This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft File: QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json) Hash identifier: 3/ak/le4dB/o5CC1paFysUhaXgOdryFZYRfOl2Hq+QY= Subject key identifier: 5E:EE:19:3A:FA:4D:03:0A:4A:19:86:1E:57:72:65:09:15:31:93:1E Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Certificate serial: 18AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft Manifest number: 18A2 Signing time: Tue 30 Dec 2025 16:17:58 +0000 Manifest this update: Tue 30 Dec 2025 16:17:57 +0000 Manifest next update: Tue 06 Jan 2026 16:17:57 +0000 Files and hashes: 1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: uCmKYucaH2zsTldeszLgVhYDm4gKiYwp747/t3eZIiE=) 2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: p9zhGKCO2BBzL3wnYhT/qvWZC/Mb1+QSPyP9kvTHJK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 14:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6318 (0x18ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Validity Not Before: Dec 30 16:17:57 2025 GMT Not After : Jan 6 16:17:57 2026 GMT Subject: CN=6953fb36-b52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:41:91:30:69:7f:f0:0c:c9:ba:df:3c:2d:73: 12:a8:5e:e8:59:52:d0:48:d6:63:bb:8c:b1:64:ad: e0:67:28:da:17:f9:81:88:ec:ee:25:1a:18:1c:5e: 0b:bf:12:04:c2:7c:e6:b0:23:fc:ee:16:7a:84:dc: 14:b9:bd:3a:4b:5c:c1:be:90:ac:50:46:82:f7:f7: f3:dd:3f:fb:ef:37:9e:e4:90:1c:ba:98:62:62:61: d0:e8:84:fd:8c:80:13:b2:8f:d1:96:65:50:32:3b: 7f:40:df:81:ae:93:2c:04:cd:b3:31:e9:78:2d:e6: ee:8c:de:a5:40:0f:41:ec:99:3e:e7:29:ed:21:d7: 2c:13:3b:b3:4a:be:c1:e7:64:01:0d:ad:ba:bd:ee: 5b:f1:33:38:08:bf:71:24:f3:bc:42:e0:ae:84:4b: 0e:c1:de:9b:32:e5:28:ef:d6:06:0a:7f:4f:5c:89: 51:69:f1:d2:1a:87:b5:e5:10:b1:01:4a:0b:ce:11: 16:1e:44:2c:4e:9a:9f:25:bd:eb:0b:51:ee:14:9f: 80:d7:a8:de:a7:07:ea:09:d9:cf:4c:8d:f8:7d:38: 46:dd:81:50:e3:a3:07:bb:e7:c5:0e:54:f8:de:a0: 64:a5:70:0e:2a:2c:68:87:e9:5c:0d:84:ed:d8:5e: 83:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EE:19:3A:FA:4D:03:0A:4A:19:86:1E:57:72:65:09:15:31:93:1E X509v3 Authority Key Identifier: keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:03:94:41:13:ee:cf:08:f8:15:a0:53:6c:f0:dc:b6:2a:05: f6:ec:32:c6:40:7f:11:eb:38:dd:be:e9:24:32:d3:94:d2:43: a4:f1:cb:74:af:b4:44:63:cb:14:52:73:ef:6a:d3:f3:46:30: 7e:6e:6a:98:87:07:80:ff:1e:69:28:78:c2:7d:25:a6:4e:a2: 6b:f4:3b:4c:3c:eb:13:3b:95:e0:7b:28:6b:62:09:1e:33:20: eb:6b:1d:3c:a8:2b:40:03:48:89:0e:5f:32:c9:16:c0:a2:03: 3e:23:48:98:b3:76:70:9b:71:3f:26:0f:73:21:a6:3a:8e:2e: 65:17:c7:de:9b:6f:8c:5f:2a:7e:a2:05:ef:92:b4:d6:d3:ee: d8:af:6b:c7:78:a5:80:cc:7c:c3:7c:67:64:7c:22:f5:74:5e: c9:93:4d:7d:e2:96:8f:12:b7:5c:94:2d:b4:cd:7c:8d:39:52: 43:e1:68:8a:8f:5c:36:cf:00:79:07:c2:76:23:30:6e:6c:80: 17:de:59:3e:c8:38:b1:84:95:92:1c:c2:a6:d3:7d:92:6c:ca: ff:2a:ae:00:76:82:16:8b:f9:06:a0:c3:91:43:3d:f9:7c:63: 9a:6c:bd:1b:0e:a1:31:a8:9f:f2:5c:8e:30:d5:e6:bf:bc:54: 8e:17:d5:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBNTgxMTAvBgNVBAUTKDQwQkQyNUEyRDYwMzE4NzNFNTVERkNEREFEM0E0OEY3 QkNGODhDOEIwHhcNMjUxMjMwMTYxNzU3WhcNMjYwMTA2MTYxNzU3WjAYMRYwFAYD VQQDDA02OTUzZmIzNi1iNTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0GRMGl/8AzJut88LXMSqF7oWVLQSNZju4yxZK3gZyjaF/mBiOzuJRoYHF4L vxIEwnzmsCP87hZ6hNwUub06S1zBvpCsUEaC9/fz3T/77zee5JAcuphiYmHQ6IT9 jIATso/RlmVQMjt/QN+BrpMsBM2zMel4LebujN6lQA9B7Jk+5yntIdcsEzuzSr7B 52QBDa26ve5b8TM4CL9xJPO8QuCuhEsOwd6bMuUo79YGCn9PXIlRafHSGoe15RCx AUoLzhEWHkQsTpqfJb3rC1HuFJ+A16jepwfqCdnPTI34fThG3YFQ46MHu+fFDlT4 3qBkpXAOKixoh+lcDYTt2F6DOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7uGTr6 TQMKShmGHldyZQkVMZMeMB8GA1UdIwQYMBaAFEC9JaLWAxhz5V383a06SPe8+IyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE1OC80RUFDRTQ5MEFF NDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdIUGxYZnpkclRwSTk3ejRq SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMMGxvdFlER0hQbFhmemRyVHBJOTd6NGpJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE1OC80RUFDRTQ5MEFFNDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdI UGxYZnpkclRwSTk3ejRqSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPA5RBE+7PCPgVoFNs8Ny2KgX27DLGQH8R6zjdvukkMtOU0kOk8ct0 r7REY8sUUnPvatPzRjB+bmqYhweA/x5pKHjCfSWmTqJr9DtMPOsTO5XgeyhrYgke MyDrax08qCtAA0iJDl8yyRbAogM+I0iYs3Zwm3E/Jg9zIaY6ji5lF8fem2+MXyp+ ogXvkrTW0+7Yr2vHeKWAzHzDfGdkfCL1dF7Jk0194paPErdclC20zXyNOVJD4WiK j1w2zwB5B8J2IzBubIAX3lk+yDixhJWSHMKm032SbMr/Kq4AdoIWi/kGoMORQz35 fGOabL0bDqExqJ/yXI4w1ea/vFSOF9Vn -----END CERTIFICATE-----Generated at Tue Dec 30 18:41:37 2025 by rpki-client