This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft File: QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft (raw, json) Hash identifier: 6ucS05XlEL9UKWKTMDeMGNLBBq6tno+gXSaKXqH4hlk= Subject key identifier: A8:B5:25:14:66:98:56:DB:B0:0D:43:BD:D5:FA:26:F8:52:61:21:56 Authority key identifier: 42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE Certificate issuer: /CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft Manifest number: 029A Signing time: Tue 23 Dec 2025 00:31:14 +0000 Manifest this update: Tue 23 Dec 2025 00:31:14 +0000 Manifest next update: Tue 30 Dec 2025 00:31:14 +0000 Files and hashes: 1: QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl (hash: TP5oc4o3PzTBmh1ysDQvSBkcS7Xs7PqoXgqygyACBTI=) 2: 07E789A228F011ED94BE9345C4F9AE02.roa (hash: UjqlRAwfwNLo2LEBYwVtNQxCTDJqJ6taRgiSuyPlUdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912087D, serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Validity Not Before: Dec 23 00:31:14 2025 GMT Not After : Dec 30 00:31:14 2025 GMT Subject: CN=6949e2d2-af25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c2:21:12:4c:11:67:47:ac:f9:2a:3c:c0:69: 1b:cf:62:84:48:a1:2a:e6:d5:55:d0:a8:b2:4e:93: 63:15:dd:5f:ee:b9:d1:3c:d3:d0:56:ac:2f:4c:e6: ba:5f:b1:98:de:e8:50:c0:6b:7c:7c:b7:c7:bb:6e: b8:a4:bc:1b:89:c6:78:21:d3:f1:4b:27:1d:60:61: 9e:82:a6:6a:e6:04:99:58:78:8f:0d:b5:5f:a1:53: 91:ca:25:12:bc:d4:3d:7f:ab:83:d0:d2:34:b2:1e: a8:e1:e7:1b:59:22:33:8e:4e:a0:7e:e1:88:f0:07: 5f:f8:ec:97:c7:a5:a3:af:11:66:0b:ff:e7:84:31: 49:0f:75:dc:58:44:38:3c:a9:62:40:1b:f2:ce:eb: 4e:76:e6:b9:fe:63:b7:da:e1:d2:9b:90:d7:7b:f8: 62:6f:92:0b:d9:d0:e5:f6:b4:f4:71:28:75:a2:85: cc:e2:07:2e:4b:73:cf:3a:d6:fb:58:fd:e0:be:0b: 8e:a5:36:7e:4b:1d:93:82:47:b7:83:07:26:be:30: c5:f6:bb:1e:dc:84:54:af:ce:01:64:1c:11:2a:5b: fb:79:51:50:e7:8c:8a:dd:02:a3:9f:6f:5c:c6:8d: ac:c7:03:db:7b:ae:ea:22:8a:10:fd:0c:c9:98:f7: 0b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B5:25:14:66:98:56:DB:B0:0D:43:BD:D5:FA:26:F8:52:61:21:56 X509v3 Authority Key Identifier: keyid:42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c3:4c:67:75:7a:22:8a:c4:d4:85:95:fa:63:0a:c7:d8:f2: f3:56:b0:eb:62:ec:e7:cf:0a:34:c7:16:4d:05:a0:da:d6:04: 5e:44:b5:73:52:21:f2:a4:ae:c4:8f:86:0e:9d:dc:0b:f2:91: 12:0e:3b:83:7f:fb:1a:a5:4d:7a:96:a4:3d:d2:4e:62:3d:73: 75:d4:59:96:fa:78:94:04:2e:60:90:3b:78:b9:f3:c2:41:27: 95:7d:67:55:07:5c:5e:08:7a:b7:71:fe:03:1d:13:90:84:8e: 08:ae:eb:8f:d4:8a:2a:e7:94:5c:df:7b:6b:0e:ac:42:ab:b9: 79:5f:6f:72:32:9b:71:ce:bf:3a:c4:b8:15:84:3c:b1:f4:6e: 95:73:5b:67:bb:ed:5b:c0:be:d8:e8:44:e2:f7:9f:60:c4:36: 6b:04:38:18:26:2e:6a:23:4e:8d:5d:02:fa:9d:a1:1e:36:39: fb:4a:4e:d8:d3:1e:d8:ac:1b:a8:66:17:40:97:34:16:60:36: 9e:55:9f:ce:3b:ba:e2:84:66:a7:64:ab:6b:8b:87:93:8d:6a: d0:78:c5:90:b6:8c:72:7f:41:90:b5:b7:01:90:5e:5d:c8:2f: d3:60:f7:e7:c1:08:8b:6b:21:c7:98:6c:6a:4b:b0:98:27:96: 80:94:61:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4N0QxMTAvBgNVBAUTKDQyQTg0RDhDMDg4OUFEQzU1ODYwNjYzOTkzQkNDQTgz NjEyNzFCRkUwHhcNMjUxMjIzMDAzMTE0WhcNMjUxMjMwMDAzMTE0WjAYMRYwFAYD VQQDDA02OTQ5ZTJkMi1hZjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MIhEkwRZ0es+So8wGkbz2KESKEq5tVV0KiyTpNjFd1f7rnRPNPQVqwvTOa6 X7GY3uhQwGt8fLfHu264pLwbicZ4IdPxSycdYGGegqZq5gSZWHiPDbVfoVORyiUS vNQ9f6uD0NI0sh6o4ecbWSIzjk6gfuGI8Adf+OyXx6WjrxFmC//nhDFJD3XcWEQ4 PKliQBvyzutOdua5/mO32uHSm5DXe/hib5IL2dDl9rT0cSh1ooXM4gcuS3PPOtb7 WP3gvguOpTZ+Sx2Tgke3gwcmvjDF9rse3IRUr84BZBwRKlv7eVFQ54yK3QKjn29c xo2sxwPbe67qIooQ/QzJmPcLgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKi1JRRm mFbbsA1DvdX6JvhSYSFWMB8GA1UdIwQYMBaAFEKoTYwIia3FWGBmOZO8yoNhJxv+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDg3RC80QzE1ODU4QzI4 RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJjVllZR1k1azd6S2cyRW5H XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxaE5qQWlKcmNWWVlHWTVrN3pLZzJFbkdfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDg3RC80QzE1ODU4QzI4RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJj VllZR1k1azd6S2cyRW5HXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaw0xndXoiisTUhZX6YwrH2PLzVrDrYuznzwo0xxZNBaDa1gReRLVz UiHypK7Ej4YOndwL8pESDjuDf/sapU16lqQ90k5iPXN11FmW+niUBC5gkDt4ufPC QSeVfWdVB1xeCHq3cf4DHROQhI4IruuP1Ioq55Rc33trDqxCq7l5X29yMptxzr86 xLgVhDyx9G6Vc1tnu+1bwL7Y6ETi959gxDZrBDgYJi5qI06NXQL6naEeNjn7Sk7Y 0x7YrBuoZhdAlzQWYDaeVZ/OO7rihGanZKtri4eTjWrQeMWQtoxyf0GQtbcBkF5d yC/TYPfnwQiLayHHmGxqS7CYJ5aAlGFK -----END CERTIFICATE-----Generated at Tue Dec 23 06:49:58 2025 by rpki-client