This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json) Hash identifier: DRKGsBhmXZeGGyusHo5GOHQPqwk4+iB9WOPG9VoBNLE= Subject key identifier: 19:88:59:7E:4B:D3:69:8B:A6:12:32:B7:8C:8C:E3:26:D4:FD:01:9E Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 Certificate issuer: /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Certificate serial: 0772 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft Manifest number: 076B Signing time: Mon 22 Dec 2025 20:55:35 +0000 Manifest this update: Mon 22 Dec 2025 20:55:35 +0000 Manifest next update: Mon 29 Dec 2025 20:55:35 +0000 Files and hashes: 1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: DQuvTWKw69jX1KJ02ud/fwQMW6IdGUIfprvKMNkuqDY=) 2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: Mo4ipUAhsJfO561D6WlOKnCiX8/Ti7RsBVjlUT3Jw4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1906 (0x772) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Validity Not Before: Dec 22 20:55:35 2025 GMT Not After : Dec 29 20:55:35 2025 GMT Subject: CN=6949b047-4fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:64:1e:13:0d:73:ca:27:5a:70:5e:99:7b:61: 56:f8:0e:26:2e:7f:96:ac:7b:25:f0:72:fa:ab:96: 48:89:95:08:a8:42:7a:73:92:8b:e5:ad:bb:60:c3: 9e:59:90:e8:70:1b:22:07:ad:d8:51:94:2f:72:97: 67:6d:8d:2c:01:cb:50:06:ff:70:10:0c:01:cc:bf: 47:e7:09:9e:c4:0e:ee:66:bb:f7:8b:ac:5c:14:01: 14:bd:5a:87:48:72:fd:88:63:6e:83:8a:8c:8a:05: f3:89:9d:b9:01:d6:11:ae:ab:a6:86:09:37:9b:ad: 0a:26:1b:c9:1d:82:cc:26:1b:f1:89:44:4c:b3:2f: 6d:14:d1:99:65:5c:69:5e:6c:a2:e9:80:1f:fb:2f: 81:30:6e:b5:de:62:59:cf:62:98:69:b3:71:0e:b5: 09:20:54:6b:1c:7a:44:83:c4:d1:25:a6:63:70:45: 87:a0:f9:34:e9:a4:6c:10:2f:4d:0c:e6:83:99:ff: ec:c6:31:c3:5a:9c:05:af:9b:4c:80:2c:6d:f6:e3: 77:83:15:53:2f:84:14:af:5f:48:2f:0f:38:34:08: d9:38:1d:b6:f5:7c:ac:82:13:84:69:dd:76:cb:48: 37:9f:c9:63:0d:93:13:6f:54:5c:a8:2a:39:54:e8: 2d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:88:59:7E:4B:D3:69:8B:A6:12:32:B7:8C:8C:E3:26:D4:FD:01:9E X509v3 Authority Key Identifier: keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f1:b2:39:53:42:f0:1e:00:27:ad:15:ce:b4:ce:5d:62:48: 3f:84:5d:07:a8:0c:63:66:e6:41:a0:d9:cc:87:5a:1f:67:99: cd:7b:2c:68:06:40:92:83:bd:f7:a8:ff:67:ff:7b:c9:39:3e: b2:3f:96:b2:f0:0b:d1:17:6a:42:1b:f2:4e:b5:64:ba:ae:7b: e8:34:a0:c0:1d:c0:eb:a3:b4:db:d1:85:21:a2:32:fb:09:84: 32:b9:c0:23:67:50:d9:af:4c:a0:99:77:cf:41:8d:e7:4a:05: 21:a0:21:ca:02:eb:e1:67:b1:54:4a:79:23:0b:ba:37:72:da: fc:8f:5c:c3:82:6e:d6:cf:96:bc:70:21:96:ac:9a:ba:c0:1a: 8a:61:59:85:73:8f:d2:fd:ba:93:d7:9b:48:34:f1:17:fc:eb: a9:e1:0d:09:bd:e9:ef:d8:77:46:9d:c9:13:d5:71:6c:39:d8: 0d:03:6a:0b:ca:68:77:0b:99:f4:4a:c1:b8:79:0a:85:44:00: 69:23:31:35:31:fb:7c:7f:5e:3a:20:b7:c7:78:4c:73:c0:a5: 0c:63:be:e9:13:87:8a:62:3d:10:c4:f7:21:7c:07:b8:78:cb: c3:65:e6:1d:21:27:0e:9d:f3:cb:30:b9:2f:15:c0:b6:7b:c7: 30:e0:af:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0MzUxMTAvBgNVBAUTKDQyOTExQjEwOUQ0NkU4ODY2MUZBODU2MTZDODEyODAz QzVBQjNDNjQwHhcNMjUxMjIyMjA1NTM1WhcNMjUxMjI5MjA1NTM1WjAYMRYwFAYD VQQDDA02OTQ5YjA0Ny00ZmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGQeEw1zyidacF6Ze2FW+A4mLn+WrHsl8HL6q5ZIiZUIqEJ6c5KL5a27YMOe WZDocBsiB63YUZQvcpdnbY0sActQBv9wEAwBzL9H5wmexA7uZrv3i6xcFAEUvVqH SHL9iGNug4qMigXziZ25AdYRrqumhgk3m60KJhvJHYLMJhvxiURMsy9tFNGZZVxp Xmyi6YAf+y+BMG613mJZz2KYabNxDrUJIFRrHHpEg8TRJaZjcEWHoPk06aRsEC9N DOaDmf/sxjHDWpwFr5tMgCxt9uN3gxVTL4QUr19ILw84NAjZOB229XysghOEad12 y0g3n8ljDZMTb1RcqCo5VOgtUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmIWX5L 02mLphIyt4yM4ybU/QGeMB8GA1UdIwQYMBaAFEKRGxCdRuiGYfqFYWyBKAPFqzxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDQzNS9EMjg4NUJDNDQ0 NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJWmgtb1ZoYklFb0E4V3JQ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwRWJFSjFHNklaaC1vVmhiSUVvQThXclBHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDQzNS9EMjg4NUJDNDQ0NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJ Wmgtb1ZoYklFb0E4V3JQR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq8bI5U0LwHgAnrRXOtM5dYkg/hF0HqAxjZuZBoNnMh1ofZ5nNeyxo BkCSg733qP9n/3vJOT6yP5ay8AvRF2pCG/JOtWS6rnvoNKDAHcDro7Tb0YUhojL7 CYQyucAjZ1DZr0ygmXfPQY3nSgUhoCHKAuvhZ7FUSnkjC7o3ctr8j1zDgm7Wz5a8 cCGWrJq6wBqKYVmFc4/S/bqT15tINPEX/Oup4Q0Jvenv2HdGnckT1XFsOdgNA2oL ymh3C5n0SsG4eQqFRABpIzE1Mft8f146ILfHeExzwKUMY77pE4eKYj0QxPchfAe4 eMvDZeYdIScOnfPLMLkvFcC2e8cw4K8Z -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:24 2025 by rpki-client