This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft File: qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft (raw, json) Hash identifier: wamfsFRWliy8ko8FdOto8+eWbTAaOx9mdjOCQr+sW80= Subject key identifier: 74:C6:8B:38:D3:F2:5A:8C:2F:1C:F1:90:AB:F5:05:86:68:24:4E:49 Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Certificate serial: 355A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft Manifest number: 351B Signing time: Thu 18 Dec 2025 14:24:27 +0000 Manifest this update: Thu 18 Dec 2025 14:24:27 +0000 Manifest next update: Thu 25 Dec 2025 14:24:27 +0000 Files and hashes: 1: qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl (hash: oquAdEacridlah6IxfIX8Qyd+tl/3FXU5iFweC38g8w=) 2: 3F0948F82D1011ECB745DB85C4F9AE02.roa (hash: 9JsagnY9rpoPlsVMt4iVRdULuA/96P9hw1zuWPkbXY4=) 3: D93EA75AEE5C11E995881B1BC4F9AE02.roa (hash: yyuVGHEHdjgOJV3OL5d2WHtm2S0Tu6t1QPxDqH/At3U=) 4: 2CDDCAB868AC11EDAA6C8F2AC4F9AE02.roa (hash: snUS5Nz9OXbIohiNncX/rLVlHKKNwvL/WKysUwbCRFM=) 5: 0D0AE5040AE711E89D0C5071C4F9AE02.roa (hash: 1QH0WR9EAexZONoxgrkCIP2BPHtzOEA7LLO//ildFDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13658 (0x355a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Validity Not Before: Dec 18 14:24:27 2025 GMT Not After : Dec 25 14:24:27 2025 GMT Subject: CN=69440e9b-fe7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:77:13:16:2c:f6:58:92:12:56:a1:18:1e:6b: b5:26:aa:18:7e:65:ac:59:c4:3b:01:34:fc:90:2a: 6b:82:74:f3:5a:e4:41:b4:e4:21:b2:45:31:bc:4f: 90:dd:d6:c2:bb:19:c7:1f:99:ac:e5:16:a8:ac:70: 4b:0b:78:da:22:09:53:6c:fa:e8:a2:91:12:6a:fb: 9f:95:06:a0:61:03:72:30:bc:f0:60:88:48:42:42: 0b:db:76:19:8e:a6:aa:90:5e:ee:2f:1d:d3:38:2f: dc:ed:97:36:5a:83:44:71:05:66:ac:4c:b4:c7:e9: e5:d0:87:08:a9:f6:9c:b5:bd:6a:1e:d8:c3:1b:6c: a2:3b:39:e7:14:5b:50:b8:48:c3:3b:79:c5:ab:db: 10:f8:bb:07:e4:63:3c:c4:32:b9:2a:ee:86:1b:36: 9d:49:c1:f2:b2:c7:ef:90:c5:e0:2f:bd:4b:a5:2a: 90:bc:ba:70:df:d7:25:1c:cd:1f:34:d5:2f:05:6c: 9c:f0:b0:0d:5d:53:21:f9:88:b0:53:0b:8a:5c:ed: 36:5c:91:dc:a1:d8:7e:1c:15:b8:f5:ec:e8:09:e6: bc:16:8e:75:38:41:b8:09:05:3b:14:2c:af:42:d2: e1:d8:d9:f1:a7:f5:00:80:fe:9f:2c:3b:ed:70:8b: 82:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C6:8B:38:D3:F2:5A:8C:2F:1C:F1:90:AB:F5:05:86:68:24:4E:49 X509v3 Authority Key Identifier: keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:6d:6a:de:c7:31:df:0b:f1:52:dd:ce:c2:49:bc:ad:f8:a4: 