06:1c:15:af: 9d:07:5e:59:0a:7b:eb:c0:32:a6:03:d5:a0:2f:be: da:02:10:d2:d4:67:c4:09:8d:50:d3:15:ef:ca:72: 09:e0:8c:66:2c:10:e7:19:42:1b:5c:dd:96:bd:6f: 09:9f:dd:73:c9:42:c8:6e:5b:ef:0d:a9:d1:ac:1d: dc:3e:a2:9c:21:9c:58:1a:ff:7a:a5:e7:82:d1:96: 31:72:07:4d:96:c1:be:22:fb:27:1c:24:16:79:6b: 5c:92:3a:9d:b0:87:0f:1b:86:e5:45:c8:68:5e:91: 67:fc:1b:56:9e:86:20:5b:9f:07:78:7c:ac:26:a8: 43:e9:38:44:3b:db:2c:6a:bf:96:de:75:f5:f9:f2: ef:f0:5e:69:77:e5:a0:1a:94:0c:39:75:0b:dc:92: 7f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:78:3D:09:94:8E:A3:C7:22:14:82:6E:42:B9:DB:5B:AD:C7:C0:FA X509v3 Authority Key Identifier: keyid:40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:ba:1b:f2:5f:f3:24:5c:bc:60:ef:40:0a:9b:10:05:ca:44: 0b:8c:ee:53:68:10:87:09:fb:66:5f:f2:0a:dc:6b:7e:ed:ef: 00:19:53:26:3b:57:37:c5:f0:6e:53:57:01:a2:f4:82:4b:0b: 2e:f3:72:9a:d8:af:ce:67:71:a1:f5:be:23:e0:d8:4c:84:a4: 61:82:76:64:8c:23:03:6a:7d:6e:13:07:2d:fa:57:9c:28:59: 5c:62:f7:8e:98:42:00:61:70:8f:ad:3a:93:8f:8d:c8:69:33: 9b:5c:9d:2d:02:fa:76:4b:e6:b3:ca:70:2d:8f:ec:c9:cf:fb: f5:eb:35:8e:c2:1a:0f:c3:5f:44:03:ca:50:8d:2a:3e:e0:76: 3e:41:c6:97:99:22:c9:77:4a:3f:b4:9f:c7:8c:ff:8b:86:34: 91:7d:57:41:16:01:3d:a9:a1:d8:8e:63:8a:be:5b:e2:f7:aa: d1:ee:30:be:16:4b:35:a9:39:8f:7f:9c:fd:33:a6:f4:44:fc: 76:27:9b:63:62:23:c2:7b:ca:30:51:03:2d:72:69:af:40:b0: 29:d7:ac:7d:be:bd:5f:9d:a8:bf:96:41:be:07:49:d8:03:09: 79:45:da:95:e0:9f:e1:25:7f:e9:1b:7d:ff:89:a3:c4:25:00: 60:5b:bb:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBQ0IxMTAvBgNVBAUTKDQwMkQxRDBCRDkxRjQzODAyQzdBMEQ3MDczNjE4OEJF QkEwQTA4MTIwHhcNMjUxMjMxMDQ1MzUwWhcNMjYwMTA3MDQ1MzUwWjAYMRYwFAYD VQQDDA02OTU0YWM1ZS0xYzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo063e3co3QtuL82Twl9Qw4/Q6X6Z4H3Fiqj8PndmrtFTXlyOgKHO8kmw6OI3 hgy1B2erEWk7AC6hX17RQbjkAdEpF//K6JbpxDhqmIs3CO8U85+wuh+UDdkMCRbG mTGS3vxw+wYcFa+dB15ZCnvrwDKmA9WgL77aAhDS1GfECY1Q0xXvynIJ4IxmLBDn GUIbXN2WvW8Jn91zyULIblvvDanRrB3cPqKcIZxYGv96peeC0ZYxcgdNlsG+Ivsn HCQWeWtckjqdsIcPG4blRchoXpFn/BtWnoYgW58HeHysJqhD6ThEO9ssar+W3nX1 +fLv8F5pd+WgGpQMOXUL3JJ/iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEd4PQmU jqPHIhSCbkK521utx8D6MB8GA1UdIwQYMBaAFEAtHQvZH0OALHoNcHNhiL66CggS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkFDQi8xQzk0NkFGMkI0 NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9RQzBkQzlrZlE0QXNlZzF3YzJHSXZyb0tD QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FDMGRDOWtmUTRBc2VnMXdjMkdJdnJvS0NCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkFDQi8xQzk0NkFGMkI0NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9RQzBkQzlrZlE0 QXNlZzF3YzJHSXZyb0tDQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwuhvyX/MkXLxg70AKmxAFykQLjO5TaBCHCftmX/IK3Gt+7e8AGVMm O1c3xfBuU1cBovSCSwsu83Ka2K/OZ3Gh9b4j4NhMhKRhgnZkjCMDan1uEwct+lec KFlcYveOmEIAYXCPrTqTj43IaTObXJ0tAvp2S+azynAtj+zJz/v16zWOwhoPw19E A8pQjSo+4HY+QcaXmSLJd0o/tJ/HjP+LhjSRfVdBFgE9qaHYjmOKvlvi96rR7jC+ Fks1qTmPf5z9M6b0RPx2J5tjYiPCe8owUQMtcmmvQLAp16x9vr1fnai/lkG+B0nY Awl5RdqV4J/hJX/pG33/iaPEJQBgW7us -----END CERTIFICATE-----Generated at Wed Dec 31 08:49:22 2025 by rpki-client