This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: WDOUcJR6vuk5bfIMMhQ6mnSOr7dEl5ggqTS0mSwjvOA= Subject key identifier: 08:2F:00:A5:03:0A:B4:03:D8:FC:1C:62:76:D9:BC:7F:AA:B3:E3:3F Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 1200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 11F8 Signing time: Thu 04 Dec 2025 16:47:09 +0000 Manifest this update: Thu 04 Dec 2025 16:47:09 +0000 Manifest next update: Thu 11 Dec 2025 16:47:09 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: 2tehRwqhCyu8bLP8L3zmFYSKpveYRyDinPKM/gjv5ms=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: 7uU8WNBCftCBAsgJ0cA2B7pdvFfJrHU+yjsI9Wz3L8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4608 (0x1200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: Dec 4 16:47:09 2025 GMT Not After : Dec 11 16:47:09 2025 GMT Subject: CN=6931bb0d-58bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:00:64:f0:60:94:0b:ba:72:8e:c5:31:5c:d9: 6d:85:ca:8d:92:f5:50:58:24:73:eb:1e:85:d3:4a: 87:e2:04:23:f0:d9:99:89:b4:93:3d:10:b7:e4:9b: b7:7e:d9:d3:24:13:af:aa:c8:2e:7b:cf:2b:b8:5d: fb:b7:6e:c4:9b:8e:27:04:11:67:c7:fa:9c:85:bc: 68:af:1e:35:ff:20:fa:4c:7e:54:4d:b8:57:a8:8d: 13:ac:2a:e1:6d:81:3d:45:ff:c4:a3:2b:15:0e:93: 09:8b:d9:d6:18:d9:cb:b7:69:51:00:91:d5:65:53: c1:09:16:4c:05:19:ac:3d:28:b2:b3:87:48:2a:cf: 14:6b:68:3a:d1:5c:67:db:9b:ac:be:f5:36:0f:38: eb:a6:ba:0f:47:0b:fb:3d:68:11:28:43:c9:f4:45: 9b:22:f0:5a:fd:6b:c3:5a:39:3d:3a:3e:94:c0:23: 6c:66:a3:05:ab:2a:82:5c:91:f3:92:43:20:88:b0: 42:b6:bf:e4:ac:88:f1:9f:21:8e:4e:76:37:42:3b: bc:b2:e7:57:a4:68:c1:12:e1:50:e2:ac:72:39:fa: 81:96:90:c5:0c:a2:86:ca:ec:23:89:f9:4c:fd:17: 8d:ca:ea:3a:51:66:ed:15:ff:ad:85:08:f9:fb:49: ae:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2F:00:A5:03:0A:B4:03:D8:FC:1C:62:76:D9:BC:7F:AA:B3:E3:3F X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:d9:18:de:c2:b0:4a:9e:4e:60:b1:93:48:1c:47:62:a8:1d: c3:c5:05:97:5b:f2:f8:38:71:a4:85:04:53:4a:3c:38:4c:5e: 24:a0:1c:6b:e5:44:6f:64:a4:b8:30:2e:b0:62:af:ff:4b:c0: 4c:83:55:e1:a1:98:e1:25:46:28:28:00:a4:6f:51:19:09:5b: 6b:c4:5b:c3:27:7c:bf:a9:d3:9e:70:f1:ba:de:0f:e1:8f:cf: 59:3d:74:54:5e:e6:7d:c7:6a:4e:a9:e2:df:63:ed:86:87:20: 1f:0f:6c:4d:5b:8f:45:64:93:54:f0:69:1c:a0:4c:a8:6a:1a: 45:bf:c6:2b:d2:64:2b:d9:46:08:36:f3:b0:45:83:6d:53:9f: 90:47:09:12:73:e8:0b:9c:dc:46:7b:30:af:7b:ea:35:15:f8: 12:b6:e2:b3:bf:25:fe:2a:ac:7d:ea:95:11:4b:cb:bf:34:1d: b6:dd:74:86:58:98:73:95:8c:15:a7:cf:04:a1:3d:bf:91:51: 16:92:20:4c:ed:69:1a:eb:f4:0d:2b:4d:45:5c:56:8a:57:7b: b6:3a:4f:86:48:f4:6c:e7:62:44:de:68:f2:cd:8c:c6:b2:9f: fa:d7:e9:12:3f:26:84:79:02:12:97:a9:f0:c7:f0:ae:da:e0: 44:e3:74:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjUxMjA0MTY0NzA5WhcNMjUxMjExMTY0NzA5WjAYMRYwFAYD VQQDEw02OTMxYmIwZC01OGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6QBk8GCUC7pyjsUxXNlthcqNkvVQWCRz6x6F00qH4gQj8NmZibSTPRC35Ju3 ftnTJBOvqsgue88ruF37t27Em44nBBFnx/qchbxorx41/yD6TH5UTbhXqI0TrCrh bYE9Rf/EoysVDpMJi9nWGNnLt2lRAJHVZVPBCRZMBRmsPSiys4dIKs8Ua2g60Vxn 25usvvU2DzjrproPRwv7PWgRKEPJ9EWbIvBa/WvDWjk9Oj6UwCNsZqMFqyqCXJHz kkMgiLBCtr/krIjxnyGOTnY3Qju8sudXpGjBEuFQ4qxyOfqBlpDFDKKGyuwjiflM /ReNyuo6UWbtFf+thQj5+0muFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgvAKUD CrQD2PwcYnbZvH+qs+M/MB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDP2RjewrBKnk5gsZNIHEdiqB3DxQWXW/L4OHGkhQRTSjw4TF4koBxr 5URvZKS4MC6wYq//S8BMg1XhoZjhJUYoKACkb1EZCVtrxFvDJ3y/qdOecPG63g/h j89ZPXRUXuZ9x2pOqeLfY+2GhyAfD2xNW49FZJNU8GkcoEyoahpFv8Yr0mQr2UYI NvOwRYNtU5+QRwkSc+gLnNxGezCve+o1FfgStuKzvyX+Kqx96pURS8u/NB223XSG WJhzlYwVp88EoT2/kVEWkiBM7Wka6/QNK01FXFaKV3u2Ok+GSPRs52JE3mjyzYzG sp/61+kSPyaEeQISl6nwx/Cu2uBE43Qp -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:25 2025 by rpki-client