This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft File: qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json) Hash identifier: rg6MvImRw9Tf0j1/Xtu9uBvFqjNcUTviHhP6sHomnYw= Subject key identifier: 2D:F7:3D:9D:AD:41:6F:C7:BF:A8:FD:84:73:78:C4:34:B8:2E:8A:23 Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft Manifest number: 015A Signing time: Tue 23 Dec 2025 03:06:37 +0000 Manifest this update: Tue 23 Dec 2025 03:06:36 +0000 Manifest next update: Tue 30 Dec 2025 03:06:36 +0000 Files and hashes: 1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: IuaLgjUbMD5/dfNrDJ5nomi+VX7v+ovTDhgu57jOEPk=) 2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: 5Igi5uwLEP9LNSo1jtb9EAzRP4JXP+61tZCh/iJ8p+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Validity Not Before: Dec 23 03:06:36 2025 GMT Not After : Dec 30 03:06:36 2025 GMT Subject: CN=694a073d-7ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:69:b8:69:ae:fc:dd:03:4f:d3:7d:e9:f8:76: c4:19:0e:6d:3b:da:16:86:b4:7d:4e:52:82:4a:b5: a8:66:b0:e3:cc:41:d4:72:12:3a:42:f2:1e:ff:d0: cd:e8:cb:9c:66:7e:e9:67:81:e5:83:42:44:19:fe: 03:43:79:45:9a:c4:d7:1d:64:74:fb:e7:5e:72:93: 49:b5:82:4b:f3:d6:27:24:b9:5e:aa:4a:29:ae:be: 17:d7:5c:a3:cb:58:13:17:3b:50:9a:d4:5e:b3:b1: e9:5a:df:88:17:8c:ef:2c:dd:ba:59:f8:9e:e1:5e: ca:ba:a8:60:5e:92:65:79:a6:2d:0b:1e:45:06:fa: 94:bf:48:a8:88:4b:4b:92:60:d4:49:b5:2d:23:31: eb:47:c8:19:b9:64:3a:82:44:10:f8:6e:73:74:f2: 7f:c7:37:bf:85:c6:0a:35:8c:70:62:e6:6e:95:61: 57:e5:4b:78:97:4d:1e:e5:ee:e8:68:f2:e6:8d:b5: 37:d2:40:ed:a5:5f:7b:d8:34:b0:a9:ee:7a:29:d3: 2d:79:c7:cd:25:27:1b:e0:bd:5a:b1:a1:85:54:d3: 60:02:1d:84:65:a1:ae:24:61:fe:bb:31:18:60:58: f7:8e:74:aa:4d:f7:1e:e4:34:ad:92:79:d2:98:43: a4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F7:3D:9D:AD:41:6F:C7:BF:A8:FD:84:73:78:C4:34:B8:2E:8A:23 X509v3 Authority Key Identifier: keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:0b:01:dd:52:74:44:27:c6:20:3f:62:fc:cd:0a:21:4b:50: 3c:9c:c0:66:f9:17:81:e4:b1:c6:e1:14:42:da:05:69:7f:8e: 48:11:33:f1:64:c5:f8:04:16:87:e0:f8:9a:34:01:ce:cf:df: 50:e4:5a:17:79:cd:0e:8c:1e:ef:d0:50:57:65:e4:77:45:81: cb:1e:0d:66:1f:47:fc:30:37:27:33:2c:68:54:2e:08:da:aa: ff:69:05:0a:0c:f5:10:8f:ba:9b:76:de:f0:fc:83:b9:13:d3: 97:1a:ce:87:0b:32:84:11:fa:68:b9:4c:f7:e8:bc:0b:e5:ba: 47:07:6a:8c:23:dd:38:88:18:49:04:cd:50:51:59:76:e0:e7: 2f:63:a9:d7:28:b8:9c:bf:19:8d:3a:26:1b:ff:12:15:32:33: e2:ce:58:6f:0b:25:64:b9:15:a6:bf:70:ba:2f:bf:26:ec:76: 77:ef:cf:36:9f:ff:0c:b1:17:11:68:6c:0e:02:37:be:44:14: af:63:77:03:a4:f4:ff:93:ab:f8:d1:a1:31:f6:eb:26:2c:cb: bf:ad:a4:28:bd:aa:d2:9a:15:07:ce:64:20:de:b4:a0:df:c2: 9b:48:d5:4b:4f:dd:73:2f:2e:a2:cb:7e:e1:30:0e:98:49:13: be:07:71:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzQUYxMTAvBgNVBAUTKEE4MjRCNjYzRjNGNUEzNEY4MkVFMjI3MkE4QUVGREU0 M0I3OUJEOTMwHhcNMjUxMjIzMDMwNjM2WhcNMjUxMjMwMDMwNjM2WjAYMRYwFAYD VQQDDA02OTRhMDczZC03YWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlmm4aa783QNP033p+HbEGQ5tO9oWhrR9TlKCSrWoZrDjzEHUchI6QvIe/9DN 6MucZn7pZ4Hlg0JEGf4DQ3lFmsTXHWR0++decpNJtYJL89YnJLleqkoprr4X11yj y1gTFztQmtRes7HpWt+IF4zvLN26Wfie4V7KuqhgXpJleaYtCx5FBvqUv0ioiEtL kmDUSbUtIzHrR8gZuWQ6gkQQ+G5zdPJ/xze/hcYKNYxwYuZulWFX5Ut4l00e5e7o aPLmjbU30kDtpV972DSwqe56KdMtecfNJScb4L1asaGFVNNgAh2EZaGuJGH+uzEY YFj3jnSqTfce5DStknnSmEOk0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC33PZ2t QW/Hv6j9hHN4xDS4LoojMB8GA1UdIwQYMBaAFKgktmPz9aNPgu4icqiu/eQ7eb2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTNBRi8wNDMxNjBCMENB MDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8wLUM3aUp5cUs3OTVEdDV2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDUzJZX1AxbzAtQzdpSnlxSzc5NUR0NXZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTNBRi8wNDMxNjBCMENBMDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8w LUM3aUp5cUs3OTVEdDV2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrCwHdUnREJ8YgP2L8zQohS1A8nMBm+ReB5LHG4RRC2gVpf45IETPx ZMX4BBaH4PiaNAHOz99Q5FoXec0OjB7v0FBXZeR3RYHLHg1mH0f8MDcnMyxoVC4I 2qr/aQUKDPUQj7qbdt7w/IO5E9OXGs6HCzKEEfpouUz36LwL5bpHB2qMI904iBhJ BM1QUVl24OcvY6nXKLicvxmNOiYb/xIVMjPizlhvCyVkuRWmv3C6L78m7HZ37882 n/8MsRcRaGwOAje+RBSvY3cDpPT/k6v40aEx9usmLMu/raQovarSmhUHzmQg3rSg 38KbSNVLT91zLy6iy37hMA6YSRO+B3Gn -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:40 2025 by rpki-client