This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: Ksb/0RZS/k2qu7Euy5uJYaTUFciw+voebOOXvlJVN90= Subject key identifier: 41:49:AD:D4:30:1B:00:C4:8B:74:3D:8C:85:26:97:34:D1:21:BD:9F Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 04C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 04B7 Signing time: Thu 04 Dec 2025 22:27:13 +0000 Manifest this update: Thu 04 Dec 2025 22:27:12 +0000 Manifest next update: Thu 11 Dec 2025 22:27:12 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: O0U5weGZ5mfcwj69bK06yBMOMyvOjhiPb60axef/AQ0=) 2: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: xz+NY0PKDA1h31JonPA24zzAghWJ7xvhqwh0rxa8hB0=) 3: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: XeoWUyV8cBersz5ERZwPilXowKBP6ZkIQoJiUYARqzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1218 (0x4c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: Dec 4 22:27:12 2025 GMT Not After : Dec 11 22:27:12 2025 GMT Subject: CN=69320ac0-a6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:76:57:c0:cb:75:24:d4:e9:84:b8:18:89:16: 07:24:08:fe:41:d4:c4:a1:b4:e2:1c:57:20:44:18: f4:08:17:3b:a4:8c:03:c2:24:8c:fd:4e:d5:6b:2a: 2d:41:f9:5a:ed:51:8e:23:72:2a:e8:49:a2:bf:e7: 52:0d:c3:92:47:ef:ae:b0:60:a8:73:01:ca:cf:37: 66:fb:ab:07:95:de:7e:36:01:95:75:54:02:3c:35: 6f:5f:1e:84:89:07:66:82:4a:2c:ba:a5:01:a4:23: 0a:6f:e8:28:38:7d:64:eb:90:28:e4:9b:da:80:4e: f5:82:db:07:6a:db:b0:6a:71:13:fc:2b:8a:e9:23: c5:83:40:37:45:15:49:12:da:81:2f:a1:89:7d:fd: 6e:79:6a:b7:5a:a2:8b:79:16:2f:16:a4:d4:bc:9d: 72:c2:58:5a:a5:4f:eb:94:05:18:78:a6:7a:73:eb: c9:33:d8:ce:85:71:55:7d:2a:fe:63:03:57:31:f0: 32:9b:f1:d4:d1:99:2d:f6:31:a7:50:fb:7c:5e:73: ce:85:c0:f7:ed:a1:fb:61:ab:c6:fe:53:96:db:20: f1:63:fc:74:72:78:96:49:af:93:f8:71:5f:72:66: 86:a0:6b:6e:3b:0c:09:f7:09:0e:92:7b:91:91:10: 49:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:49:AD:D4:30:1B:00:C4:8B:74:3D:8C:85:26:97:34:D1:21:BD:9F X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a1:72:00:9d:75:9a:3c:be:31:ef:cf:22:87:7e:bb:17:9c: a5:91:42:2c:93:ea:44:a4:0d:4b:d3:1c:70:f9:8b:ad:f3:2d: ce:f5:39:7e:23:d8:2a:69:f2:d9:51:66:8b:9c:68:a0:0c:0e: db:8b:4e:17:fa:ca:ae:11:2a:4f:fa:92:3b:ae:90:d7:fd:c9: 3a:6a:57:72:35:a2:b0:62:85:1d:03:37:c5:bc:ce:0b:f5:19: f7:50:58:e2:b0:79:92:88:ea:2a:47:32:36:32:a5:3a:df:f6: d5:e9:52:f9:73:b5:60:5e:1a:28:8d:03:4f:ff:68:64:fc:6e: 96:40:1b:12:95:75:74:70:ca:b6:fd:1c:ce:7b:d8:fd:f4:4a: 24:4e:9f:61:87:f5:45:aa:2a:24:89:d8:ad:21:2c:69:98:83: 38:43:60:b0:45:37:60:17:b7:13:1f:bb:ab:06:31:47:21:1c: 82:f2:13:48:6c:d9:17:3a:61:f4:d6:f1:fc:14:1f:c0:28:4b: 84:0a:d2:ff:cd:c8:b3:30:dc:a0:86:94:b9:d4:b0:81:e0:ef: af:ef:20:51:a8:ba:28:b4:d2:97:ba:d3:f7:bc:83:fa:32:f4: 46:53:9f:ae:88:7e:9a:09:54:98:f0:aa:84:5a:27:32:79:bb: 89:fe:bf:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjUxMjA0MjIyNzEyWhcNMjUxMjExMjIyNzEyWjAYMRYwFAYD VQQDEw02OTMyMGFjMC1hNmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkXZXwMt1JNTphLgYiRYHJAj+QdTEobTiHFcgRBj0CBc7pIwDwiSM/U7Vayot Qfla7VGOI3Iq6Emiv+dSDcOSR++usGCocwHKzzdm+6sHld5+NgGVdVQCPDVvXx6E iQdmgkosuqUBpCMKb+goOH1k65Ao5JvagE71gtsHatuwanET/CuK6SPFg0A3RRVJ EtqBL6GJff1ueWq3WqKLeRYvFqTUvJ1ywlhapU/rlAUYeKZ6c+vJM9jOhXFVfSr+ YwNXMfAym/HU0Zkt9jGnUPt8XnPOhcD37aH7YavG/lOW2yDxY/x0cniWSa+T+HFf cmaGoGtuOwwJ9wkOknuRkRBJTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFJrdQw GwDEi3Q9jIUmlzTRIb2fMB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAToXIAnXWaPL4x788ih367F5ylkUIsk+pEpA1L0xxw+Yut8y3O9Tl+ I9gqafLZUWaLnGigDA7bi04X+squESpP+pI7rpDX/ck6aldyNaKwYoUdAzfFvM4L 9Rn3UFjisHmSiOoqRzI2MqU63/bV6VL5c7VgXhoojQNP/2hk/G6WQBsSlXV0cMq2 /RzOe9j99EokTp9hh/VFqiokiditISxpmIM4Q2CwRTdgF7cTH7urBjFHIRyC8hNI bNkXOmH01vH8FB/AKEuECtL/zcizMNyghpS51LCB4O+v7yBRqLootNKXutP3vIP6 MvRGU5+uiH6aCVSY8KqEWicyebuJ/r+S -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:30 2025 by rpki-client