This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft File: QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft (raw, json) Hash identifier: BI8jm30CW09bw4MTbz7uYNOavW06/009dbMaa8JpYLA= Subject key identifier: 29:7D:38:AE:BD:27:8C:B0:83:D9:3D:5F:25:25:6D:66:56:B2:C5:B0 Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 Certificate issuer: /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Certificate serial: 08C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft Manifest number: 08B1 Signing time: Mon 22 Dec 2025 19:51:49 +0000 Manifest this update: Mon 22 Dec 2025 19:51:48 +0000 Manifest next update: Mon 29 Dec 2025 19:51:48 +0000 Files and hashes: 1: QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl (hash: aEF9/YGP385krW3eO+4Pfh0uFB6cK6lmfMHwlY1Og/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914740F, serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Validity Not Before: Dec 22 19:51:48 2025 GMT Not After : Dec 29 19:51:48 2025 GMT Subject: CN=6949a155-9c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:08:2b:b5:1b:ee:0b:b8:bf:0d:7a:0f:30:74: ba:7e:41:ac:35:3e:f3:9b:7d:72:dd:10:c1:1c:4e: b3:45:1d:af:a4:72:95:5d:7f:7b:80:e1:09:c1:29: fa:ed:df:54:0a:89:d8:68:a0:42:02:19:b8:dd:fd: 4a:19:46:b6:26:f1:cb:76:05:f1:f8:b0:47:5d:b8: ec:1f:f1:a2:e1:32:79:b7:49:c2:2b:9c:09:b2:6b: ba:da:b7:68:0a:d6:6a:b4:ad:1d:8d:d1:b8:85:6a: 15:bc:23:d5:ab:e4:dc:77:77:da:ea:cc:00:de:65: 34:3a:d5:a9:1f:5a:de:d7:e3:41:75:b6:22:c6:16: 25:bf:9a:cd:e6:cb:a9:0c:21:d4:89:13:54:0d:ea: f4:64:66:f1:01:ea:7d:c2:10:1f:1c:8a:96:5c:64: 08:f7:a1:23:24:11:5e:b8:96:03:a5:03:f0:bb:d1: 80:f8:a9:c0:a3:7d:cb:54:a6:32:e5:3f:fd:d5:75: 0d:c6:c8:d2:fa:88:54:7c:b1:d0:6b:b4:fa:4c:0b: 3c:18:03:55:9d:d3:df:30:86:33:47:52:a8:5b:f9: 8c:e5:b6:98:57:9f:9e:ea:2c:09:0d:6a:29:49:8c: d8:85:bd:29:fb:c3:48:6f:0b:d8:1e:dc:5e:ef:1b: d9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7D:38:AE:BD:27:8C:B0:83:D9:3D:5F:25:25:6D:66:56:B2:C5:B0 X509v3 Authority Key Identifier: keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e7:e3:38:97:ca:4c:c2:e1:87:4f:a4:6c:3c:2b:55:9b:e2: 65:53:13:a5:43:6d:ce:b9:0b:9f:d2:61:ce:29:e2:b9:dd:29: f4:18:5f:50:2e:cf:98:e1:d5:cc:87:d8:97:fe:ee:82:55:9e: 9f:e6:fe:f2:05:cd:d2:98:89:35:85:d4:82:d2:5d:c7:35:8e: ef:4d:71:c7:e1:69:66:01:4e:2c:4a:20:93:3f:27:08:0f:28: e2:83:0e:fd:3c:d7:db:b3:f4:81:ab:ee:4f:10:d8:e7:3a:e9: 55:48:d0:9b:ed:29:4b:02:ff:49:c5:15:f3:77:0d:d3:6e:42: 1e:7f:f3:3e:69:45:ef:7b:02:cd:00:9b:9b:5a:92:4f:7a:5a: d3:9d:7a:e0:3a:84:84:ac:d3:88:43:c1:f9:43:b4:eb:aa:11: fe:f5:9d:de:68:4f:4d:a0:dd:78:11:dc:60:9f:3f:1f:aa:ec: 84:ed:b6:89:bd:69:0f:b2:a0:c6:43:09:1a:6c:77:b0:9f:b7: 8e:ef:b6:1a:63:18:d3:25:5b:d0:b3:af:52:49:7e:6a:7f:25: 2f:aa:8e:91:21:61:87:ed:38:ef:d0:bf:00:8c:ef:0b:71:ee: c4:43:25:5c:dc:30:c4:a8:c8:da:43:76:98:3a:5b:7f:a7:a1: a5:75:52:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0MEYxMTAvBgNVBAUTKDQxNUNERkMzRTZDRTY1MzMwNkVBOTVBRDE2N0QyRTg5 NzVDNUU0MDMwHhcNMjUxMjIyMTk1MTQ4WhcNMjUxMjI5MTk1MTQ4WjAYMRYwFAYD VQQDDA02OTQ5YTE1NS05Yzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAgrtRvuC7i/DXoPMHS6fkGsNT7zm31y3RDBHE6zRR2vpHKVXX97gOEJwSn6 7d9UConYaKBCAhm43f1KGUa2JvHLdgXx+LBHXbjsH/Gi4TJ5t0nCK5wJsmu62rdo CtZqtK0djdG4hWoVvCPVq+Tcd3fa6swA3mU0OtWpH1re1+NBdbYixhYlv5rN5sup DCHUiRNUDer0ZGbxAep9whAfHIqWXGQI96EjJBFeuJYDpQPwu9GA+KnAo33LVKYy 5T/91XUNxsjS+ohUfLHQa7T6TAs8GANVndPfMIYzR1KoW/mM5baYV5+e6iwJDWop SYzYhb0p+8NIbwvYHtxe7xvZ+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCl9OK69 J4ywg9k9XyUlbWZWssWwMB8GA1UdIwQYMBaAFEFc38PmzmUzBuqVrRZ9Lol1xeQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQwRi80MTQyRDUwRUND OTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pUTUc2cFd0Rm4wdWlYWEY1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWemZ3LWJPWlRNRzZwV3RGbjB1aVhYRjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQwRi80MTQyRDUwRUNDOTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pU TUc2cFd0Rm4wdWlYWEY1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq5+M4l8pMwuGHT6RsPCtVm+JlUxOlQ23OuQuf0mHOKeK53Sn0GF9Q Ls+Y4dXMh9iX/u6CVZ6f5v7yBc3SmIk1hdSC0l3HNY7vTXHH4WlmAU4sSiCTPycI Dyjigw79PNfbs/SBq+5PENjnOulVSNCb7SlLAv9JxRXzdw3TbkIef/M+aUXvewLN AJubWpJPelrTnXrgOoSErNOIQ8H5Q7TrqhH+9Z3eaE9NoN14Edxgnz8fquyE7baJ vWkPsqDGQwkabHewn7eO77YaYxjTJVvQs69SSX5qfyUvqo6RIWGH7Tjv0L8AjO8L ce7EQyVc3DDEqMjaQ3aYOlt/p6GldVLc -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:31 2025 by rpki-client