This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft File: qtrfI2_7nO0qpky3zl2Z1R066RM.mft (raw, json) Hash identifier: tL8FHRbsRd8PK9w6YZxhBSPuT7UCVDyL33uaBeNkyVw= Subject key identifier: 60:D8:4B:E5:F1:61:83:F3:86:24:F9:C7:EA:79:FD:4D:56:76:48:9A Authority key identifier: AA:DA:DF:23:6F:FB:9C:ED:2A:A6:4C:B7:CE:5D:99:D5:1D:3A:E9:13 Certificate issuer: /CN=A9167671/serialNumber=AADADF236FFB9CED2AA64CB7CE5D99D51D3AE913 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft Manifest number: 26 Signing time: Tue 23 Dec 2025 06:34:29 +0000 Manifest this update: Tue 23 Dec 2025 06:34:29 +0000 Manifest next update: Tue 30 Dec 2025 06:34:29 +0000 Files and hashes: 1: qtrfI2_7nO0qpky3zl2Z1R066RM.crl (hash: RetlrkXbl2cwrn3T/n313UmESXJKOSIifERHAXz3VCM=) 2: E1CBE78EADFA11F08ED60C0DC4F9AE02.roa (hash: vIYtmstFR8g2+vQnV7MsR8fjsNj0Vs2+JEeA9zk+p4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.crl rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167671, serialNumber=AADADF236FFB9CED2AA64CB7CE5D99D51D3AE913 Validity Not Before: Dec 23 06:34:29 2025 GMT Not After : Dec 30 06:34:29 2025 GMT Subject: CN=694a37f5-b775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f9:05:a1:0f:5c:fd:c1:eb:d7:b9:18:c8:da: 68:e4:10:d3:d5:f8:57:97:45:ea:f6:d0:f3:a0:1c: cd:ae:c8:1c:fe:9c:87:60:85:9c:40:1f:9a:b0:30: be:88:f9:28:1a:17:f4:60:b9:f5:ce:c8:d4:38:92: 82:07:a4:45:97:71:d0:4d:05:b1:6a:ba:d1:8f:58: 77:db:51:c2:6d:79:6d:93:1b:c4:be:dd:ef:ae:47: 5a:fb:3b:9d:c4:c2:03:de:a6:b9:8b:14:3b:b6:cc: 34:b5:11:63:ae:d6:9e:26:df:69:1c:b6:36:e1:76: 50:c4:5e:48:4d:94:b5:9e:54:6d:08:f9:ce:d1:59: d5:4c:30:86:01:fd:3a:13:63:4e:3a:f7:c8:42:e0: c6:7f:cf:86:c7:bb:aa:e4:ff:b9:a9:7f:84:10:21: c6:ce:0a:9e:52:dc:c7:dc:d4:94:94:fc:a3:e4:b6: 3d:f3:b7:35:db:b9:fa:79:d1:b0:f8:32:6b:31:0e: f5:02:d6:0f:9e:cf:d8:23:65:11:3a:b1:de:10:05: 29:63:78:3a:60:83:88:e8:7e:7f:3b:c1:7f:77:a1: 3b:d6:63:25:c2:04:e8:d4:56:d1:81:ef:15:25:91: 40:12:89:00:03:9b:94:ad:8c:08:7d:ac:76:8b:6e: 26:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D8:4B:E5:F1:61:83:F3:86:24:F9:C7:EA:79:FD:4D:56:76:48:9A X509v3 Authority Key Identifier: keyid:AA:DA:DF:23:6F:FB:9C:ED:2A:A6:4C:B7:CE:5D:99:D5:1D:3A:E9:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f4:b9:66:b3:e9:89:6e:a4:7d:58:e2:02:ce:df:c4:12:db: 