This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft File: QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json) Hash identifier: X5YQsCA0l0VRdCx8E7pWMaNBvLkp/xMozqccrhe5HYQ= Subject key identifier: 2E:57:41:FD:0A:A6:52:8C:F4:E0:B4:48:B0:77:F4:85:CF:B0:02:98 Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C Certificate issuer: /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Certificate serial: 04AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft Manifest number: 04A8 Signing time: Thu 18 Dec 2025 23:17:39 +0000 Manifest this update: Thu 18 Dec 2025 23:17:39 +0000 Manifest next update: Thu 25 Dec 2025 23:17:39 +0000 Files and hashes: 1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: 6QZECwtZhoK8EAya/SoyLh43pOJvwVZoXddeReZZIeU=) 2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: aXuFAPx3sTT3XGxZkToSNXJ/vwo2rNiJs7Ikunvy7v4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1196 (0x4ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED6B5, serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Validity Not Before: Dec 18 23:17:39 2025 GMT Not After : Dec 25 23:17:39 2025 GMT Subject: CN=69448b93-70d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:69:dc:fe:7b:25:38:e9:40:b0:f6:ed:96:ba: 9e:72:4a:b5:b1:95:19:6b:4e:e6:f0:31:1f:7f:c1: 22:73:62:80:66:02:54:47:ce:91:cb:19:78:4e:f6: 0b:2b:fd:21:fb:86:ad:b2:ea:f4:06:d0:2d:1b:62: 3f:0b:69:09:d0:2e:31:df:cb:fa:20:f3:0a:e4:0e: 9d:b0:44:58:5b:71:b4:2e:91:61:6d:6b:34:d1:2f: 34:40:ed:f2:2f:93:7e:69:75:aa:07:bc:6c:a0:b2: 37:ae:8a:cf:22:3c:0f:54:10:15:5a:4a:c3:c0:70: 56:ec:bf:f9:80:d4:e2:4d:1b:1f:3f:75:42:14:c9: df:91:82:84:73:c1:b2:e0:db:a5:8d:07:73:42:3f: b1:d9:62:88:10:3e:d2:54:e4:77:3c:a9:ac:a6:de: 54:c2:12:e9:8d:a6:09:7d:1f:05:4b:f8:9d:6d:2b: de:8a:a2:7e:ba:b2:66:c4:1a:44:42:44:5d:89:f6: 50:1f:50:5a:b3:f6:dd:1d:c6:9a:eb:c8:7d:54:af: 68:6a:7e:90:9f:30:67:9d:d5:66:ec:98:be:24:bd: 37:ac:04:5e:8c:0d:9e:9e:78:bd:c1:de:d1:c3:75: dd:ce:0b:aa:2f:b8:ea:cc:6a:7d:97:a1:70:75:8d: 6e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:57:41:FD:0A:A6:52:8C:F4:E0:B4:48:B0:77:F4:85:CF:B0:02:98 X509v3 Authority Key Identifier: keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:db:0c:32:d0:54:75:24:1f:b0:6d:e8:57:f2:21:69:74:8a: ed:ea:fc:42:3d:9b:37:b3:23:2d:b7:38:f3:54:79:38:66:a3: 9f:f6:58:2d:5e:d2:23:0e:71:49:4f:a2:1f:ee:67:2d:4a:95: 78:ed:07:e1:a5:ec:9c:0d:cd:1c:ac:35:5e:75:c0:da:30:b7: 6d:dd:bc:de:a7:3d:12:9e:fd:14:a3:6a:6e:26:2d:70:8a:58: f9:0f:9e:4e:ca:64:48:69:93:5e:14:73:f9:71:2f:29:c5:22: fe:03:3a:01:72:c2:36:06:d5:ef:e7:09:cb:b2:bc:7d:22:57: 58:01:ac:6c:49:aa:78:44:2a:c3:ea:88:2d:3e:a6:6d:4c:af: e2:5e:5c:f2:e2:08:99:18:63:cb:93:77:25:33:77:0f:16:b7: 32:72:e8:6e:e8:45:b5:9c:da:33:f7:a4:cf:8f:71:38:5f:1e: f8:01:25:33:e4:2e:06:ad:b2:4f:96:93:1a:b0:17:49:f9:f0: 76:07:58:7e:a1:16:16:77:f5:34:ac:73:92:1e:cc:7a:4d:72: 77:97:34:2a:b2:c4:7b:23:80:d8:69:d0:8a:b8:01:80:44:50: b0:04:cb:c0:2a:dd:23:58:82:67:65:3f:02:2b:fd:2d:2a:6d: 02:e1:43:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ2QjUxMTAvBgNVBAUTKDQxMTdENzZDM0VDMDRCNjIxMTMzNDg1MEE1Q0Q2RUEz MDU1MzUwNUMwHhcNMjUxMjE4MjMxNzM5WhcNMjUxMjI1MjMxNzM5WjAYMRYwFAYD VQQDDA02OTQ0OGI5My03MGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2nc/nslOOlAsPbtlrqeckq1sZUZa07m8DEff8Eic2KAZgJUR86Ryxl4TvYL K/0h+4atsur0BtAtG2I/C2kJ0C4x38v6IPMK5A6dsERYW3G0LpFhbWs00S80QO3y L5N+aXWqB7xsoLI3rorPIjwPVBAVWkrDwHBW7L/5gNTiTRsfP3VCFMnfkYKEc8Gy 4NuljQdzQj+x2WKIED7SVOR3PKmspt5UwhLpjaYJfR8FS/idbSveiqJ+urJmxBpE QkRdifZQH1Bas/bdHcaa68h9VK9oan6QnzBnndVm7Ji+JL03rARejA2enni9wd7R w3XdzguqL7jqzGp9l6FwdY1uJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5XQf0K plKM9OC0SLB39IXPsAKYMB8GA1UdIwQYMBaAFEEX12w+wEtiETNIUKXNbqMFU1Bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDZCNS9FRjQ2OUJGQzU5 NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMySVJNMGhRcGMxdW93VlRV RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSZlhiRDdBUzJJUk0waFFwYzF1b3dWVFVGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDZCNS9FRjQ2OUJGQzU5NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMy SVJNMGhRcGMxdW93VlRVRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS2wwy0FR1JB+wbehX8iFpdIrt6vxCPZs3syMttzjzVHk4ZqOf9lgt XtIjDnFJT6If7mctSpV47QfhpeycDc0crDVedcDaMLdt3bzepz0Snv0Uo2puJi1w ilj5D55OymRIaZNeFHP5cS8pxSL+AzoBcsI2BtXv5wnLsrx9IldYAaxsSap4RCrD 6ogtPqZtTK/iXlzy4giZGGPLk3clM3cPFrcycuhu6EW1nNoz96TPj3E4Xx74ASUz 5C4GrbJPlpMasBdJ+fB2B1h+oRYWd/U0rHOSHsx6TXJ3lzQqssR7I4DYadCKuAGA RFCwBMvAKt0jWIJnZT8CK/0tKm0C4UMy -----END CERTIFICATE-----Generated at Fri Dec 19 19:02:58 2025 by rpki-client