This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: a9eJkpRZ5IFBamL8pag5Cvxw5h+om+Zo/2tm+05YrsI= Subject key identifier: 14:97:D9:65:67:E3:FF:C3:15:24:89:CE:7C:5A:7D:19:42:D7:E6:ED Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: C1 Signing time: Wed 03 Dec 2025 04:15:47 +0000 Manifest this update: Wed 03 Dec 2025 04:15:47 +0000 Manifest next update: Wed 10 Dec 2025 04:15:47 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: hBiwHVn7AvdgxW4nIWorYk3e6QGVe4pq80i7GWmqXJo=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: im2ulDC6TuJxDzTWTDZh2iCRPtHb9EQEE+xjYBtaU3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 04:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Dec 3 04:15:47 2025 GMT Not After : Dec 10 04:15:47 2025 GMT Subject: CN=692fb973-94b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:46:29:6a:99:f3:b7:1f:24:31:cf:93:be: 3a:6a:26:a5:53:e9:c7:35:bd:c3:ec:a8:a1:62:9f: 71:69:9e:34:4d:fd:02:a4:26:6c:11:da:88:fb:e0: 08:11:64:f4:8c:bb:18:b0:5a:8f:fb:17:39:3c:02: 8d:b4:d2:4a:f5:2c:a9:4f:88:ba:31:33:42:d3:0c: da:2c:1d:8a:cf:7d:08:11:f2:6a:a3:9c:42:b6:b0: 4f:80:71:a2:22:08:0a:80:40:2c:75:09:0f:d3:21: fe:c0:ac:93:25:d9:8d:20:82:d7:5d:96:43:70:cc: b9:09:e7:8b:ce:0f:0b:bf:71:63:13:74:b2:d9:4b: 42:af:60:5c:fe:c1:d2:6a:d1:99:3a:2f:55:88:43: 7e:01:91:17:34:bd:fd:09:2c:43:23:f5:6a:d9:32: df:52:0b:65:f7:57:83:59:d3:c1:ee:8b:58:18:26: 66:cf:fd:63:73:58:a3:d3:72:df:5a:19:2f:3e:79: e8:38:01:78:6d:3e:d4:66:1c:0b:8f:9b:0d:86:51: e4:39:82:c4:4b:2e:ef:00:f6:37:ef:ec:61:cf:c8: 4c:1b:ff:4f:9c:13:44:cb:ab:c6:5b:d8:64:db:a9: 88:b3:d0:22:c3:77:b8:b6:f9:f7:0c:02:93:5c:8b: bb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:97:D9:65:67:E3:FF:C3:15:24:89:CE:7C:5A:7D:19:42:D7:E6:ED X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:74:8e:52:72:f2:5d:c6:0c:b3:f1:25:00:fa:a5:07:96:e5: 0e:ef:2a:97:12:be:52:03:5a:68:93:d1:cb:36:bd:97:64:81: 53:d6:15:2b:eb:da:20:c4:c0:98:22:37:b8:77:f7:65:00:0a: 84:b5:c4:83:51:48:6c:1e:27:f9:64:45:28:6f:ad:81:6f:39: 27:b2:d4:1f:76:97:c2:e8:fe:64:b7:2a:73:73:41:cb:a2:8c: 02:15:ca:e6:6f:58:2e:dd:2e:24:b8:e3:9c:45:52:1e:6c:c4: 54:b7:a7:1f:56:d5:96:8f:11:53:95:85:58:68:ae:d1:3c:53: f0:6d:00:87:3b:36:2d:05:bb:00:5a:53:b8:cb:99:ee:1b:b4: ba:09:93:a2:85:7f:06:aa:6d:49:99:aa:75:4d:9f:5a:ee:d9: 00:a7:43:83:bd:d5:0a:40:cc:19:6b:b3:02:5d:1b:e6:af:14: d8:f3:50:8f:3d:a6:ea:ee:05:73:2f:86:be:11:eb:d8:e3:d4: 2e:67:0b:03:cf:08:14:cf:89:57:e5:a6:85:0f:03:e8:41:e4: df:e3:9a:d8:9b:c5:04:2a:09:51:df:13:cb:74:90:33:4d:55: 72:83:3d:d6:5e:26:6e:4e:9a:62:e0:fd:89:01:50:e7:3c:95: cb:33:17:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDMzgxMTAvBgNVBAUTKEFBMzVFMkY5NzdCNTVFNzJGOTE2MzVCRjdENTNCQ0VC NTM0Nzk4M0IwHhcNMjUxMjAzMDQxNTQ3WhcNMjUxMjEwMDQxNTQ3WjAYMRYwFAYD VQQDEw02OTJmYjk3My05NGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvg1GKWqZ87cfJDHPk746aialU+nHNb3D7KihYp9xaZ40Tf0CpCZsEdqI++AI EWT0jLsYsFqP+xc5PAKNtNJK9SypT4i6MTNC0wzaLB2Kz30IEfJqo5xCtrBPgHGi IggKgEAsdQkP0yH+wKyTJdmNIILXXZZDcMy5CeeLzg8Lv3FjE3Sy2UtCr2Bc/sHS atGZOi9ViEN+AZEXNL39CSxDI/Vq2TLfUgtl91eDWdPB7otYGCZmz/1jc1ij03Lf WhkvPnnoOAF4bT7UZhwLj5sNhlHkOYLESy7vAPY37+xhz8hMG/9PnBNEy6vGW9hk 26mIs9Aiw3e4tvn3DAKTXIu70QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSX2WVn 4//DFSSJznxafRlC1+btMB8GA1UdIwQYMBaAFKo14vl3tV5y+RY1v31TvOtTR5g7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wNEJBQTYxNEE5 OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhuTDVGaldfZlZPODYxTkht RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkMzOC8wNEJBQTYxNEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhu TDVGaldfZlZPODYxTkhtRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPdI5ScvJdxgyz8SUA+qUHluUO7yqXEr5SA1pok9HLNr2XZIFT1hUr 69ogxMCYIje4d/dlAAqEtcSDUUhsHif5ZEUob62BbzknstQfdpfC6P5ktypzc0HL oowCFcrmb1gu3S4kuOOcRVIebMRUt6cfVtWWjxFTlYVYaK7RPFPwbQCHOzYtBbsA WlO4y5nuG7S6CZOihX8Gqm1Jmap1TZ9a7tkAp0ODvdUKQMwZa7MCXRvmrxTY81CP Pabq7gVzL4a+EevY49QuZwsDzwgUz4lX5aaFDwPoQeTf45rYm8UEKglR3xPLdJAz TVVygz3WXiZuTppi4P2JAVDnPJXLMxe0 -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:25 2025 by rpki-client