This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft File: qg08vlkeG_ZBGL9vA2QSX6abipA.mft (raw, json) Hash identifier: znc/+zTcyL7u1qGknCCQlJA5FCrH+/iCRK9SAvoCegA= Subject key identifier: 3A:48:22:82:19:EA:77:9E:0F:06:EE:CC:A4:80:73:07:12:5B:75:8A Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 Certificate issuer: /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Certificate serial: 06F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft Manifest number: 06E8 Signing time: Sat 20 Dec 2025 21:19:32 +0000 Manifest this update: Sat 20 Dec 2025 21:19:32 +0000 Manifest next update: Sat 27 Dec 2025 21:19:32 +0000 Files and hashes: 1: qg08vlkeG_ZBGL9vA2QSX6abipA.crl (hash: Bm/xv67L0vCoqtT9jVy1bqyPqnwBNGGaxkKhNtqY5C4=) 2: EE188D209F2B11EDBB1C587AC4F9AE02.roa (hash: xunDUR+vk1rAB3LOb72QA9qMR5Y4O+s76u7aM9CtIVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1777 (0x6f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6E35, serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Validity Not Before: Dec 20 21:19:32 2025 GMT Not After : Dec 27 21:19:32 2025 GMT Subject: CN=694712e4-74f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:45:ea:c7:c6:5d:a7:a1:8e:ff:98:a3:4a: d2:8d:d8:ae:67:dd:cc:91:83:83:69:ae:c3:54:64: 19:68:24:4e:e4:5e:38:47:a5:05:38:63:26:30:53: 29:58:d9:85:3c:23:d6:e7:c8:2b:ac:73:d2:8c:cb: b2:bb:96:54:aa:0a:a8:32:82:ca:17:0c:85:57:11: 01:cd:e4:3e:73:6e:84:31:27:71:c2:4b:f3:bc:15: eb:9d:a4:ac:31:88:e1:05:f1:de:12:ae:53:d2:ac: 5f:51:6b:0e:7a:d1:36:6c:a4:e9:7a:33:95:50:c9: d1:d4:86:f5:7c:95:30:dc:da:de:91:7a:37:f1:28: 73:2e:7b:58:d2:c3:48:24:70:47:95:0a:ec:91:c9: 40:55:d3:dd:cd:f7:21:a8:14:09:b6:61:47:97:2b: 53:e4:2c:86:ca:d2:70:f6:c4:af:fe:00:8c:f1:32: 0b:54:bc:59:a4:bf:70:65:bf:10:3a:2f:fc:f9:67: ce:f4:36:a4:0d:28:cc:bb:28:f2:5c:b3:54:fd:5e: ca:82:7e:58:69:e5:2c:dc:1c:d5:ae:02:42:64:3f: 58:15:97:a6:ae:a8:c7:1b:fe:ae:33:3a:99:a9:fe: a4:db:d3:cb:d0:30:7b:28:3e:34:5c:d7:a9:b9:ba: d9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:48:22:82:19:EA:77:9E:0F:06:EE:CC:A4:80:73:07:12:5B:75:8A X509v3 Authority Key Identifier: keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a1:89:06:4b:57:45:be:84:86:25:62:ad:7b:c2:3a:0b:59: 97:4e:32:9d:4d:b3:bd:8a:c0:60:6f:1e:73:ad:20:64:7c:64: 40:6c:30:57:99:a4:35:d9:01:cf:69:6d:b8:ea:55:ca:d8:da: da:db:46:6a:60:29:e5:a8:23:eb:58:6f:f1:96:72:22:8c:e3: 11:1b:32:13:27:1f:43:fd:34:48:e1:c1:bb:28:16:26:98:57: 61:45:e7:09:76:ac:3b:9c:0b:5b:65:ec:62:e3:2c:7f:65:68: d0:1d:25:c2:d2:e8:b4:00:81:a6:ab:64:cd:12:7c:41:23:e6: 0b:91:f7:40:3d:ec:34:55:5a:a4:52:cb:cf:e2:c1:20:18:8b: 82:2c:3b:b1:79:12:aa:3d:50:78:77:01:a1:fe:26:6a:3d:fb: 21:13:0b:59:4a:20:8f:19:ce:25:15:c9:73:90:e6:23:79:7f: 09:ca:bb:7c:f4:6f:bf:3b:a7:9f:66:41:56:c4:26:a1:df:92: 03:6f:9e:a9:01:82:fa:b0:0b:09:96:21:a9:20:94:24:68:ba: b7:f3:0f:e7:75:f5:d2:a9:4b:74:0a:43:bd:83:f2:08:8a:96: 2d:a5:9d:33:11:7c:fd:41:29:d3:db:7b:55:4c:e3:89:77:b0: 35:7e:04:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZFMzUxMTAvBgNVBAUTKEFBMEQzQ0JFNTkxRTFCRjY0MTE4QkY2RjAzNjQxMjVG QTY5QjhBOTAwHhcNMjUxMjIwMjExOTMyWhcNMjUxMjI3MjExOTMyWjAYMRYwFAYD VQQDDA02OTQ3MTJlNC03NGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhBF6sfGXaehjv+Yo0rSjdiuZ93MkYODaa7DVGQZaCRO5F44R6UFOGMmMFMp WNmFPCPW58grrHPSjMuyu5ZUqgqoMoLKFwyFVxEBzeQ+c26EMSdxwkvzvBXrnaSs MYjhBfHeEq5T0qxfUWsOetE2bKTpejOVUMnR1Ib1fJUw3NrekXo38ShzLntY0sNI JHBHlQrskclAVdPdzfchqBQJtmFHlytT5CyGytJw9sSv/gCM8TILVLxZpL9wZb8Q Oi/8+WfO9DakDSjMuyjyXLNU/V7Kgn5YaeUs3BzVrgJCZD9YFZemrqjHG/6uMzqZ qf6k29PL0DB7KD40XNepubrZ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpIIoIZ 6neeDwbuzKSAcwcSW3WKMB8GA1UdIwQYMBaAFKoNPL5ZHhv2QRi/bwNkEl+mm4qQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkUzNS83MjlDQjIzMDc2 RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdfWkJHTDl2QTJRU1g2YWJp cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FnMDh2bGtlR19aQkdMOXZBMlFTWDZhYmlwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkUzNS83MjlDQjIzMDc2RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdf WkJHTDl2QTJRU1g2YWJpcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsoYkGS1dFvoSGJWKte8I6C1mXTjKdTbO9isBgbx5zrSBkfGRAbDBX maQ12QHPaW246lXK2Nra20ZqYCnlqCPrWG/xlnIijOMRGzITJx9D/TRI4cG7KBYm mFdhRecJdqw7nAtbZexi4yx/ZWjQHSXC0ui0AIGmq2TNEnxBI+YLkfdAPew0VVqk UsvP4sEgGIuCLDuxeRKqPVB4dwGh/iZqPfshEwtZSiCPGc4lFclzkOYjeX8Jyrt8 9G+/O6efZkFWxCah35IDb56pAYL6sAsJliGpIJQkaLq38w/ndfXSqUt0CkO9g/II ipYtpZ0zEXz9QSnT23tVTOOJd7A1fgT/ -----END CERTIFICATE-----Generated at Sun Dec 21 16:02:20 2025 by rpki-client