This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft (raw, json) Hash identifier: GWQNVv8456GU4VnkA5v/haoy6sY5Gt3M+5EkEbRhDi4= Subject key identifier: A7:2C:D6:F7:B4:78:23:02:8A:74:38:FB:DE:CC:17:1B:0F:EA:1D:AA Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E Certificate issuer: /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E Certificate serial: 0B33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft Manifest number: 0B25 Signing time: Thu 04 Dec 2025 18:39:14 +0000 Manifest this update: Thu 04 Dec 2025 18:39:14 +0000 Manifest next update: Thu 11 Dec 2025 18:39:14 +0000 Files and hashes: 1: qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl (hash: PwFNyt4WCqXZLwjMRWRyHZZvG5JqOUt1xVzULS5L67s=) 2: 2512D04C22BE11EC9240097DC4F9AE02.roa (hash: En9dIPtNAsqzocSYMmtm97H1ooZs8MGknLuErJdgZyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2867 (0xb33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E Validity Not Before: Dec 4 18:39:14 2025 GMT Not After : Dec 11 18:39:14 2025 GMT Subject: CN=6931d552-a09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fa:41:94:be:48:69:99:26:e9:05:02:e6:01: 6d:be:aa:4d:14:1f:5b:06:e4:54:de:b4:a9:3c:fd: aa:55:54:d4:6b:3e:fe:4b:c5:48:fa:8b:1b:4e:c7: cc:39:3f:ec:64:dc:21:d9:21:2a:14:78:55:e1:12: 0b:29:0e:cf:b7:eb:ea:b6:84:47:1d:a0:61:cf:52: 4c:23:01:e8:1a:b9:bd:f8:07:77:99:47:a7:fe:7a: 18:11:67:b9:06:22:e3:15:22:06:be:1f:8e:f9:00: d1:ca:ed:5c:78:f4:b5:37:4b:76:7e:63:b4:66:91: 8f:44:76:92:3e:56:b4:fd:22:0c:3f:cf:e7:6e:e3: d7:f2:f6:89:57:74:e6:6e:6c:92:38:90:8f:ca:37: 48:f9:2e:5e:54:39:49:40:38:99:3a:37:df:a0:b4: 36:a0:db:24:fe:a9:96:1e:31:dd:3c:a3:8d:df:e9: ca:f1:2d:ac:ee:f1:0d:eb:53:f4:46:a2:37:53:57: 38:eb:51:84:43:d4:26:59:f5:77:07:a8:e8:89:f3: 29:cd:55:9d:56:a5:c9:4d:74:21:2d:6e:ed:c1:fe: 56:ba:ca:b5:67:e4:12:55:87:5a:e2:f4:ba:b7:84: 68:f3:de:2c:79:ea:ef:e2:ed:96:ff:2d:98:1f:1d: 55:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2C:D6:F7:B4:78:23:02:8A:74:38:FB:DE:CC:17:1B:0F:EA:1D:AA X509v3 Authority Key Identifier: keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d9:49:dd:4c:1b:3a:a2:82:5e:43:3a:de:0f:d1:5e:c5:ba: 3f:b1:22:0f:3a:f4:47:c8:1f:b6:8e:1d:5e:96:6c:13:7b:83: 97:87:35:35:d3:dd:13:7f:98:b1:29:b4:43:a8:49:d0:60:86: 58:c2:cf:12:6d:36:2d:b4:0d:86:55:77:8e:b8:e0:6d:87:0f: ba:05:61:65:4b:22:ef:33:62:9c:e5:09:3b:4a:95:03:b0:c5: 26:54:98:93:20:f1:4b:fd:df:72:dc:29:ce:2f:36:e6:6a:ac: 3f:9a:ee:81:37:f5:9d:44:02:62:94:39:64:ac:c0:3d:98:d8: 00:b4:cd:c8:22:45:58:5e:26:4a:75:70:98:f3:74:f3:c4:85: e1:0e:67:14:e2:c8:61:3a:72:7c:68:f7:56:80:6f:32:6a:09: 83:03:94:aa:43:47:4a:69:4b:5f:da:b6:d4:cc:06:6d:96:20: 0c:22:11:5c:ac:c9:c0:2e:96:60:b1:81:eb:1e:07:5e:5b:d1: c5:fa:4f:9c:5d:0a:da:a3:97:96:96:67:f8:a0:3f:e6:3d:60: ee:88:3a:5c:44:0c:85:a9:f3:14:7a:63:9d:33:96:c4:61:de: db:b0:d2:49:20:49:e8:8b:e3:7c:e6:5a:20:51:9d:9a:f2:4f: 80:46:e7:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0QkExMTAvBgNVBAUTKEFBNDM2QUFGQzY4ODA0NUJGNTE0ODg2MTU0NkZBM0ZE Q0E5ODQwOEUwHhcNMjUxMjA0MTgzOTE0WhcNMjUxMjExMTgzOTE0WjAYMRYwFAYD VQQDEw02OTMxZDU1Mi1hMDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPpBlL5IaZkm6QUC5gFtvqpNFB9bBuRU3rSpPP2qVVTUaz7+S8VI+osbTsfM OT/sZNwh2SEqFHhV4RILKQ7Pt+vqtoRHHaBhz1JMIwHoGrm9+Ad3mUen/noYEWe5 BiLjFSIGvh+O+QDRyu1cePS1N0t2fmO0ZpGPRHaSPla0/SIMP8/nbuPX8vaJV3Tm bmySOJCPyjdI+S5eVDlJQDiZOjffoLQ2oNsk/qmWHjHdPKON3+nK8S2s7vEN61P0 RqI3U1c461GEQ9QmWfV3B6joifMpzVWdVqXJTXQhLW7twf5Wusq1Z+QSVYda4vS6 t4Ro894seerv4u2W/y2YHx1VFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcs1ve0 eCMCinQ4+97MFxsP6h2qMB8GA1UdIwQYMBaAFKpDaq/GiARb9RSIYVRvo/3KmECO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9EMDZCRjMyODUy REMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJGdjFGSWhoVkctal9jcVlR STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrTnFyOGFJQkZ2MUZJaGhWRy1qX2NxWVFJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRCQS9EMDZCRjMyODUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJG djFGSWhoVkctal9jcVlRSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn2UndTBs6ooJeQzreD9Fexbo/sSIPOvRHyB+2jh1elmwTe4OXhzU1 090Tf5ixKbRDqEnQYIZYws8SbTYttA2GVXeOuOBthw+6BWFlSyLvM2Kc5Qk7SpUD sMUmVJiTIPFL/d9y3CnOLzbmaqw/mu6BN/WdRAJilDlkrMA9mNgAtM3IIkVYXiZK dXCY83TzxIXhDmcU4shhOnJ8aPdWgG8yagmDA5SqQ0dKaUtf2rbUzAZtliAMIhFc rMnALpZgsYHrHgdeW9HF+k+cXQrao5eWlmf4oD/mPWDuiDpcRAyFqfMUemOdM5bE Yd7bsNJJIEnoi+N85logUZ2a8k+ARud9 -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:39 2025 by rpki-client