This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json) Hash identifier: wVLtQru5LJGNJ3lSt4oh1Zg/Z2SsePSposMbyv0XaNE= Subject key identifier: E2:07:84:40:6B:DC:5A:1A:C7:A8:08:55:C7:54:9D:88:67:4F:3D:42 Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Certificate serial: 0CD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft Manifest number: 0CAA Signing time: Thu 04 Dec 2025 17:57:17 +0000 Manifest this update: Thu 04 Dec 2025 17:57:16 +0000 Manifest next update: Thu 11 Dec 2025 17:57:16 +0000 Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: 2z2z+V5kaL7qBAx2u6Op781kQQXXn9oJ7cyxxBsoVaU=) 2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: F380vpOPofocBjRftATvo9zddeY6Bmha6wqzogd2g+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3282 (0xcd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Validity Not Before: Dec 4 17:57:16 2025 GMT Not After : Dec 11 17:57:16 2025 GMT Subject: CN=6931cb7d-50db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e6:29:45:e1:eb:2b:6f:d8:be:09:c8:f6:76: a3:3a:79:22:b0:76:cf:00:2e:8d:f4:c8:fa:ae:2e: ff:2b:a4:ea:a5:21:44:de:34:ad:03:76:ed:44:30: 09:7d:b9:4f:c5:94:bf:20:55:81:20:ab:9d:53:22: 94:24:fb:f4:f7:9a:5e:bc:43:4c:aa:37:85:eb:4d: 44:69:af:d8:2f:87:6b:3a:ac:74:46:f9:b6:d5:24: a4:8e:9d:66:8f:02:5c:a6:34:ac:6e:9b:2b:0a:59: 12:2d:21:32:c3:67:ea:98:bb:41:76:be:0e:56:1c: e7:78:bf:f3:40:b3:a0:ea:ea:51:08:18:e1:d2:0f: 74:9a:1b:74:eb:e7:d3:39:d2:1e:0a:f1:73:0c:e9: 00:e7:94:51:41:0a:9d:49:90:15:4a:c5:a4:7a:48: 7a:76:a2:7b:21:37:44:3e:e0:b3:10:66:e7:db:4f: 70:c4:0d:11:78:9d:38:a8:9b:4f:51:f8:17:11:6c: 62:0a:ad:7e:57:d4:b4:73:76:97:49:ac:85:8b:c8: dd:f1:4e:07:f5:a0:84:67:3d:7b:b4:4d:da:8e:46: 3d:c1:c9:e6:a7:b3:dc:3f:7c:76:b7:5b:89:63:24: 4b:fc:a4:cf:39:98:b9:25:e5:5c:88:4c:af:02:85: 2b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:07:84:40:6B:DC:5A:1A:C7:A8:08:55:C7:54:9D:88:67:4F:3D:42 X509v3 Authority Key Identifier: keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a3:98:14:d6:12:a5:b5:0e:c0:00:2b:d2:31:bd:88:4f:04: 91:da:36:b1:50:4e:c1:7e:d7:ee:45:ba:02:e4:7b:d7:92:51: e4:7a:58:5b:b5:d9:bd:bc:6a:8d:5d:13:c3:17:79:fe:35:32: d7:10:57:6e:93:c8:3e:aa:e2:ea:db:0d:da:cd:a0:7f:91:3d: 09:ea:45:03:27:e4:5d:28:e7:a7:24:2f:72:cb:6a:98:05:17: ff:8b:78:dd:ac:6b:2e:fe:10:3f:39:97:c5:8e:e9:b9:de:97: bc:71:9f:06:1b:2f:ee:f4:47:be:d8:ee:2a:12:b2:c7:fd:68: f5:58:8f:8e:93:b4:c3:ae:ef:ac:78:0f:24:12:8c:23:01:6d: 15:02:e6:db:ce:f0:95:a6:53:09:1b:0c:a5:34:76:1a:37:17: 3f:dc:45:7b:24:25:f1:e8:36:15:88:2b:b1:90:17:c8:1a:4e: 82:66:d0:83:60:6d:6a:fc:ac:c4:17:c2:60:54:25:2d:9e:f7: 2d:a0:0a:ce:98:a5:32:82:31:14:ab:73:f5:2c:17:83:d2:20: 0e:62:93:01:af:a4:62:05:dd:8f:ed:1a:21:91:35:bd:2c:4b: 5e:49:7f:1a:b9:d0:4e:53:1f:b0:68:47:6a:01:c8:1d:1a:04: 49:fb:28:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw M0E1MDJDQ0MwHhcNMjUxMjA0MTc1NzE2WhcNMjUxMjExMTc1NzE2WjAYMRYwFAYD VQQDEw02OTMxY2I3ZC01MGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+YpReHrK2/YvgnI9najOnkisHbPAC6N9Mj6ri7/K6TqpSFE3jStA3btRDAJ fblPxZS/IFWBIKudUyKUJPv095pevENMqjeF601Eaa/YL4drOqx0Rvm21SSkjp1m jwJcpjSsbpsrClkSLSEyw2fqmLtBdr4OVhzneL/zQLOg6upRCBjh0g90mht06+fT OdIeCvFzDOkA55RRQQqdSZAVSsWkekh6dqJ7ITdEPuCzEGbn209wxA0ReJ04qJtP UfgXEWxiCq1+V9S0c3aXSayFi8jd8U4H9aCEZz17tE3ajkY9wcnmp7PcP3x2t1uJ YyRL/KTPOZi5JeVciEyvAoUr0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIHhEBr 3Foax6gIVcdUnYhnTz1CMB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI0RS83N0U3RjlBMDBDRTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlp d3E3dWstRHU1bmtEcFFMTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABo5gU1hKltQ7AACvSMb2ITwSR2jaxUE7BftfuRboC5HvXklHkelhb tdm9vGqNXRPDF3n+NTLXEFduk8g+quLq2w3azaB/kT0J6kUDJ+RdKOenJC9yy2qY BRf/i3jdrGsu/hA/OZfFjum53pe8cZ8GGy/u9Ee+2O4qErLH/Wj1WI+Ok7TDru+s eA8kEowjAW0VAubbzvCVplMJGwylNHYaNxc/3EV7JCXx6DYViCuxkBfIGk6CZtCD YG1q/KzEF8JgVCUtnvctoArOmKUygjEUq3P1LBeD0iAOYpMBr6RiBd2P7RohkTW9 LEteSX8audBOUx+waEdqAcgdGgRJ+yh3 -----END CERTIFICATE-----Generated at Sat Dec 6 12:36:58 2025 by rpki-client