This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: jki9hUUtd9b8BRcZBBdJ2JQXyYWY2nHl88Vn+W9i72Y= Subject key identifier: BB:24:8B:D1:AF:6B:88:4A:D4:2A:40:61:9F:0E:8F:EF:11:12:93:0B Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 1205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 11FD Signing time: Sun 14 Dec 2025 16:57:38 +0000 Manifest this update: Sun 14 Dec 2025 16:57:38 +0000 Manifest next update: Sun 21 Dec 2025 16:57:38 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: ebDAv03PB0OvGCA+7xbBSvb6Pz9RDTXTYZVSk7i99O8=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: 7uU8WNBCftCBAsgJ0cA2B7pdvFfJrHU+yjsI9Wz3L8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 16:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4613 (0x1205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: Dec 14 16:57:38 2025 GMT Not After : Dec 21 16:57:38 2025 GMT Subject: CN=693eec82-b03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:35:70:30:39:37:36:1e:28:88:59:4f:cf: 98:04:de:f2:41:6a:a0:0b:57:0d:f5:4d:b0:35:68: 70:98:6a:81:b6:81:c2:5f:10:c6:e0:7a:a2:57:4e: ec:23:30:0d:43:e7:60:b4:5a:c6:5f:0a:f8:b5:fd: ed:38:7c:e8:52:58:d1:ae:b1:e5:84:25:a3:00:9c: b3:1b:41:39:b8:3b:07:09:62:81:2d:a5:c9:12:32: 42:25:07:9c:e8:93:12:22:e6:2d:78:67:43:d0:bb: bd:eb:fa:b8:5b:09:9c:7a:80:ef:53:af:93:7a:ee: 2c:b6:80:3f:ea:d7:86:f7:20:39:67:b5:85:81:32: b1:22:1e:b6:74:3c:17:73:b1:44:26:61:3b:7c:30: 49:e0:c8:66:85:c7:92:9e:0c:60:5f:40:c2:1c:02: 64:bd:3e:7b:b8:74:3c:25:54:96:f4:eb:14:5e:5e: ad:be:d0:3f:1e:18:0c:e4:87:22:33:85:6b:87:51: c0:0d:e0:75:19:41:6e:da:4e:34:4f:92:23:89:0f: 7c:60:f6:49:b0:b2:d2:8a:01:cd:bb:ef:d3:de:fa: d9:2a:0c:38:7e:0c:bb:75:f0:0f:5b:b9:8d:9c:40: b9:bb:da:bd:6c:cd:ff:be:93:d1:a3:4c:a9:7a:3a: 37:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:24:8B:D1:AF:6B:88:4A:D4:2A:40:61:9F:0E:8F:EF:11:12:93:0B X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:bd:89:6a:11:a3:a7:7e:df:7a:84:15:e5:d4:ed:c3:c4:a8: c8:64:78:89:d5:90:0e:9a:a9:65:d2:bb:47:6b:dd:a9:43:2d: f0:ed:4d:92:bd:49:a9:d8:43:25:be:ec:67:d4:ec:28:f5:84: 32:f2:c6:a7:1d:b9:55:00:58:3c:78:2d:c1:4d:a8:9b:08:03: 6e:90:f4:a0:da:e7:18:05:b1:3d:85:ed:c6:16:a3:95:d6:7e: 34:4f:fc:49:f8:2e:d8:df:85:e2:4b:a2:7f:57:19:29:bc:fb: 00:92:b5:1f:d5:3d:e7:a6:eb:c9:b8:99:a8:cc:ab:02:e4:39: e4:e7:8b:93:02:93:77:b0:0f:9e:4c:ba:68:2a:50:63:5a:91: ef:8e:48:34:20:3b:aa:b3:d2:a7:4c:12:ae:fb:3c:ae:c0:c4: ce:e6:0a:9b:14:bc:b5:5a:d7:84:d6:b1:a0:a9:3c:46:04:30: 6f:e6:ca:3d:88:b3:f1:24:d9:c1:e5:fc:c5:b8:8f:fd:1d:49: d3:9b:0b:e5:31:72:4c:85:63:1e:77:fd:10:0f:1d:3d:34:3c: e1:92:da:9f:04:37:26:81:81:81:50:f0:fb:a2:f6:09:45:f9: db:46:fd:cd:ce:6a:3f:62:ea:5b:c6:a1:6e:f8:7b:18:34:17: 83:d4:0c:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjUxMjE0MTY1NzM4WhcNMjUxMjIxMTY1NzM4WjAYMRYwFAYD VQQDDA02OTNlZWM4Mi1iMDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQE1cDA5NzYeKIhZT8+YBN7yQWqgC1cN9U2wNWhwmGqBtoHCXxDG4HqiV07s IzANQ+dgtFrGXwr4tf3tOHzoUljRrrHlhCWjAJyzG0E5uDsHCWKBLaXJEjJCJQec 6JMSIuYteGdD0Lu96/q4WwmceoDvU6+Teu4stoA/6teG9yA5Z7WFgTKxIh62dDwX c7FEJmE7fDBJ4MhmhceSngxgX0DCHAJkvT57uHQ8JVSW9OsUXl6tvtA/HhgM5Ici M4Vrh1HADeB1GUFu2k40T5IjiQ98YPZJsLLSigHNu+/T3vrZKgw4fgy7dfAPW7mN nEC5u9q9bM3/vpPRo0ypejo3oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLski9Gv a4hK1CpAYZ8Oj+8REpMLMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5vYlqEaOnft96hBXl1O3DxKjIZHiJ1ZAOmqll0rtHa92pQy3w7U2S vUmp2EMlvuxn1Owo9YQy8sanHblVAFg8eC3BTaibCANukPSg2ucYBbE9he3GFqOV 1n40T/xJ+C7Y34XiS6J/VxkpvPsAkrUf1T3npuvJuJmozKsC5Dnk54uTApN3sA+e TLpoKlBjWpHvjkg0IDuqs9KnTBKu+zyuwMTO5gqbFLy1WteE1rGgqTxGBDBv5so9 iLPxJNnB5fzFuI/9HUnTmwvlMXJMhWMed/0QDx09NDzhktqfBDcmgYGBUPD7ovYJ RfnbRv3Nzmo/YupbxqFu+HsYNBeD1AzN -----END CERTIFICATE-----Generated at Tue Dec 16 02:23:14 2025 by rpki-client