This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.mft File: QRWv_nCd92SgzMk062huh7fv3zc.mft (raw, json) Hash identifier: pZ0rcVwtsc/aygVG6G7SSNsYJFOtB7Tpz3BuK39BVRc= Subject key identifier: EA:79:B9:24:DC:F0:8D:B5:55:7D:C7:79:47:E5:13:B6:3E:2F:6B:1F Authority key identifier: 41:15:AF:FE:70:9D:F7:64:A0:CC:C9:34:EB:68:6E:87:B7:EF:DF:37 Certificate issuer: /CN=A914354F/serialNumber=4115AFFE709DF764A0CCC934EB686E87B7EFDF37 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRWv_nCd92SgzMk062huh7fv3zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.mft Manifest number: 10 Signing time: Tue 23 Dec 2025 06:51:15 +0000 Manifest this update: Tue 23 Dec 2025 06:51:14 +0000 Manifest next update: Tue 30 Dec 2025 06:51:14 +0000 Files and hashes: 1: QRWv_nCd92SgzMk062huh7fv3zc.crl (hash: pbjZToLIEYkeVDMV70TgmKrexp1KYx0O0i0BAyE0I9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.crl rsync://rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRWv_nCd92SgzMk062huh7fv3zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914354F, serialNumber=4115AFFE709DF764A0CCC934EB686E87B7EFDF37 Validity Not Before: Dec 23 06:51:14 2025 GMT Not After : Dec 30 06:51:14 2025 GMT Subject: CN=694a3be2-dc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:e7:b7:e4:bd:fb:7a:0f:c9:fa:61:55:c5: 03:90:b5:91:a4:cc:51:ae:ef:fe:22:c8:db:ec:c4: c4:e3:67:53:6f:88:91:5e:18:7b:85:68:52:dc:af: db:d7:4e:e6:53:c0:91:2d:f0:9b:f3:87:31:0a:ef: b5:0d:a9:cf:ad:e9:49:cc:8d:6f:e7:be:41:82:ff: 54:b1:f6:5c:06:30:63:fd:62:9e:b6:7c:4f:ba:22: 8b:2b:0b:5c:65:80:23:2d:8f:be:a6:d5:92:7e:40: cc:04:e1:87:d9:ee:3d:9c:98:9d:c2:5e:c1:be:91: f8:9c:bf:ef:1e:80:28:f5:13:6f:3e:fe:54:4b:b3: 1f:4f:0e:d7:e0:b9:cd:f6:53:c8:af:82:5b:68:42: b0:07:92:b9:7f:a4:b2:2f:94:02:8b:b9:f8:9d:3c: 55:f2:90:ce:4a:bf:d0:c8:0e:60:ff:19:d3:c2:4e: 25:4f:a7:c5:9f:b3:fc:55:da:c4:c2:b4:8c:f5:f3: f3:4e:31:1d:02:31:63:8e:d9:dd:1d:fc:43:e6:05: 80:98:4d:4b:87:0e:d5:fb:f1:0f:ec:b7:4c:e5:ac: c5:4d:fc:49:76:2a:d0:fb:9f:2a:08:17:76:24:b5: 54:e6:f6:96:10:28:f9:cb:04:a8:49:d1:48:cc:d2: 0a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:79:B9:24:DC:F0:8D:B5:55:7D:C7:79:47:E5:13:B6:3E:2F:6B:1F X509v3 Authority Key Identifier: keyid:41:15:AF:FE:70:9D:F7:64:A0:CC:C9:34:EB:68:6E:87:B7:EF:DF:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRWv_nCd92SgzMk062huh7fv3zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:77:d7:23:41:5c:7f:9a:f6:cc:23:4c:4e:52:16:c1:e4:21: 