This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft File: QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json) Hash identifier: /XPJNaZ1AyUQBS9hmMMF7DPhcqCjshUguIRdhTEwIrA= Subject key identifier: 8F:CF:73:0D:EF:B0:09:DC:25:E5:1A:ED:22:71:9B:0A:B8:05:3E:DD Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Certificate serial: 048C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft Manifest number: 0481 Signing time: Sat 06 Dec 2025 22:48:07 +0000 Manifest this update: Sat 06 Dec 2025 22:48:06 +0000 Manifest next update: Sat 13 Dec 2025 22:48:06 +0000 Files and hashes: 1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: AWsc/mnqlfNOefaNrt7/wZPkK0d2hXi73gX8NyC6Opw=) 2: 18E79956BAA811ECB07DA44BC4F9AE02.roa (hash: C2+RZmYoetqMpTEvEp2UgZ/k5COwbQ6X5aMLB79x36Q=) 3: 43540B7A0EE311EF9E24862BC4F9AE02.roa (hash: mV4y857QRPSQMJQogVNfC/t4weo9OVDbm55M2NQZyIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1164 (0x48c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Validity Not Before: Dec 6 22:48:06 2025 GMT Not After : Dec 13 22:48:06 2025 GMT Subject: CN=6934b2a7-2799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4c:f4:b1:e1:4c:96:92:1d:2b:55:90:f3:9e: 09:83:5e:8f:ed:55:77:1c:89:60:6e:26:b9:5f:da: 92:3c:e1:e2:0f:50:43:f9:e5:d7:8f:73:91:f2:2b: a4:06:ce:b6:54:91:67:f7:42:49:92:1b:63:29:66: 18:06:39:cd:6c:29:37:53:b6:22:7e:8d:50:b2:6b: 3b:3a:17:7a:00:70:ca:71:29:74:09:c3:4c:28:b1: 65:ce:a6:cc:c0:21:ef:ba:f9:05:35:ce:50:fb:1d: 3a:b0:78:78:63:fe:31:d3:28:4e:61:1e:b4:ae:f9: 79:b3:cb:70:65:5f:ff:b3:66:81:44:55:55:75:7d: 45:a6:e7:ff:e8:a9:81:34:a6:04:59:01:cc:91:da: e9:cd:04:46:bf:fd:66:7f:6d:7d:f2:a9:6e:93:e1: ee:37:df:3c:9d:6a:e4:7b:4a:a3:02:30:d0:3d:fb: 93:fb:a8:b1:82:af:4b:4d:50:8c:31:d2:f1:57:62: c1:44:59:24:fb:1d:69:c4:f3:13:b1:74:7c:29:06: 15:91:a9:3a:97:1c:e7:23:fc:f4:93:49:e6:d7:05: 6a:b7:61:67:20:f3:d3:db:9d:06:ed:1d:79:c5:04: 52:dc:bc:99:dc:4c:b3:c8:cb:f0:62:8a:c3:6b:c3: c4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CF:73:0D:EF:B0:09:DC:25:E5:1A:ED:22:71:9B:0A:B8:05:3E:DD X509v3 Authority Key Identifier: keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:5b:ff:78:b5:56:b6:4b:37:f5:99:fc:a6:b6:94:21:33:4f: 3c:ce:2f:6a:0c:c4:01:00:b5:86:30:43:ae:60:2f:c4:e3:17: 62:e4:10:b1:6a:b9:d3:f9:22:c6:1f:fa:92:f3:29:ba:61:cf: 55:52:68:37:80:f9:1b:47:00:af:5c:85:57:d5:d9:d0:bd:f8: 77:47:c9:ab:09:f3:ac:dc:ac:5a:bd:59:f2:21:c0:8f:a4:c3: 62:0e:f7:b4:52:6d:ea:aa:7e:ab:51:2b:b3:4c:51:76:02:18: 3f:e6:ab:40:c9:68:b4:da:f9:81:78:e0:8e:07:2b:21:87:57: 3f:b7:d5:80:d9:2e:18:2a:35:96:5d:0a:80:cf:66:77:25:28: 80:e1:14:b4:fe:d4:73:56:5b:82:28:65:83:02:53:04:15:d2: bb:07:1f:70:90:ec:25:ad:7a:7a:79:35:8d:d4:0d:8a:22:3a: a8:3d:e0:f9:ba:d0:5e:c7:41:cc:3a:c9:73:b4:32:48:0e:b6: 79:44:d9:d5:e4:06:44:eb:75:a7:e7:f5:49:b0:07:3a:5b:cf: ee:65:8e:82:95:90:81:81:e5:24:38:7d:5b:30:93:41:99:24: c1:a6:37:8c:eb:c7:89:df:3b:48:fd:36:e8:ab:bb:1f:35:9c: a4:bc:cc:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCNEYxMTAvBgNVBAUTKDQwREI5RTJDQkFERUNEQTlCOTcyMzUxMDIxNTA3QURD RDFBNTYyN0YwHhcNMjUxMjA2MjI0ODA2WhcNMjUxMjEzMjI0ODA2WjAYMRYwFAYD VQQDEw02OTM0YjJhNy0yNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0z0seFMlpIdK1WQ854Jg16P7VV3HIlgbia5X9qSPOHiD1BD+eXXj3OR8iuk Bs62VJFn90JJkhtjKWYYBjnNbCk3U7Yifo1Qsms7Ohd6AHDKcSl0CcNMKLFlzqbM wCHvuvkFNc5Q+x06sHh4Y/4x0yhOYR60rvl5s8twZV//s2aBRFVVdX1Fpuf/6KmB NKYEWQHMkdrpzQRGv/1mf2198qluk+HuN988nWrke0qjAjDQPfuT+6ixgq9LTVCM MdLxV2LBRFkk+x1pxPMTsXR8KQYVkak6lxznI/z0k0nm1wVqt2FnIPPT250G7R15 xQRS3LyZ3EyzyMvwYorDa8PExQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/Pcw3v sAncJeUa7SJxmwq4BT7dMB8GA1UdIwQYMBaAFEDbniy63s2puXI1ECFQetzRpWJ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEI0Ri9ERDczMjY0ODY4 QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXphbTVjalVRSVZCNjNOR2xZ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdWVMTHJlemFtNWNqVVFJVkI2M05HbFluOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEI0Ri9ERDczMjY0ODY4QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXph bTVjalVRSVZCNjNOR2xZbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhW/94tVa2Szf1mfymtpQhM088zi9qDMQBALWGMEOuYC/E4xdi5BCx arnT+SLGH/qS8ym6Yc9VUmg3gPkbRwCvXIVX1dnQvfh3R8mrCfOs3KxavVnyIcCP pMNiDve0Um3qqn6rUSuzTFF2Ahg/5qtAyWi02vmBeOCOByshh1c/t9WA2S4YKjWW XQqAz2Z3JSiA4RS0/tRzVluCKGWDAlMEFdK7Bx9wkOwlrXp6eTWN1A2KIjqoPeD5 utBex0HMOslztDJIDrZ5RNnV5AZE63Wn5/VJsAc6W8/uZY6ClZCBgeUkOH1bMJNB mSTBpjeM68eJ3ztI/Tboq7sfNZykvMx0 -----END CERTIFICATE-----Generated at Mon Dec 8 18:03:38 2025 by rpki-client