This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft File: QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json) Hash identifier: JmA9R2OOwizIDX6K1n8wS3O6rKBbQj4oJcEgEVqwIF8= Subject key identifier: 40:B9:57:51:1D:09:3D:5E:2F:7E:37:B4:8B:95:5C:F6:CB:28:24:65 Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Certificate serial: 18AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft Manifest number: 189E Signing time: Mon 22 Dec 2025 16:14:44 +0000 Manifest this update: Mon 22 Dec 2025 16:14:43 +0000 Manifest next update: Mon 29 Dec 2025 16:14:43 +0000 Files and hashes: 1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: kQJFkZ6qBAxQWDFr/eDD1G/5gEsYxtoAoxpVoeNyRqQ=) 2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: p9zhGKCO2BBzL3wnYhT/qvWZC/Mb1+QSPyP9kvTHJK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6314 (0x18aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Validity Not Before: Dec 22 16:14:43 2025 GMT Not After : Dec 29 16:14:43 2025 GMT Subject: CN=69496e73-5838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:a2:08:72:ee:e5:51:d7:82:c2:5b:2f:05: be:28:c6:80:36:fb:79:5d:29:ad:ad:d6:8c:4c:89: b0:4f:ed:ee:fb:61:4c:8b:c9:b9:43:b5:b5:73:91: ff:e5:7f:bd:03:22:52:9b:ea:80:7b:e8:08:52:f0: a4:f0:34:cf:30:03:b8:60:28:be:41:16:e9:28:9b: 20:bc:12:c3:3b:e0:9c:4b:77:2e:64:2f:8f:23:11: 1e:63:03:81:91:38:c9:a4:76:b0:32:a3:2e:36:35: 30:79:36:44:7d:7f:7f:98:79:bc:51:fe:c1:58:23: ff:af:13:33:9e:66:8f:f9:19:1d:e7:6d:3a:c1:8d: a0:f1:63:e3:36:9a:2f:ff:a1:6c:be:3f:98:4b:d2: 65:53:ac:7a:3a:da:4a:33:d8:98:34:91:8f:57:3e: 13:61:48:3c:a6:fd:42:1a:fa:06:30:25:d8:7c:4f: 4e:ce:3a:10:4d:dd:42:78:0b:07:16:d8:18:17:57: ed:5d:e5:19:30:18:05:6a:39:c4:9e:72:70:fb:ac: f4:92:8d:e7:b8:25:6a:f2:4e:69:f5:94:25:64:a3: 31:18:09:18:79:6e:f3:63:ca:7e:19:c0:a0:c7:36: 3d:48:f3:0c:68:ad:70:4d:e7:aa:8b:63:38:08:fa: ff:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B9:57:51:1D:09:3D:5E:2F:7E:37:B4:8B:95:5C:F6:CB:28:24:65 X509v3 Authority Key Identifier: keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:8a:ef:16:7c:df:a6:46:ac:23:f7:5a:99:6e:35:b0:0f:e1: 1b:b7:fd:f1:fd:61:a3:74:49:bc:72:58:24:34:ee:b2:96:97: c8:f0:81:44:29:5a:5f:da:b9:6e:42:72:56:15:15:2d:ab:8c: a5:1c:cc:67:56:55:7a:48:e5:14:33:cc:6e:d9:25:c2:20:fe: ee:7e:89:e1:6c:be:e5:91:86:cd:16:05:5b:23:58:f7:bf:1f: 48:96:11:96:0c:4b:e2:01:cd:23:d3:a6:8e:64:ee:a7:cd:91: 92:b5:48:c6:fb:ba:5d:4d:2f:9b:eb:81:4d:76:cd:93:2e:f0: 67:aa:10:4d:f3:bc:7e:dd:7c:5b:27:b5:5c:3d:ed:63:60:a7: 52:f8:c4:f4:85:7a:3e:6e:97:88:6e:9d:3c:90:8b:a9:0a:a1: 18:e5:90:9d:a9:f0:43:f5:62:cb:3c:f1:e8:54:69:e2:0d:cc: 06:f7:a5:96:e7:b2:80:d8:3f:ec:cb:60:f3:35:2f:69:a4:5a: 4d:2c:2d:ed:80:9e:9e:4a:f2:90:79:88:7f:f6:57:58:1a:a4: 79:0e:fb:31:bc:50:04:9c:c7:1c:12:b3:33:63:33:3b:e7:09: cb:1c:66:56:67:fe:16:e5:31:0f:3d:11:0d:9a:e0:ea:cb:bb: 86:5c:f7:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBNTgxMTAvBgNVBAUTKDQwQkQyNUEyRDYwMzE4NzNFNTVERkNEREFEM0E0OEY3 QkNGODhDOEIwHhcNMjUxMjIyMTYxNDQzWhcNMjUxMjI5MTYxNDQzWjAYMRYwFAYD VQQDDA02OTQ5NmU3My01ODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1uiCHLu5VHXgsJbLwW+KMaANvt5XSmtrdaMTImwT+3u+2FMi8m5Q7W1c5H/ 5X+9AyJSm+qAe+gIUvCk8DTPMAO4YCi+QRbpKJsgvBLDO+CcS3cuZC+PIxEeYwOB kTjJpHawMqMuNjUweTZEfX9/mHm8Uf7BWCP/rxMznmaP+Rkd5206wY2g8WPjNpov /6Fsvj+YS9JlU6x6OtpKM9iYNJGPVz4TYUg8pv1CGvoGMCXYfE9OzjoQTd1CeAsH FtgYF1ftXeUZMBgFajnEnnJw+6z0ko3nuCVq8k5p9ZQlZKMxGAkYeW7zY8p+GcCg xzY9SPMMaK1wTeeqi2M4CPr/qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEC5V1Ed CT1eL343tIuVXPbLKCRlMB8GA1UdIwQYMBaAFEC9JaLWAxhz5V383a06SPe8+IyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE1OC80RUFDRTQ5MEFF NDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdIUGxYZnpkclRwSTk3ejRq SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMMGxvdFlER0hQbFhmemRyVHBJOTd6NGpJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE1OC80RUFDRTQ5MEFFNDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdI UGxYZnpkclRwSTk3ejRqSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAniu8WfN+mRqwj91qZbjWwD+Ebt/3x/WGjdEm8clgkNO6ylpfI8IFE KVpf2rluQnJWFRUtq4ylHMxnVlV6SOUUM8xu2SXCIP7ufonhbL7lkYbNFgVbI1j3 vx9IlhGWDEviAc0j06aOZO6nzZGStUjG+7pdTS+b64FNds2TLvBnqhBN87x+3Xxb J7VcPe1jYKdS+MT0hXo+bpeIbp08kIupCqEY5ZCdqfBD9WLLPPHoVGniDcwG96WW 57KA2D/sy2DzNS9ppFpNLC3tgJ6eSvKQeYh/9ldYGqR5DvsxvFAEnMccErMzYzM7 5wnLHGZWZ/4W5TEPPRENmuDqy7uGXPcz -----END CERTIFICATE-----Generated at Tue Dec 23 05:54:29 2025 by rpki-client