This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft File: qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft (raw, json) Hash identifier: 0UW/NbQ+c4Jl2SFHuFvl48jIpz5uidZ7xNeIhowhVdI= Subject key identifier: B7:CD:2A:35:60:9D:C0:BA:AB:92:5D:62:E8:D8:2B:44:BF:B7:FB:76 Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Certificate serial: 355C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft Manifest number: 351D Signing time: Mon 22 Dec 2025 14:24:11 +0000 Manifest this update: Mon 22 Dec 2025 14:24:11 +0000 Manifest next update: Mon 29 Dec 2025 14:24:11 +0000 Files and hashes: 1: qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl (hash: QGTXgrotVG2UUUYO2317ndagIg+JIjfmKErWwTWi6Y4=) 2: 0D0AE5040AE711E89D0C5071C4F9AE02.roa (hash: 1QH0WR9EAexZONoxgrkCIP2BPHtzOEA7LLO//ildFDE=) 3: 2CDDCAB868AC11EDAA6C8F2AC4F9AE02.roa (hash: snUS5Nz9OXbIohiNncX/rLVlHKKNwvL/WKysUwbCRFM=) 4: 3F0948F82D1011ECB745DB85C4F9AE02.roa (hash: 9JsagnY9rpoPlsVMt4iVRdULuA/96P9hw1zuWPkbXY4=) 5: D93EA75AEE5C11E995881B1BC4F9AE02.roa (hash: yyuVGHEHdjgOJV3OL5d2WHtm2S0Tu6t1QPxDqH/At3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13660 (0x355c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Validity Not Before: Dec 22 14:24:11 2025 GMT Not After : Dec 29 14:24:11 2025 GMT Subject: CN=6949548b-3ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:80:95:2a:1b:24:62:e1:e0:6c:de:81:1b:79: 41:a9:43:71:4c:27:1d:83:43:f9:8e:62:c7:08:c6: 41:49:19:d7:85:63:13:90:49:94:66:7f:68:2f:4a: d8:a9:91:9d:eb:db:1f:ba:a1:b8:36:3e:75:09:1c: 50:fd:d4:34:89:a1:70:98:0e:7f:e6:e5:90:42:0b: 67:3c:e1:a7:a5:03:3d:57:c0:a5:ad:f1:39:cb:97: e0:1d:7c:2a:e0:fa:b1:62:73:79:8b:ba:de:b4:b6: ea:3c:18:36:22:2a:ca:40:f7:a2:ed:1b:15:37:84: b0:30:b8:73:15:d5:9c:27:89:d9:89:0a:97:08:ad: 90:bd:10:91:bc:7b:58:88:e7:2f:e6:f2:e7:12:f9: 37:79:7c:6e:2d:90:d9:77:29:26:d5:0b:27:6b:ec: bb:2b:d1:d2:74:44:c8:82:4f:8c:8e:71:6b:ea:8d: cd:5c:d5:de:15:ee:6e:ed:93:16:02:bf:35:a6:4a: 72:48:df:e5:f3:65:94:d3:21:8d:9e:80:74:c2:01: 47:fa:53:65:02:39:12:12:6c:b3:6f:18:40:eb:79: e9:56:46:35:9f:0e:02:2f:44:e3:3c:33:6a:0a:eb: d0:85:9a:01:77:c9:12:9d:76:7f:d1:2b:4c:23:5b: 27:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CD:2A:35:60:9D:C0:BA:AB:92:5D:62:E8:D8:2B:44:BF:B7:FB:76 X509v3 Authority Key Identifier: keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:a5:bf:b6:c1:cd:5d:08:91:fe:4c:35:52:3f:4b:1a:c8:99: 