This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft File: qkHKgdI-9YhhkyqtErMWkNvPEAM.mft (raw, json) Hash identifier: UhS0xSI2EfNHTXsANdes2Yk0fgFhZEWf82NBdkkkCNM= Subject key identifier: 5B:85:01:91:0B:F1:D5:3D:D4:43:B2:B1:F3:47:A3:3E:6F:B5:9B:32 Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 Certificate issuer: /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Certificate serial: 0CAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft Manifest number: 0CA9 Signing time: Mon 22 Dec 2025 17:54:35 +0000 Manifest this update: Mon 22 Dec 2025 17:54:35 +0000 Manifest next update: Mon 29 Dec 2025 17:54:35 +0000 Files and hashes: 1: qkHKgdI-9YhhkyqtErMWkNvPEAM.crl (hash: 55zMNPq7nLhtnI5Y/XCBTzMLz/3zBAnfz5EMVSsuFkk=) 2: 220DBB66054011EA90A20C7EC4F9AE02.roa (hash: V97lq+hSZ9oNH4AZKBUD+qWwTgR66PrTcw3FG8A1KF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3247 (0xcaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5744, serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Validity Not Before: Dec 22 17:54:35 2025 GMT Not After : Dec 29 17:54:35 2025 GMT Subject: CN=694985db-0627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:9c:3c:ca:f1:08:14:34:2b:e4:72:a1:91: fb:57:df:40:c0:46:88:40:5b:b9:98:a3:c3:6f:42: e0:ba:ac:47:71:ff:cd:b0:74:c3:e1:12:93:d4:80: 15:e6:73:f4:a8:9f:1d:53:7d:43:73:27:9f:59:4d: ca:77:2e:f8:44:9a:49:bd:7b:2f:f6:17:0d:93:3b: d5:81:30:92:d3:f4:1d:cc:20:b7:08:ee:d6:10:a5: f9:bf:f2:34:23:5c:75:79:45:85:02:fb:1b:77:b1: c0:47:68:7a:1c:da:48:73:09:dd:f3:ab:83:81:73: 40:dd:3c:12:70:d6:36:e9:68:58:f2:21:7d:96:d6: bf:e4:67:88:94:e4:b1:b0:09:f5:84:44:c9:3f:e9: bd:c4:dd:b0:72:bb:fe:d7:93:9e:5f:c8:ec:64:42: de:33:f6:9c:55:04:97:4b:52:d7:90:a3:97:90:a5: a9:20:79:2e:5a:32:5c:5e:f2:14:de:2d:fd:7b:d5: c0:5a:d6:32:46:36:3c:a6:70:d9:7e:10:fc:7f:71: 31:9d:da:76:be:ba:c6:5d:ad:06:51:65:b8:c1:12: 79:9a:54:62:f4:93:75:8f:8c:13:82:9d:5a:68:ab: 58:c3:22:82:c5:25:4b:7e:66:e4:04:5d:64:d3:e3: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:85:01:91:0B:F1:D5:3D:D4:43:B2:B1:F3:47:A3:3E:6F:B5:9B:32 X509v3 Authority Key Identifier: keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:39:3a:14:b2:8e:e1:e3:47:12:ce:d8:7b:1d:fa:3c:64:a0: 38:fe:b1:fe:81:2d:39:bb:89:fa:e7:67:2b:76:f9:10:9f:5e: cf:58:bd:3f:52:4d:e2:d1:58:40:50:18:65:48:ef:33:3b:4b: 6f:14:1b:83:8b:de:e8:39:60:2c:2e:dd:bf:88:5d:2c:25:d4: a9:30:5b:a4:1d:f5:63:cf:0a:70:b3:87:70:bc:52:fb:f2:95: 8b:3f:a1:2d:c2:44:29:96:d5:a3:6d:4c:38:24:09:46:1e:d3: 55:68:14:77:49:b1:9b:61:48:f8:14:c3:2b:5a:7e:2b:b0:5f: 35:54:9c:27:fa:7e:d7:af:a0:df:66:a1:b1:07:69:93:72:59: e7:d4:f3:03:ee:02:56:27:79:1c:aa:a1:86:d2:98:78:a3:14: e2:25:a6:66:07:f5:34:a9:a3:96:18:a0:21:40:45:8a:f4:12: 81:54:ff:67:cc:35:63:56:cb:51:c1:d8:0b:15:03:11:6c:2f: 89:91:a4:9d:1d:8b:45:8a:a7:8e:c1:ae:b9:df:c1:7c:3d:58: d9:1c:41:cc:2d:37:48:eb:b6:ef:92:26:ee:c9:09:80:31:21: af:43:48:a8:2f:9f:2a:02:e4:b8:10:ff:53:b9:87:04:c7:de: d4:ed:30:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3NDQxMTAvBgNVBAUTKEFBNDFDQTgxRDIzRUY1ODg2MTkzMkFBRDEyQjMxNjkw REJDRjEwMDMwHhcNMjUxMjIyMTc1NDM1WhcNMjUxMjI5MTc1NDM1WjAYMRYwFAYD VQQDDA02OTQ5ODVkYi0wNjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxOcPMrxCBQ0K+RyoZH7V99AwEaIQFu5mKPDb0LguqxHcf/NsHTD4RKT1IAV 5nP0qJ8dU31DcyefWU3Kdy74RJpJvXsv9hcNkzvVgTCS0/QdzCC3CO7WEKX5v/I0 I1x1eUWFAvsbd7HAR2h6HNpIcwnd86uDgXNA3TwScNY26WhY8iF9lta/5GeIlOSx sAn1hETJP+m9xN2wcrv+15OeX8jsZELeM/acVQSXS1LXkKOXkKWpIHkuWjJcXvIU 3i39e9XAWtYyRjY8pnDZfhD8f3Exndp2vrrGXa0GUWW4wRJ5mlRi9JN1j4wTgp1a aKtYwyKCxSVLfmbkBF1k0+OTpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuFAZEL 8dU91EOysfNHoz5vtZsyMB8GA1UdIwQYMBaAFKpByoHSPvWIYZMqrRKzFpDbzxAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTc0NC8zOTdGNkNENDA1 MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZaGhreXF0RXJNV2tOdlBF QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrSEtnZEktOVloaGt5cXRFck1Xa052UEVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTc0NC8zOTdGNkNENDA1MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZ aGhreXF0RXJNV2tOdlBFQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNOToUso7h40cSzth7Hfo8ZKA4/rH+gS05u4n652crdvkQn17PWL0/ Uk3i0VhAUBhlSO8zO0tvFBuDi97oOWAsLt2/iF0sJdSpMFukHfVjzwpws4dwvFL7 8pWLP6EtwkQpltWjbUw4JAlGHtNVaBR3SbGbYUj4FMMrWn4rsF81VJwn+n7Xr6Df ZqGxB2mTclnn1PMD7gJWJ3kcqqGG0ph4oxTiJaZmB/U0qaOWGKAhQEWK9BKBVP9n zDVjVstRwdgLFQMRbC+JkaSdHYtFiqeOwa6538F8PVjZHEHMLTdI67bvkibuyQmA MSGvQ0ioL58qAuS4EP9TuYcEx97U7TAJ -----END CERTIFICATE-----Generated at Tue Dec 23 03:49:52 2025 by rpki-client