This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft File: QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json) Hash identifier: fHi8AHDVvLNit867cfW9AadEDD23Z5r32BR41+y89ls= Subject key identifier: 88:10:76:22:09:F1:22:E1:58:7F:C8:7D:4A:C8:25:0A:D7:B1:C9:C7 Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Certificate serial: 18A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft Manifest number: 189C Signing time: Thu 18 Dec 2025 16:22:03 +0000 Manifest this update: Thu 18 Dec 2025 16:22:02 +0000 Manifest next update: Thu 25 Dec 2025 16:22:02 +0000 Files and hashes: 1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: jNpIM/o5anfQE/b7Vvhq7sDrh4/yLvF8ApM8PAm/+aM=) 2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: p9zhGKCO2BBzL3wnYhT/qvWZC/Mb1+QSPyP9kvTHJK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6312 (0x18a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Validity Not Before: Dec 18 16:22:02 2025 GMT Not After : Dec 25 16:22:02 2025 GMT Subject: CN=69442a2b-a39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c2:42:9a:28:47:f7:e3:2b:f6:6d:ef:40:4d: 92:81:36:00:4b:2e:f2:ac:54:23:6c:ba:b8:64:d3: 75:2d:4a:1e:4f:6a:75:89:ce:e1:8b:57:4d:62:32: f1:f5:12:8c:c9:40:48:b2:b5:90:5f:4e:2b:02:f2: a9:37:91:b8:12:a7:ce:72:42:ba:ff:ad:58:51:6a: db:d4:96:dd:5d:1d:0c:cc:75:9b:44:f7:c8:7c:1c: 22:cc:87:b9:e1:35:5b:46:8c:b7:d6:4a:13:c0:82: 50:f4:1e:6f:0c:8a:6c:b9:6b:ed:68:ff:0d:2f:5c: 94:9b:07:ef:77:a3:e0:91:6c:8d:ae:14:68:5d:0d: 6b:9d:51:eb:a1:3e:67:d2:3d:1c:0d:88:ae:01:4f: e1:b0:a6:0a:4a:6f:7e:99:fa:57:11:57:1f:aa:e8: 53:42:4b:95:ea:bb:e0:03:37:3b:bc:3f:df:06:27: db:03:d1:cb:59:0e:00:96:8e:48:c2:25:ba:91:7b: 5f:6a:9a:49:04:a7:fb:10:31:b5:6d:9f:b2:52:d7: 55:11:9a:8c:71:01:f2:70:85:db:09:28:41:2d:cc: e4:e2:da:5e:19:fa:7f:39:75:63:7c:6d:b3:01:8d: 2a:47:b5:49:7d:9d:47:27:e5:dd:24:3e:b6:bc:cd: 9c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:10:76:22:09:F1:22:E1:58:7F:C8:7D:4A:C8:25:0A:D7:B1:C9:C7 X509v3 Authority Key Identifier: keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:42:fa:e0:9c:97:3b:d5:2b:97:0e:c5:17:86:4e:69:da:bc: 5b:f1:62:42:96:a8:73:a1:22:7d:d5:03:70:de:4c:0d:2e:b2: 5d:11:46:a6:a9:a7:47:ff:9e:37:3d:f1:0e:c8:7f:59:33:81: 51:cb:76:ce:76:a1:6f:41:fa:48:da:e6:d4:d6:21:34:65:d6: 60:8b:77:01:81:36:c5:3c:8f:57:ad:62:94:9c:92:ce:aa:5b: 13:01:c2:14:83:60:7c:21:61:84:ed:6f:65:2a:3e:e5:de:af: 32:df:16:5d:98:2e:ef:d4:9a:ec:2a:67:87:4f:c5:bb:e8:ca: 79:fc:fc:30:f8:b9:e1:a2:f6:df:e3:64:84:75:d9:76:f9:75: 18:6f:47:56:25:69:da:31:37:09:5d:50:83:a8:ce:4d:57:02: 54:25:ac:9a:21:75:67:ff:de:97:25:7b:20:87:7f:16:f2:1b: 70:25:3b:1a:85:bc:5e:7b:ea:e4:bc:c1:e7:1f:b3:5a:3d:74: 25:19:93:b7:d8:4e:bc:1d:df:de:a2:27:53:bb:2b:c3:c5:78: 18:bc:f6:1a:24:ba:79:87:2d:2f:9f:23:9e:5b:a0:d7:63:87: d8:3c:3d:ea:ca:99:c5:1a:9e:5c:96:42:cb:e5:d2:16:84:60: 2c:57:01:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBNTgxMTAvBgNVBAUTKDQwQkQyNUEyRDYwMzE4NzNFNTVERkNEREFEM0E0OEY3 QkNGODhDOEIwHhcNMjUxMjE4MTYyMjAyWhcNMjUxMjI1MTYyMjAyWjAYMRYwFAYD VQQDDA02OTQ0MmEyYi1hMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsJCmihH9+Mr9m3vQE2SgTYASy7yrFQjbLq4ZNN1LUoeT2p1ic7hi1dNYjLx 9RKMyUBIsrWQX04rAvKpN5G4EqfOckK6/61YUWrb1JbdXR0MzHWbRPfIfBwizIe5 4TVbRoy31koTwIJQ9B5vDIpsuWvtaP8NL1yUmwfvd6PgkWyNrhRoXQ1rnVHroT5n 0j0cDYiuAU/hsKYKSm9+mfpXEVcfquhTQkuV6rvgAzc7vD/fBifbA9HLWQ4Alo5I wiW6kXtfappJBKf7EDG1bZ+yUtdVEZqMcQHycIXbCShBLczk4tpeGfp/OXVjfG2z AY0qR7VJfZ1HJ+XdJD62vM2cpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgQdiIJ 8SLhWH/IfUrIJQrXscnHMB8GA1UdIwQYMBaAFEC9JaLWAxhz5V383a06SPe8+IyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE1OC80RUFDRTQ5MEFF NDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdIUGxYZnpkclRwSTk3ejRq SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMMGxvdFlER0hQbFhmemRyVHBJOTd6NGpJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE1OC80RUFDRTQ5MEFFNDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdI UGxYZnpkclRwSTk3ejRqSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZQvrgnJc71SuXDsUXhk5p2rxb8WJClqhzoSJ91QNw3kwNLrJdEUam qadH/543PfEOyH9ZM4FRy3bOdqFvQfpI2ubU1iE0ZdZgi3cBgTbFPI9XrWKUnJLO qlsTAcIUg2B8IWGE7W9lKj7l3q8y3xZdmC7v1JrsKmeHT8W76Mp5/Pww+Lnhovbf 42SEddl2+XUYb0dWJWnaMTcJXVCDqM5NVwJUJayaIXVn/96XJXsgh38W8htwJTsa hbxee+rkvMHnH7NaPXQlGZO32E68Hd/eoidTuyvDxXgYvPYaJLp5hy0vnyOeW6DX Y4fYPD3qypnFGp5clkLL5dIWhGAsVwFB -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:39 2025 by rpki-client