This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json) Hash identifier: clBkz+teLbqC3jCdyZxvzg1mo0SXVEz17bwdnARAlNc= Subject key identifier: 74:E3:B5:FC:41:BA:B5:D1:B7:33:29:91:F0:4E:DF:A9:25:57:CA:24 Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft Manifest number: 0109 Signing time: Sun 21 Dec 2025 04:11:39 +0000 Manifest this update: Sun 21 Dec 2025 04:11:39 +0000 Manifest next update: Sun 28 Dec 2025 04:11:39 +0000 Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: zoqMg2JpK0rgBt/bq7cZtHv7lfJ0SKxZrhAuwpHxdec=) 2: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: VtLgFQFuvZQFqc3/1iLIm4m/GkaEOorvnwwczfuLsfc=) 3: ABA45B1A740611F0B304387CC4F9AE02.roa (hash: 6m3OrJ+Nr9fWhODWggrIoilybpGVkuQ4teq6GCx+Hw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Validity Not Before: Dec 21 04:11:39 2025 GMT Not After : Dec 28 04:11:39 2025 GMT Subject: CN=6947737b-49bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a6:cf:b8:dd:f6:e4:7c:0f:be:79:64:19:ef: 50:9d:88:e4:66:93:69:82:e0:33:e4:3d:bd:ea:48: 4f:ff:8d:99:60:c4:bf:2a:14:46:68:c7:22:d9:f4: 94:51:80:7d:09:6b:16:50:26:e9:f7:af:85:b5:0f: 8e:cb:0a:3f:51:69:18:9d:a0:cc:8a:9b:2c:32:2e: 0a:61:c5:77:77:54:8a:61:4b:56:a1:c7:43:c1:27: 8f:c6:02:d5:22:c0:4c:f4:e7:3f:20:e0:bf:28:4d: a9:69:6c:e9:62:58:d0:a7:a3:97:66:f2:bc:90:ff: a2:66:3b:c0:13:e3:8f:d6:83:03:a5:e0:c7:35:1f: cf:a3:0b:1d:f4:ef:36:bb:5d:0e:9b:58:ef:c1:df: bc:b0:25:f1:7c:bf:99:3a:7a:ff:a2:ea:fa:ce:26: 39:92:e5:f8:f1:08:e5:6b:ed:3d:a7:2b:88:d3:04: ca:70:19:7a:3d:69:9e:4a:51:cf:ac:6d:4d:a1:88: 18:3a:b7:7b:53:fd:4f:c7:d7:1e:36:64:8d:86:28: 3b:18:5e:ed:60:b8:b4:c9:7d:d7:ba:e2:eb:d0:75: 02:27:c9:15:67:95:bb:6f:65:25:4a:f6:c1:f3:dc: 5f:c4:69:46:93:d6:8a:6c:00:39:1a:28:f0:8d:5a: 02:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E3:B5:FC:41:BA:B5:D1:B7:33:29:91:F0:4E:DF:A9:25:57:CA:24 X509v3 Authority Key Identifier: keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:9d:41:4d:60:90:aa:1e:29:0c:cd:08:08:8f:46:ad:6c:e3: 6f:e8:25:1c:f5:b3:05:2d:d6:b3:a4:41:40:c6:38:b4:68:d1: 6b:9c:79:82:66:3f:83:fe:ec:39:00:5b:0b:40:48:3f:c7:ce: a6:a9:01:d7:23:a4:c0:2c:af:93:8d:84:57:05:59:93:fb:cc: a2:66:59:22:72:90:be:e6:c7:67:a8:8a:bf:e4:11:f0:36:0e: 9d:d3:78:31:70:87:e8:f5:d0:5c:e8:fb:dd:f0:0c:e5:17:91: 32:17:0e:db:40:71:45:4c:b2:c8:19:30:c3:bc:be:2e:53:77: bb:69:b0:b4:b5:c3:16:88:23:29:53:14:1a:28:8e:d8:2d:ee: 4f:be:b5:79:49:cc:d3:8b:7a:37:a9:bc:2f:3e:89:ac:4d:02: 6f:92:b9:67:78:91:92:f0:1e:08:14:86:55:ff:04:8d:9b:d3: ea:9c:71:28:44:8a:fe:00:48:1a:eb:a7:aa:0f:8a:a2:9b:a3: da:71:ce:26:5e:ee:e4:f6:f5:a3:f3:64:70:6d:67:ce:b8:46: f4:65:98:1d:cc:59:35:c6:ef:92:d5:e2:57:85:af:0e:e9:ed: 79:9f:de:8f:ea:ea:ba:a0:14:59:65:fd:d0:7e:08:bb:4c:48: 97:82:56:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0OUMxMTAvBgNVBAUTKDQzNjM0QzcwMUJBMUYxRUZDRThGNTZBQTZBRDFEQjI5 NDVBMURCOUYwHhcNMjUxMjIxMDQxMTM5WhcNMjUxMjI4MDQxMTM5WjAYMRYwFAYD VQQDDA02OTQ3NzM3Yi00OWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKbPuN325HwPvnlkGe9QnYjkZpNpguAz5D296khP/42ZYMS/KhRGaMci2fSU UYB9CWsWUCbp96+FtQ+Oywo/UWkYnaDMipssMi4KYcV3d1SKYUtWocdDwSePxgLV IsBM9Oc/IOC/KE2paWzpYljQp6OXZvK8kP+iZjvAE+OP1oMDpeDHNR/Powsd9O82 u10Om1jvwd+8sCXxfL+ZOnr/our6ziY5kuX48Qjla+09pyuI0wTKcBl6PWmeSlHP rG1NoYgYOrd7U/1Px9ceNmSNhig7GF7tYLi0yX3XuuLr0HUCJ8kVZ5W7b2UlSvbB 89xfxGlGk9aKbAA5GijwjVoCIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTjtfxB urXRtzMpkfBO36klV8okMB8GA1UdIwQYMBaAFENjTHAbofHvzo9WqmrR2ylFoduf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9ERTg3MThDNDRB MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhlX09qMWFxYXRIYktVV2gy NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1EyTk1jQnVoOGVfT2oxYXFhdEhiS1VXaDI1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQ5Qy9ERTg3MThDNDRBMzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhl X09qMWFxYXRIYktVV2gyNTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABnUFNYJCqHikMzQgIj0atbONv6CUc9bMFLdazpEFAxji0aNFrnHmC Zj+D/uw5AFsLQEg/x86mqQHXI6TALK+TjYRXBVmT+8yiZlkicpC+5sdnqIq/5BHw Ng6d03gxcIfo9dBc6Pvd8AzlF5EyFw7bQHFFTLLIGTDDvL4uU3e7abC0tcMWiCMp UxQaKI7YLe5PvrV5SczTi3o3qbwvPomsTQJvkrlneJGS8B4IFIZV/wSNm9PqnHEo RIr+AEga66eqD4qim6Pacc4mXu7k9vWj82RwbWfOuEb0ZZgdzFk1xu+S1eJXha8O 6e15n96P6uq6oBRZZf3Qfgi7TEiXglbX -----END CERTIFICATE-----Generated at Sun Dec 21 13:25:05 2025 by rpki-client