This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft File: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json) Hash identifier: hTfSC8cMNRDgh2ihtxeETrfxrj7HGxUoC07R8iJI3n4= Subject key identifier: F0:C3:D9:A8:59:D7:FD:CA:12:20:20:DC:FE:62:CE:08:9F:56:24:A3 Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 Certificate issuer: /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Certificate serial: 2820 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft Manifest number: 2810 Signing time: Mon 22 Dec 2025 15:28:24 +0000 Manifest this update: Mon 22 Dec 2025 15:28:24 +0000 Manifest next update: Mon 29 Dec 2025 15:28:24 +0000 Files and hashes: 1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: v8LcQgY2GTOD8Wk1BIABe1S04uBTLgsZmH4IFff0N6Y=) 2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: h5hXtP9IbSxqcG/aS1dzRp2AGDqGhZ3NxNAa9bJM38Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10272 (0x2820) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Validity Not Before: Dec 22 15:28:24 2025 GMT Not After : Dec 29 15:28:24 2025 GMT Subject: CN=69496398-6a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5a:d7:5a:74:38:bf:22:93:48:c7:1c:43:a0: 33:34:2c:80:52:90:d4:f9:d2:2e:8f:f4:2e:b4:a6: 27:16:c2:16:0d:56:19:ae:a7:61:75:85:9e:ba:e3: 4c:e9:68:4d:ee:18:21:38:0d:bc:93:5a:30:bb:e7: e1:fc:ae:c7:69:04:3b:54:10:51:a9:26:ef:8e:e1: 44:01:f9:ac:36:bd:78:3f:db:4e:2a:cd:2c:9d:e4: 5a:b6:bb:c0:26:4a:bb:59:fe:be:ab:af:60:cd:af: 2c:5e:10:7a:59:e1:5a:4a:d3:a9:5e:3c:ac:09:b1: fc:c8:2e:ce:b4:18:4a:7a:5f:c5:a2:ca:3e:2a:84: f6:7f:13:ce:41:38:81:9c:f9:b1:e9:87:98:68:08: 41:cc:f4:d0:ec:c0:db:64:b5:d7:e7:59:52:25:da: ae:5e:2f:3e:8a:89:53:3a:24:8b:4e:d3:5b:9f:6f: ec:b7:f3:69:e7:c0:5c:58:0d:ed:f5:6e:ed:e6:6e: a4:ea:ab:3d:5c:78:8b:ad:64:85:75:16:5c:32:76: 78:91:7a:f3:29:10:c9:73:42:c1:0d:ce:9e:40:f4: c9:c7:81:db:10:20:37:4d:fe:dc:24:95:dd:58:eb: a5:61:83:fc:f2:75:a2:ac:39:66:97:b7:67:21:16: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C3:D9:A8:59:D7:FD:CA:12:20:20:DC:FE:62:CE:08:9F:56:24:A3 X509v3 Authority Key Identifier: keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cc:9e:ba:75:13:99:8b:6e:a4:27:97:6a:2e:ad:c1:a3:0a: c9:00:a3:18:7c:44:1b:06:4d:01:0e:01:cd:a4:50:e6:78:e2: d0:c3:86:15:77:f0:7f:c0:48:4f:ba:00:83:a3:40:38:1e:3c: 6c:0f:db:a6:96:ef:2b:52:76:16:5b:2c:a6:19:c6:d4:67:fb: bc:82:dd:92:0d:58:2e:2b:0b:68:4b:a2:89:fc:1b:49:00:4d: 77:be:6e:a2:52:5a:00:34:bf:6f:a3:e1:80:7e:88:0e:d9:6d: 7b:63:5b:6a:8e:88:80:6b:78:f8:1a:1b:c3:b0:6b:36:8d:6b: 10:9b:95:7d:9a:a0:bd:bb:75:2c:ca:26:cb:59:20:62:58:3d: 8e:b7:0e:24:78:b4:a2:4a:85:a5:7a:17:3d:b9:f0:0d:1a:fa: 6e:31:87:82:39:2f:f0:64:ac:de:da:94:12:0b:50:1d:60:24: 49:3c:d0:39:ce:85:26:25:5c:a7:90:2c:4a:c4:62:1b:73:5d: b5:6c:32:f8:46:cf:2f:89:e6:2e:dd:30:8b:09:94:8f:f4:2d: a7:82:ce:23:c8:49:ab:9e:24:ca:8e:db:1e:84:32:98:33:72: b1:f4:4f:8a:0b:5e:43:96:3e:a9:14:89:be:95:d0:78:80:bd: e4:f4:ec:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQ0YxMTAvBgNVBAUTKDQzODE5NTVFMjY1QTI4M0Y4NURDOUE0NEU5RDUxMzcz MTI3QTI0MTIwHhcNMjUxMjIyMTUyODI0WhcNMjUxMjI5MTUyODI0WjAYMRYwFAYD VQQDDA02OTQ5NjM5OC02YTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlrXWnQ4vyKTSMccQ6AzNCyAUpDU+dIuj/QutKYnFsIWDVYZrqdhdYWeuuNM 6WhN7hghOA28k1owu+fh/K7HaQQ7VBBRqSbvjuFEAfmsNr14P9tOKs0sneRatrvA Jkq7Wf6+q69gza8sXhB6WeFaStOpXjysCbH8yC7OtBhKel/Foso+KoT2fxPOQTiB nPmx6YeYaAhBzPTQ7MDbZLXX51lSJdquXi8+iolTOiSLTtNbn2/st/Np58BcWA3t 9W7t5m6k6qs9XHiLrWSFdRZcMnZ4kXrzKRDJc0LBDc6eQPTJx4HbECA3Tf7cJJXd WOulYYP88nWirDlml7dnIRbDNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDD2ahZ 1/3KEiAg3P5izgifViSjMB8GA1UdIwQYMBaAFEOBlV4mWig/hdyaROnVE3MSeiQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDRi9ENjFGRUE5RUE3 NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtELUYzSnBFNmRVVGN4SjZK QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0R1ZYaVphS0QtRjNKcEU2ZFVUY3hKNkpCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDRi9ENjFGRUE5RUE3NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtE LUYzSnBFNmRVVGN4SjZKQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqzJ66dROZi26kJ5dqLq3BowrJAKMYfEQbBk0BDgHNpFDmeOLQw4YV d/B/wEhPugCDo0A4HjxsD9umlu8rUnYWWyymGcbUZ/u8gt2SDVguKwtoS6KJ/BtJ AE13vm6iUloANL9vo+GAfogO2W17Y1tqjoiAa3j4GhvDsGs2jWsQm5V9mqC9u3Us yibLWSBiWD2Otw4keLSiSoWlehc9ufANGvpuMYeCOS/wZKze2pQSC1AdYCRJPNA5 zoUmJVynkCxKxGIbc121bDL4Rs8vieYu3TCLCZSP9C2ngs4jyEmrniTKjtsehDKY M3Kx9E+KC15Dlj6pFIm+ldB4gL3k9Oxx -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:17 2025 by rpki-client