5a:cf:83:71:ff:ba:b5:18:cc:d7:89:3f:cf:6d:9b:44:a1:e3: 8a:76:79:6d:bf:34:7a:7c:c9:ab:1f:df:d6:b8:f2:db:ec:01: 2b:07:1f:46:eb:9e:45:70:46:ef:f0:0c:16:97:69:73:cc:d3: 7f:3e:b9:9a:d7:4e:9e:7e:80:d4:ac:b0:6d:0d:a5:ca:fc:4b: 27:08:31:cb:bd:9d:73:bc:7a:7f:5d:fc:07:1c:b6:69:21:25: fb:09:33:42:3c:d1:14:23:8c:5c:81:33:08:0b:64:0e:d5:38: e1:43:b2:2d:0b:ef:e4:0c:ca:7c:d9:e4:a3:45:03:01:29:ca: 60:15:69:dd:42:92:f4:f8:56:b0:f7:2f:46:c3:cc:28:d5:d6: 00:9f:6f:c0:65:62:f2:af:9e:70:71:84:25:98:de:47:40:ad: cd:55:2c:f2:84:16:6e:e7:bc:14:71:d0:c1:83:37:f8:ff:aa: 7a:ff:ad:30:8d:bc:a3:f5:a8:59:de:fb:da:85:d9:71:e0:1a: 09:13:d7:c7:fa:a8:f2:0d:4d:d5:21:07:fc:0d:a7:38:db:b4: 90:9f:e8:9a:cc:b9:88:d4:e9:af:10:72:fc:2c:c9:05:3b:11: d4:2c:93:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzY3MTExMC8GA1UEBRMoQUFEQURGMjM2RkZCOUNFRDJBQTY0Q0I3Q0U1RDk5RDUx RDNBRTkxMzAeFw0yNTEyMjMwNjM0MjlaFw0yNTEyMzAwNjM0MjlaMBgxFjAUBgNV BAMMDTY5NGEzN2Y1LWI3NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd+QWhD1z9wevXuRjI2mjkENPV+FeXRer20POgHM2uyBz+nIdghZxAH5qwML6I +SgaF/RgufXOyNQ4koIHpEWXcdBNBbFqutGPWHfbUcJteW2TG8S+3e+uR1r7O53E wgPeprmLFDu2zDS1EWOu1p4m32kctjbhdlDEXkhNlLWeVG0I+c7RWdVMMIYB/ToT Y04698hC4MZ/z4bHu6rk/7mpf4QQIcbOCp5S3Mfc1JSU/KPktj3ztzXbufp50bD4 MmsxDvUC1g+ez9gjZRE6sd4QBSljeDpgg4jofn87wX93oTvWYyXCBOjUVtGB7xUl kUASiQADm5StjAh9rHaLbiYJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYNhL5fFh g/OGJPnH6nn9TVZ2SJowHwYDVR0jBBgwFoAUqtrfI2/7nO0qpky3zl2Z1R066RMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NjcxLzZGMjg2QjEyQURG QTExRjBBQjkwODc4N0M0RjlBRTAyL3F0cmZJMl83bk8wcXBreTN6bDJaMVIwNjZS TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXRyZkkyXzduTzBxcGt5M3psMloxUjA2NlJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 NjcxLzZGMjg2QjEyQURGQTExRjBBQjkwODc4N0M0RjlBRTAyL3F0cmZJMl83bk8w cXBreTN6bDJaMVIwNjZSTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIj0uWaz6YlupH1Y4gLO38QS21rPg3H/urUYzNeJP89tm0Sh44p2eW2/ NHp8yasf39a48tvsASsHH0brnkVwRu/wDBaXaXPM038+uZrXTp5+gNSssG0Npcr8 SycIMcu9nXO8en9d/AcctmkhJfsJM0I80RQjjFyBMwgLZA7VOOFDsi0L7+QMynzZ 5KNFAwEpymAVad1CkvT4VrD3L0bDzCjV1gCfb8BlYvKvnnBxhCWY3kdArc1VLPKE Fm7nvBRx0MGDN/j/qnr/rTCNvKP1qFne+9qF2XHgGgkT18f6qPINTdUhB/wNpzjb tJCf6JrMuYjU6a8QcvwsyQU7EdQskzc= -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:13 2025 by rpki-client