This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json) Hash identifier: FuKqYu04+lLtM99wtZGlWSh7JT2yYCcewdJm4F4p38U= Subject key identifier: A2:6D:25:63:4B:D8:EE:F7:15:12:9C:B4:F3:A5:43:EA:E1:63:01:72 Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Certificate serial: 0670 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft Manifest number: 0670 Signing time: Tue 02 Dec 2025 21:37:59 +0000 Manifest this update: Tue 02 Dec 2025 21:37:59 +0000 Manifest next update: Tue 09 Dec 2025 21:37:59 +0000 Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: Mkb71Xko/VP3FcEZ6TFGb/8Xo11uy89CXBRuadmujzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 21:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Validity Not Before: Dec 2 21:37:59 2025 GMT Not After : Dec 9 21:37:59 2025 GMT Subject: CN=692f5c37-184b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:84:5e:75:56:d5:58:d7:1a:39:71:5e:c9: 1c:2d:53:17:cd:1b:13:f3:17:fd:70:4d:7f:ce:5b: ee:63:90:a4:df:aa:3a:d9:4a:f0:e7:a1:65:50:a7: 05:0b:c6:40:27:82:12:b9:66:40:9b:06:53:4b:c3: 87:73:03:ad:c4:35:7f:ac:dc:d7:9f:e7:87:61:b0: 85:fa:39:74:bd:cc:80:83:2d:d5:d1:9a:7b:57:f2: 46:16:02:da:36:29:8a:d7:cc:6d:21:2a:02:8a:16: e6:58:ba:3c:da:75:3e:f9:8a:47:ef:8b:db:2a:b9: 88:8d:70:e6:22:0c:7e:5e:4b:a4:9b:c2:82:4f:47: b7:f0:57:64:a7:68:b1:ff:bd:d4:91:b1:9c:14:cd: 59:23:cf:4f:1c:78:10:ed:81:90:fc:38:f4:a7:d8: 80:df:1c:38:38:25:74:4f:bf:d9:88:9f:e1:76:70: e4:64:d0:ef:c4:52:ff:37:ac:c6:35:f4:3f:e5:d5: 51:b2:ca:d1:3a:1f:18:c4:d7:f4:81:a2:ac:b4:35: d5:34:07:a4:7d:1f:e8:43:cf:b4:2c:65:44:29:51: ba:57:8b:f7:de:be:2c:7b:b9:96:87:24:8a:44:eb: ad:0e:87:c4:f8:ec:c4:0f:3f:12:43:fa:f6:89:8f: bc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6D:25:63:4B:D8:EE:F7:15:12:9C:B4:F3:A5:43:EA:E1:63:01:72 X509v3 Authority Key Identifier: keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:1d:f8:2c:23:c7:51:48:58:e8:c8:d9:94:f7:d8:fc:d1:d3: 68:80:8f:57:a0:57:31:86:88:a9:57:12:4b:80:82:8d:10:41: 26:41:1f:74:21:aa:49:0a:5b:3a:66:08:3e:88:79:ae:bc:e8: a6:16:80:d5:1c:c9:a1:c2:ec:1b:51:5a:75:20:48:58:dd:a3: 46:ec:5d:46:bf:59:75:a7:56:9a:8e:dd:d0:f9:19:84:d8:e0: 29:29:6f:3b:be:81:c7:9e:bb:37:18:6c:8f:db:1b:28:f9:c2: 97:6d:5c:de:8b:af:95:d9:7b:ce:ff:ea:2c:b6:f0:e1:5b:b5: 51:b8:a6:34:c6:28:59:c5:af:da:cf:52:9d:ef:ac:81:98:19: 76:56:23:51:e3:22:61:36:d7:51:4e:8a:5b:7f:91:08:77:72: c6:73:84:5f:95:a1:bf:dd:68:5c:e3:d5:9b:b0:38:fa:75:77: 2b:4e:f8:69:74:c3:dc:07:f6:c0:63:68:70:65:f2:cc:4a:b1: a8:04:5f:a7:db:a3:33:0f:48:0f:fd:c8:6d:3d:12:ee:cf:16: f4:ab:aa:ed:e8:a9:44:d7:f9:eb:bd:a5:47:b7:7e:09:1b:b3: c6:12:ad:76:6d:d7:1e:4c:73:2b:e9:c2:8e:a5:44:3f:de:d6: 32:b8:80:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwQTgxMTAvBgNVBAUTKDQwQkQyOUZGMjY2ODc3M0QzMkVFQTBFQzcwNjYwMjhB QkVFMENCOUUwHhcNMjUxMjAyMjEzNzU5WhcNMjUxMjA5MjEzNzU5WjAYMRYwFAYD VQQDEw02OTJmNWMzNy0xODRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLmEXnVW1VjXGjlxXskcLVMXzRsT8xf9cE1/zlvuY5Ck36o62Urw56FlUKcF C8ZAJ4ISuWZAmwZTS8OHcwOtxDV/rNzXn+eHYbCF+jl0vcyAgy3V0Zp7V/JGFgLa NimK18xtISoCihbmWLo82nU++YpH74vbKrmIjXDmIgx+Xkukm8KCT0e38Fdkp2ix /73UkbGcFM1ZI89PHHgQ7YGQ/Dj0p9iA3xw4OCV0T7/ZiJ/hdnDkZNDvxFL/N6zG NfQ/5dVRssrROh8YxNf0gaKstDXVNAekfR/oQ8+0LGVEKVG6V4v33r4se7mWhySK ROutDofE+OzEDz8SQ/r2iY+8fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJtJWNL 2O73FRKctPOlQ+rhYwFyMB8GA1UdIwQYMBaAFEC9Kf8maHc9Mu6g7HBmAoq+4Mue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC82NzkwNzczNEEx OTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6MHk3cURzY0dZQ2lyN2d5 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FMMHBfeVpvZHoweTdxRHNjR1lDaXI3Z3k1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDBBOC82NzkwNzczNEExOTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6 MHk3cURzY0dZQ2lyN2d5NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUHfgsI8dRSFjoyNmU99j80dNogI9XoFcxhoipVxJLgIKNEEEmQR90 IapJCls6Zgg+iHmuvOimFoDVHMmhwuwbUVp1IEhY3aNG7F1Gv1l1p1aajt3Q+RmE 2OApKW87voHHnrs3GGyP2xso+cKXbVzei6+V2XvO/+ostvDhW7VRuKY0xihZxa/a z1Kd76yBmBl2ViNR4yJhNtdRTopbf5EId3LGc4RflaG/3Whc49WbsDj6dXcrTvhp dMPcB/bAY2hwZfLMSrGoBF+n26MzD0gP/chtPRLuzxb0q6rt6KlE1/nrvaVHt34J G7PGEq12bdceTHMr6cKOpUQ/3tYyuICR -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:21 2025 by rpki-client