50:03:5c:8c:6b:05:08:d3:10:bf:75:ff:02:68:3b:f7:f4:9b: 0c:87:fe:54:46:68:26:cd:f5:c5:22:d5:9d:c4:8e:c5:48:58: 9b:0e:69:f1:ae:51:40:df:bc:db:0b:a9:da:45:66:7c:0e:81: 6e:bd:a8:b5:36:ff:a7:dc:02:d0:3d:eb:ac:46:36:52:00:25: 14:6b:66:ed:e4:bf:2e:06:2f:f6:de:8c:56:63:46:ca:0f:b2: 74:bb:cd:11:ad:cc:f1:89:46:6c:06:b2:32:ba:6a:22:54:be: fb:8e:4d:66:ff:e7:d5:c0:0e:d9:88:1a:fd:53:4e:df:25:c5: 59:6f:6c:e0:e9:13:8f:55:ed:de:83:2a:10:65:16:2b:6a:13: aa:2b:69:97:af:1f:72:68:f7:7c:97:73:29:db:f9:d5:8d:66: 91:5f:10:ec:3c:86:f8:85:10:f3:a5:5d:16:a4:7e:9f:80:3a: 38:c4:75:c0:83:83:47:9e:86:a1:0b:58:8f:65:51:1c:30:77: 1b:89:e0:3d:8c:6b:7b:f3:66:f5:37:4d:64:c7:32:05:dc:8c: ab:d6:07:b2:22:4f:18:35:71:a3:bd:22:bf:16:64:96:56:3b: c7:c2:c6:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzU0RjExMC8GA1UEBRMoNDExNUFGRkU3MDlERjc2NEEwQ0NDOTM0RUI2ODZFODdC N0VGREYzNzAeFw0yNTEyMjMwNjUxMTRaFw0yNTEyMzAwNjUxMTRaMBgxFjAUBgNV BAMMDTY5NGEzYmUyLWRjNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgBOe35L37eg/J+mFVxQOQtZGkzFGu7/4iyNvsxMTjZ1NviJFeGHuFaFLcr9vX TuZTwJEt8JvzhzEK77UNqc+t6UnMjW/nvkGC/1Sx9lwGMGP9Yp62fE+6IosrC1xl gCMtj76m1ZJ+QMwE4YfZ7j2cmJ3CXsG+kficv+8egCj1E28+/lRLsx9PDtfguc32 U8ivgltoQrAHkrl/pLIvlAKLufidPFXykM5Kv9DIDmD/GdPCTiVPp8Wfs/xV2sTC tIz18/NOMR0CMWOO2d0d/EPmBYCYTUuHDtX78Q/st0zlrMVN/El2KtD7nyoIF3Yk tVTm9pYQKPnLBKhJ0UjM0goHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6nm5JNzw jbVVfcd5R+UTtj4vax8wHwYDVR0jBBgwFoAUQRWv/nCd92SgzMk062huh7fv3zcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzNTRGLzc2NkVDRUQ0Q0M2 MzExRjBBNkMxREYzN0M0RjlBRTAyL1FSV3ZfbkNkOTJTZ3pNazA2Mmh1aDdmdjN6 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVJXdl9uQ2Q5MlNnek1rMDYyaHVoN2Z2M3pjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz NTRGLzc2NkVDRUQ0Q0M2MzExRjBBNkMxREYzN0M0RjlBRTAyL1FSV3ZfbkNkOTJT Z3pNazA2Mmh1aDdmdjN6Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF131yNBXH+a9swjTE5SFsHkIVADXIxrBQjTEL91/wJoO/f0mwyH/lRG aCbN9cUi1Z3EjsVIWJsOafGuUUDfvNsLqdpFZnwOgW69qLU2/6fcAtA966xGNlIA JRRrZu3kvy4GL/bejFZjRsoPsnS7zRGtzPGJRmwGsjK6aiJUvvuOTWb/59XADtmI Gv1TTt8lxVlvbODpE49V7d6DKhBlFitqE6oraZevH3Jo93yXcynb+dWNZpFfEOw8 hviFEPOlXRakfp+AOjjEdcCDg0eehqELWI9lURwwdxuJ4D2Ma3vzZvU3TWTHMgXc jKvWB7IiTxg1caO9Ir8WZJZWO8fCxno= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:24 2025 by rpki-client