This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: QX1eiE+rxVvKRe/uDFugQDBXtZmDQd00uRAIV5oMm0A= Subject key identifier: 71:6B:58:2F:98:3D:70:82:72:43:C3:90:32:FB:89:84:28:D8:79:CF Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 3557 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 352C Signing time: Wed 24 Dec 2025 14:43:11 +0000 Manifest this update: Wed 24 Dec 2025 14:43:11 +0000 Manifest next update: Wed 31 Dec 2025 14:43:11 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: UW9QqIWjZ3W21toUcNor5CbDejS0+Aqqw9aiUEpNTeI=) 2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: IJhdmy/yaxT+3c7CLBVZdDHqC15tF8wOYJzJ42dHOw4=) 3: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: hSHlg0cQGrhWbznTJueupc2Vskf9TeA0Y1YG1PXHW4c=) 4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: Jj1NVOgg11V9rBHXb/ngLI6yeEIfUQhi8bFPhl/4/hg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 14:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13655 (0x3557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: Dec 24 14:43:11 2025 GMT Not After : Dec 31 14:43:11 2025 GMT Subject: CN=694bfbff-299f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:ca:d4:6e:9f:7b:b0:29:e4:a6:dc:0e:ba: ee:9a:bf:c1:64:a9:f5:bb:e3:89:1e:71:86:32:1b: 22:4a:57:5d:f1:b5:1e:d0:58:42:c5:f9:6b:a8:46: 04:18:c4:56:62:75:53:e0:b6:16:fa:0d:d0:2f:91: 78:5a:71:c1:aa:77:ce:26:ce:04:58:3e:5e:4f:2d: 4b:7d:a2:3e:8f:e5:1e:11:5d:a4:95:79:81:f1:ce: 27:33:60:cb:85:bb:5f:ab:01:29:40:a8:a0:9c:0e: ab:d9:88:cc:df:60:dd:26:e5:fb:ff:f2:2a:66:df: b5:d2:96:0f:61:5c:16:37:2a:b4:ed:99:c8:3a:b0: f5:96:77:1a:98:66:ee:bc:ae:e5:df:3e:be:c2:e4: 96:49:be:0c:83:ea:ee:8f:f2:36:03:07:3a:a1:3a: 48:9b:86:fc:d4:24:d7:07:c1:b5:5f:78:bd:09:5e: 5e:d8:f7:86:6d:28:b0:98:29:9d:a3:13:b4:45:5b: 9d:85:f1:70:aa:27:ea:cb:c4:1f:b7:e3:73:3c:8b: b9:36:a4:48:10:06:c2:38:4e:73:66:a7:bf:31:02: 92:e5:88:a3:08:85:5a:c3:5e:e0:d4:07:14:8c:2d: 3e:e8:8a:e8:a9:6c:a2:aa:2a:c9:46:e7:9d:a0:ff: 86:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6B:58:2F:98:3D:70:82:72:43:C3:90:32:FB:89:84:28:D8:79:CF X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f3:9d:78:15:8f:d0:c2:80:fa:c8:44:1f:e2:c4:1a:f4:c7: ce:d9:d7:c4:f9:94:8b:ab:60:2e:2b:34:a8:5b:d5:42:0b:72: 75:f0:36:bf:93:5f:68:d6:fd:18:71:8e:cb:e3:08:c9:38:f3: 73:78:74:23:3d:58:23:de:5b:a7:ef:18:77:b6:02:d7:f2:ce: 0e:d5:22:c4:dc:15:14:13:86:97:d7:51:71:7f:1d:17:59:e2: 92:6d:4b:a0:c5:8d:fd:b1:2c:9a:4e:98:2f:cd:d5:af:09:39: 55:c0:38:70:4c:9d:1d:6d:82:0f:3c:01:4c:d1:ca:23:ab:98: ea:e9:fa:27:7c:7b:c5:cf:ea:89:f0:90:f0:ce:c6:66:5a:ad: 69:74:48:0d:10:1f:6b:12:0b:e5:ee:79:0d:4e:7c:d3:88:d4: fc:b6:9c:12:89:ea:59:32:9b:dd:09:31:a3:6e:63:32:d2:ad: a1:da:dd:13:14:8b:34:57:fc:6a:f8:22:c0:f2:75:27:1a:06: d1:57:89:6d:d7:db:34:4f:a2:1c:a8:95:a3:8a:35:06:9b:20: d3:82:cd:26:b8:3a:eb:6a:40:2b:e1:71:54:93:d6:f8:7d:96: c1:ab:6e:ec:97:1d:ea:63:61:ae:b8:d9:72:93:95:4a:ae:7c: 53:b1:fc:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjUxMjI0MTQ0MzExWhcNMjUxMjMxMTQ0MzExWjAYMRYwFAYD VQQDDA02OTRiZmJmZi0yOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWTK1G6fe7Ap5KbcDrrumr/BZKn1u+OJHnGGMhsiSldd8bUe0FhCxflrqEYE GMRWYnVT4LYW+g3QL5F4WnHBqnfOJs4EWD5eTy1LfaI+j+UeEV2klXmB8c4nM2DL hbtfqwEpQKignA6r2YjM32DdJuX7//IqZt+10pYPYVwWNyq07ZnIOrD1lncamGbu vK7l3z6+wuSWSb4Mg+ruj/I2Awc6oTpIm4b81CTXB8G1X3i9CV5e2PeGbSiwmCmd oxO0RVudhfFwqifqy8Qft+NzPIu5NqRIEAbCOE5zZqe/MQKS5YijCIVaw17g1AcU jC0+6IroqWyiqirJRuedoP+G3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFrWC+Y PXCCckPDkDL7iYQo2HnPMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN8514FY/QwoD6yEQf4sQa9MfO2dfE+ZSLq2AuKzSoW9VCC3J18Da/ k19o1v0YcY7L4wjJOPNzeHQjPVgj3lun7xh3tgLX8s4O1SLE3BUUE4aX11Fxfx0X WeKSbUugxY39sSyaTpgvzdWvCTlVwDhwTJ0dbYIPPAFM0cojq5jq6fonfHvFz+qJ 8JDwzsZmWq1pdEgNEB9rEgvl7nkNTnzTiNT8tpwSiepZMpvdCTGjbmMy0q2h2t0T FIs0V/xq+CLA8nUnGgbRV4lt19s0T6IcqJWjijUGmyDTgs0muDrrakAr4XFUk9b4 fZbBq27slx3qY2GuuNlyk5VKrnxTsfzO -----END CERTIFICATE-----Generated at Thu Dec 25 07:10:28 2025 by rpki-client