This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft File: QRX9yGsnZiNgOztkXUcIQLgDm8g.mft (raw, json) Hash identifier: dXuAgvMCFbz/HFQ7CVAfvKUIJU0bSmFNL9/63UP+mE8= Subject key identifier: EF:9C:57:95:B6:36:ED:BC:40:C5:C7:D8:F7:6D:2E:7A:BD:85:1F:01 Authority key identifier: 41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 Certificate issuer: /CN=A916E9E3/serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft Manifest number: 1F Signing time: Fri 05 Dec 2025 05:35:59 +0000 Manifest this update: Fri 05 Dec 2025 05:35:59 +0000 Manifest next update: Fri 12 Dec 2025 05:35:59 +0000 Files and hashes: 1: QRX9yGsnZiNgOztkXUcIQLgDm8g.crl (hash: NN0t+tnlfdmSiD1WIMYzophvyujXbtAdMaD8rEU7nSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Validity Not Before: Dec 5 05:35:59 2025 GMT Not After : Dec 12 05:35:59 2025 GMT Subject: CN=69326f3f-950b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:bf:68:f3:42:66:04:c4:55:b3:71:85:64: 4f:e9:7e:1b:0d:81:a6:dc:a5:1f:6d:38:cb:81:8e: 74:c5:2c:0c:a5:84:06:1b:71:2f:93:12:b9:2f:e9: 7d:5f:44:18:49:bd:48:95:0f:13:4c:25:44:f0:05: 1e:81:2a:d6:b3:8e:a5:59:6e:7f:d6:d3:ee:25:72: 6e:09:42:78:62:a8:07:23:2d:02:e5:c3:81:0b:58: ca:73:85:b8:9f:91:9d:d2:06:27:4f:cf:39:46:59: 6c:19:e0:c1:3e:8f:34:fd:38:d1:6a:5b:55:45:63: ab:e5:bc:51:66:8f:54:ae:08:14:60:bd:7a:28:0f: 1b:eb:37:50:f0:bc:8c:65:93:b4:9a:26:a2:b7:0e: 5e:77:d7:e0:4c:52:00:57:9a:0e:c0:a4:c5:25:61: 41:1e:17:5b:b3:05:3f:c0:31:d2:fe:af:1d:66:89: 5f:78:8c:59:32:fc:8f:82:90:2b:3c:dc:41:13:9b: b6:53:d9:cc:e8:c3:d4:91:43:33:42:7d:0b:54:63: 82:35:02:95:d5:9a:85:39:0c:64:ee:f4:40:03:17: 8f:9a:fe:f0:ed:aa:57:8c:6e:f9:83:50:62:17:fa: 83:78:19:15:9c:44:31:af:47:32:a9:88:71:d5:30: f6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9C:57:95:B6:36:ED:BC:40:C5:C7:D8:F7:6D:2E:7A:BD:85:1F:01 X509v3 Authority Key Identifier: keyid:41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:21:30:6d:7c:db:54:e2:07:64:ca:71:87:5f:2d:f3:f9:b8: c8:bf:aa:7b:c9:9f:b4:18:7a:c9:23:4b:2b:3e:a4:8e:62:bc: bb:96:5a:00:df:72:ee:bf:5b:18:0e:eb:07:35:3f:6e:de:2b: 40:59:1f:27:40:ae:f0:99:f7:85:a9:e4:d4:49:c8:b3:8f:75: 4f:69:21:f0:86:b6:ba:69:50:85:3b:6f:1d:ca:5d:46:c1:62: 3e:9e:1a:59:ad:05:57:b7:78:c2:aa:c5:38:e9:10:52:d5:30: 9b:52:10:b6:e9:36:47:f0:9f:eb:58:e2:f9:4a:9f:88:7d:bc: b6:46:75:80:56:88:11:09:a0:5f:2a:d5:74:46:5d:b9:62:74: 81:48:02:26:91:af:62:2b:3d:42:56:9d:73:d0:3e:4e:ec:15: cc:c6:b6:f5:ea:e7:4a:ec:c5:9a:f8:da:e0:aa:1c:d6:4f:39: 56:c2:f6:ec:f2:46:a1:1e:ac:2a:82:28:58:2f:24:52:97:5a: ca:29:2b:eb:dd:a7:fd:c9:da:32:de:a7:1f:5e:db:df:9a:88: a4:dd:c0:15:62:51:aa:63:69:e3:8d:f4:5a:52:43:5a:9f:d0: e2:7c:dd:ec:b0:ea:e6:ce:20:ed:89:ad:b7:58:df:a0:2d:68: 40:c0:96:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlFMzExMC8GA1UEBRMoNDExNUZEQzg2QjI3NjYyMzYwM0IzQjY0NUQ0NzA4NDBC ODAzOUJDODAeFw0yNTEyMDUwNTM1NTlaFw0yNTEyMTIwNTM1NTlaMBgxFjAUBgNV BAMTDTY5MzI2ZjNmLTk1MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+ur9o80JmBMRVs3GFZE/pfhsNgabcpR9tOMuBjnTFLAylhAYbcS+TErkv6X1f RBhJvUiVDxNMJUTwBR6BKtazjqVZbn/W0+4lcm4JQnhiqAcjLQLlw4ELWMpzhbif kZ3SBidPzzlGWWwZ4ME+jzT9ONFqW1VFY6vlvFFmj1SuCBRgvXooDxvrN1DwvIxl k7SaJqK3Dl531+BMUgBXmg7ApMUlYUEeF1uzBT/AMdL+rx1miV94jFky/I+CkCs8 3EETm7ZT2czow9SRQzNCfQtUY4I1ApXVmoU5DGTu9EADF4+a/vDtqleMbvmDUGIX +oN4GRWcRDGvRzKpiHHVMPbhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU75xXlbY2 7bxAxcfY920uer2FHwEwHwYDVR0jBBgwFoAUQRX9yGsnZiNgOztkXUcIQLgDm8gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzRFMEUzNzE0QTNB NDExRjA5MjAxM0UyOUM0RjlBRTAyL1FSWDl5R3NuWmlOZ096dGtYVWNJUUxnRG04 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVJYOXlHc25aaU5nT3p0a1hVY0lRTGdEbThnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF OUUzLzRFMEUzNzE0QTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyL1FSWDl5R3NuWmlO Z096dGtYVWNJUUxnRG04Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALUhMG1821TiB2TKcYdfLfP5uMi/qnvJn7QYeskjSys+pI5ivLuWWgDf cu6/WxgO6wc1P27eK0BZHydArvCZ94Wp5NRJyLOPdU9pIfCGtrppUIU7bx3KXUbB Yj6eGlmtBVe3eMKqxTjpEFLVMJtSELbpNkfwn+tY4vlKn4h9vLZGdYBWiBEJoF8q 1XRGXblidIFIAiaRr2IrPUJWnXPQPk7sFczGtvXq50rsxZr42uCqHNZPOVbC9uzy RqEerCqCKFgvJFKXWsopK+vdp/3J2jLepx9e29+aiKTdwBViUapjaeON9FpSQ1qf 0OJ83eyw6ubOIO2JrbdY36AtaEDAlpk= -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:22 2025 by rpki-client