This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft File: qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft (raw, json) Hash identifier: S1MdRnF0EnSyfvc05y0zpsdfnmntqthHjp7/Y3MBAmM= Subject key identifier: 21:A6:D1:5B:5C:18:DB:C6:DF:A5:C0:08:63:8D:27:8C:BE:E7:BC:EB Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft Manifest number: 54 Signing time: Tue 23 Dec 2025 06:05:23 +0000 Manifest this update: Tue 23 Dec 2025 06:05:22 +0000 Manifest next update: Tue 30 Dec 2025 06:05:22 +0000 Files and hashes: 1: qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl (hash: Z1G2cftooDKKsoFz1uu4M1frTDDevjdcOHJjsDwGi9E=) 2: C869343A5FE011F0ABA4A158C4F9AE02.roa (hash: 1m3AATxdBvNaAbP3EbhkZoZi/9NKKO+rrYQbsiCKglc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Validity Not Before: Dec 23 06:05:22 2025 GMT Not After : Dec 30 06:05:22 2025 GMT Subject: CN=694a3122-996f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:d3:2a:7d:76:5c:91:db:f7:fd:a6:e7:ed: 47:a2:5b:6f:39:92:0b:fb:20:7f:2c:43:1a:bb:f7: 74:74:6f:b3:b4:a6:fd:de:f4:88:9a:1f:ed:54:76: f5:85:96:2f:8f:16:af:e9:48:3c:e4:15:fb:2b:08: cb:40:e2:cf:55:06:4a:a8:bf:47:93:6b:8e:8f:3f: c8:22:67:38:3e:f5:a9:cf:f6:29:15:d1:0e:b1:61: 66:5b:ae:0f:f4:5f:8e:24:14:15:ad:a4:88:ec:bc: 16:92:8c:3c:45:fd:cd:ad:17:f9:8a:6e:e6:f9:03: 1d:38:03:7a:9f:fb:e4:7f:06:32:76:bd:ac:a1:3a: af:76:f5:d8:b7:15:1a:6b:b0:ec:75:54:f5:42:26: c0:5d:af:c5:a6:c0:c2:b5:1c:ec:de:28:0a:c5:bf: cd:24:f7:05:90:4d:8b:58:39:a2:99:7e:d9:20:7f: 10:35:11:71:b2:c5:e7:9b:0a:d6:ed:54:e0:19:84: 53:5a:33:91:6d:46:9d:d9:3d:f6:fd:48:66:72:4e: 67:cd:fc:24:80:b3:b0:c4:e7:dd:7d:8b:e3:b1:07: 2d:48:7a:86:99:cd:03:12:a7:60:15:af:33:0f:98: 13:7c:f2:16:fe:8c:b6:2b:dc:7d:72:63:43:fc:d6: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A6:D1:5B:5C:18:DB:C6:DF:A5:C0:08:63:8D:27:8C:BE:E7:BC:EB X509v3 Authority Key Identifier: keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:9e:17:79:b3:bb:d1:45:59:42:d4:e1:e0:4d:f5:58:1c:cb: 31:62:ac:9b:ab:86:28:32:2c:be:0b:78:46:22:e2:98:52:fe: f6:36:c7:9d:51:ab:2c:85:e8:0f:31:70:26:8a:c2:4e:fd:53: d7:08:ea:b2:d6:15:c4:11:4b:a6:41:8d:8a:28:ed:52:0e:02: 22:69:be:b1:23:cb:b0:08:1c:f5:0a:a1:65:b3:1e:42:1b:9d: e0:26:1f:48:33:48:6c:6c:83:55:fe:16:33:2e:42:5e:f4:6d: 16:6c:dd:e3:55:28:02:c0:cf:3e:3e:07:44:c9:35:a2:93:4c: 4e:81:d0:3d:c6:0c:63:b2:9a:d3:10:4f:c0:f3:79:34:37:9e: ce:38:3a:b2:ee:b1:88:de:49:1d:2e:aa:84:15:ca:9c:72:10: f7:17:2a:ea:71:24:97:c7:5d:89:55:3f:03:0e:b8:79:19:6e: bb:9c:9a:dd:8a:ba:50:07:23:3e:35:24:47:36:1a:8c:1d:c0: ab:15:80:d3:ff:db:43:26:c8:ce:b4:d9:de:08:41:29:30:48: 66:60:87:11:2e:07:09:12:eb:a3:10:a7:c5:40:7b:77:9a:24: 74:aa:67:80:41:16:f4:8a:19:57:30:f4:10:ae:13:a2:ca:cc: be:b7:41:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzBENjExMC8GA1UEBRMoQUFDMzlGRDk2M0RFMTczMUQwREEzRDQxNDFFNEExRTQ2 OUU5ODUyMzAeFw0yNTEyMjMwNjA1MjJaFw0yNTEyMzAwNjA1MjJaMBgxFjAUBgNV BAMMDTY5NGEzMTIyLTk5NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4utMqfXZckdv3/abn7UeiW285kgv7IH8sQxq793R0b7O0pv3e9IiaH+1UdvWF li+PFq/pSDzkFfsrCMtA4s9VBkqov0eTa46PP8giZzg+9anP9ikV0Q6xYWZbrg/0 X44kFBWtpIjsvBaSjDxF/c2tF/mKbub5Ax04A3qf++R/BjJ2vayhOq929di3FRpr sOx1VPVCJsBdr8WmwMK1HOzeKArFv80k9wWQTYtYOaKZftkgfxA1EXGyxeebCtbt VOAZhFNaM5FtRp3ZPfb9SGZyTmfN/CSAs7DE5919i+OxBy1IeoaZzQMSp2AVrzMP mBN88hb+jLYr3H1yY0P81puTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIabRW1wY 28bfpcAIY40njL7nvOswHwYDVR0jBBgwFoAUqsOf2WPeFzHQ2j1BQeSh5GnphSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzMEQ2LzE3RjA2QTI0NUZF MDExRjBCMkZEOEY1N0M0RjlBRTAyL3FzT2YyV1BlRnpIUTJqMUJRZVNoNUducGhT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXNPZjJXUGVGekhRMmoxQlFlU2g1R25waFNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz MEQ2LzE3RjA2QTI0NUZFMDExRjBCMkZEOEY1N0M0RjlBRTAyL3FzT2YyV1BlRnpI UTJqMUJRZVNoNUducGhTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN6eF3mzu9FFWULU4eBN9VgcyzFirJurhigyLL4LeEYi4phS/vY2x51R qyyF6A8xcCaKwk79U9cI6rLWFcQRS6ZBjYoo7VIOAiJpvrEjy7AIHPUKoWWzHkIb neAmH0gzSGxsg1X+FjMuQl70bRZs3eNVKALAzz4+B0TJNaKTTE6B0D3GDGOymtMQ T8DzeTQ3ns44OrLusYjeSR0uqoQVypxyEPcXKupxJJfHXYlVPwMOuHkZbrucmt2K ulAHIz41JEc2GowdwKsVgNP/20MmyM602d4IQSkwSGZghxEuBwkS66MQp8VAe3ea JHSqZ4BBFvSKGVcw9BCuE6LKzL63QZc= -----END CERTIFICATE-----Generated at Wed Dec 24 12:23:36 2025 by rpki-client