This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft File: qz22NdhTYB5LpVUAZxIB2Jb-za0.mft (raw, json) Hash identifier: pu7XwEU14qvHfDGcIfMSp+QcwsH5fWDsBPLi6hNeAyY= Subject key identifier: F9:C1:55:AC:3D:0C:E0:E6:6A:F3:B9:D3:DA:52:2D:53:58:FA:A2:6C Authority key identifier: AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD Certificate issuer: /CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Certificate serial: 092A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft Manifest number: 0922 Signing time: Mon 22 Dec 2025 19:38:05 +0000 Manifest this update: Mon 22 Dec 2025 19:38:04 +0000 Manifest next update: Mon 29 Dec 2025 19:38:04 +0000 Files and hashes: 1: qz22NdhTYB5LpVUAZxIB2Jb-za0.crl (hash: B8GUukyNIVkhWJZUzTH7J/MYVsSUvkP90YcyR0YiVEQ=) 2: 0FE0AF42B5DB11EA9DA12556C4F9AE02.roa (hash: Fs5lIXhoeLDLVgaGXIOh275fjXBBfxZsCamTtOxAxUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2346 (0x92a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FDF3, serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Validity Not Before: Dec 22 19:38:04 2025 GMT Not After : Dec 29 19:38:04 2025 GMT Subject: CN=69499e1c-346d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:43:b8:f6:19:67:6c:dc:29:92:72:7c:ae: 06:72:01:6b:bf:11:d0:1b:a6:94:e0:61:3a:31:e5: 2a:31:88:36:91:16:cd:5f:45:55:f9:a0:23:97:9c: 1b:eb:d4:20:36:9f:bf:b6:d7:c9:15:e1:34:9f:d2: de:e4:1f:8a:8c:5a:16:f4:4f:fc:24:9f:2f:dc:70: 4d:53:91:04:ca:3d:7c:85:1a:f0:ae:a8:60:d5:28: ef:4c:a0:82:25:ab:d6:fc:0f:47:43:b5:98:cf:a5: 28:d4:7a:af:5b:78:e0:f1:0f:c5:a5:d4:d6:44:8e: e5:58:29:1b:18:24:a6:a5:c7:a5:79:86:5c:5f:ff: d6:9a:e9:52:49:02:ec:5c:69:dc:8d:cd:49:03:ab: a8:e5:52:14:95:4e:ab:b5:31:4c:19:64:b5:9e:4e: 36:d1:40:3b:f1:75:3d:c5:8a:c9:56:69:54:4c:b3: 62:92:b3:ae:b7:1a:98:1b:94:bc:0c:a6:8c:38:05: a9:9b:21:e0:1f:25:ae:b6:f0:ec:ad:6d:3e:a8:5b: 96:21:dc:70:0e:c2:29:65:e9:c8:30:aa:b3:2f:d8: bb:70:ae:b2:44:63:18:69:0d:6e:79:b0:2d:8c:19: 51:ba:52:db:60:80:f3:f4:50:09:a1:50:11:5e:e0: fc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C1:55:AC:3D:0C:E0:E6:6A:F3:B9:D3:DA:52:2D:53:58:FA:A2:6C X509v3 Authority Key Identifier: keyid:AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:a0:f9:90:ea:82:bc:05:74:ce:6d:d3:ee:6a:a2:0d:11:cf: ef:6b:e9:89:db:0a:2b:79:bf:c3:ed:04:a4:8f:1b:6c:44:78: 4d:ff:f1:23:13:9b:b9:f0:65:36:a7:6f:94:75:06:46:3d:ed: f9:99:f7:56:dc:9d:38:d4:36:07:a3:09:42:0e:e7:ce:1c:55: 11:96:7c:1d:b5:3a:46:fe:d7:c3:1d:be:21:f6:ef:1d:b4:e6: f3:63:20:64:28:cc:7e:c4:3a:4b:64:49:ea:1f:2f:29:a8:dc: 1c:ca:24:ea:0d:f6:8d:b5:12:5a:e9:82:ab:28:f3:df:c7:9a: ef:6c:5a:13:e4:bc:31:cc:0b:7a:05:1e:4f:c7:d7:18:80:f8: 11:5f:c8:60:da:ad:5c:89:85:d7:29:24:ad:a3:a0:be:68:74: 08:af:60:6a:92:f4:a4:fe:b6:38:b4:23:b1:1a:87:5d:7d:fa: 3b:79:05:d9:cd:85:9a:51:5b:7a:72:3e:ec:59:09:20:15:73: c6:2a:b9:d9:58:76:66:5a:16:85:0e:4b:0c:d8:6f:96:51:a7: 60:8a:53:40:32:29:4b:62:71:5d:2f:d6:ae:d9:30:a6:98:18: c3:cc:ac:83:ed:13:65:30:94:08:74:06:c7:38:51:72:2f:60: db:80:31:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZERjMxMTAvBgNVBAUTKEFCM0RCNjM1RDg1MzYwMUU0QkE1NTUwMDY3MTIwMUQ4 OTZGRUNEQUQwHhcNMjUxMjIyMTkzODA0WhcNMjUxMjI5MTkzODA0WjAYMRYwFAYD VQQDDA02OTQ5OWUxYy0zNDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8JDuPYZZ2zcKZJyfK4GcgFrvxHQG6aU4GE6MeUqMYg2kRbNX0VV+aAjl5wb 69QgNp+/ttfJFeE0n9Le5B+KjFoW9E/8JJ8v3HBNU5EEyj18hRrwrqhg1SjvTKCC JavW/A9HQ7WYz6Uo1HqvW3jg8Q/FpdTWRI7lWCkbGCSmpceleYZcX//WmulSSQLs XGncjc1JA6uo5VIUlU6rtTFMGWS1nk420UA78XU9xYrJVmlUTLNikrOutxqYG5S8 DKaMOAWpmyHgHyWutvDsrW0+qFuWIdxwDsIpZenIMKqzL9i7cK6yRGMYaQ1uebAt jBlRulLbYIDz9FAJoVARXuD84QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnBVaw9 DODmavO509pSLVNY+qJsMB8GA1UdIwQYMBaAFKs9tjXYU2AeS6VVAGcSAdiW/s2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkRGMy9CM0E4NTJCMkI1 RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlCNUxwVlVBWnhJQjJKYi16 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F6MjJOZGhUWUI1THBWVUFaeElCMkpiLXphMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkRGMy9CM0E4NTJCMkI1RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlC NUxwVlVBWnhJQjJKYi16YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcoPmQ6oK8BXTObdPuaqINEc/va+mJ2woreb/D7QSkjxtsRHhN//Ej E5u58GU2p2+UdQZGPe35mfdW3J041DYHowlCDufOHFURlnwdtTpG/tfDHb4h9u8d tObzYyBkKMx+xDpLZEnqHy8pqNwcyiTqDfaNtRJa6YKrKPPfx5rvbFoT5LwxzAt6 BR5Px9cYgPgRX8hg2q1ciYXXKSSto6C+aHQIr2BqkvSk/rY4tCOxGoddffo7eQXZ zYWaUVt6cj7sWQkgFXPGKrnZWHZmWhaFDksM2G+WUadgilNAMilLYnFdL9au2TCm mBjDzKyD7RNlMJQIdAbHOFFyL2DbgDFS -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:38 2025 by rpki-client