This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft File: QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft (raw, json) Hash identifier: pQ88yQJxtmx1eEEMjKhF8DfXree3X/mBnMN3gUSZarE= Subject key identifier: B0:BF:11:7F:26:AD:BE:3D:83:69:88:9B:ED:1E:7F:6B:B3:7E:91:06 Authority key identifier: 43:04:CA:33:00:46:11:72:4D:A5:C3:35:8C:F3:B6:80:61:CA:4A:8A Certificate issuer: /CN=A91FFA9E/serialNumber=4304CA33004611724DA5C3358CF3B68061CA4A8A Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft Manifest number: 06 Signing time: Fri 19 Dec 2025 07:00:19 +0000 Manifest this update: Fri 19 Dec 2025 07:00:18 +0000 Manifest next update: Fri 26 Dec 2025 07:00:18 +0000 Files and hashes: 1: QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl (hash: dKBNQHD/KODg3ZA9GMAdkLc3N6t62uX272tHK/Ghnf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA9E, serialNumber=4304CA33004611724DA5C3358CF3B68061CA4A8A Validity Not Before: Dec 19 07:00:18 2025 GMT Not After : Dec 26 07:00:18 2025 GMT Subject: CN=6944f802-1342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:a1:47:ec:05:a6:bb:8c:5a:f3:b3:04:34: fa:d4:46:ed:17:9d:1e:8b:a6:c2:9c:f2:e9:ee:52: fd:22:b5:45:68:e7:85:72:1c:d1:f0:f4:b9:55:03: d7:97:4d:4d:f3:b4:7b:bb:b6:88:dc:67:4b:42:69: fe:91:c3:3a:e7:b2:3b:fa:6a:57:18:90:f3:42:d2: 1f:ff:40:c9:fe:eb:09:3b:d9:40:f5:26:15:8d:2b: 24:0d:c4:7a:e5:21:14:91:16:61:66:f6:55:56:72: a4:b5:25:bb:64:55:e0:71:57:e4:c4:fc:96:3f:0d: 5e:11:fd:e7:17:7d:a6:17:6c:e0:1a:b3:31:56:1d: 63:00:24:7a:59:4d:ff:2f:87:2d:d4:b2:06:e6:f9: 3d:00:db:40:08:9d:f1:71:db:3b:81:16:9a:9a:c2: ed:dd:66:fc:fa:3f:6a:5d:2a:4d:3d:55:4d:6f:61: f0:22:d8:0e:45:c4:88:ee:c2:e2:49:28:4b:3b:a5: d7:be:01:ae:40:eb:97:ff:27:b1:06:a5:df:82:27: 84:6f:c5:e7:e6:c5:61:dc:11:18:ad:90:95:57:7a: 03:f1:e2:95:cf:e1:dc:32:e5:ed:b7:09:58:39:14: f0:a1:dd:13:37:7f:66:9a:d1:73:e4:3f:b1:d4:ab: e1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BF:11:7F:26:AD:BE:3D:83:69:88:9B:ED:1E:7F:6B:B3:7E:91:06 X509v3 Authority Key Identifier: keyid:43:04:CA:33:00:46:11:72:4D:A5:C3:35:8C:F3:B6:80:61:CA:4A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d9:48:64:28:3c:d8:89:52:7a:f0:3f:93:73:5f:bc:3a:24: 27:ae:32:43:f5:05:d1:6d:64:69:3e:ae:e8:8f:a4:cb:e9:87: 43:6a:2a:6d:b6:ea:50:b2:25:20:31:16:ef:3f:8e:41:ba:7f: 87:72:e4:70:ea:75:40:57:a1:67:30:9e:3b:49:ff:52:56:0b: 12:99:75:d0:69:06:a6:cc:0e:87:bc:05:7d:2d:14:98:7d:c5: e9:d0:10:d8:4c:9e:53:ec:1b:c7:ce:ad:0e:e2:c5:f9:11:fd: 90:cd:1c:7d:f2:3b:a3:b0:00:e3:bd:9b:58:0a:f4:4f:80:fd: d5:0c:63:c4:17:1b:80:a8:76:21:73:c6:24:1a:1e:d4:18:8c: 51:f9:d0:b7:82:9f:a1:1a:22:ea:23:36:cc:89:ac:eb:cc:1f: 49:a8:14:f8:d2:47:96:bc:23:b6:b7:95:35:31:03:cd:19:fa: e9:5a:ae:21:07:52:e1:01:5d:4a:18:f6:1b:41:ac:28:d9:8a: 6f:68:54:07:19:00:4f:1f:99:4b:1c:c3:94:ae:0e:70:64:cf: de:55:3e:f8:58:ab:63:f2:5f:7a:34:7f:3a:82:72:82:cb:8e: 08:c6:61:c5:5c:3b:ff:72:21:8d:88:c4:23:aa:b3:0f:cd:ae: 52:e9:9d:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkE5RTExMC8GA1UEBRMoNDMwNENBMzMwMDQ2MTE3MjREQTVDMzM1OENGM0I2ODA2 MUNBNEE4QTAeFw0yNTEyMTkwNzAwMThaFw0yNTEyMjYwNzAwMThaMBgxFjAUBgNV BAMMDTY5NDRmODAyLTEzNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAsqFH7AWmu4xa87MENPrURu0XnR6LpsKc8unuUv0itUVo54VyHNHw9LlVA9eX TU3ztHu7tojcZ0tCaf6Rwzrnsjv6alcYkPNC0h//QMn+6wk72UD1JhWNKyQNxHrl IRSRFmFm9lVWcqS1JbtkVeBxV+TE/JY/DV4R/ecXfaYXbOAaszFWHWMAJHpZTf8v hy3Usgbm+T0A20AInfFx2zuBFpqawu3dZvz6P2pdKk09VU1vYfAi2A5FxIjuwuJJ KEs7pde+Aa5A65f/J7EGpd+CJ4RvxefmxWHcERitkJVXegPx4pXP4dwy5e23CVg5 FPCh3RM3f2aa0XPkP7HUq+FbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsL8Rfyat vj2DaYib7R5/a7N+kQYwHwYDVR0jBBgwFoAUQwTKMwBGEXJNpcM1jPO2gGHKSoow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGQTlFLzhGMTIyODAyRDU5 RTExRjA4MkY2NEYxN0M0RjlBRTAyL1F3VEtNd0JHRVhKTnBjTTFqUE8yZ0dIS1Nv by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXdUS013QkdFWEpOcGNNMWpQTzJnR0hLU29vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG QTlFLzhGMTIyODAyRDU5RTExRjA4MkY2NEYxN0M0RjlBRTAyL1F3VEtNd0JHRVhK TnBjTTFqUE8yZ0dIS1Nvby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABXZSGQoPNiJUnrwP5NzX7w6JCeuMkP1BdFtZGk+ruiPpMvph0NqKm22 6lCyJSAxFu8/jkG6f4dy5HDqdUBXoWcwnjtJ/1JWCxKZddBpBqbMDoe8BX0tFJh9 xenQENhMnlPsG8fOrQ7ixfkR/ZDNHH3yO6OwAOO9m1gK9E+A/dUMY8QXG4CodiFz xiQaHtQYjFH50LeCn6EaIuojNsyJrOvMH0moFPjSR5a8I7a3lTUxA80Z+ulariEH UuEBXUoY9htBrCjZim9oVAcZAE8fmUscw5SuDnBkz95VPvhYq2PyX3o0fzqCcoLL jgjGYcVcO/9yIY2IxCOqsw/NrlLpnZ0= -----END CERTIFICATE-----Generated at Fri Dec 19 19:07:28 2025 by rpki-client