This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json) Hash identifier: M36LeCyNBFO1peVkbn3cTcgp/bSqZim4BjvpSje8djc= Subject key identifier: 83:FE:CA:AD:31:C3:86:08:39:29:15:AA:FE:FB:B9:28:F1:06:A1:E0 Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft Manifest number: 021C Signing time: Tue 23 Dec 2025 01:10:13 +0000 Manifest this update: Tue 23 Dec 2025 01:10:13 +0000 Manifest next update: Tue 30 Dec 2025 01:10:13 +0000 Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: 7urLm5jsrK7pQzg3yx363yOHyPmRNThlNogvlt0snYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Validity Not Before: Dec 23 01:10:13 2025 GMT Not After : Dec 30 01:10:13 2025 GMT Subject: CN=6949ebf5-d0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:01:f0:db:32:b1:f2:60:87:04:f2:81:2d:b4: 6d:74:d4:eb:bb:ec:54:9f:d0:88:84:de:9c:89:30: 7f:21:ca:80:46:ad:57:f8:ec:e9:b4:d5:10:bd:4e: 57:fe:73:66:9c:56:a0:e4:64:9e:65:15:9c:96:be: b0:ce:68:e8:5a:08:40:64:03:3a:48:0a:5a:bf:ac: 24:c4:29:50:78:e5:02:2d:90:5f:ee:07:dd:f6:89: 1d:ea:e2:7c:63:c0:07:63:67:d6:2c:67:4f:fa:d6: f2:0b:78:a3:ec:8f:ae:7e:3e:a2:14:c8:1e:14:c3: da:26:fe:c1:42:28:13:ac:47:f6:5c:13:01:01:13: c8:85:1f:f4:1c:26:c1:7b:5e:c4:80:25:f9:f1:52: 4e:f0:d2:7e:72:da:d5:66:0a:92:d0:24:31:8b:ee: 8a:f3:1f:d2:2d:bb:cb:ab:11:c7:9d:33:58:47:1a: 3e:f9:57:24:28:ac:2d:53:af:75:74:d7:c7:d0:d9: 72:fb:30:5e:22:17:76:76:8d:af:8a:14:21:98:67: 68:8d:8d:6a:f8:0a:d0:ef:b2:55:aa:ec:6b:b8:12: c8:58:1a:da:fe:dc:ca:69:99:bf:77:16:d1:14:da: c5:56:51:fe:4d:29:a6:98:15:3c:b8:d1:7d:76:99: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FE:CA:AD:31:C3:86:08:39:29:15:AA:FE:FB:B9:28:F1:06:A1:E0 X509v3 Authority Key Identifier: keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:00:87:3e:f9:28:7a:32:41:02:17:50:ec:b3:0a:55:c8:40: 07:6c:f7:d3:32:5b:4b:06:88:b3:c7:67:e4:04:41:db:42:25: 7d:12:ee:57:f4:b5:86:27:ab:d8:b7:06:7f:84:4e:4e:23:5d: af:ae:54:08:64:3c:8f:42:e8:dd:95:4d:cb:73:e0:22:75:74: ad:e8:93:ba:c8:76:81:77:d9:ac:9c:47:f0:46:d8:a8:de:11: cf:c8:f0:31:00:69:81:a1:57:17:fb:59:ae:50:40:6a:1d:78: 41:bf:fd:3a:15:66:40:b7:08:8d:2d:8a:76:54:31:28:08:88: a0:0b:28:27:97:3a:87:7b:e9:3f:11:14:6b:d8:01:fd:23:59: 85:ab:7d:ca:20:56:19:2b:2f:e5:7f:1f:19:a0:50:21:8a:08: 0e:d4:3a:53:7f:02:cd:31:35:cd:51:22:62:3e:a4:cc:84:91: 70:c6:68:c8:c9:8b:69:df:6b:73:62:36:d8:65:ed:52:b1:eb: 05:12:b7:34:46:f1:19:27:c4:6f:85:ca:0b:de:11:19:34:7d: 1a:e4:2d:b0:d4:1a:89:d6:ac:9b:b3:b8:9b:29:99:e3:6b:36: c7:e3:40:58:28:d9:48:cc:be:00:04:e8:ae:82:35:91:aa:1d: 93:68:ee:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD RDI4QTRBRUYwHhcNMjUxMjIzMDExMDEzWhcNMjUxMjMwMDExMDEzWjAYMRYwFAYD VQQDDA02OTQ5ZWJmNS1kMGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwHw2zKx8mCHBPKBLbRtdNTru+xUn9CIhN6ciTB/IcqARq1X+OzptNUQvU5X /nNmnFag5GSeZRWclr6wzmjoWghAZAM6SApav6wkxClQeOUCLZBf7gfd9okd6uJ8 Y8AHY2fWLGdP+tbyC3ij7I+ufj6iFMgeFMPaJv7BQigTrEf2XBMBARPIhR/0HCbB e17EgCX58VJO8NJ+ctrVZgqS0CQxi+6K8x/SLbvLqxHHnTNYRxo++VckKKwtU691 dNfH0Nly+zBeIhd2do2vihQhmGdojY1q+ArQ77JVquxruBLIWBra/tzKaZm/dxbR FNrFVlH+TSmmmBU8uNF9dpn3xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIP+yq0x w4YIOSkVqv77uSjxBqHgMB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011 QjZGVlRWNmJvTFROS0tTdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeAIc++Sh6MkECF1DsswpVyEAHbPfTMltLBoizx2fkBEHbQiV9Eu5X 9LWGJ6vYtwZ/hE5OI12vrlQIZDyPQujdlU3Lc+AidXSt6JO6yHaBd9msnEfwRtio 3hHPyPAxAGmBoVcX+1muUEBqHXhBv/06FWZAtwiNLYp2VDEoCIigCygnlzqHe+k/ ERRr2AH9I1mFq33KIFYZKy/lfx8ZoFAhiggO1DpTfwLNMTXNUSJiPqTMhJFwxmjI yYtp32tzYjbYZe1SsesFErc0RvEZJ8RvhcoL3hEZNH0a5C2w1BqJ1qybs7ibKZnj azbH40BYKNlIzL4ABOiugjWRqh2TaO4K -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:57 2025 by rpki-client