This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft File: QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft (raw, json) Hash identifier: FX/8VIk4ukg3Lc5vw9q8pEJG0+ie+S9UIesxYpvOZqY= Subject key identifier: FC:37:51:95:B9:0C:75:67:20:B7:9D:A1:8E:93:D0:0C:DB:D6:E3:0B Authority key identifier: 43:04:CA:33:00:46:11:72:4D:A5:C3:35:8C:F3:B6:80:61:CA:4A:8A Certificate issuer: /CN=A91FFA9E/serialNumber=4304CA33004611724DA5C3358CF3B68061CA4A8A Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft Manifest number: 08 Signing time: Tue 23 Dec 2025 06:55:09 +0000 Manifest this update: Tue 23 Dec 2025 06:55:08 +0000 Manifest next update: Tue 30 Dec 2025 06:55:08 +0000 Files and hashes: 1: QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl (hash: AZCMWTOHE5ZctAwmoYkEuqmS6eoZhtYJOQxfdtTcnKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA9E, serialNumber=4304CA33004611724DA5C3358CF3B68061CA4A8A Validity Not Before: Dec 23 06:55:08 2025 GMT Not After : Dec 30 06:55:08 2025 GMT Subject: CN=694a3ccd-55a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4c:2e:04:9d:4a:d0:40:18:7b:86:38:b2:63: b4:5d:90:22:c7:8a:0c:b4:73:37:02:8a:18:06:c8: 23:76:c6:04:6f:b3:a2:6d:90:33:e2:bd:8c:e5:73: 6f:aa:92:0a:64:7a:39:eb:f0:97:5a:1b:8d:bd:95: ab:38:c4:89:7f:8b:6c:ad:a1:1b:e0:a9:47:ea:ef: 75:57:48:f5:28:1c:32:58:89:a2:e0:b3:ec:ab:4c: c0:d3:1b:06:77:77:c7:b2:42:64:77:b2:6c:7f:60: 45:d2:48:44:ad:e4:a8:ca:bc:b3:72:3b:1d:1d:af: 6d:17:13:0d:c7:14:9c:41:6e:d1:ca:79:83:a0:c2: d0:65:59:f7:76:ac:7f:49:75:83:fc:04:17:3d:21: f3:c1:9a:88:87:51:44:8d:a2:b9:2c:79:3f:a2:b3: bd:42:a2:52:e2:94:c8:68:c4:15:f9:0c:57:3d:36: ec:39:fa:6e:0a:aa:2a:b4:63:aa:7d:01:69:c0:06: 1e:6c:65:f3:df:84:4c:67:d5:2a:00:4b:76:85:65: bd:5b:62:20:e6:b9:8b:e1:ef:fb:18:a8:9a:3a:08: c6:59:f5:95:37:06:04:3f:9c:12:ce:d9:52:77:f0: 0a:de:d2:99:3b:ed:42:52:86:ba:bc:5a:17:8c:fd: 47:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:37:51:95:B9:0C:75:67:20:B7:9D:A1:8E:93:D0:0C:DB:D6:E3:0B X509v3 Authority Key Identifier: keyid:43:04:CA:33:00:46:11:72:4D:A5:C3:35:8C:F3:B6:80:61:CA:4A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:a0:83:9c:ea:fa:01:58:43:e7:58:35:a8:f8:6a:a5:60:c9: a0:78:a9:f5:31:0a:a1:1a:1b:49:29:55:52:a7:43:3a:88:85: 54:c4:79:b0:80:3a:03:a2:66:e8:0a:31:24:95:6d:2d:3d:ae: 64:47:ec:ee:87:d8:9f:ed:e9:ab:78:4c:e6:f2:42:c6:f8:cd: a9:db:e3:b6:0e:49:fd:23:5a:5f:01:07:ba:14:25:39:ad:47: 8c:41:f9:70:b1:94:dc:39:28:b3:9e:f0:b6:36:31:38:2d:e2: 21:af:c0:ff:46:ce:81:cc:75:d5:5a:b7:57:44:c0:7b:8e:b8: ec:34:e5:08:87:fb:2d:b9:fb:df:68:9f:ce:2b:34:f6:91:a1: 41:45:27:50:42:9c:a1:f7:54:13:21:0d:c2:f4:1c:8d:39:82: 0b:c8:31:bd:95:f4:35:86:98:8a:10:de:23:7a:ea:53:4f:06: 88:86:d9:52:79:0e:e9:4f:60:ed:48:4d:6c:45:e0:b5:f9:d1: e3:55:af:1b:11:f9:a6:09:b9:d4:07:21:6e:47:e2:eb:73:dc: f4:5e:87:08:49:25:59:32:2b:e9:c9:44:9a:b1:be:4b:c4:3b: bd:56:bd:cb:07:b5:b5:47:ed:52:9c:19:2a:3f:5a:86:a4:9c: 5f:05:5d:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkE5RTExMC8GA1UEBRMoNDMwNENBMzMwMDQ2MTE3MjREQTVDMzM1OENGM0I2ODA2 MUNBNEE4QTAeFw0yNTEyMjMwNjU1MDhaFw0yNTEyMzAwNjU1MDhaMBgxFjAUBgNV BAMMDTY5NGEzY2NkLTU1YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMTC4EnUrQQBh7hjiyY7RdkCLHigy0czcCihgGyCN2xgRvs6JtkDPivYzlc2+q kgpkejnr8JdaG429las4xIl/i2ytoRvgqUfq73VXSPUoHDJYiaLgs+yrTMDTGwZ3 d8eyQmR3smx/YEXSSESt5KjKvLNyOx0dr20XEw3HFJxBbtHKeYOgwtBlWfd2rH9J dYP8BBc9IfPBmoiHUUSNorkseT+is71ColLilMhoxBX5DFc9Nuw5+m4Kqiq0Y6p9 AWnABh5sZfPfhExn1SoAS3aFZb1bYiDmuYvh7/sYqJo6CMZZ9ZU3BgQ/nBLO2VJ3 8Are0pk77UJShrq8WheM/UedAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/DdRlbkM dWcgt52hjpPQDNvW4wswHwYDVR0jBBgwFoAUQwTKMwBGEXJNpcM1jPO2gGHKSoow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGQTlFLzhGMTIyODAyRDU5 RTExRjA4MkY2NEYxN0M0RjlBRTAyL1F3VEtNd0JHRVhKTnBjTTFqUE8yZ0dIS1Nv by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXdUS013QkdFWEpOcGNNMWpQTzJnR0hLU29vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG QTlFLzhGMTIyODAyRDU5RTExRjA4MkY2NEYxN0M0RjlBRTAyL1F3VEtNd0JHRVhK TnBjTTFqUE8yZ0dIS1Nvby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMegg5zq+gFYQ+dYNaj4aqVgyaB4qfUxCqEaG0kpVVKnQzqIhVTEebCA OgOiZugKMSSVbS09rmRH7O6H2J/t6at4TObyQsb4zanb47YOSf0jWl8BB7oUJTmt R4xB+XCxlNw5KLOe8LY2MTgt4iGvwP9GzoHMddVat1dEwHuOuOw05QiH+y25+99o n84rNPaRoUFFJ1BCnKH3VBMhDcL0HI05ggvIMb2V9DWGmIoQ3iN66lNPBoiG2VJ5 DulPYO1ITWxF4LX50eNVrxsR+aYJudQHIW5H4utz3PRehwhJJVkyK+nJRJqxvkvE O71WvcsHtbVH7VKcGSo/WoaknF8FXds= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:28 2025 by rpki-client