This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft File: QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft (raw, json) Hash identifier: Sn8WpLZT6BRJZ18rOY7GzJx2BD+8+25unWOW6y8AdCY= Subject key identifier: DB:BE:CC:69:5E:7E:53:C2:14:04:47:78:15:3D:8E:31:81:2E:93:26 Authority key identifier: 41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C Certificate issuer: /CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C Certificate serial: 041C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft Manifest number: 0417 Signing time: Sun 28 Dec 2025 23:29:39 +0000 Manifest this update: Sun 28 Dec 2025 23:29:39 +0000 Manifest next update: Sun 04 Jan 2026 23:29:39 +0000 Files and hashes: 1: QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl (hash: yOzj3LozYuCRIjb3Q8r6JNxHqve3s17M/kP+8APRMuU=) 2: FFDA736894CB11ECA827746DC4F9AE02.roa (hash: pj2LnVj5JMKgQoW/CIO4SmTNgNuQfByzQiOUhiNM/dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 23:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC8C9, serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C Validity Not Before: Dec 28 23:29:39 2025 GMT Not After : Jan 4 23:29:39 2026 GMT Subject: CN=6951bd63-9e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:37:0a:a2:21:66:43:04:12:20:e2:88:34:1e: 84:4b:b5:66:e3:c3:26:7f:bf:8d:d7:42:2f:5c:12: 8c:3a:e5:0f:d7:72:cc:85:b4:b4:a5:f6:38:ac:70: c8:7e:dd:d9:e5:36:27:7e:a7:66:75:ee:df:51:80: 9b:06:37:7c:4e:7f:09:d6:0d:aa:00:70:f6:67:39: 55:94:9c:e7:7d:0a:56:8f:fd:ff:d8:4b:c3:cc:69: 94:c1:56:7f:17:f5:61:09:56:ff:fc:64:fe:50:b1: b4:3c:83:56:e2:71:67:18:c8:4d:75:d7:25:07:7e: 5f:10:80:31:b9:1a:b2:a5:89:f8:df:c5:bc:53:65: 33:62:d8:56:30:d7:f9:46:c2:e1:0a:89:9e:0e:32: 6d:58:d8:01:20:78:8a:73:58:41:ec:03:5c:36:5b: 30:48:60:b2:87:5d:2e:e4:3d:ae:45:50:62:65:ef: 65:75:1e:43:e2:7c:05:99:43:ab:e1:b7:14:c8:f6: 30:74:4c:ed:61:47:ab:69:49:fa:e4:f8:79:77:56: f7:f9:21:00:80:35:af:6b:7b:1e:be:d8:40:df:95: 3d:5d:09:a5:bb:22:16:15:e3:94:59:12:bd:0e:dc: b2:0c:e6:55:7f:7e:31:ff:02:c4:c0:ad:be:6c:a2: 9b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BE:CC:69:5E:7E:53:C2:14:04:47:78:15:3D:8E:31:81:2E:93:26 X509v3 Authority Key Identifier: keyid:41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:cc:97:76:fa:12:43:9f:00:d1:af:d0:14:67:70:46:b3:8c: 27:1b:7c:77:63:18:90:76:3c:31:a9:f5:5b:d5:72:49:ec:73: 1e:02:92:8f:5a:af:1a:de:15:17:0c:da:5a:97:b2:ab:16:68: 1d:a6:6a:5e:68:2a:96:f9:d3:b0:a4:c1:78:a2:08:51:93:4d: e4:ee:88:4e:4a:39:53:0e:36:1c:ab:09:64:cd:1d:cd:95:92: e7:cc:d8:8f:a2:4f:cf:cb:19:a9:e5:05:e8:11:7d:77:dd:3c: d5:f8:8e:e0:7a:36:ad:cf:9f:5f:30:9d:a4:73:f0:34:6f:b6: 4f:54:7c:fc:96:ac:a5:bc:54:90:3a:bb:8d:40:37:a0:55:81: 19:cb:48:37:45:7d:41:eb:dc:ef:33:62:b5:32:18:61:cf:1e: 0c:41:12:a2:1c:7e:c0:d9:8c:48:4e:89:ec:65:be:7a:2d:b9: ee:68:ba:11:e6:b8:7d:a1:92:f6:bd:b3:14:ba:27:d5:fc:76: 71:93:b4:83:21:64:e8:ed:53:27:ea:79:f4:f6:45:85:fc:9f: fe:2b:8b:f6:04:4f:cc:14:93:b0:dd:9a:b9:04:48:88:87:65: 84:7c:61:16:41:36:3b:60:40:f4:83:dc:10:48:db:a6:45:b5: 32:3f:95:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM4QzkxMTAvBgNVBAUTKDQxMjNBQzJFQzA2OUQyRUYyNzIwMUY0REJDQUFDNkMx OTEyMTkwMkMwHhcNMjUxMjI4MjMyOTM5WhcNMjYwMTA0MjMyOTM5WjAYMRYwFAYD VQQDDA02OTUxYmQ2My05ZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TcKoiFmQwQSIOKINB6ES7Vm48Mmf7+N10IvXBKMOuUP13LMhbS0pfY4rHDI ft3Z5TYnfqdmde7fUYCbBjd8Tn8J1g2qAHD2ZzlVlJznfQpWj/3/2EvDzGmUwVZ/ F/VhCVb//GT+ULG0PINW4nFnGMhNddclB35fEIAxuRqypYn438W8U2UzYthWMNf5 RsLhComeDjJtWNgBIHiKc1hB7ANcNlswSGCyh10u5D2uRVBiZe9ldR5D4nwFmUOr 4bcUyPYwdEztYUeraUn65Ph5d1b3+SEAgDWva3sevthA35U9XQmluyIWFeOUWRK9 DtyyDOZVf34x/wLEwK2+bKKbrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNu+zGle flPCFARHeBU9jjGBLpMmMB8GA1UdIwQYMBaAFEEjrC7AadLvJyAfTbyqxsGRIZAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzhDOS83MzhEREZDNDk0 QzgxMUVDOTVDQjk3NjVDNEY5QUUwMi9RU09zTHNCcDB1OG5JQjlOdktyR3daRWhr Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTT3NMc0JwMHU4bklCOU52S3JHd1pFaGtDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzhDOS83MzhEREZDNDk0QzgxMUVDOTVDQjk3NjVDNEY5QUUwMi9RU09zTHNCcDB1 OG5JQjlOdktyR3daRWhrQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0zJd2+hJDnwDRr9AUZ3BGs4wnG3x3YxiQdjwxqfVb1XJJ7HMeApKP Wq8a3hUXDNpal7KrFmgdpmpeaCqW+dOwpMF4oghRk03k7ohOSjlTDjYcqwlkzR3N lZLnzNiPok/Pyxmp5QXoEX133TzV+I7gejatz59fMJ2kc/A0b7ZPVHz8lqylvFSQ OruNQDegVYEZy0g3RX1B69zvM2K1Mhhhzx4MQRKiHH7A2YxITonsZb56LbnuaLoR 5rh9oZL2vbMUuifV/HZxk7SDIWTo7VMn6nn09kWF/J/+K4v2BE/MFJOw3Zq5BEiI h2WEfGEWQTY7YED0g9wQSNumRbUyP5Ua -----END CERTIFICATE-----Generated at Mon Dec 29 01:50:29 2025 by rpki-client