This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft File: QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json) Hash identifier: LEatymdVG4x/2PBEGr0Bbh8AK2gHPXHQZ0nKHv2Q23U= Subject key identifier: AF:AA:2D:D2:49:CB:3D:D9:53:C2:80:79:EA:05:50:34:F7:D5:63:9C Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 Certificate issuer: /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Certificate serial: 0435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft Manifest number: 042A Signing time: Mon 22 Dec 2025 23:24:37 +0000 Manifest this update: Mon 22 Dec 2025 23:24:37 +0000 Manifest next update: Mon 29 Dec 2025 23:24:37 +0000 Files and hashes: 1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: icMjQnYirntSkmtfQ88S5usXOdAvI4/yd1XUvDQ6ghs=) 2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: yc1nPimI0kUiUPjKIX7+rUbHKCs59csyBzZSSe87J8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Validity Not Before: Dec 22 23:24:37 2025 GMT Not After : Dec 29 23:24:37 2025 GMT Subject: CN=6949d335-7fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7d:18:2a:f2:47:0d:34:4a:9a:d3:8d:ea:cc: 38:7a:6b:88:af:f9:45:1f:b2:d6:4b:c2:88:53:eb: 89:be:88:aa:42:99:2c:6f:d2:16:c8:b7:48:ef:4a: 81:83:cd:87:8e:79:3f:e6:1d:15:39:e6:26:69:14: 9e:a5:f8:2b:06:a6:8f:3f:df:70:9a:b7:1c:71:48: 7f:9f:8b:dc:8e:b0:91:8d:c7:a8:42:85:01:68:78: 69:f8:3b:f9:2a:dc:6d:4e:41:ec:56:4b:17:ee:59: 2f:21:4a:98:5d:1e:0e:81:3b:97:b0:dc:e9:66:8c: 97:13:f3:00:44:09:26:f4:5c:b8:69:64:49:fc:1c: 83:4e:8f:22:f5:b9:c8:13:5c:1b:a1:a4:20:0a:66: 50:c3:69:e5:f9:52:b9:40:55:50:ea:f6:12:cd:68: d4:7f:da:06:ec:75:51:99:fd:1d:10:8a:f5:8e:30: 14:8a:03:d1:49:b4:d1:f7:90:16:97:d2:86:cf:86: c2:74:5b:70:33:3c:e2:1a:74:d5:24:e3:ee:13:a4: 89:68:a6:59:a5:57:56:8e:9a:f2:ad:db:d2:f0:8a: 9f:1d:ce:23:2c:11:42:e0:6c:f8:1e:5f:c9:90:ba: 45:77:1c:13:3a:ee:5d:f2:3a:6f:d6:a3:ab:18:ea: e6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AA:2D:D2:49:CB:3D:D9:53:C2:80:79:EA:05:50:34:F7:D5:63:9C X509v3 Authority Key Identifier: keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:03:72:fd:72:d0:e0:12:6b:ca:78:67:cb:96:fc:c0:f4:4a: 30:4b:c0:bc:6e:d8:71:ca:44:68:35:7f:b8:81:1d:8e:03:c9: 3b:87:8c:b0:b2:ef:fb:32:a4:de:d2:f2:39:fd:eb:79:9c:51: 0a:e7:6d:3e:86:4a:66:13:65:84:ab:94:49:ce:8d:a6:49:ef: 6d:58:54:97:33:35:bf:43:f2:40:5d:4a:f4:fa:75:2d:30:38: d5:84:01:ad:54:b3:17:78:55:c9:12:0f:e6:5c:ac:89:b6:e9: 95:85:ad:6a:b6:1e:04:ad:a6:de:c1:8b:5c:5f:10:43:86:0c: 6c:cb:9e:4a:68:64:98:c4:83:8d:99:e8:e1:b2:3d:db:e9:7e: 5d:87:c8:ee:fa:51:95:d1:f3:6b:84:d8:85:58:ed:07:75:07: e8:82:89:e5:8e:fd:af:2d:a5:56:08:cd:a3:f6:03:3d:dd:e5: b8:b7:42:4a:5f:c5:fd:6c:ed:cc:b8:3a:98:e7:02:01:aa:45: 0c:b3:cb:de:a1:b7:14:b6:4c:6d:4b:24:11:04:e9:f6:0b:05: 0f:b3:2a:3a:23:45:9d:ca:11:9f:3d:78:23:be:c2:21:f4:4a: c6:59:77:f8:86:43:8b:8f:0c:89:9f:89:e6:da:ce:1c:59:7e: 47:c2:be:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgwRkIxMTAvBgNVBAUTKDQwODVBRTEzNEI2MzM4QTEyNzY1NzI4M0VCQkMxNkMx MkYyMEI4NjIwHhcNMjUxMjIyMjMyNDM3WhcNMjUxMjI5MjMyNDM3WjAYMRYwFAYD VQQDDA02OTQ5ZDMzNS03ZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1n0YKvJHDTRKmtON6sw4emuIr/lFH7LWS8KIU+uJvoiqQpksb9IWyLdI70qB g82Hjnk/5h0VOeYmaRSepfgrBqaPP99wmrcccUh/n4vcjrCRjceoQoUBaHhp+Dv5 KtxtTkHsVksX7lkvIUqYXR4OgTuXsNzpZoyXE/MARAkm9Fy4aWRJ/ByDTo8i9bnI E1wboaQgCmZQw2nl+VK5QFVQ6vYSzWjUf9oG7HVRmf0dEIr1jjAUigPRSbTR95AW l9KGz4bCdFtwMzziGnTVJOPuE6SJaKZZpVdWjpryrdvS8IqfHc4jLBFC4Gz4Hl/J kLpFdxwTOu5d8jpv1qOrGOrmFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+qLdJJ yz3ZU8KAeeoFUDT31WOcMB8GA1UdIwQYMBaAFECFrhNLYzihJ2Vyg+u8FsEvILhi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODBGQi82MjhENTIwQzhG QjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9LRW5aWEtENjd3V3dTOGd1 R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FJV3VFMHRqT0tFblpYS0Q2N3dXd1M4Z3VHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODBGQi82MjhENTIwQzhGQjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9L RW5aWEtENjd3V3dTOGd1R0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPA3L9ctDgEmvKeGfLlvzA9EowS8C8bthxykRoNX+4gR2OA8k7h4yw su/7MqTe0vI5/et5nFEK520+hkpmE2WEq5RJzo2mSe9tWFSXMzW/Q/JAXUr0+nUt MDjVhAGtVLMXeFXJEg/mXKyJtumVha1qth4ErabewYtcXxBDhgxsy55KaGSYxION mejhsj3b6X5dh8ju+lGV0fNrhNiFWO0HdQfogonljv2vLaVWCM2j9gM93eW4t0JK X8X9bO3MuDqY5wIBqkUMs8veobcUtkxtSyQRBOn2CwUPsyo6I0WdyhGfPXgjvsIh 9ErGWXf4hkOLjwyJn4nm2s4cWX5Hwr7N -----END CERTIFICATE-----Generated at Tue Dec 23 08:42:42 2025 by rpki-client