This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft (raw, json) Hash identifier: las1NuVAMytbaT+po/+T0gA0FHKV1JWJZcmeXml/gMU= Subject key identifier: 46:85:E5:DE:BF:2B:B7:C5:B8:6F:94:AE:2C:99:25:B5:66:05:63:33 Authority key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E Certificate issuer: /CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Certificate serial: 34EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft Manifest number: 34EF Signing time: Wed 24 Dec 2025 14:45:43 +0000 Manifest this update: Wed 24 Dec 2025 14:45:43 +0000 Manifest next update: Wed 31 Dec 2025 14:45:43 +0000 Files and hashes: 1: QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl (hash: 9WxbuTYg3UOEd5Qw/NrpdNGeAQVuDYspgsnxmIFXjvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 14:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Validity Not Before: Dec 24 14:45:43 2025 GMT Not After : Dec 31 14:45:43 2025 GMT Subject: CN=694bfc97-9727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4a:82:c5:48:ef:c1:ff:f6:65:eb:4e:fd:e5: 3e:58:c1:9e:ee:aa:d2:b7:06:01:61:35:af:df:57: e1:ac:9a:5a:2d:5c:9c:98:8b:42:2b:a2:8f:d0:ac: 2c:fc:57:7d:fe:a8:29:ea:69:f0:44:e2:f4:5f:38: ef:fd:f9:1f:d6:51:8d:df:66:34:0f:52:5a:d5:68: 8c:11:24:af:ac:c2:09:17:13:57:e8:2a:40:35:c2: f6:b9:9a:89:78:37:fa:a5:79:50:65:d4:e3:b4:70: 57:cc:df:61:3a:7d:19:c2:d5:8d:64:b8:30:17:dd: 19:fe:35:f4:22:39:d0:d1:8d:ee:05:21:da:33:ad: 65:34:19:b1:c8:07:ef:bd:5e:1d:bf:54:dd:d8:02: 61:ca:5b:5a:9e:69:6b:f4:2a:a0:d0:0d:5f:ce:ce: c3:1b:b5:ca:4e:b9:24:b4:23:b6:34:c6:fa:6d:fb: e3:80:69:d8:ca:b1:80:2d:b8:3d:ca:b8:86:1d:3d: 6b:ba:a8:d6:83:3c:f3:fc:d6:c7:4a:36:37:13:40: 33:01:1b:75:67:02:1e:85:21:37:49:a6:a2:df:5e: b0:7e:00:34:f9:c4:c9:98:03:91:bf:e1:58:08:d5: cb:54:b0:6e:d5:9e:16:60:bb:1c:c2:01:96:dd:f7: 7b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:85:E5:DE:BF:2B:B7:C5:B8:6F:94:AE:2C:99:25:B5:66:05:63:33 X509v3 Authority Key Identifier: keyid:41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b9:85:1a:66:8a:f7:5d:9b:22:0f:bb:ed:fc:b2:e1:8e:2b: 6d:e4:1b:cb:fa:cc:9e:81:c5:48:85:a6:cc:18:5b:eb:38:f5: 87:bb:7f:b9:b7:db:45:98:b1:4e:29:41:09:04:24:96:c4:5a: 47:d5:ac:ea:27:ba:89:b2:e6:20:4a:c6:92:95:73:79:f5:5c: 2c:87:8c:be:e3:1b:36:42:d4:92:54:14:d7:9b:a8:f3:cf:52: f9:21:6c:bf:8d:eb:66:7b:c4:e3:d2:b2:73:19:08:ee:97:20: 70:bd:7a:e8:e6:e1:fe:fa:59:ae:20:1e:b1:2c:c0:47:61:76: 88:cb:73:3a:60:05:3a:88:89:3f:2e:28:6b:d0:58:26:ae:1a: a5:db:f6:d2:6b:fd:82:62:85:40:b8:0a:89:21:6f:5d:f7:2f: e0:aa:cc:76:38:69:12:a0:5e:c4:7a:98:ab:a3:e1:cc:4a:a3: 94:a3:34:86:1f:05:c0:b5:d9:af:1e:9c:ab:7a:10:f2:9e:ba: d6:2d:37:51:d7:b8:88:1b:69:d7:8b:a2:19:6c:18:be:95:49: 74:06:46:87:00:0c:14:f7:bc:0f:24:6e:e0:ef:f6:36:64:a5: 6b:01:f3:33:51:1a:ca:a9:2b:47:9e:e1:6a:de:d2:66:87:11: 46:7a:6c:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QUIxMTAvBgNVBAUTKDQxNzZGMTA5MThDOUIxOEQyREVGOEI3QzY2RkM1QTNB NjU4MjIzMUUwHhcNMjUxMjI0MTQ0NTQzWhcNMjUxMjMxMTQ0NTQzWjAYMRYwFAYD VQQDDA02OTRiZmM5Ny05NzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjUqCxUjvwf/2ZetO/eU+WMGe7qrStwYBYTWv31fhrJpaLVycmItCK6KP0Kws /Fd9/qgp6mnwROL0Xzjv/fkf1lGN32Y0D1Ja1WiMESSvrMIJFxNX6CpANcL2uZqJ eDf6pXlQZdTjtHBXzN9hOn0ZwtWNZLgwF90Z/jX0IjnQ0Y3uBSHaM61lNBmxyAfv vV4dv1Td2AJhyltanmlr9Cqg0A1fzs7DG7XKTrkktCO2NMb6bfvjgGnYyrGALbg9 yriGHT1ruqjWgzzz/NbHSjY3E0AzARt1ZwIehSE3Saai316wfgA0+cTJmAORv+FY CNXLVLBu1Z4WYLscwgGW3fd7QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaF5d6/ K7fFuG+UriyZJbVmBWMzMB8GA1UdIwQYMBaAFEF28QkYybGNLe+LfGb8WjplgiMe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRBQi81RTBBQTlBMjFE OTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZMHQ3NHQ4WnZ4YU9tV0NJ eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYYnhDUmpKc1kwdDc0dDhadnhhT21XQ0l4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRBQi81RTBBQTlBMjFEOTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZ MHQ3NHQ4WnZ4YU9tV0NJeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7uYUaZor3XZsiD7vt/LLhjitt5BvL+syegcVIhabMGFvrOPWHu3+5 t9tFmLFOKUEJBCSWxFpH1azqJ7qJsuYgSsaSlXN59Vwsh4y+4xs2QtSSVBTXm6jz z1L5IWy/jetme8Tj0rJzGQjulyBwvXro5uH++lmuIB6xLMBHYXaIy3M6YAU6iIk/ Lihr0Fgmrhql2/bSa/2CYoVAuAqJIW9d9y/gqsx2OGkSoF7Eepiro+HMSqOUozSG HwXAtdmvHpyrehDynrrWLTdR17iIG2nXi6IZbBi+lUl0BkaHAAwU97wPJG7g7/Y2 ZKVrAfMzURrKqStHnuFq3tJmhxFGemy6 -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:41 2025 by rpki-client