This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft File: QgHlq32GvGha8R8C3mhAUVttgFg.mft (raw, json) Hash identifier: 7dmx9QJbu+VWeQOA4ihViOJ5NE7TSXYn1d2hG8mfYiY= Subject key identifier: 85:95:5F:01:7D:35:28:03:42:A2:CA:25:BB:BB:D4:07:66:D8:AF:FA Authority key identifier: 42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 Certificate issuer: /CN=A91454B0/serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058 Certificate serial: 34F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft Manifest number: 34F2 Signing time: Mon 22 Dec 2025 14:36:09 +0000 Manifest this update: Mon 22 Dec 2025 14:36:09 +0000 Manifest next update: Mon 29 Dec 2025 14:36:09 +0000 Files and hashes: 1: QgHlq32GvGha8R8C3mhAUVttgFg.crl (hash: MOKdv2nZFclXHE85r0sPO7GC0HA7BGN5EFlRpKvWSjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13554 (0x34f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454B0, serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058 Validity Not Before: Dec 22 14:36:09 2025 GMT Not After : Dec 29 14:36:09 2025 GMT Subject: CN=69495759-2899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:b6:37:81:4e:b4:6d:db:1d:e5:bc:5b:e0: 81:08:3f:b4:dc:f7:2c:a8:78:29:08:ac:ac:f7:1a: 9e:53:aa:84:8b:79:7d:f4:7a:55:7b:d4:05:1b:83: 7d:cf:bf:77:35:82:c6:5a:dd:4d:12:8a:72:68:27: d7:2d:16:fc:0c:b8:1f:f2:a7:f1:4a:6b:0e:6f:df: 41:7c:ed:92:7e:43:9c:11:46:d4:14:e7:84:a5:f6: 99:49:5d:85:c5:c2:d8:7f:f3:35:57:cc:35:0b:f8: 22:3e:77:9c:69:92:79:42:f0:97:69:1b:cc:79:6d: a9:51:d6:c3:ab:b9:6e:71:ac:dd:f4:a9:5d:22:15: 65:ad:c9:ba:1c:a4:c9:3c:0e:0a:f1:e6:f6:a9:e8: 11:da:54:0a:5a:fa:80:9b:c0:4d:96:5c:d3:d8:f8: 56:98:25:b5:24:fb:59:ae:be:d7:d9:a5:c9:1c:ab: 67:3d:5f:97:21:e4:82:de:02:68:0a:65:cf:f7:74: d6:0a:49:5b:be:6c:c2:20:e1:53:61:b8:13:13:61: 8e:0f:bf:c8:30:28:b3:25:0a:64:b3:43:c6:c0:4a: 4f:4f:30:66:1b:54:7d:5a:7f:ba:07:9f:47:55:b1: 1a:71:fd:92:ab:24:01:25:ce:7e:41:f9:e0:62:7d: 0f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:95:5F:01:7D:35:28:03:42:A2:CA:25:BB:BB:D4:07:66:D8:AF:FA X509v3 Authority Key Identifier: keyid:42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cf:c3:0e:c6:05:c8:42:88:3f:2f:51:15:b0:53:2f:e3:a5: 86:2d:df:9d:8c:60:c6:36:66:73:11:d4:a5:3a:bd:6e:a6:b4: c9:e1:53:33:15:26:19:07:5f:4b:c9:6d:90:bc:15:73:cc:3e: f1:9d:e4:84:c6:22:c4:50:3b:50:e0:e6:fa:c6:ca:29:4c:48: 2c:8d:a4:57:82:1f:20:b3:55:7f:eb:8d:e1:52:fb:59:a6:6e: 19:d3:4a:bb:7d:a9:94:d0:88:98:8d:8e:55:c1:ca:e5:e8:7a: 72:eb:6d:ea:18:af:b1:a3:d4:c0:8b:a8:51:d2:10:43:c8:3b: 9b:f0:cb:ab:ba:d6:87:3f:0c:c1:b5:b1:11:dc:dd:8a:1e:2b: 5f:0f:88:c8:bc:c6:ea:7d:8e:02:bf:15:98:bf:3d:19:bf:66: d7:25:ae:cf:5f:de:6b:38:8c:6a:bc:86:2c:62:36:9d:94:e3: 2c:79:1d:13:ca:a0:23:27:e8:6f:0f:2e:dd:51:0f:3e:b1:e6: ea:da:6e:8b:75:c9:92:36:82:3c:35:9a:de:a9:a5:55:57:55: 32:96:f9:32:78:71:c3:68:af:80:80:c0:bf:b7:c4:c9:51:73: 89:0e:52:2f:de:6d:52:06:52:be:84:fd:de:4e:b0:4f:5a:ff: 73:9a:a7:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QjAxMTAvBgNVBAUTKDQyMDFFNUFCN0Q4NkJDNjg1QUYxMUYwMkRFNjg0MDUx NUI2RDgwNTgwHhcNMjUxMjIyMTQzNjA5WhcNMjUxMjI5MTQzNjA5WjAYMRYwFAYD VQQDDA02OTQ5NTc1OS0yODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsi2N4FOtG3bHeW8W+CBCD+03PcsqHgpCKys9xqeU6qEi3l99HpVe9QFG4N9 z793NYLGWt1NEopyaCfXLRb8DLgf8qfxSmsOb99BfO2SfkOcEUbUFOeEpfaZSV2F xcLYf/M1V8w1C/giPnecaZJ5QvCXaRvMeW2pUdbDq7lucazd9KldIhVlrcm6HKTJ PA4K8eb2qegR2lQKWvqAm8BNllzT2PhWmCW1JPtZrr7X2aXJHKtnPV+XIeSC3gJo CmXP93TWCklbvmzCIOFTYbgTE2GOD7/IMCizJQpks0PGwEpPTzBmG1R9Wn+6B59H VbEacf2SqyQBJc5+QfngYn0PJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWVXwF9 NSgDQqLKJbu71Adm2K/6MB8GA1UdIwQYMBaAFEIB5at9hrxoWvEfAt5oQFFbbYBY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRCMC8xQ0M0RERCNjFE OEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZHaGE4UjhDM21oQVVWdHRn RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnSGxxMzJHdkdoYThSOEMzbWhBVVZ0dGdGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRCMC8xQ0M0RERCNjFEOEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZH aGE4UjhDM21oQVVWdHRnRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPz8MOxgXIQog/L1EVsFMv46WGLd+djGDGNmZzEdSlOr1uprTJ4VMz FSYZB19LyW2QvBVzzD7xneSExiLEUDtQ4Ob6xsopTEgsjaRXgh8gs1V/643hUvtZ pm4Z00q7famU0IiYjY5Vwcrl6Hpy623qGK+xo9TAi6hR0hBDyDub8MurutaHPwzB tbER3N2KHitfD4jIvMbqfY4CvxWYvz0Zv2bXJa7PX95rOIxqvIYsYjadlOMseR0T yqAjJ+hvDy7dUQ8+sebq2m6LdcmSNoI8NZreqaVVV1UylvkyeHHDaK+AgMC/t8TJ UXOJDlIv3m1SBlK+hP3eTrBPWv9zmqfj -----END CERTIFICATE-----Generated at Tue Dec 23 06:07:19 2025 by rpki-client