This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft File: QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json) Hash identifier: 4n5Iiu/gsvE94yFys6bZfMh/ovqYWExQ7U+uYu2Z8o8= Subject key identifier: E0:F4:38:A3:58:10:CB:05:48:9B:67:A6:8A:34:EF:D1:B4:8C:FA:7F Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 Certificate issuer: /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Certificate serial: 0AC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft Manifest number: 0AB9 Signing time: Mon 22 Dec 2025 18:56:37 +0000 Manifest this update: Mon 22 Dec 2025 18:56:37 +0000 Manifest next update: Mon 29 Dec 2025 18:56:37 +0000 Files and hashes: 1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: PUkFdeU1VHZ2s9qXvY/9YxmnSQp5+IImI385uIIa/1o=) 2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: lEjGikQ+ii4jtTGbAoJ/KSsQ3VS5/CajiRstqwCSiwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2753 (0xac1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Validity Not Before: Dec 22 18:56:37 2025 GMT Not After : Dec 29 18:56:37 2025 GMT Subject: CN=69499465-90ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:1b:e5:c0:00:73:58:84:18:65:d0:ef:78: 68:65:dc:d6:a5:cd:8b:10:15:eb:bc:70:ae:27:01: 04:a7:6c:10:17:cc:2b:af:47:7f:07:5e:61:ab:42: 58:fb:30:4e:97:4a:0f:87:87:41:04:b5:62:c9:2c: af:d3:4e:2e:5c:75:90:26:a4:2c:b4:6f:65:ef:da: 36:e9:a4:8a:1d:b3:c3:38:b6:2e:2c:9f:db:33:f8: 95:5f:82:76:e7:bf:b8:8c:e7:bb:f5:0c:fb:87:a0: 4c:59:1c:a3:42:b3:ac:33:50:a4:83:bc:15:a8:48: ec:5e:77:e7:e4:d2:08:01:86:bc:9d:31:ad:fe:10: e9:4e:3c:13:46:72:de:4c:08:87:3d:05:80:dd:4c: fc:da:8c:37:5f:1c:fc:f3:6d:4a:92:3c:39:37:4b: cb:c5:9c:3a:e5:da:b1:55:6a:39:dc:25:ea:60:1d: 14:2b:3c:20:f6:af:81:ea:9c:52:ef:9e:e6:51:34: 51:6c:2c:a8:8b:9d:52:ac:40:5b:26:8c:55:50:67: ac:4a:23:90:04:ec:a7:5b:38:76:6d:d1:64:58:6d: 5f:d5:45:1f:28:9f:6f:31:6f:77:7d:4a:9b:10:75: ff:5c:14:eb:b6:b9:47:47:0e:99:77:1d:97:df:a6: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F4:38:A3:58:10:CB:05:48:9B:67:A6:8A:34:EF:D1:B4:8C:FA:7F X509v3 Authority Key Identifier: keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:16:06:cc:6b:d8:5c:38:0b:c2:ae:20:18:d0:03:e6:aa:ea: 65:50:2f:b7:62:31:d8:0c:2f:12:a0:14:e1:4e:5d:d5:97:04: a4:26:78:96:13:99:e4:55:7b:68:50:f7:b8:35:23:fd:8c:0f: a0:58:6d:6c:6a:c2:4d:04:fe:3b:f3:19:29:9e:c0:85:fc:1e: 4c:b5:54:4b:f4:de:31:87:eb:8b:7a:25:66:e3:21:b9:83:ca: 5d:45:01:e7:76:59:a3:6d:63:ba:92:55:ca:d3:3f:6f:29:18: 5f:b4:0a:d5:e3:f9:e0:ae:71:8c:b0:63:8a:b9:cc:80:86:e7: c0:73:19:6d:0b:f0:0b:52:1a:6c:64:7b:f9:16:51:40:e4:91: 53:10:87:64:6c:9b:26:4d:70:cb:16:07:8c:49:1f:1f:94:db: ad:14:a7:67:4b:55:4b:16:b0:de:c3:32:4b:b2:ed:4c:d6:47: 79:33:96:2e:9c:70:f1:d8:be:76:8d:f6:f2:fd:a6:b7:63:2a: f8:01:d8:6c:1a:4d:f4:72:a2:33:03:bf:0e:eb:33:65:ec:2d: 92:58:a7:2b:cf:6c:f3:73:b4:89:71:97:aa:54:49:5e:79:0f: 13:23:6e:f4:18:56:7f:f7:55:30:42:94:53:c6:57:fa:ac:0c: 35:c9:9d:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNEOTgxMTAvBgNVBAUTKDQxQzY1QzAwRjBBNkIwN0QzQzBGNkIxMjkwNTY0RkJG ODM4MkRBNzMwHhcNMjUxMjIyMTg1NjM3WhcNMjUxMjI5MTg1NjM3WjAYMRYwFAYD VQQDDA02OTQ5OTQ2NS05MGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHEb5cAAc1iEGGXQ73hoZdzWpc2LEBXrvHCuJwEEp2wQF8wrr0d/B15hq0JY +zBOl0oPh4dBBLViySyv004uXHWQJqQstG9l79o26aSKHbPDOLYuLJ/bM/iVX4J2 57+4jOe79Qz7h6BMWRyjQrOsM1Ckg7wVqEjsXnfn5NIIAYa8nTGt/hDpTjwTRnLe TAiHPQWA3Uz82ow3Xxz8821Kkjw5N0vLxZw65dqxVWo53CXqYB0UKzwg9q+B6pxS 757mUTRRbCyoi51SrEBbJoxVUGesSiOQBOynWzh2bdFkWG1f1UUfKJ9vMW93fUqb EHX/XBTrtrlHRw6Zdx2X36bUQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOD0OKNY EMsFSJtnpoo079G0jPp/MB8GA1UdIwQYMBaAFEHGXADwprB9PA9rEpBWT7+Dgtpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0Q5OC83ODAyMDQ4QTY2 QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNIMDhEMnNTa0ZaUHY0T0My bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjWmNBUENtc0gwOEQyc1NrRlpQdjRPQzJuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0Q5OC83ODAyMDQ4QTY2QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNI MDhEMnNTa0ZaUHY0T0Mybk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6FgbMa9hcOAvCriAY0APmquplUC+3YjHYDC8SoBThTl3VlwSkJniW E5nkVXtoUPe4NSP9jA+gWG1sasJNBP478xkpnsCF/B5MtVRL9N4xh+uLeiVm4yG5 g8pdRQHndlmjbWO6klXK0z9vKRhftArV4/ngrnGMsGOKucyAhufAcxltC/ALUhps ZHv5FlFA5JFTEIdkbJsmTXDLFgeMSR8flNutFKdnS1VLFrDewzJLsu1M1kd5M5Yu nHDx2L52jfby/aa3Yyr4AdhsGk30cqIzA78O6zNl7C2SWKcrz2zzc7SJcZeqVEle eQ8TI270GFZ/91UwQpRTxlf6rAw1yZ22 -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:45 2025 by rpki-client