31:9f:0a:4b:55:d5:40:25:02:35:58:b6:6b:69:35:74:fb:74: 64:58:25:16:f0:2d:de:04:0a:c5:50:67:5e:db:39:c5:8f:66: d5:8e:95:06:55:8b:ed:40:3e:b1:53:fb:dd:69:68:c0:84:69: 8c:9f:5c:67:bc:ba:98:4f:91:d2:3a:83:94:5e:a3:1a:5e:ce: ec:a7:40:ae:cb:4b:da:c0:ef:b0:79:31:aa:1a:13:10:2f:33: 0f:a3:04:4f:27:1b:a3:f9:8b:38:ac:37:54:a9:f0:13:43:07: 31:87:a8:e9:50:77:55:ef:b6:1d:fb:9f:a0:72:c5:44:44:a8: d3:b2:8c:21:c4:6e:b1:49:f5:03:54:44:32:49:ad:7b:8e:ca: f3:5c:bc:9d:f2:b9:54:f5:21:36:b4:0e:cc:47:be:ae:22:84: c2:39:bb:c1:db:49:4d:b5:a0:ba:7b:5d:30:01:69:13:26:48: ac:5b:ef:b5:f2:5e:dc:83:2d:93:eb:85:c0:7a:ec:c7:93:36: 90:4f:dc:ed:04:fa:fb:0e:fd:69:ef:3c:4f:c8:59:94:12:46: 8d:34:d8:b4:31:53:26:7b:7f:d6:d6:ff:6b:fe:48:ab:a5:cc: 3d:c1:27:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNjMxMTAvBgNVBAUTKEE4OTdDMDRERTEyRjBBNkY1OUMxQUQxNTA5RjBCMjA5 RkE1NDM4QjMwHhcNMjUxMjE4MTQyNDI3WhcNMjUxMjI1MTQyNDI3WjAYMRYwFAYD VQQDDA02OTQ0MGU5Yi1mZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXcTFiz2WJISVqEYHmu1JqoYfmWsWcQ7ATT8kCprgnTzWuRBtOQhskUxvE+Q 3dbCuxnHH5ms5RaorHBLC3jaIglTbProopESavuflQagYQNyMLzwYIhIQkIL23YZ jqaqkF7uLx3TOC/c7Zc2WoNEcQVmrEy0x+nl0IcIqfactb1qHtjDG2yiOznnFFtQ uEjDO3nFq9sQ+LsH5GM8xDK5Ku6GGzadScHyssfvkMXgL71LpSqQvLpw39clHM0f NNUvBWyc8LANXVMh+YiwUwuKXO02XJHcodh+HBW49ezoCea8Fo51OEG4CQU7FCyv QtLh2Nnxp/UAgP6fLDvtcIuCnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTGizjT 8lqMLxzxkKv1BYZoJE5JMB8GA1UdIwQYMBaAFKiXwE3hLwpvWcGtFQnwsgn6VDiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM2My9GRjhCNEI2QzFE ODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNtOVp3YTBWQ2ZDeUNmcFVP TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKZkFUZUV2Q205WndhMFZDZkN5Q2ZwVU9MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzM2My9GRjhCNEI2QzFEODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNt OVp3YTBWQ2ZDeUNmcFVPTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBubWrexzHfC/FS3c7CSbyt+KQxnwpLVdVAJQI1WLZraTV0+3RkWCUW 8C3eBArFUGde2znFj2bVjpUGVYvtQD6xU/vdaWjAhGmMn1xnvLqYT5HSOoOUXqMa Xs7sp0Cuy0vawO+weTGqGhMQLzMPowRPJxuj+Ys4rDdUqfATQwcxh6jpUHdV77Yd +5+gcsVERKjTsowhxG6xSfUDVEQySa17jsrzXLyd8rlU9SE2tA7MR76uIoTCObvB 20lNtaC6e10wAWkTJkisW++18l7cgy2T64XAeuzHkzaQT9ztBPr7Dv1p7zxPyFmU EkaNNNi0MVMme3/W1v9r/kirpcw9wSdc -----END CERTIFICATE-----Generated at Sat Dec 20 10:06:12 2025 by rpki-client