This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft File: QRX9yGsnZiNgOztkXUcIQLgDm8g.mft (raw, json) Hash identifier: QxjLWzsB7WLRYP+ULbvQU/bsaQR/YE81ywytjJx13bA= Subject key identifier: 0C:1A:45:D2:F1:2E:67:69:86:CA:76:84:0E:CE:3F:71:16:56:C9:6A Authority key identifier: 41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 Certificate issuer: /CN=A916E9E3/serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft Manifest number: 28 Signing time: Tue 23 Dec 2025 06:30:45 +0000 Manifest this update: Tue 23 Dec 2025 06:30:44 +0000 Manifest next update: Tue 30 Dec 2025 06:30:44 +0000 Files and hashes: 1: QRX9yGsnZiNgOztkXUcIQLgDm8g.crl (hash: EXKFRvoEXswrDrGZ9SM/oGqK4GBKh3vryiG17NXOrmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Validity Not Before: Dec 23 06:30:44 2025 GMT Not After : Dec 30 06:30:44 2025 GMT Subject: CN=694a3714-e4bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:59:99:e8:ba:d5:3c:55:79:87:10:3e:b2:9f: 3c:52:8f:24:4c:e0:36:35:b8:15:c3:d2:36:9c:d2: 11:97:b4:f9:29:4a:13:ff:62:ba:10:d9:36:a8:3c: 7e:f5:ae:c2:fd:c2:97:07:3e:87:5f:41:62:cf:fb: f2:17:13:e9:56:3c:58:10:a7:7d:0c:46:f4:12:0d: 76:e2:82:b2:20:67:e7:ce:a8:4b:4a:a2:2b:7f:08: d9:84:ec:ce:ac:98:23:84:50:8b:52:65:91:75:fb: 88:62:b5:d9:6b:2b:d2:da:80:d9:25:8b:fd:18:a0: b7:15:2f:88:df:4a:13:30:3f:7b:2e:38:a6:03:0d: 0f:7f:a5:27:a2:c6:a3:8f:09:48:30:a5:ba:50:2e: b8:54:c8:0e:ee:7f:80:d6:31:78:eb:d5:c0:1e:7f: bb:ae:38:0d:c4:cf:e9:a8:63:6c:d9:5e:48:96:4c: 39:61:00:d7:b8:44:4c:24:2d:24:70:82:de:53:c3: 3c:8b:ba:ff:2d:40:3b:6d:f5:74:26:6e:8f:46:31: ab:28:4f:1a:0f:09:cc:f6:23:9c:57:97:5f:49:97: 2c:4e:55:7a:aa:54:6c:f4:db:20:da:b4:91:bc:b5: bf:64:75:69:96:6c:bd:77:99:77:18:ae:20:df:27: 99:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1A:45:D2:F1:2E:67:69:86:CA:76:84:0E:CE:3F:71:16:56:C9:6A X509v3 Authority Key Identifier: keyid:41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:27:0c:c9:d2:42:af:61:4d:94:47:e8:c1:af:0f:55:4e:50: 08:be:4d:4b:d4:8d:6a:04:61:74:10:31:4e:0f:6b:3e:0e:da: 4b:34:a5:52:e1:b4:9b:82:29:68:16:90:ac:f5:13:ec:d2:2c: 08:69:d9:33:86:b1:77:c3:5b:44:43:22:55:18:f8:b8:5f:f0: eb:e7:36:54:a3:ec:d8:1f:03:ef:a5:d5:0c:60:f4:63:73:d0: c5:08:9e:c5:79:46:30:29:c8:ee:7c:c7:bb:1b:38:73:f2:ec: 23:7e:28:45:8b:bc:0e:01:ca:82:f5:d9:a6:66:0a:23:73:41: 00:7f:53:c1:cd:48:41:b6:8d:4e:15:22:13:6d:82:6c:ee:4a: 43:2d:40:69:6d:95:7e:c4:57:57:bc:bd:ca:76:ca:f9:65:5e: 1c:3f:11:05:5f:34:3e:e9:9f:39:e6:1d:dd:19:34:d7:ea:c6: 4a:c9:42:ce:19:65:b2:f8:fd:ac:5e:f4:f9:77:fd:4c:7d:3e: 27:27:f9:12:57:b0:1a:d3:46:02:56:b8:b6:a0:4b:85:2b:4a: cf:1f:56:35:c6:25:80:a9:08:9a:12:8c:42:66:e1:86:06:fb: a8:ee:88:6d:56:63:c7:a3:72:aa:8d:49:6a:54:13:10:5f:61: 68:fa:8e:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlFMzExMC8GA1UEBRMoNDExNUZEQzg2QjI3NjYyMzYwM0IzQjY0NUQ0NzA4NDBC ODAzOUJDODAeFw0yNTEyMjMwNjMwNDRaFw0yNTEyMzAwNjMwNDRaMBgxFjAUBgNV BAMMDTY5NGEzNzE0LWU0YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeWZnoutU8VXmHED6ynzxSjyRM4DY1uBXD0jac0hGXtPkpShP/YroQ2TaoPH71 rsL9wpcHPodfQWLP+/IXE+lWPFgQp30MRvQSDXbigrIgZ+fOqEtKoit/CNmE7M6s mCOEUItSZZF1+4hitdlrK9LagNkli/0YoLcVL4jfShMwP3suOKYDDQ9/pSeixqOP CUgwpbpQLrhUyA7uf4DWMXjr1cAef7uuOA3Ez+moY2zZXkiWTDlhANe4REwkLSRw gt5TwzyLuv8tQDtt9XQmbo9GMasoTxoPCcz2I5xXl19JlyxOVXqqVGz02yDatJG8 tb9kdWmWbL13mXcYriDfJ5mhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDBpF0vEu Z2mGynaEDs4/cRZWyWowHwYDVR0jBBgwFoAUQRX9yGsnZiNgOztkXUcIQLgDm8gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzRFMEUzNzE0QTNB NDExRjA5MjAxM0UyOUM0RjlBRTAyL1FSWDl5R3NuWmlOZ096dGtYVWNJUUxnRG04 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVJYOXlHc25aaU5nT3p0a1hVY0lRTGdEbThnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF OUUzLzRFMEUzNzE0QTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyL1FSWDl5R3NuWmlO Z096dGtYVWNJUUxnRG04Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJAnDMnSQq9hTZRH6MGvD1VOUAi+TUvUjWoEYXQQMU4Paz4O2ks0pVLh tJuCKWgWkKz1E+zSLAhp2TOGsXfDW0RDIlUY+Lhf8OvnNlSj7NgfA++l1Qxg9GNz 0MUInsV5RjApyO58x7sbOHPy7CN+KEWLvA4ByoL12aZmCiNzQQB/U8HNSEG2jU4V IhNtgmzuSkMtQGltlX7EV1e8vcp2yvllXhw/EQVfND7pnznmHd0ZNNfqxkrJQs4Z ZbL4/axe9Pl3/Ux9Picn+RJXsBrTRgJWuLagS4UrSs8fVjXGJYCpCJoSjEJm4YYG +6juiG1WY8ejcqqNSWpUExBfYWj6jlo= -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:33 2025 by rpki-client