This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json) Hash identifier: 5JnumKHuFtMJZ1AX2yw+PGK53xaeOdGaJBt6uVSez0s= Subject key identifier: DF:78:B8:64:35:BC:F0:EC:E9:C2:D2:BA:27:9D:F1:8A:02:D0:4F:DF Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft Manifest number: 031F Signing time: Sun 21 Dec 2025 00:19:16 +0000 Manifest this update: Sun 21 Dec 2025 00:19:16 +0000 Manifest next update: Sun 28 Dec 2025 00:19:16 +0000 Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: E2d0Hj50LkPi1IXB3KFKaA2SEdhzFa8XqjfsGlRrpoE=) 2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: wBj04byRChV0petmdr4Ke9cr8WzCiaxcwGuAnk1TvDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503 Validity Not Before: Dec 21 00:19:16 2025 GMT Not After : Dec 28 00:19:16 2025 GMT Subject: CN=69473d04-b091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:32:0e:70:64:07:d8:d0:62:5c:e8:a2:58: fb:cc:4e:61:64:bb:e0:e5:32:4c:1d:cf:59:96:07: f2:77:1a:d0:da:22:a2:05:81:1a:b2:40:8e:06:10: dc:01:0c:b9:a2:4f:89:08:c0:f6:25:2f:fc:ea:1a: a6:64:81:5a:4f:3e:a6:fa:5e:b3:bc:cd:bc:59:62: 80:66:e9:b1:d8:fb:68:f6:b5:da:2f:9d:0a:32:2a: 60:e7:18:07:25:c6:37:94:cf:4b:56:10:cf:81:0a: aa:f2:14:b8:80:87:b8:59:0d:77:ae:a3:7b:31:eb: cd:df:1f:86:db:7c:90:32:19:4e:db:de:96:2a:27: 0b:2a:8b:00:8b:4c:84:52:63:b8:a7:a0:7a:5f:4c: 4d:10:6c:2f:3b:db:22:cc:9b:64:8a:bf:c0:f1:03: b2:31:c5:e4:71:b7:be:26:4d:13:1f:bb:ad:ef:47: e5:2a:1c:06:94:ca:56:c3:b7:01:1d:d6:14:db:c9: fc:56:f3:e2:1a:d7:25:ef:b6:18:57:c9:55:49:02: 2e:39:eb:f2:c6:8c:d3:22:df:cf:fb:b2:ee:a6:80: 41:05:6e:52:94:b3:06:3f:0e:26:75:09:da:0e:88: f6:f2:14:79:e3:4e:eb:77:b5:5d:ba:85:b2:d8:49: 63:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:78:B8:64:35:BC:F0:EC:E9:C2:D2:BA:27:9D:F1:8A:02:D0:4F:DF X509v3 Authority Key Identifier: keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:28:6d:ff:3b:cc:90:53:11:82:f5:8e:02:2b:ee:52:20:22: b2:c5:c9:af:65:73:9a:d5:65:e0:06:84:7b:b0:f4:8e:78:55: 54:d2:68:4f:5e:44:ef:7b:0c:10:ef:1a:8d:4d:a9:59:96:46: be:f5:d2:52:13:e5:90:f1:10:f9:7a:7e:9c:9d:de:84:0c:82: ab:ad:9d:47:42:ba:77:4f:7c:06:3b:c0:af:08:61:9c:e5:ee: 7b:5a:71:e9:28:34:e8:97:16:94:6e:b5:4c:40:b2:58:9e:5f: 59:60:14:78:9a:6c:a5:8a:ee:a7:e5:17:a8:37:85:7e:cc:1a: bd:16:cd:fe:c3:2f:88:db:8f:83:78:28:b1:bb:58:15:50:bd: bc:f5:27:fb:cb:2b:b2:23:69:ed:5f:dd:5f:dd:59:93:53:ed: 73:89:83:f0:21:43:95:1c:df:9a:35:d8:02:92:c3:65:db:6d: 11:e9:8d:2a:69:60:0d:17:87:15:03:a9:9c:8f:2c:ef:1d:4a: 0f:c4:31:d9:b7:ff:7f:7b:1c:88:f5:56:97:bf:b9:e2:a4:37: 42:28:48:8e:8b:76:27:9b:a9:e8:f3:72:ce:33:67:f2:4c:d2: ce:0f:1a:a2:a3:75:61:d1:a9:41:ff:7e:fb:92:8a:df:d8:17: ac:dd:c4:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4 NjFGMkE1MDMwHhcNMjUxMjIxMDAxOTE2WhcNMjUxMjI4MDAxOTE2WjAYMRYwFAYD VQQDDA02OTQ3M2QwNC1iMDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAkyDnBkB9jQYlzoolj7zE5hZLvg5TJMHc9ZlgfydxrQ2iKiBYEaskCOBhDc AQy5ok+JCMD2JS/86hqmZIFaTz6m+l6zvM28WWKAZumx2Pto9rXaL50KMipg5xgH JcY3lM9LVhDPgQqq8hS4gIe4WQ13rqN7MevN3x+G23yQMhlO296WKicLKosAi0yE UmO4p6B6X0xNEGwvO9sizJtkir/A8QOyMcXkcbe+Jk0TH7ut70flKhwGlMpWw7cB HdYU28n8VvPiGtcl77YYV8lVSQIuOevyxozTIt/P+7LupoBBBW5SlLMGPw4mdQna Doj28hR5407rd7VduoWy2EljcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN94uGQ1 vPDs6cLSuied8YoC0E/fMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1 REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzExQi81MDVDOTczOEY1REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VD NlllSFBZYW5ST0tHSHlwUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGKG3/O8yQUxGC9Y4CK+5SICKyxcmvZXOa1WXgBoR7sPSOeFVU0mhP XkTvewwQ7xqNTalZlka+9dJSE+WQ8RD5en6cnd6EDIKrrZ1HQrp3T3wGO8CvCGGc 5e57WnHpKDTolxaUbrVMQLJYnl9ZYBR4mmyliu6n5ReoN4V+zBq9Fs3+wy+I24+D eCixu1gVUL289Sf7yyuyI2ntX91f3VmTU+1ziYPwIUOVHN+aNdgCksNl220R6Y0q aWANF4cVA6mcjyzvHUoPxDHZt/9/exyI9VaXv7nipDdCKEiOi3Ynm6no83LOM2fy TNLODxqio3Vh0alB/377korf2Bes3cSt -----END CERTIFICATE-----Generated at Sun Dec 21 09:46:47 2025 by rpki-client