This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json) Hash identifier: TSwgSJqRSqF+2Ly1om1nRf5XlPG2ZT7w9Hnl7mBwYJo= Subject key identifier: 77:DC:3A:A4:A5:71:F9:C5:60:21:79:12:92:5C:C2:FE:65:2A:10:82 Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Certificate serial: 0AEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft Manifest number: 0ACF Signing time: Thu 18 Dec 2025 19:06:08 +0000 Manifest this update: Thu 18 Dec 2025 19:06:07 +0000 Manifest next update: Thu 25 Dec 2025 19:06:07 +0000 Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: AkALyNVFDkYTmHl/F0nITrLkOcigkRk1hyCKBalaJZM=) 2: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: NCtWjC1uM4+Sx0ntIvyY3s6R1AF8S0ZUO+CcBcvcH7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2794 (0xaea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Validity Not Before: Dec 18 19:06:07 2025 GMT Not After : Dec 25 19:06:07 2025 GMT Subject: CN=694450a0-7860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3e:8a:9f:60:31:65:79:a2:b5:78:53:f6:a0: b8:2b:7a:26:c1:4b:7f:e7:11:a0:85:e1:9a:69:60: db:05:e3:46:86:26:b5:a5:a7:07:55:71:c3:e7:26: 88:c1:39:e1:a6:94:26:ef:09:72:d0:55:4f:72:f8: 75:37:a2:36:42:71:64:bd:32:c0:1a:97:bd:9c:6a: 1d:57:a8:25:94:a5:b2:15:50:f7:7a:e9:16:89:35: 98:11:e7:ad:3a:4c:03:83:c3:a8:ba:61:8d:4b:10: 36:1b:86:2b:ed:b7:f9:01:8a:ed:3c:b8:35:63:1f: d6:e8:06:1e:49:be:93:0e:05:df:1f:3b:4d:6a:5b: cf:ea:84:b2:9f:d4:5e:b6:bb:ad:00:d4:9d:a2:96: a1:c9:ab:8a:3c:ff:04:10:d8:91:cc:b5:84:59:91: 90:3e:04:7e:4e:4b:e5:e1:bb:37:f0:d3:80:90:77: 62:27:5b:44:f5:92:d8:67:b8:95:84:8f:93:e6:3e: fb:11:df:bc:46:6e:ed:d5:2d:82:1c:8e:68:fa:84: b1:04:07:3c:fd:c4:92:0b:4b:06:c0:e9:5d:b5:d1: 41:eb:7d:e0:35:de:cf:31:17:f6:40:30:2b:6d:cb: 4e:55:2f:28:40:92:cc:c4:7f:48:dd:fe:94:1f:7a: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DC:3A:A4:A5:71:F9:C5:60:21:79:12:92:5C:C2:FE:65:2A:10:82 X509v3 Authority Key Identifier: keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:99:55:f0:9e:46:c9:4f:a6:1a:e2:47:a6:1f:58:7b:e6:06: 19:9e:f1:04:ca:d6:dc:82:96:b5:43:71:8e:e2:af:59:50:e8: 25:4d:c6:cd:0b:39:94:d5:08:43:fb:01:aa:33:2d:6f:97:5d: 6e:f9:76:60:8a:53:de:a9:cb:ca:9f:ba:68:9c:62:15:6c:2c: 3b:9d:bf:5b:36:bc:f1:f1:96:3c:e6:9c:39:a1:4a:ba:dd:28: 6c:c1:f5:21:43:9f:84:7f:92:55:35:87:55:f7:1a:56:d2:c3: c4:77:79:00:b2:38:1e:c2:26:62:49:d8:f5:3c:40:98:6a:84: 72:b9:ab:3d:de:3d:98:4a:fc:5a:c3:e3:84:7c:4e:72:3e:c7: ed:51:eb:b0:e4:56:e0:29:0b:18:bd:8b:89:ec:e0:fd:79:4a: ca:81:b6:ac:d7:8b:a4:1f:23:c2:e2:7b:75:03:27:1b:24:a2: 70:84:38:0d:1d:18:70:ae:67:be:e9:eb:42:15:08:e7:c6:c7: 79:58:96:51:84:cc:2f:56:5d:e7:2a:64:73:93:c8:25:10:f2: e5:9d:a2:1b:8b:b3:f1:97:47:dc:31:2b:de:ea:f2:d5:e2:ce: 8e:33:bc:50:3b:10:48:fe:17:77:03:67:b0:98:ab:63:d0:49: 13:9d:98:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZCRkExMTAvBgNVBAUTKEFBNjJDNzlGRTE4NDM5NDEyQzVCMDJDRjRCRUI1NEFC MkVCQkUxODgwHhcNMjUxMjE4MTkwNjA3WhcNMjUxMjI1MTkwNjA3WjAYMRYwFAYD VQQDDA02OTQ0NTBhMC03ODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwj6Kn2AxZXmitXhT9qC4K3omwUt/5xGgheGaaWDbBeNGhia1pacHVXHD5yaI wTnhppQm7wly0FVPcvh1N6I2QnFkvTLAGpe9nGodV6gllKWyFVD3eukWiTWYEeet OkwDg8OoumGNSxA2G4Yr7bf5AYrtPLg1Yx/W6AYeSb6TDgXfHztNalvP6oSyn9Re trutANSdopahyauKPP8EENiRzLWEWZGQPgR+Tkvl4bs38NOAkHdiJ1tE9ZLYZ7iV hI+T5j77Ed+8Rm7t1S2CHI5o+oSxBAc8/cSSC0sGwOldtdFB633gNd7PMRf2QDAr bctOVS8oQJLMxH9I3f6UH3pJywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfcOqSl cfnFYCF5EpJcwv5lKhCCMB8GA1UdIwQYMBaAFKpix5/hhDlBLFsCz0vrVKsuu+GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkJGQS80MEQ0QjdFQzY2 MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9VRXNXd0xQUy10VXF5Njc0 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTEhuLUdFT1VFc1d3TFBTLXRVcXk2NzRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkJGQS80MEQ0QjdFQzY2MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9V RXNXd0xQUy10VXF5Njc0WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJmVXwnkbJT6Ya4kemH1h75gYZnvEEytbcgpa1Q3GO4q9ZUOglTcbN CzmU1QhD+wGqMy1vl11u+XZgilPeqcvKn7ponGIVbCw7nb9bNrzx8ZY85pw5oUq6 3ShswfUhQ5+Ef5JVNYdV9xpW0sPEd3kAsjgewiZiSdj1PECYaoRyuas93j2YSvxa w+OEfE5yPsftUeuw5FbgKQsYvYuJ7OD9eUrKgbas14ukHyPC4nt1AycbJKJwhDgN HRhwrme+6etCFQjnxsd5WJZRhMwvVl3nKmRzk8glEPLlnaIbi7Pxl0fcMSve6vLV 4s6OM7xQOxBI/hd3A2ewmKtj0EkTnZgF -----END CERTIFICATE-----Generated at Fri Dec 19 20:17:09 2025 by rpki-client