This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft File: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json) Hash identifier: 5VB6icM/xHBlH+JD1V9F+jkXIlYmy8LTo+0FPOaO3e0= Subject key identifier: 13:7B:49:C3:F2:B9:5C:F2:94:F6:26:4E:92:73:6E:5F:23:4E:9C:80 Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 Certificate issuer: /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Certificate serial: 2818 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft Manifest number: 2808 Signing time: Sat 06 Dec 2025 15:24:02 +0000 Manifest this update: Sat 06 Dec 2025 15:24:01 +0000 Manifest next update: Sat 13 Dec 2025 15:24:01 +0000 Files and hashes: 1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: CP10IRuaW1KMHb5ttTdwx39iuTAL95BffJtoLMg+JII=) 2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: h5hXtP9IbSxqcG/aS1dzRp2AGDqGhZ3NxNAa9bJM38Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10264 (0x2818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Validity Not Before: Dec 6 15:24:01 2025 GMT Not After : Dec 13 15:24:01 2025 GMT Subject: CN=69344a91-41cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:30:07:ce:54:3d:a5:5a:a1:17:77:c2:e0: 00:62:13:80:0e:b0:eb:0d:b4:44:8a:69:7f:bc:5e: 6f:6f:ef:11:93:c6:5b:fe:cf:67:c3:55:01:d8:70: b7:ca:7b:2b:68:66:0f:6e:15:ee:71:9b:67:d3:c8: a3:eb:a8:62:59:9f:92:bb:ba:c3:68:fb:95:59:22: 59:9e:9b:b8:b6:29:c2:63:a1:db:cf:a3:0b:2f:5b: 12:07:d7:d7:7a:9f:33:f5:eb:50:c2:d3:73:4f:93: ee:85:94:96:96:a6:ed:ec:fb:2c:62:27:60:0a:3b: 39:0a:7f:71:3d:c8:7c:7d:09:3e:37:fb:73:88:20: de:6f:1c:f7:ea:88:cf:fc:5e:bd:67:26:85:44:bf: c4:9b:59:bd:74:63:75:63:51:e8:59:23:85:0c:90: e4:54:78:b0:98:ac:98:87:2d:a4:12:03:a6:dc:ce: 4b:03:46:90:bf:02:d8:1d:cf:8d:b7:2b:c0:53:2b: 82:af:6d:99:5e:37:98:d5:41:86:24:fd:b5:90:14: ac:42:df:81:06:33:03:7d:df:56:fc:d5:e0:9d:04: 84:82:ad:0f:cd:a5:bb:11:2b:ac:d6:9d:f3:4e:e0: 2a:3f:41:d1:54:0b:8c:5b:04:7c:ed:f9:a9:a0:b6: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7B:49:C3:F2:B9:5C:F2:94:F6:26:4E:92:73:6E:5F:23:4E:9C:80 X509v3 Authority Key Identifier: keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d0:31:0f:ea:e9:df:37:b3:74:3e:64:c4:3c:48:42:9e:5c: 7d:47:a2:30:ca:97:98:35:b4:3a:92:a5:ad:5d:63:9f:16:cd: ed:70:ee:b8:3a:de:7a:62:26:3d:6c:3a:4d:1c:2e:21:34:ef: 7e:95:3e:39:98:dc:10:09:25:ad:73:30:af:6e:39:5e:8e:57: 06:04:dc:11:14:c0:28:c7:e7:6f:d7:20:a2:0a:62:b6:44:65: 40:a6:a4:95:d2:54:a7:1c:b4:f5:5e:aa:20:9d:11:51:89:04: 5a:29:13:8e:1d:88:5a:06:14:8b:f9:94:50:9d:85:46:e7:02: 6f:2d:c4:f7:1a:f4:a1:05:81:9d:ec:62:14:bf:1c:60:ea:ea: dc:d2:38:1a:7e:6e:d9:31:48:e0:64:39:70:9d:18:9c:b9:8b: 60:97:7a:8f:2c:ce:d0:c0:74:07:66:62:77:19:be:e1:e8:e0: 59:80:a9:84:81:0b:25:f7:bc:b6:0e:d2:eb:36:16:d7:76:dc: b0:3a:27:9b:03:33:d3:76:37:df:62:1e:d1:b5:e9:00:07:64: 17:91:1c:9c:4a:9c:eb:52:67:01:4f:4a:04:8d:a1:bd:28:26: a3:72:f0:f0:3b:d6:77:f6:97:f7:98:13:ac:5e:2c:03:8d:db: a6:28:90:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQ0YxMTAvBgNVBAUTKDQzODE5NTVFMjY1QTI4M0Y4NURDOUE0NEU5RDUxMzcz MTI3QTI0MTIwHhcNMjUxMjA2MTUyNDAxWhcNMjUxMjEzMTUyNDAxWjAYMRYwFAYD VQQDEw02OTM0NGE5MS00MWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IIwB85UPaVaoRd3wuAAYhOADrDrDbREiml/vF5vb+8Rk8Zb/s9nw1UB2HC3 ynsraGYPbhXucZtn08ij66hiWZ+Su7rDaPuVWSJZnpu4tinCY6Hbz6MLL1sSB9fX ep8z9etQwtNzT5PuhZSWlqbt7PssYidgCjs5Cn9xPch8fQk+N/tziCDebxz36ojP /F69ZyaFRL/Em1m9dGN1Y1HoWSOFDJDkVHiwmKyYhy2kEgOm3M5LA0aQvwLYHc+N tyvAUyuCr22ZXjeY1UGGJP21kBSsQt+BBjMDfd9W/NXgnQSEgq0PzaW7ESus1p3z TuAqP0HRVAuMWwR87fmpoLaL6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBN7ScPy uVzylPYmTpJzbl8jTpyAMB8GA1UdIwQYMBaAFEOBlV4mWig/hdyaROnVE3MSeiQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDRi9ENjFGRUE5RUE3 NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtELUYzSnBFNmRVVGN4SjZK QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0R1ZYaVphS0QtRjNKcEU2ZFVUY3hKNkpCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDRi9ENjFGRUE5RUE3NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtE LUYzSnBFNmRVVGN4SjZKQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL0DEP6unfN7N0PmTEPEhCnlx9R6IwypeYNbQ6kqWtXWOfFs3tcO64 Ot56YiY9bDpNHC4hNO9+lT45mNwQCSWtczCvbjlejlcGBNwRFMAox+dv1yCiCmK2 RGVApqSV0lSnHLT1XqognRFRiQRaKROOHYhaBhSL+ZRQnYVG5wJvLcT3GvShBYGd 7GIUvxxg6urc0jgafm7ZMUjgZDlwnRicuYtgl3qPLM7QwHQHZmJ3Gb7h6OBZgKmE gQsl97y2DtLrNhbXdtywOiebAzPTdjffYh7RtekAB2QXkRycSpzrUmcBT0oEjaG9 KCajcvDwO9Z39pf3mBOsXiwDjdumKJCJ -----END CERTIFICATE-----Generated at Sun Dec 7 02:46:00 2025 by rpki-client