This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft File: Qg-DHM6albTzE1seVXeDqyAsa68.mft (raw, json) Hash identifier: d60NledQsGL7sI4pZ/GldETS8MrIhhaBvOZlc81WO4Q= Subject key identifier: 27:2B:0D:29:DA:39:B1:A8:2B:71:C2:B1:6E:E2:8A:A7:4B:AE:A2:94 Authority key identifier: 42:0F:83:1C:CE:9A:95:B4:F3:13:5B:1E:55:77:83:AB:20:2C:6B:AF Certificate issuer: /CN=A913E614/serialNumber=420F831CCE9A95B4F3135B1E557783AB202C6BAF Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg-DHM6albTzE1seVXeDqyAsa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft Manifest number: 13 Signing time: Sun 21 Dec 2025 06:53:57 +0000 Manifest this update: Sun 21 Dec 2025 06:53:57 +0000 Manifest next update: Sun 28 Dec 2025 06:53:57 +0000 Files and hashes: 1: Qg-DHM6albTzE1seVXeDqyAsa68.crl (hash: wVrzW1IWBLaHe0xspXd+u38Rre924Tn7faMmJUzaPN4=) 2: CAFFD8E6C6D511F09C4D4F76C4F9AE02.roa (hash: LxjilRVcBRn1uZ3KLrjzsRj18qwxRaPtFbLfUU5tlx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.crl rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg-DHM6albTzE1seVXeDqyAsa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E614, serialNumber=420F831CCE9A95B4F3135B1E557783AB202C6BAF Validity Not Before: Dec 21 06:53:57 2025 GMT Not After : Dec 28 06:53:57 2025 GMT Subject: CN=69479985-03fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1a:fd:7b:30:06:85:f4:76:4b:3d:39:08:4b: 6b:70:02:65:08:c5:c9:b4:a0:48:01:6d:8a:17:9d: 60:22:57:0d:e2:72:e5:a7:66:db:b2:de:fb:fe:0e: 4b:f5:83:19:5d:8e:3e:90:c9:25:1c:c2:49:a6:21: fd:e6:23:5c:da:6c:c8:c6:71:0a:b8:7c:6f:c5:cc: 6f:5a:9c:ad:77:7b:81:72:62:4e:24:45:07:c3:e9: 49:e7:8a:89:31:45:03:e2:8a:d0:cb:4a:94:db:19: b3:c7:5d:3c:07:ca:03:b0:f8:ff:d1:28:10:c3:be: c5:b9:21:5c:43:7d:03:61:4d:74:01:a7:f0:4f:96: ef:91:b5:9b:5f:79:6a:ad:07:f0:6c:4c:2d:49:a0: 82:56:bf:87:46:41:e1:b4:ec:d7:b5:4e:bc:da:24: 21:95:9e:89:63:4a:1a:29:d9:56:80:e2:5b:db:67: 2b:4d:11:e6:ac:8d:ee:56:75:88:3f:0a:3f:c8:5d: bb:f4:e0:60:4a:5a:4e:e0:de:b1:1f:ed:12:17:dc: 5c:3e:61:aa:e2:61:4f:57:0b:56:68:09:b6:bc:7f: 95:3d:01:50:e7:ea:6a:a2:68:52:c9:31:98:55:7d: 16:c5:ae:d1:a8:e3:46:ea:74:f6:3f:bf:fb:65:9c: 01:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2B:0D:29:DA:39:B1:A8:2B:71:C2:B1:6E:E2:8A:A7:4B:AE:A2:94 X509v3 Authority Key Identifier: keyid:42:0F:83:1C:CE:9A:95:B4:F3:13:5B:1E:55:77:83:AB:20:2C:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg-DHM6albTzE1seVXeDqyAsa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:77:75:7a:8b:d7:14:c8:1d:b8:28:24:47:53:76:95:85:e5: 