1c:69:5e:1a:c9:e7:6b:d2:10:70:09:79:54:c3:88:68:fc:4c: 66:c5:4d:bb:ae:6f:2d:31:10:61:3e:b2:70:3c:07:84:3c:17: 9e:76:4e:25:42:1c:f1:df:ce:82:03:69:c7:52:65:16:8b:7e: db:eb:22:9a:1c:74:d9:52:34:20:c5:c6:06:98:da:39:15:80: f8:06:1c:b5:72:58:b9:83:e5:09:73:10:94:16:24:22:81:b6: fa:be:fc:0d:f2:de:93:32:89:c0:d9:0f:0a:3e:16:6b:22:bd: 4b:fe:49:ad:47:6e:29:41:4c:f7:22:a3:a2:ee:c4:19:99:dd: e7:1c:cb:61:37:94:3e:89:83:5f:3e:65:e0:1a:2f:ad:38:5d: 8a:bf:64:b6:d8:ad:12:16:55:3d:4d:f2:54:8f:5b:40:e3:07: 0b:31:51:c3:a6:47:51:56:e6:00:9b:30:bd:e9:6c:3c:49:43: 9b:c9:bc:3b:e1:c8:53:64:bf:2a:e7:1b:91:d2:72:1a:e7:93: 77:87:b5:17:98:ff:b0:01:3f:6d:5a:5f:5b:15:cf:6c:15:f9: 8e:92:74:e3:00:9a:d2:b6:4a:a9:f1:af:55:1c:d1:f9:f2:69: 10:67:70:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNjMxMTAvBgNVBAUTKEE4OTdDMDRERTEyRjBBNkY1OUMxQUQxNTA5RjBCMjA5 RkE1NDM4QjMwHhcNMjUxMjIyMTQyNDExWhcNMjUxMjI5MTQyNDExWjAYMRYwFAYD VQQDDA02OTQ5NTQ4Yi0zYWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+YCVKhskYuHgbN6BG3lBqUNxTCcdg0P5jmLHCMZBSRnXhWMTkEmUZn9oL0rY qZGd69sfuqG4Nj51CRxQ/dQ0iaFwmA5/5uWQQgtnPOGnpQM9V8ClrfE5y5fgHXwq 4PqxYnN5i7retLbqPBg2IirKQPei7RsVN4SwMLhzFdWcJ4nZiQqXCK2QvRCRvHtY iOcv5vLnEvk3eXxuLZDZdykm1Qsna+y7K9HSdETIgk+MjnFr6o3NXNXeFe5u7ZMW Ar81pkpySN/l82WU0yGNnoB0wgFH+lNlAjkSEmyzbxhA63npVkY1nw4CL0TjPDNq CuvQhZoBd8kSnXZ/0StMI1snIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfNKjVg ncC6q5JdYujYK0S/t/t2MB8GA1UdIwQYMBaAFKiXwE3hLwpvWcGtFQnwsgn6VDiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM2My9GRjhCNEI2QzFE ODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNtOVp3YTBWQ2ZDeUNmcFVP TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKZkFUZUV2Q205WndhMFZDZkN5Q2ZwVU9MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzM2My9GRjhCNEI2QzFEODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNt OVp3YTBWQ2ZDeUNmcFVPTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgpb+2wc1dCJH+TDVSP0sayJkcaV4ayedr0hBwCXlUw4ho/ExmxU27 rm8tMRBhPrJwPAeEPBeedk4lQhzx386CA2nHUmUWi37b6yKaHHTZUjQgxcYGmNo5 FYD4Bhy1cli5g+UJcxCUFiQigbb6vvwN8t6TMonA2Q8KPhZrIr1L/kmtR24pQUz3 IqOi7sQZmd3nHMthN5Q+iYNfPmXgGi+tOF2Kv2S22K0SFlU9TfJUj1tA4wcLMVHD pkdRVuYAmzC96Ww8SUObybw74chTZL8q5xuR0nIa55N3h7UXmP+wAT9tWl9bFc9s FfmOknTjAJrStkqp8a9VHNH58mkQZ3A3 -----END CERTIFICATE-----Generated at Mon Dec 22 22:37:53 2025 by rpki-client