This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: BjkOa/xY17miaLUXzgqscwv85pIaYwZFQJQ0RCUKukY= Subject key identifier: C2:43:AA:45:15:AF:29:90:B3:14:EA:B5:C1:93:7C:75:C3:D3:DF:10 Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1E36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1E2C Signing time: Mon 22 Dec 2025 15:53:26 +0000 Manifest this update: Mon 22 Dec 2025 15:53:26 +0000 Manifest next update: Mon 29 Dec 2025 15:53:26 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: qOh6Er1+vyrAT5EQ9meKhk10oIjY0Uk9RiIQtqkKOwQ=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: OwRMtrtGPYaPPKGjgTatExbq339fV5j/IPlfXafo770=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7734 (0x1e36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: Dec 22 15:53:26 2025 GMT Not After : Dec 29 15:53:26 2025 GMT Subject: CN=69496976-cbf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1c:ab:5b:81:38:1f:35:ce:80:70:0c:ff:00: 47:04:c9:bc:12:ec:65:e6:ad:1d:58:e5:b0:bf:a7: a1:a2:66:7a:67:73:f9:cc:a4:22:84:c6:0d:8d:07: 6b:08:b5:cd:32:81:8a:b0:b9:a2:df:6d:12:de:91: e9:f3:32:9b:46:39:e8:2f:e9:64:ee:56:f4:92:1a: c7:d5:21:6c:95:6f:47:7b:28:83:04:c2:84:18:a6: 27:c6:4f:88:ee:3d:b2:b4:dd:20:7d:59:a6:28:8c: 27:94:14:11:36:64:54:c6:1d:2b:c8:7f:d1:d3:a5: 35:ca:1d:d7:2a:81:0c:4d:e8:cd:0a:1e:a9:9c:58: dd:1f:87:55:11:3f:7e:c1:3f:e1:16:74:3a:96:48: 78:85:10:e7:1e:81:5e:13:97:71:46:dc:a5:eb:09: 80:74:16:d4:83:b6:61:ed:f1:4c:98:87:34:f3:40: c2:3e:dd:10:f6:97:2b:a3:30:e5:03:ec:b6:38:6a: 21:9c:49:b6:d7:aa:27:0c:d1:be:ce:2b:76:4b:1c: a1:6f:c9:81:48:fb:d2:b8:af:cd:ae:98:d4:b9:e7: 66:f6:69:c6:4d:db:a5:45:13:c4:c4:87:71:9d:c6: 98:68:54:81:db:d3:5c:7b:34:d8:25:ae:55:20:64: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:43:AA:45:15:AF:29:90:B3:14:EA:B5:C1:93:7C:75:C3:D3:DF:10 X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6d:de:30:50:10:54:46:06:99:dd:3f:6d:d8:c2:22:48:fa: 22:90:93:b6:d1:95:c7:a4:51:5a:bd:ce:ef:bf:e4:bd:15:b3: c3:ad:e2:25:99:5b:b7:99:91:f5:71:0b:69:cd:b4:ed:a5:c3: 49:c3:67:cd:1b:4c:95:e3:a1:96:68:97:45:7d:91:cf:1a:a5: 48:9c:5b:48:ef:91:a2:30:d3:0d:fc:7e:54:94:32:9f:45:a4: dc:55:04:f7:4f:f7:02:e1:3a:d9:d6:23:8b:bd:67:ef:0e:43: 28:d7:96:e9:3d:57:6a:6f:55:da:cc:40:6d:bc:88:8f:f3:bf: 37:a1:c1:e0:42:4f:2d:87:82:e2:23:0c:8b:79:39:62:3c:29: be:fb:f0:09:a0:8b:c5:50:d6:e0:c0:c9:0b:2d:9b:c4:49:30: f6:41:7c:19:29:9e:13:69:ef:a5:91:78:aa:79:d0:f8:f7:a8: 68:7b:c8:62:39:72:60:e3:41:c6:d5:6c:3b:06:a2:ef:84:86: 7e:68:e0:b2:d1:71:35:47:5e:75:01:82:51:e4:af:e1:d5:91: 40:96:ea:8b:67:53:7f:7d:31:8c:d5:71:ec:b4:b5:be:cb:47: ca:c9:19:86:ca:42:b5:24:8e:44:85:20:3c:a1:51:46:e6:48: 6b:36:dc:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjUxMjIyMTU1MzI2WhcNMjUxMjI5MTU1MzI2WjAYMRYwFAYD VQQDDA02OTQ5Njk3Ni1jYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxyrW4E4HzXOgHAM/wBHBMm8Euxl5q0dWOWwv6ehomZ6Z3P5zKQihMYNjQdr CLXNMoGKsLmi320S3pHp8zKbRjnoL+lk7lb0khrH1SFslW9HeyiDBMKEGKYnxk+I 7j2ytN0gfVmmKIwnlBQRNmRUxh0ryH/R06U1yh3XKoEMTejNCh6pnFjdH4dVET9+ wT/hFnQ6lkh4hRDnHoFeE5dxRtyl6wmAdBbUg7Zh7fFMmIc080DCPt0Q9pcrozDl A+y2OGohnEm216onDNG+zit2Sxyhb8mBSPvSuK/NrpjUuedm9mnGTdulRRPExIdx ncaYaFSB29NcezTYJa5VIGQ+4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJDqkUV rymQsxTqtcGTfHXD098QMB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNbd4wUBBURgaZ3T9t2MIiSPoikJO20ZXHpFFavc7vv+S9FbPDreIl mVu3mZH1cQtpzbTtpcNJw2fNG0yV46GWaJdFfZHPGqVInFtI75GiMNMN/H5UlDKf RaTcVQT3T/cC4TrZ1iOLvWfvDkMo15bpPVdqb1XazEBtvIiP8783ocHgQk8th4Li IwyLeTliPCm++/AJoIvFUNbgwMkLLZvESTD2QXwZKZ4Tae+lkXiqedD496hoe8hi OXJg40HG1Ww7BqLvhIZ+aOCy0XE1R151AYJR5K/h1ZFAluqLZ1N/fTGM1XHstLW+ y0fKyRmGykK1JI5EhSA8oVFG5khrNtwJ -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:35 2025 by rpki-client