This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: U8mm1Vh0UMHgidKB/2pJ0c3AXgQOjBbtusSkfqTgugE= Subject key identifier: CF:A4:DF:84:FE:D4:6E:42:CB:8A:64:46:EE:76:7F:9B:C4:6F:59:96 Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 04A3 Signing time: Thu 18 Dec 2025 23:19:29 +0000 Manifest this update: Thu 18 Dec 2025 23:19:28 +0000 Manifest next update: Thu 25 Dec 2025 23:19:28 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: mZ4qON8KNE4BuKiwQP9IunLbHYQxnhCbWpbu2gQk9dM=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: h3D5F/TKilSwFXiWulZfSNZqxOFtLKLv7bWrJluucIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: Dec 18 23:19:28 2025 GMT Not After : Dec 25 23:19:28 2025 GMT Subject: CN=69448c00-4fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:04:d6:54:19:6f:92:7a:a1:c1:93:d1:19: 5c:d3:29:e1:21:50:c7:c9:0e:dc:ad:95:5f:06:a7: 2d:af:a7:37:21:99:be:bf:90:4e:a4:78:01:76:85: d3:1b:a5:26:c7:e7:ce:1a:7c:23:27:83:db:fd:4e: 6b:15:8d:1c:dd:bd:9e:aa:79:3c:7f:17:64:ec:dc: ff:1e:55:ae:44:04:d9:aa:99:03:31:63:dc:bb:13: 31:2f:0e:0f:2d:9f:bf:9b:ca:8c:74:2e:90:af:44: a7:6c:09:5b:c1:c0:82:9a:66:b0:aa:2e:0a:34:1f: f7:b9:06:a9:e4:b6:b0:bc:31:0d:52:b4:57:4f:b8: 64:2a:0c:85:22:95:ab:5b:13:c9:44:15:37:fc:9f: 5b:60:15:21:63:83:be:b0:ea:dd:aa:2c:50:ff:81: c8:f5:9b:df:0d:5a:23:cb:90:86:fd:de:10:69:c7: ea:b6:fc:40:a7:4e:fb:b2:6d:3a:f6:19:d2:d9:a1: fb:7d:2a:0d:7b:36:25:d8:f1:f1:ac:53:21:d2:e6: 8d:24:e4:87:d3:b1:17:fe:ca:b3:44:dd:70:ff:18: a3:37:97:fc:48:88:a4:20:3a:27:21:61:30:0b:45: 83:08:14:1d:7f:60:d7:48:aa:4c:1d:21:f3:03:b3: c6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A4:DF:84:FE:D4:6E:42:CB:8A:64:46:EE:76:7F:9B:C4:6F:59:96 X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a7:7c:6a:bb:a3:b3:d2:ac:64:d3:f4:63:8f:52:d9:68:5a: ce:fb:b5:f6:1f:c8:cb:33:36:54:6e:c5:07:28:f7:9a:a8:2a: 9f:c9:d6:67:fe:9c:1e:1e:6f:fe:22:7d:7b:1e:f3:71:46:df: 9f:19:8d:3e:a4:7f:a7:a7:76:18:d0:81:e3:45:3a:12:8d:6f: 8c:3a:96:d3:db:55:aa:e0:7e:36:9d:0f:b7:ff:36:8c:56:39: a6:ce:1b:5a:84:dd:1c:bc:84:9d:8a:1b:ba:78:9f:3d:f7:b2: 67:00:42:f6:c1:8a:67:0a:9b:01:ea:78:87:f1:7a:be:db:c3: 64:f1:23:40:42:7b:17:79:47:12:69:99:fc:32:a0:80:0c:b6: 85:3a:8a:c4:fc:2f:72:29:7f:1d:70:d1:a9:69:d9:05:90:1f: 09:e8:be:35:35:01:6d:5d:4c:99:32:1a:d9:8a:9d:32:de:ec: d6:26:0b:fb:b5:a1:46:b0:15:74:29:44:70:ad:bd:92:74:26: 77:4b:2a:9e:84:fd:ac:f4:5f:46:f3:13:3c:cc:79:a6:98:f4: 01:ae:b5:d9:a8:c1:ed:e9:3f:3c:a4:89:e4:86:6a:a2:05:56: 29:08:37:94:3b:15:3f:24:5b:5f:3c:29:6b:f6:1f:e2:b0:e5: 6e:7c:ce:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjUxMjE4MjMxOTI4WhcNMjUxMjI1MjMxOTI4WjAYMRYwFAYD VQQDDA02OTQ0OGMwMC00ZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtx8E1lQZb5J6ocGT0Rlc0ynhIVDHyQ7crZVfBqctr6c3IZm+v5BOpHgBdoXT G6Umx+fOGnwjJ4Pb/U5rFY0c3b2eqnk8fxdk7Nz/HlWuRATZqpkDMWPcuxMxLw4P LZ+/m8qMdC6Qr0SnbAlbwcCCmmawqi4KNB/3uQap5LawvDENUrRXT7hkKgyFIpWr WxPJRBU3/J9bYBUhY4O+sOrdqixQ/4HI9ZvfDVojy5CG/d4QacfqtvxAp077sm06 9hnS2aH7fSoNezYl2PHxrFMh0uaNJOSH07EX/sqzRN1w/xijN5f8SIikIDonIWEw C0WDCBQdf2DXSKpMHSHzA7PGFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+k34T+ 1G5Cy4pkRu52f5vEb1mWMB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1p3xqu6Oz0qxk0/Rjj1LZaFrO+7X2H8jLMzZUbsUHKPeaqCqfydZn /pweHm/+In17HvNxRt+fGY0+pH+np3YY0IHjRToSjW+MOpbT21Wq4H42nQ+3/zaM VjmmzhtahN0cvISdihu6eJ8997JnAEL2wYpnCpsB6niH8Xq+28Nk8SNAQnsXeUcS aZn8MqCADLaFOorE/C9yKX8dcNGpadkFkB8J6L41NQFtXUyZMhrZip0y3uzWJgv7 taFGsBV0KURwrb2SdCZ3SyqehP2s9F9G8xM8zHmmmPQBrrXZqMHt6T88pInkhmqi BVYpCDeUOxU/JFtfPClr9h/isOVufM5z -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:14 2025 by rpki-client