This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft File: QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft (raw, json) Hash identifier: CWgHM9jljELc3pCawosDen96mPwTbdsEgNkwh/hDVvw= Subject key identifier: 3B:15:92:22:8C:95:6F:79:E4:B7:D7:D1:AF:D7:FF:72:33:1B:DE:10 Authority key identifier: 40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67 Certificate issuer: /CN=A918C31C/serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft Manifest number: CF Signing time: Tue 23 Dec 2025 04:43:54 +0000 Manifest this update: Tue 23 Dec 2025 04:43:54 +0000 Manifest next update: Tue 30 Dec 2025 04:43:54 +0000 Files and hashes: 1: QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl (hash: y14B1sQLuzri9u0iJKQS17n66pCTnjazvJN84+CShOo=) 2: 7C616486A6EF11EF9EB0B473C4F9AE02.roa (hash: j5rVzYxmjqZEY8FEsWt1qRbBmnhP9Qi2T1I55K8uP3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C31C, serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967 Validity Not Before: Dec 23 04:43:54 2025 GMT Not After : Dec 30 04:43:54 2025 GMT Subject: CN=694a1e0a-db9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:5b:35:1d:34:ff:93:10:d0:1b:01:f8:82: 72:a0:14:40:62:98:8d:d5:b4:05:f0:21:3a:f3:76: 75:9e:01:a7:26:c8:c8:94:26:98:be:dc:96:8b:d1: 60:49:e1:00:e8:04:4e:bf:dd:b4:bd:f4:90:75:47: ba:23:c8:ca:36:ab:11:f0:4a:d8:2e:6e:41:d4:cf: 33:d4:06:4d:b0:9d:17:e2:1e:b7:87:a1:f9:f7:a2: cb:71:b3:8f:62:21:bd:2e:32:23:9a:ca:10:15:5a: 33:04:14:23:ad:1c:63:97:86:29:b4:cb:61:bf:14: 47:9a:54:66:a1:21:69:ad:1a:86:aa:f8:33:1c:11: 9f:c3:f8:b6:c3:b0:47:ab:08:3f:86:68:eb:d6:a0: 90:23:2a:f5:8d:16:f1:63:48:84:8c:e8:6d:46:19: 9e:b0:d4:cc:a7:db:d8:44:33:37:88:0c:55:20:75: 8e:0a:ae:6a:c1:c2:78:87:da:2b:67:de:69:b8:02: 46:0e:38:53:e8:77:16:89:2e:9c:77:b5:7c:df:a1: 8d:a9:77:a1:27:79:db:e3:5e:f0:65:f4:92:14:31: 56:85:76:86:ee:f7:76:6f:33:98:cc:6c:19:99:fa: 0f:c8:1d:8e:69:87:5e:d8:6e:6e:8e:d8:9b:07:e6: 2f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:15:92:22:8C:95:6F:79:E4:B7:D7:D1:AF:D7:FF:72:33:1B:DE:10 X509v3 Authority Key Identifier: keyid:40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:32:32:df:9b:7e:85:93:3a:8e:a2:47:77:0a:a1:a5:6d:87: 28:87:aa:db:79:15:d0:65:b1:93:ec:d6:17:7c:81:38:92:57: 4f:4a:cb:42:81:dd:e8:96:9f:f2:6c:07:f7:f5:e8:05:de:ba: bd:f8:6a:a4:cc:4e:ad:7f:c1:e4:c8:96:00:d8:4b:b6:0d:d4: 52:cb:8e:5f:1d:d1:fd:e9:9b:f6:33:b9:ff:04:e7:ae:9e:9e: ef:cc:5c:0a:29:96:fc:3a:32:3a:a8:ac:6d:1e:13:17:27:8a: 0a:6c:da:fc:a3:8b:01:e7:31:b5:67:f5:2c:02:0c:a3:d6:7c: bb:73:dd:1b:01:5f:62:5e:26:2a:03:60:68:2e:0d:03:c9:8f: dc:d8:30:fa:37:48:4c:83:fb:ea:70:5d:8b:89:92:47:3d:8e: b9:8e:5c:02:96:f3:2e:a4:b2:48:89:a0:1b:52:25:ef:e0:f5: 45:d8:23:69:f7:7d:95:d4:5a:a6:b9:79:2d:e4:84:73:2d:46: 98:02:36:77:03:b2:c2:db:29:cf:b0:75:53:ee:90:fe:48:d2: a9:93:00:f2:1f:00:ca:79:74:06:70:2f:0d:2c:3d:47:07:9e: eb:f2:c0:1f:7d:a3:61:30:0f:fb:3e:a4:cb:f6:1e:02:6f:c7: 67:03:48:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMzMUMxMTAvBgNVBAUTKDQwRkFBNzBGOEEyM0EwM0QxNkExMTA4NkRCRTUwMkU4 NjIxNjQ5NjcwHhcNMjUxMjIzMDQ0MzU0WhcNMjUxMjMwMDQ0MzU0WjAYMRYwFAYD VQQDDA02OTRhMWUwYS1kYjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSxbNR00/5MQ0BsB+IJyoBRAYpiN1bQF8CE683Z1ngGnJsjIlCaYvtyWi9Fg SeEA6AROv920vfSQdUe6I8jKNqsR8ErYLm5B1M8z1AZNsJ0X4h63h6H596LLcbOP YiG9LjIjmsoQFVozBBQjrRxjl4YptMthvxRHmlRmoSFprRqGqvgzHBGfw/i2w7BH qwg/hmjr1qCQIyr1jRbxY0iEjOhtRhmesNTMp9vYRDM3iAxVIHWOCq5qwcJ4h9or Z95puAJGDjhT6HcWiS6cd7V836GNqXehJ3nb417wZfSSFDFWhXaG7vd2bzOYzGwZ mfoPyB2OaYde2G5ujtibB+YvOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsVkiKM lW955LfX0a/X/3IzG94QMB8GA1UdIwQYMBaAFED6pw+KI6A9FqEQhtvlAuhiFkln MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzMxQy9GMTA3REExMEE2 Q0YxMUVGQjJGQkI1N0RDNEY5QUUwMi9RUHFuRDRvam9EMFdvUkNHMi1VQzZHSVdT V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FQcW5ENG9qb0QwV29SQ0cyLVVDNkdJV1NXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzMxQy9GMTA3REExMEE2Q0YxMUVGQjJGQkI1N0RDNEY5QUUwMi9RUHFuRDRvam9E MFdvUkNHMi1VQzZHSVdTV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfMjLfm36FkzqOokd3CqGlbYcoh6rbeRXQZbGT7NYXfIE4kldPSstC gd3olp/ybAf39egF3rq9+GqkzE6tf8HkyJYA2Eu2DdRSy45fHdH96Zv2M7n/BOeu np7vzFwKKZb8OjI6qKxtHhMXJ4oKbNr8o4sB5zG1Z/UsAgyj1ny7c90bAV9iXiYq A2BoLg0DyY/c2DD6N0hMg/vqcF2LiZJHPY65jlwClvMupLJIiaAbUiXv4PVF2CNp 932V1FqmuXkt5IRzLUaYAjZ3A7LC2ynPsHVT7pD+SNKpkwDyHwDKeXQGcC8NLD1H B57r8sAffaNhMA/7PqTL9h4Cb8dnA0hq -----END CERTIFICATE-----Generated at Wed Dec 24 14:13:53 2025 by rpki-client