48:83:6e:2b:9f:47:b2:56:f1:85:4e:b0:fb:ed:43:80:10:4a: 4f:b4:87:d2:9a:6d:2c:35:d2:64:a1:17:ff:82:c6:8d:55:70: 91:da:57:85:cb:9c:c6:31:98:8b:f1:e0:53:42:a2:eb:dc:0b: 06:0b:9b:2c:fa:cf:3a:bc:a0:d8:50:cb:1d:c0:86:5d:50:26: 20:1a:68:f9:00:bf:66:e7:54:a9:06:7e:ad:b8:00:b3:06:3d: 6a:26:9b:db:5e:5d:16:9b:69:dc:f5:c3:13:0b:86:b9:4e:69: 4e:fc:4f:05:ef:14:73:9e:f7:c1:c4:6e:99:e6:0e:c4:1b:62: 7c:ee:21:f8:ec:bc:d2:80:40:40:1e:17:72:0c:4e:4c:84:77: c2:39:f2:2b:96:d9:3b:0a:df:41:a1:01:d1:6c:b2:5b:4e:7a: a2:c5:d7:47:b9:64:6f:41:8c:f9:53:8e:57:d6:aa:7c:4f:c6: 74:2b:ad:4c:fe:11:7d:c8:5f:ee:2f:bd:c9:bb:be:f3:25:e2: 4f:04:4d:f5:f2:3d:8a:a1:0c:fb:0f:a8:67:5f:aa:e1:f8:79: 3e:d6:a0:32:ca:e5:09:e1:69:d8:dc:b9:d7:5b:09:fa:18:39: 16:c3:2e:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYxNDExMC8GA1UEBRMoNDIwRjgzMUNDRTlBOTVCNEYzMTM1QjFFNTU3NzgzQUIy MDJDNkJBRjAeFw0yNTEyMjEwNjUzNTdaFw0yNTEyMjgwNjUzNTdaMBgxFjAUBgNV BAMMDTY5NDc5OTg1LTAzZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcGv17MAaF9HZLPTkIS2twAmUIxcm0oEgBbYoXnWAiVw3icuWnZtuy3vv+Dkv1 gxldjj6QySUcwkmmIf3mI1zabMjGcQq4fG/FzG9anK13e4FyYk4kRQfD6Unniokx RQPiitDLSpTbGbPHXTwHygOw+P/RKBDDvsW5IVxDfQNhTXQBp/BPlu+RtZtfeWqt B/BsTC1JoIJWv4dGQeG07Ne1TrzaJCGVnoljShop2VaA4lvbZytNEeasje5WdYg/ Cj/IXbv04GBKWk7g3rEf7RIX3Fw+YariYU9XC1ZoCba8f5U9AVDn6mqiaFLJMZhV fRbFrtGo40bqdPY/v/tlnAHjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJysNKdo5 sagrccKxbuKKp0uuopQwHwYDVR0jBBgwFoAUQg+DHM6albTzE1seVXeDqyAsa68w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjE0LzM4RTIxRDUyQzNB MTExRjBCNzQ0QzMzOUM0RjlBRTAyL1FnLURITTZhbGJUekUxc2VWWGVEcXlBc2E2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUWctREhNNmFsYlR6RTFzZVZYZURxeUFzYTY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NjE0LzM4RTIxRDUyQzNBMTExRjBCNzQ0QzMzOUM0RjlBRTAyL1FnLURITTZhbGJU ekUxc2VWWGVEcXlBc2E2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFB3dXqL1xTIHbgoJEdTdpWF5UiDbiufR7JW8YVOsPvtQ4AQSk+0h9Ka bSw10mShF/+Cxo1VcJHaV4XLnMYxmIvx4FNCouvcCwYLmyz6zzq8oNhQyx3Ahl1Q JiAaaPkAv2bnVKkGfq24ALMGPWomm9teXRabadz1wxMLhrlOaU78TwXvFHOe98HE bpnmDsQbYnzuIfjsvNKAQEAeF3IMTkyEd8I58iuW2TsK30GhAdFssltOeqLF10e5 ZG9BjPlTjlfWqnxPxnQrrUz+EX3IX+4vvcm7vvMl4k8ETfXyPYqhDPsPqGdfquH4 eT7WoDLK5QnhadjcuddbCfoYORbDLqg= -----END CERTIFICATE-----Generated at Sun Dec 21 12:43:31 2025 by rpki-client