This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json) Hash identifier: YhqlypnOZ4YFcN3CwiMXIbpdik9nnZQEFkLyCect89g= Subject key identifier: 9B:2C:86:E5:28:F0:C2:4E:23:28:25:05:1E:8E:37:D9:8E:58:4A:67 Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft Manifest number: 01F7 Signing time: Tue 23 Dec 2025 01:32:58 +0000 Manifest this update: Tue 23 Dec 2025 01:32:58 +0000 Manifest next update: Tue 30 Dec 2025 01:32:58 +0000 Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: T4CGcXCZ9RVg5YX9Bwf3tKWe4yAPRzEA/d0rHq0eGlw=) 2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: kSko0IDUfwmI+eYoz/fG8AvnBwnpICm84IEH409J6Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Validity Not Before: Dec 23 01:32:58 2025 GMT Not After : Dec 30 01:32:58 2025 GMT Subject: CN=6949f14a-0e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b9:6d:c6:d4:9a:72:d8:56:11:4c:35:77:09: 8f:6d:e1:7e:6b:68:05:b3:38:e2:88:ef:b9:93:4d: d9:34:78:dc:12:ee:b0:e8:cc:ea:dd:59:07:b4:e5: 84:5f:0c:d0:4a:bb:c1:35:3b:5c:d8:5e:c0:68:a8: c5:0a:02:b2:88:9f:eb:5e:7b:b9:71:2e:66:ad:9c: ad:4d:ad:68:bb:bd:b6:95:e4:53:33:b5:5e:cb:4c: c9:43:91:07:70:7f:1c:93:ad:74:96:98:2f:7e:54: 73:bf:83:ca:9a:03:8b:68:e9:be:0e:50:e3:82:64: 01:68:40:27:8b:f4:e7:35:ed:07:59:6c:65:08:de: bb:1f:47:f7:c7:0f:39:6d:0d:b0:5b:7b:8a:af:d7: c1:1a:fe:0d:0f:69:bd:ea:0e:e1:94:58:88:59:28: 33:95:3c:50:cc:f0:ef:9a:32:65:d6:7b:4b:74:a1: 77:96:c5:ed:21:37:a8:3c:78:83:bf:03:0e:29:95: 6d:cc:80:66:0d:96:fd:ae:f4:56:d0:a3:fc:1f:f7: 75:d8:31:a4:2c:c7:90:19:fa:d9:fa:c0:63:3b:66: 74:db:a4:46:c2:df:4e:71:74:db:7e:c6:7a:0e:6e: 0c:fc:b6:40:4a:35:a7:a8:24:c2:74:08:2b:b9:6f: 36:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2C:86:E5:28:F0:C2:4E:23:28:25:05:1E:8E:37:D9:8E:58:4A:67 X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:64:3e:b6:ec:07:5d:44:b3:9e:e8:9f:11:3d:ac:eb:04:29: 1d:53:19:17:b9:f9:d3:b3:6d:ae:78:92:20:06:60:ff:c7:d4: 23:02:92:8c:3e:c0:9c:10:67:9a:dd:3e:ac:a3:16:49:25:a5: 88:45:62:02:a5:d3:eb:9e:60:64:e3:57:19:9c:55:f0:79:e0: c7:a3:24:91:50:0a:dc:31:7d:4e:00:4b:c3:32:31:ca:9e:2f: 39:16:3e:37:55:c8:44:72:6f:d8:0e:41:ca:27:e6:28:24:43: 08:07:0c:7b:0f:f0:2e:e0:62:8d:e7:49:be:1e:fe:de:14:46: 78:4a:84:46:43:14:47:3d:05:d0:7b:f5:98:cc:7f:18:17:6a: dc:3a:32:06:40:4e:ef:30:3b:a8:fc:66:54:29:35:a5:43:fc: 87:6b:69:06:ec:5a:97:91:d6:28:4e:c5:49:72:82:76:67:bf: 71:48:49:82:94:65:01:c4:4f:b6:00:40:c0:71:b8:f9:6d:59: ea:0e:ce:a0:28:4f:ce:f9:7f:66:0c:d5:57:db:05:51:52:8c: 72:48:c4:91:22:56:0a:78:8d:fe:ce:56:b6:10:9c:35:18:95: 3d:4f:0d:b7:5d:74:58:2e:bf:44:f3:4d:4f:24:62:37:d7:2d: f5:4e:31:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjUxMjIzMDEzMjU4WhcNMjUxMjMwMDEzMjU4WjAYMRYwFAYD VQQDDA02OTQ5ZjE0YS0wZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLltxtSacthWEUw1dwmPbeF+a2gFszjiiO+5k03ZNHjcEu6w6Mzq3VkHtOWE XwzQSrvBNTtc2F7AaKjFCgKyiJ/rXnu5cS5mrZytTa1ou722leRTM7Vey0zJQ5EH cH8ck610lpgvflRzv4PKmgOLaOm+DlDjgmQBaEAni/TnNe0HWWxlCN67H0f3xw85 bQ2wW3uKr9fBGv4ND2m96g7hlFiIWSgzlTxQzPDvmjJl1ntLdKF3lsXtITeoPHiD vwMOKZVtzIBmDZb9rvRW0KP8H/d12DGkLMeQGfrZ+sBjO2Z026RGwt9OcXTbfsZ6 Dm4M/LZASjWnqCTCdAgruW820wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsshuUo 8MJOIyglBR6ON9mOWEpnMB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUM0OS83QTdGMTk3MkRGRjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdI ZExNTEdiNWM3MVBVY1pDeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOZD627AddRLOe6J8RPazrBCkdUxkXufnTs22ueJIgBmD/x9QjApKM PsCcEGea3T6soxZJJaWIRWICpdPrnmBk41cZnFXweeDHoySRUArcMX1OAEvDMjHK ni85Fj43VchEcm/YDkHKJ+YoJEMIBwx7D/Au4GKN50m+Hv7eFEZ4SoRGQxRHPQXQ e/WYzH8YF2rcOjIGQE7vMDuo/GZUKTWlQ/yHa2kG7FqXkdYoTsVJcoJ2Z79xSEmC lGUBxE+2AEDAcbj5bVnqDs6gKE/O+X9mDNVX2wVRUoxySMSRIlYKeI3+zla2EJw1 GJU9Tw23XXRYLr9E801PJGI31y31TjGp -----END CERTIFICATE-----Generated at Wed Dec 24 14:08:25 2025 by rpki-client