This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json) Hash identifier: gE2Z2LJked6KqZFiIFITlUOdoQsXCy8xEJZ7lOH2rYs= Subject key identifier: E6:47:27:98:47:9A:AD:DF:82:03:69:AF:8B:FF:4C:5B:AC:47:ED:76 Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft Manifest number: 6A Signing time: Fri 19 Dec 2025 05:58:49 +0000 Manifest this update: Fri 19 Dec 2025 05:58:49 +0000 Manifest next update: Fri 26 Dec 2025 05:58:49 +0000 Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: 9hjY7C4qZq9Rm0X0hmuGwOIPmSmPjh3JHsfaPg0J6CM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Validity Not Before: Dec 19 05:58:49 2025 GMT Not After : Dec 26 05:58:49 2025 GMT Subject: CN=6944e999-0843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:23:c4:70:23:43:7e:55:66:3f:c9:06:8a: ff:e3:7f:8c:b9:e1:43:f0:8a:69:88:15:40:4a:30: 12:7c:6f:39:66:67:34:8a:22:0d:e2:63:cd:20:38: 5a:e6:71:ff:a6:c9:17:b3:a0:d8:ef:3a:85:d6:31: eb:c6:60:ae:38:69:12:da:7f:be:58:05:cb:0c:ed: 71:2c:ae:1b:e1:17:20:23:01:ce:6d:e4:db:5f:b5: ed:f6:d6:65:b3:a4:28:36:d6:c8:ae:ad:df:75:2c: 42:19:ee:13:58:86:9c:de:33:bc:07:b3:ed:8b:ae: 9c:b0:ff:4e:2a:0f:74:ea:d0:62:3d:04:e0:d8:2d: d5:46:3f:17:20:3f:9a:aa:2c:56:1d:7e:b3:ac:43: 8a:03:72:a0:f6:4f:f2:1d:fa:c3:2a:47:54:88:b9: 48:76:9b:7c:a9:a2:7a:26:f2:68:6d:65:da:78:80: b7:ae:f3:14:10:2d:15:0b:72:0d:b1:be:0f:06:fd: 5f:84:11:87:47:90:f2:78:42:24:aa:23:25:f3:35: cc:f6:43:2a:5a:d9:a5:be:45:80:75:68:18:aa:bf: ef:dc:05:d2:c4:32:59:54:d2:fd:09:39:47:6c:63: 45:08:e9:d5:77:76:1b:10:f1:af:a5:0f:be:73:4c: b6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:47:27:98:47:9A:AD:DF:82:03:69:AF:8B:FF:4C:5B:AC:47:ED:76 X509v3 Authority Key Identifier: keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:37:e9:15:ab:67:81:f1:6b:b9:38:f0:3c:3d:97:c4:57:76: ed:8c:35:c7:ed:70:7f:9c:5f:af:cf:be:77:3d:75:27:13:98: 8e:ad:bd:92:69:c5:62:08:8f:4f:d8:fc:13:06:1e:23:93:cb: 9a:00:c9:d5:be:a5:69:0c:78:74:dd:d7:13:24:01:c8:1b:d5: 17:70:1e:2d:e5:4f:11:08:40:14:5f:48:37:9b:32:bf:54:9c: 8b:42:8c:c2:df:f9:ab:59:0a:0b:49:69:dd:f8:53:32:c0:52: 7b:2e:bc:6b:60:a1:4f:c3:f3:ee:e4:96:1c:66:20:23:ee:57: db:a2:cc:60:75:97:ce:1e:59:40:1f:99:05:a5:bd:8d:cc:64: ea:1a:66:06:9b:24:eb:d5:9d:d0:c4:3d:53:4a:ce:ad:44:f3: 52:9f:d8:04:65:c6:85:b5:b7:39:81:9e:69:99:6d:fa:71:58: c9:80:9c:71:64:8b:74:06:fa:38:23:a1:ad:0b:dc:c4:bc:3a: e0:7d:1e:23:a7:c5:ad:a5:cb:9b:56:ea:90:d7:0b:e0:0e:eb: 3d:58:32:59:00:3b:0a:c2:25:99:0e:48:85:b3:ee:67:05:31: 8d:b7:a9:a2:3b:da:06:3b:0f:35:b9:f9:95:03:f8:6e:68:d3: 59:51:61:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEJCMTExMC8GA1UEBRMoNDEyQThEMTdERjkwN0E3ODM3NjUwMTJBODNCNzhCN0NC MUNBMjUxMjAeFw0yNTEyMTkwNTU4NDlaFw0yNTEyMjYwNTU4NDlaMBgxFjAUBgNV BAMMDTY5NDRlOTk5LTA4NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuniPEcCNDflVmP8kGiv/jf4y54UPwimmIFUBKMBJ8bzlmZzSKIg3iY80gOFrm cf+myRezoNjvOoXWMevGYK44aRLaf75YBcsM7XEsrhvhFyAjAc5t5Ntfte321mWz pCg21siurd91LEIZ7hNYhpzeM7wHs+2Lrpyw/04qD3Tq0GI9BODYLdVGPxcgP5qq LFYdfrOsQ4oDcqD2T/Id+sMqR1SIuUh2m3yponom8mhtZdp4gLeu8xQQLRULcg2x vg8G/V+EEYdHkPJ4QiSqIyXzNcz2Qypa2aW+RYB1aBiqv+/cBdLEMllU0v0JOUds Y0UI6dV3dhsQ8a+lD75zTLbnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5kcnmEea rd+CA2mvi/9MW6xH7XYwHwYDVR0jBBgwFoAUQSqNF9+Qeng3ZQEqg7eLfLHKJRIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QkIxLzUxRjlGNjE0M0Qy NTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5nM1pRRXFnN2VMZkxIS0pS SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVNxTkY5LVFlbmczWlFFcWc3ZUxmTEhLSlJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QkIxLzUxRjlGNjE0M0QyNTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5n M1pRRXFnN2VMZkxIS0pSSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKc36RWrZ4Hxa7k48Dw9l8RXdu2MNcftcH+cX6/Pvnc9dScTmI6tvZJp xWIIj0/Y/BMGHiOTy5oAydW+pWkMeHTd1xMkAcgb1RdwHi3lTxEIQBRfSDebMr9U nItCjMLf+atZCgtJad34UzLAUnsuvGtgoU/D8+7klhxmICPuV9uizGB1l84eWUAf mQWlvY3MZOoaZgabJOvVndDEPVNKzq1E81Kf2ARlxoW1tzmBnmmZbfpxWMmAnHFk i3QG+jgjoa0L3MS8OuB9HiOnxa2ly5tW6pDXC+AO6z1YMlkAOwrCJZkOSIWz7mcF MY23qaI72gY7DzW5+ZUD+G5o01lRYUk= -----END CERTIFICATE-----Generated at Sat Dec 20 02:45:29 2025 by rpki-client