This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json) Hash identifier: X32FoIWJvJwHTaA6JjC+IgSLXnFxuRbjbe/ob730AjQ= Subject key identifier: 5C:C3:C7:CE:A2:1D:EB:61:91:5C:6E:35:77:04:25:25:65:F6:DB:E0 Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 03F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft Manifest number: 03E1 Signing time: Thu 04 Dec 2025 23:03:14 +0000 Manifest this update: Thu 04 Dec 2025 23:03:13 +0000 Manifest next update: Thu 11 Dec 2025 23:03:13 +0000 Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: w2IMyM1C21EZmhsm54snTt0Jl1OsagNvjNaTCdQlcVY=) 2: 332B4C6ABA7011F088893F1DC4F9AE02.roa (hash: Mae6ot7a0FWwb9BycbjA+W4CFzszd3dL+/crBHAl3N0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1011 (0x3f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Validity Not Before: Dec 4 23:03:13 2025 GMT Not After : Dec 11 23:03:13 2025 GMT Subject: CN=69321331-b41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:17:5f:04:0a:82:5d:cb:b0:00:27:cb:16: df:22:19:54:1f:5d:8c:7f:33:18:f2:ec:3b:c7:d2: 00:e6:79:58:96:cf:cf:64:5b:a9:23:97:e4:85:14: d1:3a:7e:12:9a:17:26:b2:88:22:ad:7b:be:9c:98: 49:7d:96:33:0e:c9:ab:b3:cd:aa:eb:d6:83:48:f2: 1c:62:88:1b:88:93:cb:c7:b5:ad:8b:a5:57:1f:a4: 9e:94:40:8a:7e:7b:16:c6:cc:b7:a2:14:fc:0d:b0: 73:36:9b:f3:5e:f5:e7:09:ff:fa:76:85:b5:67:44: 25:ab:2e:b3:d4:73:df:f1:e5:1b:6e:0c:bd:96:b1: 43:c0:ef:c0:8c:1b:ca:47:a7:86:d6:4e:33:62:c2: a9:62:57:ef:75:d6:e0:39:da:ef:a8:8a:e1:e4:f5: 9c:66:f1:f2:43:d3:a5:27:ce:9d:47:66:92:00:f5: 5f:cc:51:7a:e1:4e:09:3f:b5:71:29:58:e4:83:1c: 6a:f5:f4:2f:54:ed:16:46:b1:eb:80:3f:1d:c7:c8: 7c:80:56:cc:57:6f:56:b1:80:44:10:f5:90:17:bf: 51:64:5b:f9:c7:87:aa:63:bf:76:e0:8f:11:4c:13: 21:1d:18:78:46:bf:04:81:56:80:c5:ac:9a:1d:61: 24:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C3:C7:CE:A2:1D:EB:61:91:5C:6E:35:77:04:25:25:65:F6:DB:E0 X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:cc:93:42:90:3c:b9:13:2d:8f:ae:49:0c:8c:2a:70:48:d8: 7d:8c:37:4f:74:4b:e6:f4:62:15:d4:6b:7a:99:f4:6e:29:d3: 12:3a:2f:19:b9:ab:22:67:11:96:93:78:47:3e:78:e9:20:be: 50:18:0d:f2:87:94:3a:08:00:95:53:aa:48:db:ea:f6:4e:40: 82:48:33:b7:95:ec:e1:63:a2:71:48:92:68:0a:27:6d:d0:4f: 6c:b0:97:83:56:53:7e:b7:36:44:2a:6d:e7:89:28:1a:53:5a: eb:d2:13:8f:d6:42:a2:f6:d9:09:5a:4b:51:fb:96:54:43:b6: df:d2:b6:8c:4e:b9:47:7b:e4:b6:de:88:9c:25:9a:1b:9d:1e: 49:32:b1:7f:77:15:80:b0:b5:43:3a:ab:c4:d8:71:03:3b:db: c6:9a:de:0c:d3:e6:ea:e4:4f:c4:67:6f:56:23:a4:38:8b:8e: 68:9e:da:15:03:db:bc:83:3e:06:ca:7c:0b:a2:2c:25:46:98: 58:bb:4a:f5:14:a7:23:3d:de:ae:d7:b4:e0:8e:ab:42:33:0c: ce:46:b4:39:a6:98:8b:97:ff:bb:0d:32:47:45:4d:84:e5:fd: ff:96:e6:fc:15:c0:c5:fb:25:42:b0:91:e8:93:05:86:97:c0: 3b:96:d8:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjUxMjA0MjMwMzEzWhcNMjUxMjExMjMwMzEzWjAYMRYwFAYD VQQDEw02OTMyMTMzMS1iNDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOgXXwQKgl3LsAAnyxbfIhlUH12MfzMY8uw7x9IA5nlYls/PZFupI5fkhRTR On4SmhcmsogirXu+nJhJfZYzDsmrs82q69aDSPIcYogbiJPLx7Wti6VXH6SelECK fnsWxsy3ohT8DbBzNpvzXvXnCf/6doW1Z0Qlqy6z1HPf8eUbbgy9lrFDwO/AjBvK R6eG1k4zYsKpYlfvddbgOdrvqIrh5PWcZvHyQ9OlJ86dR2aSAPVfzFF64U4JP7Vx KVjkgxxq9fQvVO0WRrHrgD8dx8h8gFbMV29WsYBEEPWQF79RZFv5x4eqY7924I8R TBMhHRh4Rr8EgVaAxayaHWEknQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzDx86i HethkVxuNXcEJSVl9tvgMB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9DRjIwNUM2MEFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3 Qk8yQkk4YU9YQXphOWRCYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3zJNCkDy5Ey2PrkkMjCpwSNh9jDdPdEvm9GIV1Gt6mfRuKdMSOi8Z uasiZxGWk3hHPnjpIL5QGA3yh5Q6CACVU6pI2+r2TkCCSDO3lezhY6JxSJJoCidt 0E9ssJeDVlN+tzZEKm3niSgaU1rr0hOP1kKi9tkJWktR+5ZUQ7bf0raMTrlHe+S2 3oicJZobnR5JMrF/dxWAsLVDOqvE2HEDO9vGmt4M0+bq5E/EZ29WI6Q4i45ontoV A9u8gz4GynwLoiwlRphYu0r1FKcjPd6u17TgjqtCMwzORrQ5ppiLl/+7DTJHRU2E 5f3/lub8FcDF+yVCsJHokwWGl8A7ltjb -----END CERTIFICATE-----Generated at Sat Dec 6 19:13:21 2025 by rpki-client