This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json) Hash identifier: Opu1EK4PCGK1KM7ZpixaXrdpjuaNvjX0f2B2nlM8+24= Subject key identifier: 48:6F:D1:2E:34:80:E4:DD:F8:4D:EA:EE:E0:4D:DF:D1:76:DB:5D:88 Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft Manifest number: 019A Signing time: Fri 19 Dec 2025 02:35:25 +0000 Manifest this update: Fri 19 Dec 2025 02:35:24 +0000 Manifest next update: Fri 26 Dec 2025 02:35:24 +0000 Files and hashes: 1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: LoWvgXTZvbl6zQdHD+Hp2TQvJo8dbQonoS6OFcAV8nA=) 2: 294325DC699711EEB317603DC4F9AE02.roa (hash: 8wlSlxdWRVQsKWpecDfGTBfpDDK2RtL9v/+VCfGWZ7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Validity Not Before: Dec 19 02:35:24 2025 GMT Not After : Dec 26 02:35:24 2025 GMT Subject: CN=6944b9ed-7efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:0e:4e:8c:44:2f:56:29:c9:5b:fb:11:fd: 86:c8:c7:ab:c4:a7:20:e9:ca:f1:c3:92:91:0d:99: 06:49:ee:fd:ee:9f:5d:8c:87:37:a1:30:e2:22:da: 1d:95:41:9c:ba:52:b0:a9:d2:f2:b6:8a:ae:1f:15: ab:83:c7:fb:b4:18:e2:6f:54:79:38:6d:74:96:49: bd:85:10:32:49:9e:02:d4:fb:c4:35:14:64:3a:62: f7:70:ed:ac:32:9f:86:ab:9e:14:82:cc:b2:ba:49: 57:9b:ac:1d:09:43:fa:b3:40:27:83:cf:9a:a1:f9: a0:a2:36:af:1f:93:6f:c4:b9:5f:b1:b6:c4:0d:ca: 9b:0a:eb:1d:6b:58:08:a0:2b:8d:08:8d:d7:db:01: 26:3d:5e:1f:11:d7:13:69:ed:09:df:aa:3d:ba:8d: 44:76:39:88:e9:53:d0:dd:e6:46:ac:a0:fb:5b:1a: 17:d9:a3:f0:21:14:56:42:34:32:13:7c:95:bb:ae: 50:f4:09:c4:4b:85:31:91:a5:61:ac:68:d6:bc:2d: 35:ef:89:57:1c:63:d7:0c:21:f8:1a:14:e8:f7:92: fb:73:06:b3:e6:96:48:25:e1:13:df:39:d8:2c:4b: a9:3e:6e:40:4e:c3:4d:19:50:eb:27:1a:cc:ab:ec: 71:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6F:D1:2E:34:80:E4:DD:F8:4D:EA:EE:E0:4D:DF:D1:76:DB:5D:88 X509v3 Authority Key Identifier: keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:ef:ff:32:36:5b:1e:4a:17:a2:4e:20:ce:00:3a:de:a8:52: 7a:41:e7:28:d0:97:1a:18:d6:ad:f1:d2:cc:7d:4f:e3:68:c3: 20:d8:44:d1:93:c1:54:0f:9a:71:53:63:c3:51:e3:b7:52:1f: 85:98:8a:ba:f4:0f:b2:28:da:04:ea:6b:f4:84:6f:4c:ec:f2: 8c:eb:d3:9e:c7:aa:e2:20:da:68:60:3f:57:6b:c7:db:0d:ad: 08:75:46:1b:64:19:e9:6e:18:6e:ad:2a:ce:2c:9b:67:b7:79: c6:d5:4e:aa:d4:1d:7a:5f:28:d9:85:5c:38:2f:0e:d0:8b:9f: f5:7c:e5:89:7f:5f:2c:7e:85:2f:19:05:7c:13:fe:2e:2d:96: 48:5f:94:fc:9b:b7:75:d8:7f:44:c6:b0:71:a7:b8:ad:87:5d: c8:e9:92:2e:be:a3:4a:08:be:69:c3:2f:1e:09:bc:c2:d4:26: d4:53:b5:9a:6e:14:b8:7c:75:ed:ea:50:f9:0b:ad:17:7a:11: 2e:90:4b:a8:27:db:bc:22:68:1c:cb:d9:0a:76:1d:2f:b9:e4: 6e:c4:67:67:82:46:8a:ea:85:58:14:a6:41:5c:9e:3d:f2:02: ea:61:cf:b7:be:2c:15:5d:ad:29:00:6e:ba:ed:22:51:55:40: c1:89:cb:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1QTQxMTAvBgNVBAUTKDQxQTBDMjQ0MzU5RjAyMzVDOUE2MEIxRjcxOUE1RkQ1 Njc5NjYwNTMwHhcNMjUxMjE5MDIzNTI0WhcNMjUxMjI2MDIzNTI0WjAYMRYwFAYD VQQDDA02OTQ0YjllZC03ZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLgOToxEL1YpyVv7Ef2GyMerxKcg6crxw5KRDZkGSe797p9djIc3oTDiItod lUGculKwqdLytoquHxWrg8f7tBjib1R5OG10lkm9hRAySZ4C1PvENRRkOmL3cO2s Mp+Gq54UgsyyuklXm6wdCUP6s0Ang8+aofmgojavH5NvxLlfsbbEDcqbCusda1gI oCuNCI3X2wEmPV4fEdcTae0J36o9uo1EdjmI6VPQ3eZGrKD7WxoX2aPwIRRWQjQy E3yVu65Q9AnES4UxkaVhrGjWvC0174lXHGPXDCH4GhTo95L7cwaz5pZIJeET3znY LEupPm5ATsNNGVDrJxrMq+xx6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhv0S40 gOTd+E3q7uBN39F2212IMB8GA1UdIwQYMBaAFEGgwkQ1nwI1yaYLH3GaX9VnlmBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzVBNC9EQkMxRkQxMDY5 OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFqWEpwZ3NmY1pwZjFXZVdZ Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FhRENSRFdmQWpYSnBnc2ZjWnBmMVdlV1lGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzVBNC9EQkMxRkQxMDY5OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFq WEpwZ3NmY1pwZjFXZVdZRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC7/8yNlseSheiTiDOADreqFJ6Qeco0JcaGNat8dLMfU/jaMMg2ETR k8FUD5pxU2PDUeO3Uh+FmIq69A+yKNoE6mv0hG9M7PKM69Oex6riINpoYD9Xa8fb Da0IdUYbZBnpbhhurSrOLJtnt3nG1U6q1B16XyjZhVw4Lw7Qi5/1fOWJf18sfoUv GQV8E/4uLZZIX5T8m7d12H9ExrBxp7ith13I6ZIuvqNKCL5pwy8eCbzC1CbUU7Wa bhS4fHXt6lD5C60XehEukEuoJ9u8Imgcy9kKdh0vueRuxGdngkaK6oVYFKZBXJ49 8gLqYc+3viwVXa0pAG667SJRVUDBicuK -----END CERTIFICATE-----Generated at Fri Dec 19 11:01:10 2025 by rpki-client