This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: ZMjpd/n8+H374CY59EqUQr6Slz52L/H/0UVkpOJkwRY= Subject key identifier: 8B:DA:09:1F:21:B4:AE:9D:14:86:07:4C:C6:E7:48:E6:CB:77:1B:FD Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2E64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2E57 Signing time: Sat 06 Dec 2025 15:17:18 +0000 Manifest this update: Sat 06 Dec 2025 15:17:18 +0000 Manifest next update: Sat 13 Dec 2025 15:17:18 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: HzaM0UecrGBsrEdf8HhUDC0Kcjt9OBB759Pj+dILKD0=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: SF0KSzVCHmFw/vbmezHEwC+CagFNOXzqq/EI5Ov054o=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: ziUiMds6NJgi8TDHiQaMAYIvEJIsNCMspTIFgHdhreo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11876 (0x2e64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Dec 6 15:17:18 2025 GMT Not After : Dec 13 15:17:18 2025 GMT Subject: CN=693448fe-4065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8f:28:d7:ba:a2:dc:82:7c:42:c7:3c:93:6f: d6:9c:36:d9:56:0b:47:0f:d3:d2:62:f6:66:77:4e: 87:fa:06:7f:76:04:84:d1:b3:cc:6d:cf:af:2e:9d: e4:9e:a9:fb:c7:c9:b9:15:a3:2a:61:ec:ab:a1:4d: fb:15:18:c6:81:c2:b4:6e:71:08:26:00:40:db:32: c8:4b:25:29:79:f2:65:2a:de:cd:dc:22:d7:bf:38: 11:73:87:0a:dd:a9:8f:69:19:e3:83:f5:85:e0:30: 0d:24:c5:da:cc:06:33:4a:4d:18:df:eb:d9:39:5f: d6:73:3e:6c:fe:03:fa:13:a8:b1:fb:88:7f:ad:75: 58:e3:f2:4a:a9:a9:85:b5:f5:17:79:4d:db:3e:40: bc:c7:3f:3e:c2:ee:b6:07:de:75:75:6d:3b:a1:47: 52:79:b6:12:a7:0c:fc:25:14:49:86:c1:95:00:30: 6d:8c:c5:46:e9:ae:01:33:38:4f:2d:1a:e5:39:96: ce:02:3f:1f:fe:1b:b3:3c:ab:0f:d1:d4:57:8a:0d: cf:69:c9:6b:ea:b8:fc:f3:76:8a:f0:bd:be:c5:78: bd:59:cf:52:0e:a7:4f:67:e7:71:ba:7e:1b:1f:ca: 29:b0:d4:82:9a:ba:8f:61:45:fe:1b:dc:a5:ac:48: 92:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DA:09:1F:21:B4:AE:9D:14:86:07:4C:C6:E7:48:E6:CB:77:1B:FD X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:a0:65:06:62:d5:c3:dc:8e:d8:92:7b:0b:b9:81:3d:cf:d0: c0:77:7c:c4:e2:75:e4:f4:80:03:69:f2:ac:1b:e2:d8:2a:a0: ca:33:44:7d:99:ec:1d:45:20:62:ab:63:2a:70:32:f7:b7:f7: 60:a7:f2:36:8a:68:75:e2:92:0f:cf:df:9e:0a:e7:05:10:36: 09:7d:32:2f:15:4b:77:de:b7:27:ba:4a:4e:52:33:c3:5f:ec: 39:88:59:36:d9:02:eb:f7:9b:c0:45:c2:df:a5:b0:c5:0b:3f: 6b:24:51:aa:87:91:65:61:1c:8c:66:3f:c4:73:6e:b5:b1:86: 76:55:c7:73:95:03:39:7b:0f:31:72:77:cf:5c:af:6c:65:d5: b8:00:f7:cd:a5:f2:2b:ca:e7:fc:49:ec:2b:e4:c1:93:5a:2d: 1d:36:ef:ae:98:ff:e2:33:a4:1f:71:69:87:8c:f7:b8:50:d9: 61:03:7a:f8:bd:52:a3:69:4f:27:89:0e:7b:64:43:4b:eb:02: 72:46:55:c2:07:b5:ff:0f:e9:a5:47:49:16:61:06:64:12:0d: 5c:b4:e6:e5:a7:9e:68:75:34:ab:0e:f6:91:3f:13:05:5f:2b: 35:4f:13:57:71:35:bf:06:fe:b0:60:95:07:e2:11:b1:04:00: ee:8a:5e:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjUxMjA2MTUxNzE4WhcNMjUxMjEzMTUxNzE4WjAYMRYwFAYD VQQDEw02OTM0NDhmZS00MDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Y8o17qi3IJ8Qsc8k2/WnDbZVgtHD9PSYvZmd06H+gZ/dgSE0bPMbc+vLp3k nqn7x8m5FaMqYeyroU37FRjGgcK0bnEIJgBA2zLISyUpefJlKt7N3CLXvzgRc4cK 3amPaRnjg/WF4DANJMXazAYzSk0Y3+vZOV/Wcz5s/gP6E6ix+4h/rXVY4/JKqamF tfUXeU3bPkC8xz8+wu62B951dW07oUdSebYSpwz8JRRJhsGVADBtjMVG6a4BMzhP LRrlOZbOAj8f/huzPKsP0dRXig3Paclr6rj883aK8L2+xXi9Wc9SDqdPZ+dxun4b H8opsNSCmrqPYUX+G9ylrEiSUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvaCR8h tK6dFIYHTMbnSObLdxv9MB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHoGUGYtXD3I7YknsLuYE9z9DAd3zE4nXk9IADafKsG+LYKqDKM0R9 mewdRSBiq2MqcDL3t/dgp/I2imh14pIPz9+eCucFEDYJfTIvFUt33rcnukpOUjPD X+w5iFk22QLr95vARcLfpbDFCz9rJFGqh5FlYRyMZj/Ec261sYZ2VcdzlQM5ew8x cnfPXK9sZdW4APfNpfIryuf8Sewr5MGTWi0dNu+umP/iM6QfcWmHjPe4UNlhA3r4 vVKjaU8niQ57ZENL6wJyRlXCB7X/D+mlR0kWYQZkEg1ctOblp55odTSrDvaRPxMF Xys1TxNXcTW/Bv6wYJUH4hGxBADuil73 -----END CERTIFICATE-----Generated at Sun Dec 7 07:14:53 2025 by rpki-client