This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json) Hash identifier: 3K1cKcrf34qd6E8Uso/lv27rZVmpndoS77MTsHGF7H4= Subject key identifier: 08:6D:D5:EA:24:4B:16:19:2C:2F:84:2B:45:38:92:7E:37:79:2D:7A Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 0645 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft Manifest number: 0639 Signing time: Thu 18 Dec 2025 22:07:39 +0000 Manifest this update: Thu 18 Dec 2025 22:07:39 +0000 Manifest next update: Thu 25 Dec 2025 22:07:39 +0000 Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: ZBavvlYe2d8O28AWw8AXbPIO6tFy7t0rRmVqgYinXjQ=) 2: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: QV6x7t1GNDY1enVK8NGqWm1qI1rxu4buJOSstDWJdT0=) 3: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: aPH84FEP6ZN7kMoON0X2LyO7xuFcySH9Oy6iOBdgxYk=) 4: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: taOVx7nk0yJP7nOzPIUbOsf7C8xITqEbR1CM6ndaNjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Validity Not Before: Dec 18 22:07:39 2025 GMT Not After : Dec 25 22:07:39 2025 GMT Subject: CN=69447b2b-33d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:8b:92:3a:e7:9d:34:c9:e9:7c:d1:10:a3: c7:82:c6:1a:02:eb:06:00:0d:28:c3:4e:18:33:af: e8:a7:9b:4c:f2:65:4d:62:b7:b6:d5:39:37:ab:86: f0:00:02:be:53:bc:9b:3a:d5:dd:13:cf:90:ce:43: 4f:62:c0:04:d6:d1:ff:76:91:86:32:99:fe:f6:66: 2a:b3:7a:45:1f:08:76:37:37:9d:62:88:39:88:22: da:13:46:b2:1c:f1:f5:07:a5:57:d4:68:5d:71:c8: 66:63:e2:f6:5a:cd:e2:aa:30:b3:7b:4b:97:1c:4e: 77:c7:90:ba:1d:8a:ed:3b:d2:1b:8b:4f:21:0b:d8: 2b:63:28:14:e5:6c:78:eb:f5:30:1c:5b:08:42:aa: 82:17:25:8a:1a:e5:31:ef:8f:4f:31:3d:ef:06:5a: b0:3a:4d:72:e8:bf:d6:df:52:50:2e:fd:bb:f9:9a: f7:29:ad:31:d4:1b:d0:b5:ac:1d:af:50:4c:d2:df: e7:8e:3e:16:35:da:79:4c:c0:43:39:b0:96:96:d4: 0b:5f:82:8a:4e:50:53:27:e3:48:57:16:76:c2:3e: 2a:e1:e1:ba:24:71:82:57:d5:ff:95:8f:9f:aa:a0: 71:83:80:4c:e9:0e:71:4b:db:8b:6a:f7:af:ca:a2: e4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6D:D5:EA:24:4B:16:19:2C:2F:84:2B:45:38:92:7E:37:79:2D:7A X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:d3:8e:0c:66:8c:02:9e:1a:c0:0e:5f:18:60:14:1e:b4:31: bb:b6:77:a9:f7:40:dd:7c:d5:31:b8:67:21:40:cf:be:d4:c0: 06:f8:cc:0e:1d:2a:cd:5a:63:00:0b:6e:6b:06:d9:22:1b:90: 9a:d3:73:e5:0e:c0:a9:2f:aa:23:73:66:be:b7:6a:8b:dc:e3: 8c:b7:8c:23:36:a9:82:bd:22:5c:c8:fb:d1:f3:7b:01:ad:75: b2:9a:e7:09:9b:6c:02:0b:ac:02:6e:70:58:db:2a:68:bc:f6: e6:2c:6b:96:c9:b2:94:b8:ff:2d:c3:d7:89:fa:50:35:05:17: 2a:0c:3b:54:af:ba:85:e3:76:39:36:a0:07:32:95:48:ac:34: 64:ad:5e:c4:97:0b:69:54:ae:f4:02:4b:d7:ae:ad:41:37:1b: d0:35:48:48:69:05:49:56:84:4d:fd:9f:9c:39:93:83:d0:e6: 4e:25:01:00:d7:e7:3d:19:19:48:9a:00:c1:07:1c:11:04:53: 7d:ca:62:52:ae:04:90:cc:53:f0:48:6b:07:a5:fa:d4:42:8f: be:1f:c0:db:98:66:9a:1b:30:e0:9a:ca:8f:7d:c7:1b:b8:fd: 58:23:ec:81:a4:0d:1c:20:bf:93:f1:c5:b0:1d:19:d2:6a:c4: 53:cc:ac:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjUxMjE4MjIwNzM5WhcNMjUxMjI1MjIwNzM5WjAYMRYwFAYD VQQDDA02OTQ0N2IyYi0zM2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmaiLkjrnnTTJ6XzREKPHgsYaAusGAA0ow04YM6/op5tM8mVNYre21Tk3q4bw AAK+U7ybOtXdE8+QzkNPYsAE1tH/dpGGMpn+9mYqs3pFHwh2NzedYog5iCLaE0ay HPH1B6VX1GhdcchmY+L2Ws3iqjCze0uXHE53x5C6HYrtO9Ibi08hC9grYygU5Wx4 6/UwHFsIQqqCFyWKGuUx749PMT3vBlqwOk1y6L/W31JQLv27+Zr3Ka0x1BvQtawd r1BM0t/njj4WNdp5TMBDObCWltQLX4KKTlBTJ+NIVxZ2wj4q4eG6JHGCV9X/lY+f qqBxg4BM6Q5xS9uLavevyqLk6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAht1eok SxYZLC+EK0U4kn43eS16MB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3 TnJnUHhuV1RUY0xrYk9EMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw044MZowCnhrADl8YYBQetDG7tnep90DdfNUxuGchQM++1MAG+MwO HSrNWmMAC25rBtkiG5Ca03PlDsCpL6ojc2a+t2qL3OOMt4wjNqmCvSJcyPvR83sB rXWymucJm2wCC6wCbnBY2ypovPbmLGuWybKUuP8tw9eJ+lA1BRcqDDtUr7qF43Y5 NqAHMpVIrDRkrV7ElwtpVK70AkvXrq1BNxvQNUhIaQVJVoRN/Z+cOZOD0OZOJQEA 1+c9GRlImgDBBxwRBFN9ymJSrgSQzFPwSGsHpfrUQo++H8DbmGaaGzDgmsqPfccb uP1YI+yBpA0cIL+T8cWwHRnSasRTzKyD -----END CERTIFICATE-----Generated at Fri Dec 19 18:57:42 2025 by rpki-client