This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft File: Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft (raw, json) Hash identifier: 2VIHl7zTIFJVWaGVzTnuNiy2UFej3a/MbFfVp0lOCs0= Subject key identifier: 52:96:A4:29:03:F5:74:C1:6E:3B:A1:A2:2B:E5:80:88:2D:D7:B0:F0 Authority key identifier: 43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD Certificate issuer: /CN=A91237A2/serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft Manifest number: 0181 Signing time: Tue 23 Dec 2025 02:44:12 +0000 Manifest this update: Tue 23 Dec 2025 02:44:11 +0000 Manifest next update: Tue 30 Dec 2025 02:44:11 +0000 Files and hashes: 1: Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl (hash: b8hJOMzzRq+1mg7dRAS6UKHHJ+pABkuQ8zsk3CFUTCs=) 2: 9BD4B85894D611EE85EDE844C4F9AE02.roa (hash: BnhXnmbrZvn4TUpNGo1fZeRsdqCO9c2ErR/1CCvmiV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91237A2, serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD Validity Not Before: Dec 23 02:44:11 2025 GMT Not After : Dec 30 02:44:11 2025 GMT Subject: CN=694a01fc-f1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:93:22:bb:ba:41:58:54:bc:7b:8a:7c:18:03: 51:73:24:36:fe:d4:38:9a:7c:94:a0:a8:bf:db:bb: 7a:76:e4:c8:32:84:f8:ca:a0:8e:d3:05:91:81:63: 13:7c:78:c0:89:68:9a:fb:ff:e8:2f:03:3e:5b:7f: b0:36:21:2c:2f:61:4e:05:8b:72:ef:2e:7d:57:c5: 10:27:6c:1b:d7:4f:2c:3a:29:23:f0:92:a2:00:0d: 07:7c:df:4a:0b:fe:67:71:1d:09:f5:00:04:b2:37: 92:98:5f:35:80:44:f0:90:23:db:a6:38:58:eb:93: 41:22:da:00:32:36:0b:56:64:5c:02:2d:b0:53:75: 0d:bf:71:ad:05:70:99:f6:6c:35:3a:65:06:61:6b: df:5a:c5:d4:a9:d3:6c:38:5b:b8:32:6f:db:15:f6: f1:19:a6:50:e4:25:5b:80:a0:95:88:3e:ff:7a:ca: 30:18:8f:e4:8a:b5:40:66:82:f9:9a:bb:d1:38:ca: f8:60:df:a5:9d:0d:aa:92:8d:e1:73:a3:a8:23:fd: 94:d9:27:76:2f:fe:de:03:16:4c:e1:24:96:9e:25: 1b:60:1f:95:2c:fd:b0:5c:aa:b4:7e:39:1a:76:89: 6d:12:c9:81:7e:28:6c:08:dc:4b:42:59:21:5c:16: b2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:96:A4:29:03:F5:74:C1:6E:3B:A1:A2:2B:E5:80:88:2D:D7:B0:F0 X509v3 Authority Key Identifier: keyid:43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:8f:55:af:4b:1f:8f:af:a0:e0:38:71:17:87:90:be:32:c1: cd:a1:94:9b:17:40:17:ef:fe:12:36:58:36:e9:03:07:cf:2b: a6:8e:3f:47:2c:66:be:8a:7c:13:b7:40:62:5c:19:ca:85:6e: 34:ef:21:f6:f8:10:79:11:2b:d4:46:60:44:da:7c:55:7c:a1: e9:07:58:db:29:c4:8c:b3:0e:9b:b5:04:2c:f6:5b:0e:50:b2: 1a:fe:76:4a:75:70:84:c9:d8:66:9d:fa:2b:40:29:ae:6f:47: 9a:1f:a8:ac:1a:c3:3a:c2:50:1e:73:df:7a:2e:60:e6:a3:66: 88:39:b1:31:46:3c:a4:c1:4d:2f:ca:17:aa:9d:de:5f:cb:a0: d2:7a:36:f8:c3:e0:06:7a:73:df:60:f1:82:db:35:fe:f4:c7: 57:bf:95:59:c9:3f:c2:9e:96:da:77:e8:48:8c:d4:6f:24:a9: 81:dc:69:32:63:3a:ee:c5:96:a0:69:f5:0e:21:45:ac:3d:74: 58:e1:aa:1c:89:86:94:04:f7:63:e3:58:a0:10:75:d0:09:83: e4:52:8b:44:10:b8:cc:29:19:be:f9:90:61:23:54:b6:09:81: 4c:f9:ab:a4:bf:58:9e:9e:46:2c:a0:0b:89:8b:7a:b4:04:09: 0d:7b:9e:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM3QTIxMTAvBgNVBAUTKDQzODJGOUFBMzAxNkZDQkYzMUY5MjRDRjEzMkU5NUJG OTI3MDlBREQwHhcNMjUxMjIzMDI0NDExWhcNMjUxMjMwMDI0NDExWjAYMRYwFAYD VQQDDA02OTRhMDFmYy1mMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZMiu7pBWFS8e4p8GANRcyQ2/tQ4mnyUoKi/27t6duTIMoT4yqCO0wWRgWMT fHjAiWia+//oLwM+W3+wNiEsL2FOBYty7y59V8UQJ2wb108sOikj8JKiAA0HfN9K C/5ncR0J9QAEsjeSmF81gETwkCPbpjhY65NBItoAMjYLVmRcAi2wU3UNv3GtBXCZ 9mw1OmUGYWvfWsXUqdNsOFu4Mm/bFfbxGaZQ5CVbgKCViD7/esowGI/kirVAZoL5 mrvROMr4YN+lnQ2qko3hc6OoI/2U2Sd2L/7eAxZM4SSWniUbYB+VLP2wXKq0fjka doltEsmBfihsCNxLQlkhXBay8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKWpCkD 9XTBbjuhoivlgIgt17DwMB8GA1UdIwQYMBaAFEOC+aowFvy/MfkkzxMulb+ScJrd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzdBMi80OUU2RTNENjkz M0MxMUVFQjQyMTBGMjlDNEY5QUUwMi9RNEw1cWpBV19MOHgtU1RQRXk2VnY1Sndt dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0TDVxakFXX0w4eC1TVFBFeTZWdjVKd210MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzdBMi80OUU2RTNENjkzM0MxMUVFQjQyMTBGMjlDNEY5QUUwMi9RNEw1cWpBV19M OHgtU1RQRXk2VnY1SndtdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARj1WvSx+Pr6DgOHEXh5C+MsHNoZSbF0AX7/4SNlg26QMHzyumjj9H LGa+inwTt0BiXBnKhW407yH2+BB5ESvURmBE2nxVfKHpB1jbKcSMsw6btQQs9lsO ULIa/nZKdXCEydhmnforQCmub0eaH6isGsM6wlAec996LmDmo2aIObExRjykwU0v yheqnd5fy6DSejb4w+AGenPfYPGC2zX+9MdXv5VZyT/Cnpbad+hIjNRvJKmB3Gky YzruxZagafUOIUWsPXRY4aociYaUBPdj41igEHXQCYPkUotEELjMKRm++ZBhI1S2 CYFM+aukv1ienkYsoAuJi3q0BAkNe578 -----END CERTIFICATE-----Generated at Tue Dec 23 10:59:31 2025 by rpki-client