This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft File: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft (raw, json) Hash identifier: ZW+RxO1+02BzkeU6prVTzgiKgEDm/23KSYhLq3LCJWM= Subject key identifier: 32:56:DF:2F:73:C6:25:48:18:86:67:F9:7E:75:D3:8F:34:27:07:FE Authority key identifier: 41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD Certificate issuer: /CN=A91E91BC/serialNumber=414FB6178869130F826E9E30C0B794084D9760DD Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft Manifest number: 0362 Signing time: Sun 21 Dec 2025 00:10:16 +0000 Manifest this update: Sun 21 Dec 2025 00:10:15 +0000 Manifest next update: Sun 28 Dec 2025 00:10:15 +0000 Files and hashes: 1: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl (hash: /TzUoybMNOiL0J2EXZF7ifzMDEIfDD6d3Yz3gNFvRxQ=) 2: 7BCC4B32E85C11EE9593933FC4F9AE02.roa (hash: C9cBIgp62dlijuyH/TsefWQ1spYTduwHvoUlA7V/520=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=414FB6178869130F826E9E30C0B794084D9760DD Validity Not Before: Dec 21 00:10:15 2025 GMT Not After : Dec 28 00:10:15 2025 GMT Subject: CN=69473ae7-c67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:2d:43:e7:ce:95:4e:fa:fb:26:f8:a1:4f: d4:98:05:ac:bc:ca:2a:e8:05:cb:4a:65:a6:c3:54: 15:61:74:2b:9d:8b:44:96:be:12:54:56:89:5f:fd: 5b:23:dd:eb:23:31:7b:d3:56:47:c7:8d:2d:8a:41: e9:2b:bd:1c:e6:d6:b7:e6:c7:5c:fe:cc:c1:36:b2: 93:67:db:b9:7f:dc:21:1a:31:0e:93:9e:af:cb:31: 4d:0b:3b:ee:bc:97:fc:44:4b:a0:d8:09:27:e6:84: 26:70:67:b8:de:ba:1f:65:2b:ef:fd:0a:68:6c:57: f0:a3:21:80:9d:e0:41:5d:60:31:ab:dc:2c:25:64: 93:11:3a:5d:0f:a0:21:82:a4:d4:82:dd:11:53:64: d0:9d:3a:61:d3:e2:da:44:f8:07:46:cf:75:c8:8a: f9:86:05:ea:f5:3f:8f:93:cc:2a:8d:41:69:33:f4: 61:68:f4:18:8a:0c:2e:ba:df:b2:d9:6b:5f:91:41: b3:8f:35:bb:e2:06:8e:18:96:32:db:ad:75:65:8c: 25:53:0a:cd:bf:37:e1:aa:ef:99:fd:51:d6:cc:ee: 04:a0:93:65:b0:9b:50:dc:a6:76:8e:23:89:71:5d: 62:09:c8:64:de:44:1c:6b:8c:da:c6:b2:5b:06:b2: 49:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:56:DF:2F:73:C6:25:48:18:86:67:F9:7E:75:D3:8F:34:27:07:FE X509v3 Authority Key Identifier: keyid:41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a5:24:77:89:09:6a:8f:66:76:13:fc:c0:ec:e3:36:5c:dc: d1:68:a4:92:8a:e4:c3:5a:e4:58:4d:7c:d9:46:6d:78:ea:bb: b9:25:85:93:68:65:8e:f6:32:e7:af:b9:40:c5:ba:75:65:10: 57:7b:00:8f:4f:9a:cc:2e:91:da:58:32:8b:3b:8a:8f:75:90: 0d:3b:af:58:97:7f:8e:ad:6b:7a:71:08:02:8a:9a:3b:52:c9: e5:c2:86:fa:36:c3:f5:17:e0:2c:45:b0:88:3d:02:64:6b:80: e7:1c:0e:b4:b2:66:4b:13:bc:f7:31:34:77:99:fd:a6:ae:49: 5a:c7:98:cc:ee:c2:2f:7a:ca:91:e2:b6:f9:30:f9:ef:48:0e: 82:aa:ca:7a:81:cd:df:95:b8:76:34:18:0e:13:4d:29:a9:b4: d4:28:39:80:58:dc:86:e9:a7:1b:19:1c:59:f7:dd:79:44:41: 4e:90:05:58:06:0a:e4:06:e8:db:96:15:6c:52:81:62:68:26: ee:82:72:7f:55:0a:c3:63:12:37:bf:00:29:43:e7:2f:91:16: 62:e4:da:e0:70:37:f7:2a:dc:d4:aa:2f:ba:92:54:90:4b:2b: 63:47:f3:42:12:00:16:18:d8:8a:90:22:5b:86:2a:54:f0:f6: 57:d9:0d:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDQxNEZCNjE3ODg2OTEzMEY4MjZFOUUzMEMwQjc5NDA4 NEQ5NzYwREQwHhcNMjUxMjIxMDAxMDE1WhcNMjUxMjI4MDAxMDE1WjAYMRYwFAYD VQQDDA02OTQ3M2FlNy1jNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVYtQ+fOlU76+yb4oU/UmAWsvMoq6AXLSmWmw1QVYXQrnYtElr4SVFaJX/1b I93rIzF701ZHx40tikHpK70c5ta35sdc/szBNrKTZ9u5f9whGjEOk56vyzFNCzvu vJf8REug2Akn5oQmcGe43rofZSvv/QpobFfwoyGAneBBXWAxq9wsJWSTETpdD6Ah gqTUgt0RU2TQnTph0+LaRPgHRs91yIr5hgXq9T+Pk8wqjUFpM/RhaPQYigwuut+y 2WtfkUGzjzW74gaOGJYy2611ZYwlUwrNvzfhqu+Z/VHWzO4EoJNlsJtQ3KZ2jiOJ cV1iCchk3kQca4zaxrJbBrJJTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJW3y9z xiVIGIZn+X510480Jwf+MB8GA1UdIwQYMBaAFEFPtheIaRMPgm6eMMC3lAhNl2Dd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BNEU2NzNDQURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9RVS0yRjRocEV3LUNicDR3d0xlVUNFMlhZ TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FVLTJGNGhwRXctQ2JwNHd3TGVVQ0UyWFlOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTFCQy9BNEU2NzNDQURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9RVS0yRjRocEV3 LUNicDR3d0xlVUNFMlhZTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUpSR3iQlqj2Z2E/zA7OM2XNzRaKSSiuTDWuRYTXzZRm146ru5JYWT aGWO9jLnr7lAxbp1ZRBXewCPT5rMLpHaWDKLO4qPdZANO69Yl3+OrWt6cQgCipo7 Usnlwob6NsP1F+AsRbCIPQJka4DnHA60smZLE7z3MTR3mf2mrklax5jM7sIvesqR 4rb5MPnvSA6Cqsp6gc3flbh2NBgOE00pqbTUKDmAWNyG6acbGRxZ9915REFOkAVY BgrkBujblhVsUoFiaCbugnJ/VQrDYxI3vwApQ+cvkRZi5NrgcDf3KtzUqi+6klSQ SytjR/NCEgAWGNiKkCJbhipU8PZX2Q3R -----END CERTIFICATE-----Generated at Sun Dec 21 16:16:49 2025 by rpki-client