This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json) Hash identifier: 1XaqBZguIpI4BUAqqCROFBdD1I8zXsSNNAA4U1hju7w= Subject key identifier: A4:CC:1B:30:71:EA:C1:C9:6B:7B:6B:9E:A0:F3:2B:23:4D:CC:3D:7E Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft Manifest number: 022D Signing time: Sun 21 Dec 2025 01:19:43 +0000 Manifest this update: Sun 21 Dec 2025 01:19:43 +0000 Manifest next update: Sun 28 Dec 2025 01:19:43 +0000 Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: nmX5pvoavGcTflBkdDfLSCNn+beAHnXUHENu/YxwmNY=) 2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: ZcR87fOE985weT09Qg5tlvuB8e7ekzEVhJSSXPksgz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Validity Not Before: Dec 21 01:19:43 2025 GMT Not After : Dec 28 01:19:43 2025 GMT Subject: CN=69474b2f-e606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4e:60:3f:11:09:1d:a7:a5:64:37:7e:52:79: 89:58:9a:9b:d4:f3:0e:2a:78:4d:5f:b5:38:59:5e: 71:0b:91:ca:15:aa:39:de:1c:bc:5c:92:b6:ef:0a: f5:a8:72:e6:ec:86:c3:a3:ce:cb:ee:98:8b:e3:73: 00:a2:c5:16:ee:d5:ce:4b:32:03:73:05:9b:45:8e: 78:24:78:5d:b3:f3:79:f5:62:a6:3f:bf:ca:94:e0: b3:01:f1:09:a0:9f:05:00:aa:b6:a0:ec:78:34:fe: cb:f0:b0:0c:b6:39:1d:92:20:94:a3:94:00:21:ea: 13:eb:f8:93:d7:bf:f4:98:29:d0:be:51:6f:65:f4: 88:4b:07:4f:34:06:53:4c:ab:74:db:f7:ed:86:c6: ba:8d:ca:23:04:e9:0d:d6:fb:e8:87:dc:75:3c:14: cb:f8:82:e1:32:a0:98:47:df:05:56:31:c6:20:68: b7:3a:15:0c:16:82:ab:1a:73:eb:20:69:98:88:1e: 9a:56:fb:84:96:c9:c2:70:92:ba:1c:b6:19:08:8c: 53:c1:e0:48:37:3d:51:b3:f9:09:13:65:c1:b6:d9: ec:3d:8d:68:e3:ef:c9:6b:16:51:d6:7d:d8:3e:1e: 6d:94:68:71:d9:21:a4:63:13:3c:63:40:c6:c2:39: 1c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CC:1B:30:71:EA:C1:C9:6B:7B:6B:9E:A0:F3:2B:23:4D:CC:3D:7E X509v3 Authority Key Identifier: keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e2:49:d3:d8:fe:4f:e8:38:a0:e4:2b:9d:01:3c:ce:ac:4f: 93:a7:41:44:a1:55:53:bb:5e:60:e5:a5:21:99:84:50:34:9e: 08:1b:9d:3c:67:de:b1:2f:08:97:d2:4c:12:09:6d:9e:2c:e1: 79:eb:88:e8:da:24:04:35:02:d3:9d:f9:62:b5:7f:c6:4d:09: 62:89:3a:36:52:20:fe:43:a7:24:6d:a4:17:ce:f0:0a:10:8a: bb:c9:35:5e:1a:55:4d:ec:3e:66:6f:ee:3a:a9:9f:6b:ee:64: 2f:df:7f:6f:e4:76:a1:1b:5f:b6:99:4c:c2:58:3b:54:0c:e4: bb:f8:13:0c:e7:07:d0:a7:9a:2a:45:af:7a:c0:fd:02:a4:c8: 02:c0:66:2b:b6:b4:83:26:9e:3e:61:48:a5:d5:70:3f:ba:b0: a1:43:67:d2:ee:bc:2e:c9:d5:2b:df:e0:63:a3:5e:25:48:d4: 41:ab:7b:94:0b:44:92:f1:86:9e:06:32:75:0a:97:9d:58:55: fa:5c:4c:a1:0c:5a:c4:81:c6:44:dd:68:b9:ee:e9:eb:60:79: af:03:5f:75:da:56:f6:fa:d0:07:a9:86:b3:fe:c7:8f:f1:56: 8f:60:d3:e0:2c:6f:0b:ea:69:61:43:35:32:71:4f:4b:72:9e: a4:2f:e2:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVFQTI0RjYyQTky QjI1Q0RFQ0YwHhcNMjUxMjIxMDExOTQzWhcNMjUxMjI4MDExOTQzWjAYMRYwFAYD VQQDDA02OTQ3NGIyZi1lNjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApE5gPxEJHaelZDd+UnmJWJqb1PMOKnhNX7U4WV5xC5HKFao53hy8XJK27wr1 qHLm7IbDo87L7piL43MAosUW7tXOSzIDcwWbRY54JHhds/N59WKmP7/KlOCzAfEJ oJ8FAKq2oOx4NP7L8LAMtjkdkiCUo5QAIeoT6/iT17/0mCnQvlFvZfSISwdPNAZT TKt02/fthsa6jcojBOkN1vvoh9x1PBTL+ILhMqCYR98FVjHGIGi3OhUMFoKrGnPr IGmYiB6aVvuElsnCcJK6HLYZCIxTweBINz1Rs/kJE2XBttnsPY1o4+/JaxZR1n3Y Ph5tlGhx2SGkYxM8Y0DGwjkc4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTMGzBx 6sHJa3trnqDzKyNNzD1+MB8GA1UdIwQYMBaAFEIATPa8ofpWQk9e6iT2KpKyXN7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTYwRC9CRDBCNjRDNjhE REExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1sWkNUMTdxSlBZcWtySmMz czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnQk05cnloLWxaQ1QxN3FKUFlxa3JKYzNzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTYwRC9CRDBCNjRDNjhEREExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1s WkNUMTdxSlBZcWtySmMzczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb4knT2P5P6Dig5CudATzOrE+Tp0FEoVVTu15g5aUhmYRQNJ4IG508 Z96xLwiX0kwSCW2eLOF564jo2iQENQLTnflitX/GTQliiTo2UiD+Q6ckbaQXzvAK EIq7yTVeGlVN7D5mb+46qZ9r7mQv339v5HahG1+2mUzCWDtUDOS7+BMM5wfQp5oq Ra96wP0CpMgCwGYrtrSDJp4+YUil1XA/urChQ2fS7rwuydUr3+Bjo14lSNRBq3uU C0SS8YaeBjJ1CpedWFX6XEyhDFrEgcZE3Wi57unrYHmvA1912lb2+tAHqYaz/seP 8VaPYNPgLG8L6mlhQzUycU9Lcp6kL+Lx -----END CERTIFICATE-----Generated at Sun Dec 21 08:00:16 2025 by rpki-client