This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: teqmFy4WE/2JpDx0qCpXWu1zMhRWlCR11IT8MvvywGE= Subject key identifier: DE:62:9B:85:0B:5E:AE:D3:A5:7F:9F:E1:E3:54:A2:F6:50:39:CD:A5 Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 12BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 12A1 Signing time: Thu 04 Dec 2025 16:43:48 +0000 Manifest this update: Thu 04 Dec 2025 16:43:48 +0000 Manifest next update: Thu 11 Dec 2025 16:43:48 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: OHMD0y1DJC5B9fzR5YCuL+Ieg/GP68/Aj1yjJ1Kl/tQ=) 2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: /Ap9CSMlbg4Z4XpJ5kSZEcOsTjIpg7hIcLCNKU8Ina4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4795 (0x12bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: Dec 4 16:43:48 2025 GMT Not After : Dec 11 16:43:48 2025 GMT Subject: CN=6931ba44-7f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:88:c0:3e:6c:92:ae:8e:26:94:25:c5:34: c2:35:e9:e8:47:b0:e7:ca:86:7e:ab:63:20:9e:2b: 8e:3a:1d:13:be:8b:56:8f:37:44:03:78:3c:ff:8a: a3:d3:81:30:cd:5d:e9:f3:f0:16:f9:67:7f:5a:bd: 64:be:55:78:a5:a6:f2:d3:d4:eb:6f:a2:70:f8:55: be:97:e7:f8:c8:92:24:d3:1d:0a:5a:4c:fd:17:61: b1:c9:fc:6b:4c:58:66:8e:91:e5:49:e9:3b:69:46: ff:48:6a:b1:01:64:3a:cd:ac:02:0d:df:5f:00:c3: 06:3d:d3:ba:55:db:17:eb:72:30:81:55:23:c5:d8: e9:62:2e:d6:d1:26:7a:29:9d:e6:23:a4:e7:34:3b: ed:e1:d7:bd:32:b6:fd:80:2e:12:30:3c:c0:13:e0: 8d:5e:df:41:fc:b8:75:bd:62:b2:51:07:ea:3f:5e: 5b:f2:db:b9:55:a5:0a:57:1a:9a:7a:58:b0:14:5e: 36:2f:f3:e6:ce:0e:5c:16:c2:e0:b8:4f:6e:62:33: a4:f7:ab:db:ea:37:96:53:e9:e1:8c:36:43:8d:ab: 22:4e:c6:b2:b3:48:90:b9:4d:a0:aa:c8:73:3e:c3: 80:9a:84:9a:0c:68:a4:97:a9:85:92:84:1f:a7:2c: ed:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:62:9B:85:0B:5E:AE:D3:A5:7F:9F:E1:E3:54:A2:F6:50:39:CD:A5 X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:de:a3:b1:45:a5:11:cb:10:d3:95:90:34:f9:7e:e5:0b:85: 7e:be:6e:2a:98:9e:2c:f0:32:7e:3c:2a:2c:a1:19:c2:fb:ba: 50:0c:80:88:28:cd:d0:5a:a5:58:74:8c:b7:7c:93:2b:ed:70: 57:06:d5:e8:38:58:e5:4d:60:d6:6d:39:36:35:a5:a3:d5:37: cb:5b:d6:40:52:4c:09:25:49:ae:6c:c1:59:b4:e5:54:de:f4: 4b:7d:17:b7:84:dd:6e:23:17:e3:79:fa:b1:e6:b9:d6:19:b2: 43:6c:5d:d5:95:10:42:07:cf:7b:34:6b:a9:c1:43:25:21:45: 36:54:45:df:aa:07:08:38:e3:59:fa:ad:ec:88:ce:e7:a9:8b: 3c:62:72:2b:e7:41:9f:b1:64:45:89:9d:34:d9:3e:88:74:25: 53:de:03:a7:50:e8:47:0f:86:ae:39:2f:3b:5e:2c:06:db:a6: b7:b6:f0:65:af:c3:df:13:8c:86:df:81:e5:1e:01:55:57:17: b2:9e:1e:45:37:09:c6:71:53:60:3a:c9:89:98:b0:df:07:35: 51:65:6d:f1:88:35:31:ad:32:d6:95:ab:c2:c2:e5:9f:2f:32: aa:16:fc:a2:7e:6b:91:38:85:3e:ab:da:a8:51:a3:69:9f:ff: e4:97:8f:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjUxMjA0MTY0MzQ4WhcNMjUxMjExMTY0MzQ4WjAYMRYwFAYD VQQDEw02OTMxYmE0NC03ZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTmIwD5skq6OJpQlxTTCNenoR7DnyoZ+q2MgniuOOh0TvotWjzdEA3g8/4qj 04EwzV3p8/AW+Wd/Wr1kvlV4paby09Trb6Jw+FW+l+f4yJIk0x0KWkz9F2Gxyfxr TFhmjpHlSek7aUb/SGqxAWQ6zawCDd9fAMMGPdO6VdsX63IwgVUjxdjpYi7W0SZ6 KZ3mI6TnNDvt4de9Mrb9gC4SMDzAE+CNXt9B/Lh1vWKyUQfqP15b8tu5VaUKVxqa eliwFF42L/Pmzg5cFsLguE9uYjOk96vb6jeWU+nhjDZDjasiTsays0iQuU2gqshz PsOAmoSaDGikl6mFkoQfpyztEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5im4UL Xq7TpX+f4eNUovZQOc2lMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW3qOxRaURyxDTlZA0+X7lC4V+vm4qmJ4s8DJ+PCosoRnC+7pQDICI KM3QWqVYdIy3fJMr7XBXBtXoOFjlTWDWbTk2NaWj1TfLW9ZAUkwJJUmubMFZtOVU 3vRLfRe3hN1uIxfjefqx5rnWGbJDbF3VlRBCB897NGupwUMlIUU2VEXfqgcIOONZ +q3siM7nqYs8YnIr50GfsWRFiZ002T6IdCVT3gOnUOhHD4auOS87XiwG26a3tvBl r8PfE4yG34HlHgFVVxeynh5FNwnGcVNgOsmJmLDfBzVRZW3xiDUxrTLWlavCwuWf LzKqFvyifmuROIU+q9qoUaNpn//kl48g -----END CERTIFICATE-----Generated at Sat Dec 6 15:24:52 2025 by rpki-client