This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json) Hash identifier: /LO4X5UY8Vq1xN2qXF4UtWybRRM0IIjx5npb7l9dp0A= Subject key identifier: 79:9C:B6:79:50:7F:01:AE:7D:1E:8D:1D:1C:2C:77:12:3C:F8:75:12 Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Certificate serial: 0CDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft Manifest number: 0CB4 Signing time: Wed 24 Dec 2025 18:08:13 +0000 Manifest this update: Wed 24 Dec 2025 18:08:12 +0000 Manifest next update: Wed 31 Dec 2025 18:08:12 +0000 Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: lIsahBNgJwcDXNwAdzGqh4oMLIle/WsjmaRJqUP6+wg=) 2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: F380vpOPofocBjRftATvo9zddeY6Bmha6wqzogd2g+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 18:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3292 (0xcdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Validity Not Before: Dec 24 18:08:12 2025 GMT Not After : Dec 31 18:08:12 2025 GMT Subject: CN=694c2c0d-bf79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:c2:fa:82:0e:43:a7:51:b7:f4:b1:1d:45: 7a:8d:db:d9:0f:62:82:01:42:47:bb:f1:a5:cb:0a: 34:03:08:45:dd:fb:ae:b9:ed:2f:41:5b:d7:66:ad: 9e:fa:8c:f7:6d:3a:3f:12:18:b4:39:56:a0:42:17: bf:20:c2:7d:49:eb:8c:38:71:ff:ba:00:f1:60:d4: d4:7e:79:f6:9e:36:24:27:1f:98:ba:9c:69:b0:3c: e8:0e:23:61:7e:01:96:02:68:92:34:5a:02:3d:1c: 65:82:77:b3:78:3b:02:6b:e4:4a:bb:f5:40:36:7b: 33:fe:5e:70:1c:a0:2b:a8:ec:8c:ac:0d:11:2f:c2: f3:70:42:86:c7:b4:09:ef:dd:01:b8:2e:f9:61:21: 63:19:13:f4:09:33:3e:d3:c0:4e:16:ff:e9:15:a1: 02:7b:33:ae:6d:67:12:db:79:45:1d:76:75:0c:8d: 74:83:da:8c:af:d4:f3:0c:0d:32:a8:bc:bb:ba:96: bf:cf:d5:a9:98:fa:e0:c2:99:3c:67:03:7b:9c:41: 17:85:a7:a9:c4:bb:1a:09:e3:71:b8:f1:f1:e3:b8: 46:f3:6f:df:73:b2:c4:0d:a8:d0:78:a3:98:dd:a3: d2:09:0c:25:80:ca:96:8e:cf:ed:37:e7:df:60:03: 06:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9C:B6:79:50:7F:01:AE:7D:1E:8D:1D:1C:2C:77:12:3C:F8:75:12 X509v3 Authority Key Identifier: keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d0:dc:26:6c:7b:ce:32:71:e1:2f:bb:4d:71:e8:0a:68:14: aa:1d:bb:1c:ef:13:42:b5:eb:a1:90:cc:93:ac:40:3e:44:b8: 40:b6:3a:ad:10:5b:97:2a:92:4f:a7:27:d1:c3:87:2a:bc:bb: 8b:01:ba:70:53:e9:42:98:f4:b2:1e:4f:ec:d6:35:4a:85:b6: e8:ee:62:98:03:c1:3d:c3:35:93:4e:08:d5:bf:27:43:28:09: 3d:cc:fe:c9:c7:6b:ee:9e:d0:7a:5f:85:f8:9f:0e:a2:7d:8c: 07:13:3a:5c:b4:2c:10:71:cc:2f:b9:63:5b:e6:ab:17:d6:2b: 1c:0d:d7:8f:cd:a3:ae:a4:8e:21:86:5e:93:7f:6f:f4:48:3e: 2b:2d:07:34:a9:60:9a:94:96:62:be:08:85:50:4e:f4:dc:42: d3:94:82:25:b5:31:ae:fa:f5:b8:40:bc:d9:72:45:21:41:72: 8e:99:c8:04:1a:37:5e:ba:57:29:f8:0a:a4:a6:14:9e:69:f0: c6:7a:10:5f:21:36:48:85:ee:b0:4f:3e:d9:d5:3e:c1:6b:45: a7:5f:bb:c5:31:eb:4d:1b:b3:0c:4d:d9:c4:51:d0:7e:e6:6a: 6e:27:dc:8d:5e:be:b6:ff:91:bb:88:5d:b4:4f:11:40:78:c2: 56:ee:62:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw M0E1MDJDQ0MwHhcNMjUxMjI0MTgwODEyWhcNMjUxMjMxMTgwODEyWjAYMRYwFAYD VQQDDA02OTRjMmMwZC1iZjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhzC+oIOQ6dRt/SxHUV6jdvZD2KCAUJHu/Glywo0AwhF3fuuue0vQVvXZq2e +oz3bTo/Ehi0OVagQhe/IMJ9SeuMOHH/ugDxYNTUfnn2njYkJx+YupxpsDzoDiNh fgGWAmiSNFoCPRxlgnezeDsCa+RKu/VANnsz/l5wHKArqOyMrA0RL8LzcEKGx7QJ 790BuC75YSFjGRP0CTM+08BOFv/pFaECezOubWcS23lFHXZ1DI10g9qMr9TzDA0y qLy7upa/z9WpmPrgwpk8ZwN7nEEXhaepxLsaCeNxuPHx47hG82/fc7LEDajQeKOY 3aPSCQwlgMqWjs/tN+ffYAMGuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmctnlQ fwGufR6NHRwsdxI8+HUSMB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI0RS83N0U3RjlBMDBDRTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlp d3E3dWstRHU1bmtEcFFMTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB30NwmbHvOMnHhL7tNcegKaBSqHbsc7xNCteuhkMyTrEA+RLhAtjqt EFuXKpJPpyfRw4cqvLuLAbpwU+lCmPSyHk/s1jVKhbbo7mKYA8E9wzWTTgjVvydD KAk9zP7Jx2vuntB6X4X4nw6ifYwHEzpctCwQccwvuWNb5qsX1iscDdePzaOupI4h hl6Tf2/0SD4rLQc0qWCalJZivgiFUE703ELTlIIltTGu+vW4QLzZckUhQXKOmcgE Gjdeulcp+AqkphSeafDGehBfITZIhe6wTz7Z1T7Ba0WnX7vFMetNG7MMTdnEUdB+ 5mpuJ9yNXr62/5G7iF20TxFAeMJW7mKp -----END CERTIFICATE-----Generated at Thu Dec 25 09:14:45 2025 by rpki-client