This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft File: qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json) Hash identifier: dU50pyuUdZmm8l3U9QBcYGt6XUnWxGprwDaCBNWcgtY= Subject key identifier: C1:14:0C:1D:4E:F6:D5:EB:36:1F:FE:A7:DB:F5:B5:5D:E7:AF:AC:7B Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft Manifest number: 0158 Signing time: Fri 19 Dec 2025 03:17:20 +0000 Manifest this update: Fri 19 Dec 2025 03:17:20 +0000 Manifest next update: Fri 26 Dec 2025 03:17:20 +0000 Files and hashes: 1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: NPSSWdStbE1M2ITWFlqDoikrLoCzP4z533ZwEEaIMyE=) 2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: 5Igi5uwLEP9LNSo1jtb9EAzRP4JXP+61tZCh/iJ8p+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Validity Not Before: Dec 19 03:17:20 2025 GMT Not After : Dec 26 03:17:20 2025 GMT Subject: CN=6944c3c0-438a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6f:d0:61:7f:c6:5d:84:86:b3:1e:9b:6b:e0: 52:46:ac:34:41:c0:a6:43:d8:28:53:84:19:ee:26: 4d:cb:3d:c9:c3:71:bd:87:f3:da:24:54:4a:a2:62: 72:03:36:3b:2f:2d:f4:d1:01:06:22:e3:1b:e2:38: 24:6b:f3:89:9b:76:a6:06:ed:10:62:93:ba:d1:26: 96:f6:c9:ab:10:c0:d9:f8:f2:14:c5:08:47:dd:01: e3:2e:b3:82:db:a9:61:97:d0:95:ea:b0:8e:76:aa: a8:d3:e9:94:dc:bd:cb:da:a8:e0:18:e6:87:a2:d6: 78:be:87:31:f4:97:fd:17:9e:4f:33:d4:8b:ba:e8: a9:ec:ff:8b:e8:5e:9d:53:40:8f:83:24:3b:f6:21: df:72:85:8b:5d:eb:3d:5e:6b:01:7f:b9:1f:93:b5: bd:be:6a:a4:d7:13:57:02:9d:15:36:59:2b:58:9d: ad:4d:bf:af:91:6c:e2:5f:a0:26:d3:ba:f7:96:2d: 9c:38:99:b4:84:bb:48:f0:12:95:d2:1e:b6:7d:b8: 85:3d:94:55:63:17:94:75:a5:34:d8:93:57:f5:ec: 53:f5:4c:dd:43:76:92:c4:05:63:7e:69:7a:73:78: 9d:1f:77:26:8d:be:f9:ea:42:4f:5e:05:62:22:67: de:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:14:0C:1D:4E:F6:D5:EB:36:1F:FE:A7:DB:F5:B5:5D:E7:AF:AC:7B X509v3 Authority Key Identifier: keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:7c:0b:d7:f2:2e:03:b7:5d:34:a0:8d:32:4b:0b:ea:6d:22: 11:15:2c:d8:aa:e7:cf:9b:18:17:8e:a9:31:4f:92:df:4b:b8: db:94:f3:68:bc:0f:f5:74:22:ab:ba:20:c2:b8:d4:21:be:b2: d8:09:c4:1e:cb:0e:f6:aa:44:b8:4d:8a:a1:17:d0:3c:97:11: c0:ac:9e:d1:4f:1b:6f:da:c7:9c:ac:20:3f:95:b6:d5:e4:1c: 07:bd:24:6d:1d:6b:d8:b4:ed:7b:78:f5:74:a9:81:d6:d0:eb: 03:9d:74:68:1b:de:ba:93:e1:80:00:bf:3a:72:59:8b:a5:31: 85:f1:90:32:a2:20:c2:fe:24:76:80:a0:2a:6e:f3:2e:3b:d2: 57:de:f0:86:24:d8:94:0f:9d:55:18:55:2a:c4:12:43:8f:d4: 37:44:43:02:33:1c:bc:7d:72:68:56:5d:ac:62:ad:46:9b:0c: a8:01:8c:d0:13:a1:54:11:e2:b9:fd:8d:9f:ba:be:d9:22:c9: 9f:ac:02:15:c1:68:dd:36:10:13:ca:68:18:2a:76:f6:8d:fa: 2e:5b:f3:17:59:bb:70:7b:18:26:b3:d8:af:c4:86:f5:0d:c7: 9a:92:92:26:4b:3f:f8:3b:50:3b:32:0b:e3:ab:40:3d:61:b9: 1b:78:70:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzQUYxMTAvBgNVBAUTKEE4MjRCNjYzRjNGNUEzNEY4MkVFMjI3MkE4QUVGREU0 M0I3OUJEOTMwHhcNMjUxMjE5MDMxNzIwWhcNMjUxMjI2MDMxNzIwWjAYMRYwFAYD VQQDDA02OTQ0YzNjMC00MzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32/QYX/GXYSGsx6ba+BSRqw0QcCmQ9goU4QZ7iZNyz3Jw3G9h/PaJFRKomJy AzY7Ly300QEGIuMb4jgka/OJm3amBu0QYpO60SaW9smrEMDZ+PIUxQhH3QHjLrOC 26lhl9CV6rCOdqqo0+mU3L3L2qjgGOaHotZ4vocx9Jf9F55PM9SLuuip7P+L6F6d U0CPgyQ79iHfcoWLXes9XmsBf7kfk7W9vmqk1xNXAp0VNlkrWJ2tTb+vkWziX6Am 07r3li2cOJm0hLtI8BKV0h62fbiFPZRVYxeUdaU02JNX9exT9UzdQ3aSxAVjfml6 c3idH3cmjb756kJPXgViImfeqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEUDB1O 9tXrNh/+p9v1tV3nr6x7MB8GA1UdIwQYMBaAFKgktmPz9aNPgu4icqiu/eQ7eb2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTNBRi8wNDMxNjBCMENB MDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8wLUM3aUp5cUs3OTVEdDV2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDUzJZX1AxbzAtQzdpSnlxSzc5NUR0NXZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTNBRi8wNDMxNjBCMENBMDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8w LUM3aUp5cUs3OTVEdDV2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdfAvX8i4Dt100oI0ySwvqbSIRFSzYqufPmxgXjqkxT5LfS7jblPNo vA/1dCKruiDCuNQhvrLYCcQeyw72qkS4TYqhF9A8lxHArJ7RTxtv2secrCA/lbbV 5BwHvSRtHWvYtO17ePV0qYHW0OsDnXRoG966k+GAAL86clmLpTGF8ZAyoiDC/iR2 gKAqbvMuO9JX3vCGJNiUD51VGFUqxBJDj9Q3REMCMxy8fXJoVl2sYq1GmwyoAYzQ E6FUEeK5/Y2fur7ZIsmfrAIVwWjdNhATymgYKnb2jfouW/MXWbtwexgms9ivxIb1 DceakpImSz/4O1A7Mgvjq0A9YbkbeHAg -----END CERTIFICATE-----Generated at Fri Dec 19 07:21:54 2025 by rpki-client