This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft File: QSPpAOai7I_ptdcDt5KA7yFAfIE.mft (raw, json) Hash identifier: Wj0Q7QkW+6dTagvPHhxXxbdquJofpOQSPduR5OKAqb4= Subject key identifier: 9D:E1:A8:7F:B5:DB:F2:BE:75:29:06:A0:5F:97:D1:2E:BD:93:95:D2 Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft Manifest number: 0213 Signing time: Sun 21 Dec 2025 01:44:20 +0000 Manifest this update: Sun 21 Dec 2025 01:44:19 +0000 Manifest next update: Sun 28 Dec 2025 01:44:19 +0000 Files and hashes: 1: QSPpAOai7I_ptdcDt5KA7yFAfIE.crl (hash: StvMJAio6m3rCDt5Pqc9M29ktDEuO0VT8VgCQ1jiFc4=) 2: 2B8EF9AA083911F0A051CE72C4F9AE02.roa (hash: NUJLc0QRL6TCVIjI3d7tAKvp2NahPW0NGI52wQUI1t4=) 3: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (hash: xYipp+ZcmQFz/ogxlth1vHSd96eYxW/drt1nbOwk66E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Validity Not Before: Dec 21 01:44:19 2025 GMT Not After : Dec 28 01:44:19 2025 GMT Subject: CN=694750f4-e653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:cd:17:3d:c8:2a:c0:b0:d2:59:81:7f:fd: 85:2c:99:bb:e7:c7:9c:a8:58:85:40:cd:ba:35:17: f7:1c:c1:91:05:b4:00:d2:c9:d7:92:10:6f:65:60: 66:d1:e1:2a:0c:ed:65:24:28:e0:a3:9e:03:20:04: 75:70:3f:ab:0f:ae:67:e1:34:2e:15:2d:7c:16:fb: a2:24:85:13:09:9b:b3:d8:be:f3:27:ed:de:1d:9f: c7:e5:2b:40:19:f4:ce:cb:37:f1:d4:eb:27:c9:41: 1f:1f:18:76:7b:bc:55:a8:2f:cf:43:ca:1c:1a:bf: 62:a9:2c:8d:15:e1:f8:c8:7d:27:1f:57:73:fe:df: 08:2c:9c:6e:0e:65:35:ac:09:55:60:5d:38:20:c4: 71:10:92:62:8c:f9:74:1d:79:9c:c5:c0:0e:5f:7e: b9:c7:98:ee:48:44:0c:16:b3:50:74:90:6e:4b:57: 8c:f9:a0:e9:35:e0:7e:a9:0c:ba:e2:62:58:ad:8a: 8d:95:46:0e:98:95:7c:7a:9f:69:ff:d5:d3:b6:af: b0:8e:f1:52:69:39:e4:29:53:6a:d8:b2:73:b4:d8: ad:93:79:67:ee:d8:72:68:7d:02:63:09:3a:2b:4a: 99:d1:16:e8:50:ff:7d:43:5f:ec:61:a9:b6:7e:0d: 57:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E1:A8:7F:B5:DB:F2:BE:75:29:06:A0:5F:97:D1:2E:BD:93:95:D2 X509v3 Authority Key Identifier: keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4b:99:08:bd:da:e2:a4:40:a7:4c:5e:98:85:67:14:bd:7d: 35:53:a2:b6:58:28:eb:0a:f6:f6:75:08:98:82:88:f2:43:44: 70:b8:62:ac:49:d0:54:8b:a0:26:22:33:df:85:6c:c2:1b:85: 8c:c7:6c:30:e0:a2:17:af:ac:b8:20:69:9f:e6:03:15:f2:e5: d8:a3:b4:54:c7:c5:db:89:b2:62:b8:16:3e:4d:3f:9b:7d:60: b9:17:50:40:e6:58:7e:3e:27:33:e7:0d:d7:77:01:bc:ad:86: 30:6d:19:eb:81:b0:c4:8d:ae:96:13:b7:b5:6a:4b:69:dc:5f: 35:82:65:8a:f9:e3:68:60:1f:1d:a2:f4:c0:c2:60:61:2f:32: 9a:72:2f:f4:00:fd:de:5d:e3:16:d9:b0:5e:a0:d5:76:64:8d: f2:d5:9e:20:bf:ed:08:00:33:1e:22:45:d5:94:c0:da:ba:9d: 0a:c4:b8:df:a5:a2:e8:f7:da:e9:7c:de:bd:b3:24:83:c2:bf: 25:44:5d:af:88:7f:3d:c8:ed:b6:be:9e:81:10:6e:32:9f:f3: f8:73:d6:a2:75:9a:59:55:4f:9a:c9:37:89:66:79:08:dc:5b: fd:40:93:f0:27:dd:6a:a1:b5:0d:54:4d:1f:86:21:bc:27:6f: 07:7e:d7:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG MjE0MDdDODEwHhcNMjUxMjIxMDE0NDE5WhcNMjUxMjI4MDE0NDE5WjAYMRYwFAYD VQQDDA02OTQ3NTBmNC1lNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsPNFz3IKsCw0lmBf/2FLJm758ecqFiFQM26NRf3HMGRBbQA0snXkhBvZWBm 0eEqDO1lJCjgo54DIAR1cD+rD65n4TQuFS18FvuiJIUTCZuz2L7zJ+3eHZ/H5StA GfTOyzfx1OsnyUEfHxh2e7xVqC/PQ8ocGr9iqSyNFeH4yH0nH1dz/t8ILJxuDmU1 rAlVYF04IMRxEJJijPl0HXmcxcAOX365x5juSEQMFrNQdJBuS1eM+aDpNeB+qQy6 4mJYrYqNlUYOmJV8ep9p/9XTtq+wjvFSaTnkKVNq2LJztNitk3ln7thyaH0CYwk6 K0qZ0RboUP99Q1/sYam2fg1XlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3hqH+1 2/K+dSkGoF+X0S69k5XSMB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2 N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0IyRS8wRjU1QzY5NkQ2N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJ X3B0ZGNEdDVLQTd5RkFmSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMS5kIvdripECnTF6YhWcUvX01U6K2WCjrCvb2dQiYgojyQ0RwuGKs SdBUi6AmIjPfhWzCG4WMx2ww4KIXr6y4IGmf5gMV8uXYo7RUx8XbibJiuBY+TT+b fWC5F1BA5lh+Picz5w3XdwG8rYYwbRnrgbDEja6WE7e1aktp3F81gmWK+eNoYB8d ovTAwmBhLzKaci/0AP3eXeMW2bBeoNV2ZI3y1Z4gv+0IADMeIkXVlMDaup0KxLjf paLo99rpfN69sySDwr8lRF2viH89yO22vp6BEG4yn/P4c9aidZpZVU+ayTeJZnkI 3Fv9QJPwJ91qobUNVE0fhiG8J28Hftff -----END CERTIFICATE-----Generated at Sun Dec 21 11:26:49 2025 by rpki-client