This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft File: QqwYh98sn_RowA68BlWa4XkLfUE.mft (raw, json) Hash identifier: HT3QJPCPpAfdwIDtnGDtm1soiVYf7vt0RKPXpHEWEXs= Subject key identifier: BA:6C:65:7C:6F:1A:77:42:A1:83:38:B3:9A:46:9F:12:28:C6:45:D9 Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41 Certificate issuer: /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft Manifest number: 01C2 Signing time: Sat 13 Dec 2025 02:14:07 +0000 Manifest this update: Sat 13 Dec 2025 02:14:06 +0000 Manifest next update: Sat 20 Dec 2025 02:14:06 +0000 Files and hashes: 1: QqwYh98sn_RowA68BlWa4XkLfUE.crl (hash: HOC26NSqVVYIHhoYqNkvquhPMqLCy+DmV7wwj1zmx9o=) 2: 0218C21E261711EE9AEA7674C4F9AE02.roa (hash: uhmsph/UZ+El90Yxy7WpECGs3tuN2cOfnCiiAfNg+oE=) 3: 2E7C802A261711EEB93AAC74C4F9AE02.roa (hash: GNgH54VuveRBqhIirbO5+23rkV4blzguEnK1jVi0hnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 02:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EA3B, serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41 Validity Not Before: Dec 13 02:14:06 2025 GMT Not After : Dec 20 02:14:06 2025 GMT Subject: CN=693ccbef-41fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9b:dc:37:da:10:b2:e4:78:09:86:40:e4:34: d1:2c:81:eb:d5:91:c4:d9:f0:d9:f7:57:18:82:c6: 6b:f2:70:fd:0e:e3:b9:0c:7c:f0:2d:6f:21:67:6c: 0f:34:df:fb:d6:9a:25:97:88:ed:57:ed:fa:a0:19: 99:d3:2c:d1:29:e2:bb:93:98:9d:10:4f:5e:cc:7e: 9a:d1:75:d3:ef:5b:d9:5e:2e:45:67:42:8d:e5:94: e5:89:5a:8a:63:ac:90:7e:e0:6c:6c:49:3b:6b:6f: 78:bd:af:d1:c6:a4:6b:76:bb:cc:c6:0d:92:92:f4: 8a:dc:74:2c:6c:9d:18:01:d1:9d:16:08:cb:a1:dc: 81:12:18:ab:96:94:4d:e9:bc:5c:3b:65:fb:0a:f9: 6f:f1:19:3c:ea:37:b4:0b:06:e5:ff:89:ac:1e:f7: 5c:70:d9:ff:b0:a4:6f:d7:a5:ab:a3:16:75:47:18: c0:b2:00:f0:e3:f8:ac:7a:c9:00:c2:e4:33:eb:7c: da:ef:4b:a7:5e:07:5a:6c:8a:71:ba:4c:b8:23:92: c1:e0:a5:c6:86:ef:44:8e:3e:ef:a0:ee:27:7a:d8: e5:e3:2d:01:d4:63:c0:34:01:71:5e:f9:b2:af:8f: f4:51:82:03:98:51:5f:ba:40:29:c1:ae:93:f2:f4: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6C:65:7C:6F:1A:77:42:A1:83:38:B3:9A:46:9F:12:28:C6:45:D9 X509v3 Authority Key Identifier: keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:87:ae:0a:1b:c7:cc:c9:ea:12:db:75:3a:dc:d0:a6:48:98: 96:5a:6e:31:05:eb:8c:6f:a2:cc:0c:ba:1c:34:5d:b6:13:fb: da:90:7a:27:66:9e:c8:73:74:7a:65:b4:20:f9:81:0d:64:dd: ac:f2:cc:a3:91:ba:7f:47:1d:ba:77:c4:d1:3e:1e:b8:e1:9d: 78:4e:45:01:7d:a1:ab:12:64:cf:3e:0d:40:44:13:11:4e:64: 7c:a7:c3:76:64:6c:57:18:af:42:cc:95:68:e0:c7:5c:18:2d: 29:1d:c7:f2:b5:d4:95:63:0d:ae:0c:1a:a9:5f:b8:b1:6d:b0: d4:18:80:f3:75:17:e4:c8:83:3f:b2:1a:75:cc:e9:ee:f7:a6: b0:01:46:d6:c5:03:53:5f:63:84:a2:a7:b0:ee:be:a7:2d:e6: 48:d4:0d:a2:3a:8d:f0:4c:c8:3d:4f:7e:18:ad:18:10:60:ba: 33:23:54:c2:05:93:1e:93:98:bc:10:90:ff:3c:fc:98:b5:b6: 4d:56:f8:42:dc:f9:ad:4b:28:a2:a9:4e:f8:b4:64:9e:b0:a9: 88:1d:b0:f6:ea:c6:b1:9a:0e:0c:60:da:71:cc:8f:1b:50:88: e1:c2:e5:3d:6f:8f:33:1c:61:ba:52:7d:5c:a1:16:0e:e5:bf: b7:9a:d7:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBM0IxMTAvBgNVBAUTKDQyQUMxODg3REYyQzlGRjQ2OEMwMEVCQzA2NTU5QUUx NzkwQjdENDEwHhcNMjUxMjEzMDIxNDA2WhcNMjUxMjIwMDIxNDA2WjAYMRYwFAYD VQQDDA02OTNjY2JlZi00MWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35vcN9oQsuR4CYZA5DTRLIHr1ZHE2fDZ91cYgsZr8nD9DuO5DHzwLW8hZ2wP NN/71poll4jtV+36oBmZ0yzRKeK7k5idEE9ezH6a0XXT71vZXi5FZ0KN5ZTliVqK Y6yQfuBsbEk7a294va/RxqRrdrvMxg2SkvSK3HQsbJ0YAdGdFgjLodyBEhirlpRN 6bxcO2X7Cvlv8Rk86je0Cwbl/4msHvdccNn/sKRv16WroxZ1RxjAsgDw4/iseskA wuQz63za70unXgdabIpxuky4I5LB4KXGhu9Ejj7voO4netjl4y0B1GPANAFxXvmy r4/0UYIDmFFfukApwa6T8vT6KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpsZXxv GndCoYM4s5pGnxIoxkXZMB8GA1UdIwQYMBaAFEKsGIffLJ/0aMAOvAZVmuF5C31B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUEzQi84OUQwMDYwQTI2 MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25fUm93QTY4QmxXYTRYa0xm VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Fxd1loOThzbl9Sb3dBNjhCbFdhNFhrTGZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUEzQi84OUQwMDYwQTI2MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25f Um93QTY4QmxXYTRYa0xmVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/h64KG8fMyeoS23U63NCmSJiWWm4xBeuMb6LMDLocNF22E/vakHon Zp7Ic3R6ZbQg+YENZN2s8syjkbp/Rx26d8TRPh644Z14TkUBfaGrEmTPPg1ARBMR TmR8p8N2ZGxXGK9CzJVo4MdcGC0pHcfytdSVYw2uDBqpX7ixbbDUGIDzdRfkyIM/ shp1zOnu96awAUbWxQNTX2OEoqew7r6nLeZI1A2iOo3wTMg9T34YrRgQYLozI1TC BZMek5i8EJD/PPyYtbZNVvhC3PmtSyiiqU74tGSesKmIHbD26saxmg4MYNpxzI8b UIjhwuU9b48zHGG6Un1coRYO5b+3mtcT -----END CERTIFICATE-----Generated at Sun Dec 14 08:43:37 2025 by rpki-client