This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft File: qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json) Hash identifier: vrGTGjmBPBij9z+Am0Kc0P7O3Shw8jhq6jMYZ/eYJHw= Subject key identifier: 3B:AD:92:DC:15:8A:29:E2:B4:4C:9F:9F:18:A1:D0:E1:B4:6C:C4:8A Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C Certificate issuer: /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Certificate serial: 0656 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft Manifest number: 0650 Signing time: Tue 16 Dec 2025 22:05:14 +0000 Manifest this update: Tue 16 Dec 2025 22:05:14 +0000 Manifest next update: Tue 23 Dec 2025 22:05:14 +0000 Files and hashes: 1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: VBLWL74dXKTmB2gKUcLqu5tZ9b06hYAZ5D/nHy0WLtA=) 2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: ttRZLKoMySXPeabXatArFdOxpzq9cRtpWwNwu6sfYas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 22:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127A2, serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Validity Not Before: Dec 16 22:05:14 2025 GMT Not After : Dec 23 22:05:14 2025 GMT Subject: CN=6941d79a-a88e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:dc:39:03:1e:ea:3f:d6:ec:f3:4f:cb:9c:ae: f9:0d:f5:a7:b9:ab:d6:0d:f5:9c:37:21:16:2d:32: f0:90:a6:d1:a9:1b:0a:2e:45:79:40:d4:c1:7d:bf: a2:64:4a:f0:10:87:80:ba:36:1b:23:70:03:8d:90: 79:26:00:51:27:5f:e2:e4:fe:6f:da:51:e5:ec:04: 99:7e:52:5c:27:20:4a:b0:50:6a:c9:09:ec:1e:0d: dc:2c:82:f8:4f:c8:25:1a:01:c5:e2:d7:ca:b6:a2: d6:45:06:73:d1:55:9c:4f:f4:2c:8e:6d:db:f5:ec: e0:0b:14:a0:3b:20:ab:92:80:1d:1c:5c:85:77:20: c4:69:3e:8e:4c:d4:f5:38:c6:51:54:9b:3e:1b:19: 44:c9:cc:44:82:46:94:ee:17:4c:5a:44:a3:19:2c: b8:68:fd:2d:86:53:65:1e:5c:8e:f1:39:64:41:9e: 74:31:5b:d8:63:f8:b0:6f:35:df:40:80:90:6d:58: 88:10:8c:0b:26:45:a2:7b:a6:67:34:33:21:09:0b: b6:14:28:ed:9b:1c:d6:3c:f3:78:a7:0d:8b:aa:e9: a2:3a:b8:76:a2:d1:61:ad:06:0c:0b:47:13:7a:cc: ec:b9:e9:7a:b6:86:1b:20:78:71:0d:aa:f5:98:57: 88:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AD:92:DC:15:8A:29:E2:B4:4C:9F:9F:18:A1:D0:E1:B4:6C:C4:8A X509v3 Authority Key Identifier: keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:56:c0:58:ea:4d:55:f4:50:0a:a2:e6:e5:7d:47:b9:95:39: 85:82:ee:cc:61:af:e5:28:63:e4:89:18:c7:05:50:a5:d0:2c: 06:5a:70:c5:f5:e8:18:d7:81:d0:87:b2:53:c2:db:3a:06:9c: a7:35:8c:18:f9:96:f2:11:a1:f6:97:1d:ed:c2:e3:d9:3c:7c: 48:8c:09:a8:35:3f:21:16:71:89:39:80:d2:40:78:9d:48:2e: ac:b6:87:60:67:36:72:7c:44:ef:48:e8:de:83:62:ee:95:81: 90:54:53:3b:25:12:42:d2:0d:bb:5b:1d:29:95:f8:ea:0a:8e: 83:d3:b3:0e:ba:fe:8b:f2:11:b4:47:bf:53:39:ce:54:a0:b7: aa:eb:6f:53:ad:c2:75:00:38:32:ae:7c:be:9c:04:e7:0a:ab: 95:54:4b:86:4b:b4:20:cd:7b:a6:48:d6:0c:03:39:0b:89:92: 88:99:d2:b2:c1:fd:c6:67:42:60:80:07:0f:61:53:98:50:5b: 15:aa:94:89:f3:e3:72:90:ac:fc:5c:be:6d:fc:1b:65:f7:c0: 59:52:43:66:48:89:10:6c:c0:20:0b:45:40:19:4b:df:d9:b8: 90:3b:aa:56:c1:aa:c9:d8:86:3c:59:68:d8:0e:9b:b6:8e:8e: 99:46:aa:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QTIxMTAvBgNVBAUTKEE5MjFDRjg4RDhDODlFMEJBQ0Q0RUUxODUzOEMzM0Iy NzhBOTU5MkMwHhcNMjUxMjE2MjIwNTE0WhcNMjUxMjIzMjIwNTE0WjAYMRYwFAYD VQQDDA02OTQxZDc5YS1hODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9dw5Ax7qP9bs80/LnK75DfWnuavWDfWcNyEWLTLwkKbRqRsKLkV5QNTBfb+i ZErwEIeAujYbI3ADjZB5JgBRJ1/i5P5v2lHl7ASZflJcJyBKsFBqyQnsHg3cLIL4 T8glGgHF4tfKtqLWRQZz0VWcT/Qsjm3b9ezgCxSgOyCrkoAdHFyFdyDEaT6OTNT1 OMZRVJs+GxlEycxEgkaU7hdMWkSjGSy4aP0thlNlHlyO8TlkQZ50MVvYY/iwbzXf QICQbViIEIwLJkWie6ZnNDMhCQu2FCjtmxzWPPN4pw2LqumiOrh2otFhrQYMC0cT eszsuel6toYbIHhxDar1mFeIUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDutktwV iinitEyfnxih0OG0bMSKMB8GA1UdIwQYMBaAFKkhz4jYyJ4LrNTuGFOMM7J4qVks MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdBMi9EMUNENTQ1OEIx Q0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5ndXMxTzRZVTR3enNuaXBX U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTSFBpTmpJbmd1czFPNFlVNHd6c25pcFdTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdBMi9EMUNENTQ1OEIxQ0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5n dXMxTzRZVTR3enNuaXBXU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbVsBY6k1V9FAKoublfUe5lTmFgu7MYa/lKGPkiRjHBVCl0CwGWnDF 9egY14HQh7JTwts6BpynNYwY+ZbyEaH2lx3twuPZPHxIjAmoNT8hFnGJOYDSQHid SC6stodgZzZyfETvSOjeg2LulYGQVFM7JRJC0g27Wx0plfjqCo6D07MOuv6L8hG0 R79TOc5UoLeq629TrcJ1ADgyrny+nATnCquVVEuGS7QgzXumSNYMAzkLiZKImdKy wf3GZ0JggAcPYVOYUFsVqpSJ8+NykKz8XL5t/Btl98BZUkNmSIkQbMAgC0VAGUvf 2biQO6pWwarJ2IY8WWjYDpu2jo6ZRqq4 -----END CERTIFICATE-----Generated at Thu Dec 18 21:06:37 2025 by rpki-client