This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft File: QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json) Hash identifier: NR/eGU3XKmAWK6FCCYuoJL1XW+2PYMGA2qkRjdVVM2c= Subject key identifier: 20:C6:04:DD:22:60:E9:EF:72:CA:8B:B2:36:51:2D:56:C8:3C:F0:07 Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Certificate serial: 07A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft Manifest number: 07A0 Signing time: Mon 22 Dec 2025 20:46:47 +0000 Manifest this update: Mon 22 Dec 2025 20:46:46 +0000 Manifest next update: Mon 29 Dec 2025 20:46:46 +0000 Files and hashes: 1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: rzjbiE2VkCowu0Hcy5acEiFyxCBO4CMtGxifglCgScE=) 2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: xDFL83BDJofXsoqgs4IapCDppXS9oRsh4Talz2QouY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1961 (0x7a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Validity Not Before: Dec 22 20:46:46 2025 GMT Not After : Dec 29 20:46:46 2025 GMT Subject: CN=6949ae36-2779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1c:86:21:b6:8b:4f:db:a8:1a:a0:a4:f4:38: 05:fa:87:9c:3c:a2:7e:87:cd:c6:a0:07:78:fe:e5: 69:a4:b1:da:9f:9b:f9:2a:38:72:f4:11:27:21:42: 9b:8a:b2:32:45:6d:e7:43:43:2d:71:25:c2:bc:49: 06:28:09:f7:45:22:7d:13:12:19:da:c1:09:db:a1: d3:27:50:eb:49:71:84:eb:1c:6d:7a:7f:8d:46:d1: 48:23:38:a8:e3:24:89:7f:b6:65:5c:0c:1e:f6:87: f9:2a:b7:68:fd:08:1f:40:e7:ec:60:ac:f8:04:4f: 2f:70:4e:18:61:d5:97:e0:82:80:bf:c2:3b:54:8d: 3a:bb:e9:d3:f3:1d:b4:fd:b5:5a:42:9e:47:80:c8: df:25:fd:74:34:ce:ff:12:ea:4d:1b:f3:da:11:3d: 93:71:46:ea:9a:5f:47:11:a9:0f:11:5e:f9:c4:c8: e1:50:cb:8f:bf:7d:48:f9:2d:cd:66:f6:7e:41:77: fc:7b:1f:77:31:68:c3:24:45:83:9d:f0:71:2e:7b: 64:67:d1:b1:da:e5:76:02:35:4e:60:5e:c9:94:71: e7:8b:22:c9:46:0f:e0:fd:d3:da:1f:68:59:8f:fe: a2:d0:f4:22:7b:93:a1:45:9b:88:50:63:ba:8f:8f: bf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C6:04:DD:22:60:E9:EF:72:CA:8B:B2:36:51:2D:56:C8:3C:F0:07 X509v3 Authority Key Identifier: keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c3:a7:0c:d2:48:34:65:03:be:ec:d4:10:e0:b7:38:b2:d5: d8:6d:65:29:10:20:47:d7:4e:40:a8:3c:17:c6:25:80:4f:dd: 68:78:df:8a:74:6f:8c:9c:f5:7b:3c:10:24:0d:f5:1b:e3:34: 50:d8:bc:93:5d:1f:33:3f:4d:a7:ea:03:01:39:ec:c7:80:b8: be:f5:c5:c1:1d:18:6c:d3:ce:a3:a8:9f:72:08:52:ef:70:4b: 2f:44:fc:7b:21:15:61:cb:c8:38:ac:4c:24:eb:30:f1:2f:2d: c3:3c:1f:45:7b:58:98:22:21:22:cd:59:f5:38:f7:97:83:46: d0:3c:d6:07:14:e1:99:0f:21:b2:d4:a6:72:66:df:b1:0b:88: 86:59:d6:18:d2:4d:cf:44:54:c7:c8:8e:3f:f3:69:e5:da:50: 73:ea:68:91:18:9c:6c:5f:0d:ea:4a:c6:d6:45:d0:8f:8c:8b: 65:e1:fe:c5:09:42:8b:8c:86:21:71:7c:fe:32:e4:db:c5:15: 69:68:d5:83:3a:9d:08:a4:42:7b:1e:d8:7f:1e:26:8f:d6:97: 21:4e:e1:7e:87:65:e2:aa:45:7b:83:83:3e:19:6c:4e:a3:92: c3:af:b4:4c:ad:21:11:10:62:58:22:1f:e0:59:7a:5a:a1:83: b8:0f:e7:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCNzMxMTAvBgNVBAUTKDQyQ0I0Q0YwMjFGNkYzRkMwQzgxQzRGREYxQzk3RDc0 MjEwMDMxN0IwHhcNMjUxMjIyMjA0NjQ2WhcNMjUxMjI5MjA0NjQ2WjAYMRYwFAYD VQQDDA02OTQ5YWUzNi0yNzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphyGIbaLT9uoGqCk9DgF+oecPKJ+h83GoAd4/uVppLHan5v5Kjhy9BEnIUKb irIyRW3nQ0MtcSXCvEkGKAn3RSJ9ExIZ2sEJ26HTJ1DrSXGE6xxten+NRtFIIzio 4ySJf7ZlXAwe9of5Krdo/QgfQOfsYKz4BE8vcE4YYdWX4IKAv8I7VI06u+nT8x20 /bVaQp5HgMjfJf10NM7/EupNG/PaET2TcUbqml9HEakPEV75xMjhUMuPv31I+S3N ZvZ+QXf8ex93MWjDJEWDnfBxLntkZ9Gx2uV2AjVOYF7JlHHniyLJRg/g/dPaH2hZ j/6i0PQie5OhRZuIUGO6j4+/dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDGBN0i YOnvcsqLsjZRLVbIPPAHMB8GA1UdIwQYMBaAFELLTPAh9vP8DIHE/fHJfXQhADF7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I3My9CQTYzNTk4MjJG RTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhfd01nY1Q5OGNsOWRDRUFN WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzdE04Q0gyOF93TWdjVDk4Y2w5ZENFQU1Ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0I3My9CQTYzNTk4MjJGRTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhf d01nY1Q5OGNsOWRDRUFNWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfw6cM0kg0ZQO+7NQQ4Lc4stXYbWUpECBH105AqDwXxiWAT91oeN+K dG+MnPV7PBAkDfUb4zRQ2LyTXR8zP02n6gMBOezHgLi+9cXBHRhs086jqJ9yCFLv cEsvRPx7IRVhy8g4rEwk6zDxLy3DPB9Fe1iYIiEizVn1OPeXg0bQPNYHFOGZDyGy 1KZyZt+xC4iGWdYY0k3PRFTHyI4/82nl2lBz6miRGJxsXw3qSsbWRdCPjItl4f7F CUKLjIYhcXz+MuTbxRVpaNWDOp0IpEJ7Hth/HiaP1pchTuF+h2XiqkV7g4M+GWxO o5LDr7RMrSEREGJYIh/gWXpaoYO4D+fn -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:05 2025 by rpki-client