This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft File: QxsKSDX89paz7NM1klqOE2EM0Tc.mft (raw, json) Hash identifier: HKnJMGYalf82MQqYs5QEFWmvix2DqMgGDRemRJeFzxU= Subject key identifier: 3C:CE:1D:16:2F:CA:E6:27:D0:6F:6F:13:8E:CC:A0:9F:66:70:E4:29 Authority key identifier: 43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 Certificate issuer: /CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft Manifest number: F0 Signing time: Fri 19 Dec 2025 04:26:32 +0000 Manifest this update: Fri 19 Dec 2025 04:26:31 +0000 Manifest next update: Fri 26 Dec 2025 04:26:31 +0000 Files and hashes: 1: QxsKSDX89paz7NM1klqOE2EM0Tc.crl (hash: +HuYzEyBcC98q5vIlUog2RyL/7yv2sSQsgycMhDrmBQ=) 2: 49ADB44C6DCC11EF8BE2A566C4F9AE02.roa (hash: mtRkpBofIEP/NFZvK+kr1cdx0dZa5TNObQf1xWdBFqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE89F, serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Validity Not Before: Dec 19 04:26:31 2025 GMT Not After : Dec 26 04:26:31 2025 GMT Subject: CN=6944d3f8-0cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:a9:ee:1c:72:87:c3:4f:9b:ec:71:bc:ce: 83:d4:cf:05:b0:f2:5f:94:f4:e4:5c:9e:b3:b7:99: 10:fc:63:a4:ca:15:63:a5:d9:97:be:09:09:d4:38: 9a:27:14:b6:e7:a4:e7:08:46:e8:be:65:75:e0:14: 93:be:dd:5d:7f:7d:27:30:fc:ab:ec:8a:67:aa:1b: 5a:f6:83:ea:f0:74:27:df:1b:05:ce:af:fa:5c:48: 72:b2:a7:b0:de:f7:14:d6:4a:6c:fb:1b:e2:b7:8a: d1:61:8d:10:c3:6e:f9:57:7b:43:f8:dc:c9:c4:76: f8:4c:2b:7f:5c:5d:5d:e0:d1:b7:b3:88:7e:9c:b1: e4:4f:28:e1:05:9c:1b:28:5b:2e:66:d1:e2:4c:7f: aa:1d:85:f5:cc:09:11:39:68:f6:46:d6:27:0a:7e: f3:3c:f3:a9:4d:4b:4c:77:1b:9e:b5:07:1a:8e:fd: 25:b8:cf:35:3e:b1:d5:a5:2a:03:a2:21:5f:c8:54: ee:21:40:b8:b2:33:c3:b7:be:da:05:44:11:a2:8c: 6f:8a:d9:3e:8b:79:44:ec:80:62:85:d9:b3:ef:ad: f2:f6:67:0e:b0:1d:4f:27:53:3f:7b:b1:56:6a:a1: 63:b4:75:bb:9d:3e:08:1c:f8:1f:f0:30:81:bc:8a: 68:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CE:1D:16:2F:CA:E6:27:D0:6F:6F:13:8E:CC:A0:9F:66:70:E4:29 X509v3 Authority Key Identifier: keyid:43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a8:8a:cd:44:f8:13:7d:01:d3:89:9c:eb:70:fe:59:45:5f: 30:e3:e1:fa:8f:b1:43:7a:30:51:ee:a2:db:67:63:8c:39:31: b6:5d:70:85:85:fe:59:39:6a:e0:2c:86:59:c6:11:a1:96:b3: 62:ce:90:8f:32:cd:59:7c:3b:80:02:16:d0:49:ae:47:7b:4e: 6a:3d:ae:22:ba:34:32:49:8b:59:1f:e4:2a:d3:62:01:26:49: 7b:9c:5d:8c:6f:fe:5f:01:a0:3a:d1:72:78:3d:20:54:f8:d9: 62:c9:bd:ff:61:66:fc:b5:d0:cb:0f:ab:d2:12:bf:35:b4:b1: 3f:d3:c3:0e:c3:67:0f:21:3a:71:59:bc:db:b0:d8:3d:b9:be: a6:2e:6e:42:f1:8a:75:9c:27:aa:ab:d1:92:42:47:fd:92:72: dc:93:23:22:dd:4b:5d:0d:c5:e9:11:87:75:1f:67:4b:1e:db: ac:90:61:0c:b2:58:81:b5:ed:5e:fa:09:41:28:b2:df:07:d9: e5:2a:6b:43:21:18:b7:e8:bc:3e:e5:e6:17:1d:1f:a3:fb:21: 16:04:6d:4c:c8:06:22:40:9f:30:84:2f:fd:fc:2f:09:86:bc: 93:54:f7:30:b2:4e:9d:18:9c:5c:1b:ec:c3:12:54:2f:39:15: a5:b3:b0:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4OUYxMTAvBgNVBAUTKDQzMUIwQTQ4MzVGQ0Y2OTZCM0VDRDMzNTkyNUE4RTEz NjEwQ0QxMzcwHhcNMjUxMjE5MDQyNjMxWhcNMjUxMjI2MDQyNjMxWjAYMRYwFAYD VQQDDA02OTQ0ZDNmOC0wY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqn+p7hxyh8NPm+xxvM6D1M8FsPJflPTkXJ6zt5kQ/GOkyhVjpdmXvgkJ1Dia JxS256TnCEbovmV14BSTvt1df30nMPyr7Ipnqhta9oPq8HQn3xsFzq/6XEhysqew 3vcU1kps+xvit4rRYY0Qw275V3tD+NzJxHb4TCt/XF1d4NG3s4h+nLHkTyjhBZwb KFsuZtHiTH+qHYX1zAkROWj2RtYnCn7zPPOpTUtMdxuetQcajv0luM81PrHVpSoD oiFfyFTuIUC4sjPDt77aBUQRooxvitk+i3lE7IBihdmz763y9mcOsB1PJ1M/e7FW aqFjtHW7nT4IHPgf8DCBvIpo7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzOHRYv yuYn0G9vE47MoJ9mcOQpMB8GA1UdIwQYMBaAFEMbCkg1/PaWs+zTNZJajhNhDNE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTg5Ri9BRkZEMjE3MDZE Q0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlwYXo3Tk0xa2xxT0UyRU0w VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F4c0tTRFg4OXBhejdOTTFrbHFPRTJFTTBUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTg5Ri9BRkZEMjE3MDZEQ0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlw YXo3Tk0xa2xxT0UyRU0wVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+qIrNRPgTfQHTiZzrcP5ZRV8w4+H6j7FDejBR7qLbZ2OMOTG2XXCF hf5ZOWrgLIZZxhGhlrNizpCPMs1ZfDuAAhbQSa5He05qPa4iujQySYtZH+Qq02IB Jkl7nF2Mb/5fAaA60XJ4PSBU+Nliyb3/YWb8tdDLD6vSEr81tLE/08MOw2cPITpx WbzbsNg9ub6mLm5C8Yp1nCeqq9GSQkf9knLckyMi3UtdDcXpEYd1H2dLHtuskGEM sliBte1e+glBKLLfB9nlKmtDIRi36Lw+5eYXHR+j+yEWBG1MyAYiQJ8whC/9/C8J hryTVPcwsk6dGJxcG+zDElQvORWls7DH -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:29 2025 by rpki-client