This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft File: Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json) Hash identifier: +bZJXOQMrZTAuafMSzfMdrFFZOVq3DQffcWTUEyshbg= Subject key identifier: 70:A9:7B:48:02:6C:B4:D9:F3:1F:12:E0:75:05:80:F8:B5:B8:0C:EE Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 Certificate issuer: /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Certificate serial: 0523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft Manifest number: 051D Signing time: Thu 04 Dec 2025 22:09:05 +0000 Manifest this update: Thu 04 Dec 2025 22:09:04 +0000 Manifest next update: Thu 11 Dec 2025 22:09:04 +0000 Files and hashes: 1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: +LQ5ngTJ21xGO0LJeyjcnasfAtiJ2/NJMEbibcqUpY4=) 2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: /P52dIbBCuZBok0CgnukmD2RJdXy7244gcQDCyE7vYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1315 (0x523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Validity Not Before: Dec 4 22:09:04 2025 GMT Not After : Dec 11 22:09:04 2025 GMT Subject: CN=69320681-f8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:32:e6:01:e3:a3:d5:de:18:88:ee:2d:4e: 2e:d9:5c:21:7c:19:ae:cb:cb:d6:bc:41:10:d0:61: 6b:fb:58:19:06:fd:58:e1:26:c6:81:d9:af:bc:4c: 0a:4a:27:63:b1:65:be:ce:04:e2:31:5b:a2:6b:97: c4:76:26:0e:d7:f7:5a:7d:67:96:b9:37:b4:ed:50: e1:70:d9:0e:49:51:f5:0e:40:e8:f5:49:dd:01:8d: 7b:c1:e8:63:24:df:24:3f:7a:40:cc:fb:06:2e:99: a7:64:db:f0:97:d9:f4:8b:44:17:54:a7:f2:63:ca: 47:bb:bb:03:06:f3:78:b9:90:3b:32:47:bc:b0:1a: e5:1d:5f:58:be:5d:09:81:7c:9f:5a:31:c2:79:b8: 0e:a6:b1:e6:f3:fd:61:81:5a:ce:4e:21:d3:2f:e5: ab:e7:71:96:01:48:3c:ac:f7:b0:53:66:09:50:8f: 42:3c:29:e4:8d:9c:ef:7c:1f:19:3b:25:88:b9:31: 28:5a:25:cb:4c:b5:df:e3:c4:f1:b2:35:6d:bd:f2: e2:d3:48:68:de:87:bc:35:d6:c1:84:1c:c3:f1:7d: c4:b2:a9:c0:f5:72:e9:a6:b7:84:4d:95:be:48:19: d1:b4:71:98:d8:9c:0c:0a:4a:44:c7:6f:48:be:14: 4c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A9:7B:48:02:6C:B4:D9:F3:1F:12:E0:75:05:80:F8:B5:B8:0C:EE X509v3 Authority Key Identifier: keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:36:68:06:0a:a9:15:7f:c3:14:34:20:dd:27:6d:35:21:a1: e3:0c:be:a3:07:f1:53:47:0f:c4:3b:2b:01:02:b5:1d:12:06: 46:9e:df:cc:6f:01:10:1d:a7:ce:75:af:b7:e3:eb:c8:fe:52: 4f:04:30:cc:0e:80:2a:bf:0a:21:5b:fc:7a:1c:82:3d:dd:c3: 7d:ac:a8:b9:e7:14:7c:13:26:7c:c4:ee:62:08:7e:09:f7:28: f3:ee:cf:72:31:1a:f4:ff:7d:12:2e:59:46:38:e8:cd:fa:e2: 3b:88:72:57:4e:4a:27:f4:8b:b2:74:02:24:d8:c4:e6:f9:4a: ab:d5:2d:b7:1f:ce:bf:e2:44:3f:56:b0:8d:f2:07:6d:87:f1: 4e:35:fa:64:eb:4c:b0:bd:20:26:ea:e5:8f:16:59:3a:c0:e4: 63:b7:c3:f1:4c:7e:d8:cd:72:08:8d:98:7b:28:fe:3b:9c:bc: c6:f1:49:25:32:4f:0d:dd:b1:14:d9:0d:a3:4d:7d:ae:2f:a9: bc:3b:5d:90:e0:b4:f4:b7:70:3f:e0:b6:b5:60:51:bf:9f:90: 19:f1:11:fd:7b:07:e9:1f:5d:83:1c:c9:2a:ef:25:c4:33:35: 99:56:71:d4:f3:28:28:32:9f:23:40:ce:6d:c0:e6:18:62:61: 69:0c:a6:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxRDkxMTAvBgNVBAUTKDQzRTRBODFERDU5NDY3MzA1MUU4QzdFMEIxQURCRDMx QzQ4M0I2NTMwHhcNMjUxMjA0MjIwOTA0WhcNMjUxMjExMjIwOTA0WjAYMRYwFAYD VQQDEw02OTMyMDY4MS1mOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbAy5gHjo9XeGIjuLU4u2VwhfBmuy8vWvEEQ0GFr+1gZBv1Y4SbGgdmvvEwK SidjsWW+zgTiMVuia5fEdiYO1/dafWeWuTe07VDhcNkOSVH1DkDo9UndAY17wehj JN8kP3pAzPsGLpmnZNvwl9n0i0QXVKfyY8pHu7sDBvN4uZA7Mke8sBrlHV9Yvl0J gXyfWjHCebgOprHm8/1hgVrOTiHTL+Wr53GWAUg8rPewU2YJUI9CPCnkjZzvfB8Z OyWIuTEoWiXLTLXf48TxsjVtvfLi00ho3oe8NdbBhBzD8X3EsqnA9XLppreETZW+ SBnRtHGY2JwMCkpEx29IvhRMVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCpe0gC bLTZ8x8S4HUFgPi1uAzuMB8GA1UdIwQYMBaAFEPkqB3VlGcwUejH4LGtvTHEg7ZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjFEOS9FMzdGMTM4MjJB NkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6QlI2TWZnc2EyOU1jU0R0 bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtU29IZFdVWnpCUjZNZmdzYTI5TWNTRHRsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjFEOS9FMzdGMTM4MjJBNkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6 QlI2TWZnc2EyOU1jU0R0bE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqNmgGCqkVf8MUNCDdJ201IaHjDL6jB/FTRw/EOysBArUdEgZGnt/M bwEQHafOda+34+vI/lJPBDDMDoAqvwohW/x6HII93cN9rKi55xR8EyZ8xO5iCH4J 9yjz7s9yMRr0/30SLllGOOjN+uI7iHJXTkon9IuydAIk2MTm+Uqr1S23H86/4kQ/ VrCN8gdth/FONfpk60ywvSAm6uWPFlk6wORjt8PxTH7YzXIIjZh7KP47nLzG8Ukl Mk8N3bEU2Q2jTX2uL6m8O12Q4LT0t3A/4La1YFG/n5AZ8RH9ewfpH12DHMkq7yXE MzWZVnHU8ygoMp8jQM5twOYYYmFpDKYU -----END CERTIFICATE-----Generated at Fri Dec 5 20:10:27 2025 by rpki-client