This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft File: qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json) Hash identifier: CXkl60EGfr6djxbQz8LRSxJ4DiirViPjEaG6fMWBAM8= Subject key identifier: 31:9B:0B:98:56:BC:64:B6:35:B4:80:98:93:24:E6:BC:D6:B7:83:1D Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 Certificate issuer: /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Certificate serial: 07F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft Manifest number: 07F0 Signing time: Mon 22 Dec 2025 20:26:28 +0000 Manifest this update: Mon 22 Dec 2025 20:26:27 +0000 Manifest next update: Mon 29 Dec 2025 20:26:27 +0000 Files and hashes: 1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: 2+E+g1xEb7fkHM2H1Bde5VfqZ0T9bRa2gcsrR6COluw=) 2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: BTersuR9nT3lEPvuv48IvMBlCU5YGyqezwR+drdWXyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Validity Not Before: Dec 22 20:26:27 2025 GMT Not After : Dec 29 20:26:27 2025 GMT Subject: CN=6949a973-5598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:7e:0d:c5:5f:1f:a0:45:c0:ef:13:50:33: 15:2b:6b:57:e8:6f:af:0c:71:63:69:04:d6:e4:9a: de:b7:54:0d:95:cb:cd:75:f2:3e:2e:ba:f9:5b:b3: bb:42:bf:18:1c:cb:97:6c:0d:f6:76:91:94:f1:bc: 6c:35:fd:fb:e9:5e:3a:08:78:64:73:8f:bc:8e:21: 00:21:6b:e4:14:f6:51:b4:10:33:75:2e:65:f2:18: 6a:e4:ad:9e:a7:c5:2d:a9:c3:cc:5d:e7:d4:12:ff: a7:6c:92:19:8e:60:fd:cf:44:b9:01:ec:f6:f6:f1: 26:d4:03:0c:e7:df:6b:c7:24:61:a0:ea:90:f3:dd: ef:f3:b3:6e:54:0d:00:76:3a:50:89:2e:0e:aa:da: 27:06:53:ff:5d:75:64:51:b5:e1:05:13:e0:f5:a2: 67:f4:11:19:f3:9c:54:21:fa:44:75:8b:ad:03:5f: c8:62:14:c2:da:b1:af:84:8a:a3:55:4d:06:a6:33: 5f:88:4a:a2:40:d0:e4:76:1b:1a:a0:c7:91:14:89: 22:3d:7b:d6:13:d3:57:c4:2a:3b:db:75:c4:3c:4c: cb:d5:e5:77:82:31:8e:4b:16:e2:51:a3:29:9c:83: 8a:7a:5c:49:b1:ba:79:3d:07:2b:33:b9:37:20:02: 68:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9B:0B:98:56:BC:64:B6:35:B4:80:98:93:24:E6:BC:D6:B7:83:1D X509v3 Authority Key Identifier: keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ae:06:b6:73:3b:1c:2d:8a:f4:7c:13:40:17:86:8e:87:ae: 81:34:f1:ec:67:fe:03:e3:02:08:16:91:60:eb:5a:f3:fe:c4: a4:47:d8:94:48:2c:bc:c4:9f:0e:ca:c0:c9:21:14:f5:31:09: 2c:e4:83:dc:ce:93:3b:65:ae:92:6c:60:b2:99:bb:5e:f9:8b: 56:17:f9:ec:48:c2:80:b0:11:85:54:71:64:c7:20:d3:57:1b: 3e:6b:84:d3:41:71:b4:74:d0:9c:52:56:a6:8d:68:e0:72:ff: e1:72:3d:0e:ea:66:af:fd:b6:12:49:05:90:31:92:ae:38:4b: 6b:25:9d:8d:66:3b:ed:18:96:bb:c2:98:4b:09:12:14:e7:4a: 3c:ce:32:d1:98:38:e9:d5:ae:2e:a6:5f:cc:97:c9:b6:14:92: 53:aa:1c:26:16:51:fb:04:9f:7c:40:3e:77:15:a0:c8:53:57: a9:af:63:0a:0d:80:be:54:c8:f8:7b:14:81:d5:6a:54:f9:2c: df:c3:93:e1:84:11:3a:91:e7:d3:ef:94:58:94:f4:7f:11:7a: e4:5b:c4:64:15:d6:1d:33:56:e5:85:c1:bd:c1:0f:86:8a:44: 7f:5e:c7:31:c0:19:2b:4e:15:92:aa:f3:7e:99:64:95:f1:f8: a4:bb:16:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2RTExMTAvBgNVBAUTKEE5NjZBMkIyN0ZFMTQ5MzdCRTM2RDI3REI1RjRENzY4 ODA4NDdERDcwHhcNMjUxMjIyMjAyNjI3WhcNMjUxMjI5MjAyNjI3WjAYMRYwFAYD VQQDDA02OTQ5YTk3My01NTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dN+DcVfH6BFwO8TUDMVK2tX6G+vDHFjaQTW5Jret1QNlcvNdfI+Lrr5W7O7 Qr8YHMuXbA32dpGU8bxsNf376V46CHhkc4+8jiEAIWvkFPZRtBAzdS5l8hhq5K2e p8UtqcPMXefUEv+nbJIZjmD9z0S5Aez29vEm1AMM599rxyRhoOqQ893v87NuVA0A djpQiS4OqtonBlP/XXVkUbXhBRPg9aJn9BEZ85xUIfpEdYutA1/IYhTC2rGvhIqj VU0GpjNfiEqiQNDkdhsaoMeRFIkiPXvWE9NXxCo723XEPEzL1eV3gjGOSxbiUaMp nIOKelxJsbp5PQcrM7k3IAJoxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGbC5hW vGS2NbSAmJMk5rzWt4MdMB8GA1UdIwQYMBaAFKlmorJ/4Uk3vjbSfbX012iAhH3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZFMS85ODlGM0EwQTBF QTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNUZS1OdEo5dGZUWGFJQ0Vm ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FXYWlzbl9oU1RlLU50Sjl0ZlRYYUlDRWZkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZFMS85ODlGM0EwQTBFQTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNU ZS1OdEo5dGZUWGFJQ0VmZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCarga2czscLYr0fBNAF4aOh66BNPHsZ/4D4wIIFpFg61rz/sSkR9iU SCy8xJ8OysDJIRT1MQks5IPczpM7Za6SbGCymbte+YtWF/nsSMKAsBGFVHFkxyDT Vxs+a4TTQXG0dNCcUlamjWjgcv/hcj0O6mav/bYSSQWQMZKuOEtrJZ2NZjvtGJa7 wphLCRIU50o8zjLRmDjp1a4upl/Ml8m2FJJTqhwmFlH7BJ98QD53FaDIU1epr2MK DYC+VMj4exSB1WpU+Szfw5PhhBE6kefT75RYlPR/EXrkW8RkFdYdM1blhcG9wQ+G ikR/XscxwBkrThWSqvN+mWSV8fikuxYI -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:20 2025 by rpki-client