This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: 6tgzS1XTithVOEpJ6c6IjukXFVw20XFW7YSpmhgHqZo= Subject key identifier: 37:0F:93:2C:F6:F4:FC:A7:29:D5:85:13:D4:AA:ED:D2:ED:E1:1F:08 Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0CD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0CC7 Signing time: Sat 20 Dec 2025 17:49:13 +0000 Manifest this update: Sat 20 Dec 2025 17:49:13 +0000 Manifest next update: Sat 27 Dec 2025 17:49:13 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: nr9GpFpiLIiy+FYNpBIKDtP7n1FXvVfJv79MTA+DUfs=) 2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: t7Z6lzZf2rYamEN2YgdXmqrw8mN9RKxx+Hcob4AGplk=) 3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: waZbL1P4NpHdHtHaU30SRx8sKqkEE7bIrM8wDlF6928=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: Dec 20 17:49:13 2025 GMT Not After : Dec 27 17:49:13 2025 GMT Subject: CN=6946e199-802d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:84:cb:c6:3d:f3:70:ac:64:a4:bd:a1:6c:0e: 4e:12:d3:48:8b:52:83:81:8c:2e:c6:91:64:8f:be: d1:49:fe:36:ea:65:d5:51:c6:83:bf:62:b1:9c:c9: 13:cd:1e:a7:a7:43:68:07:15:fa:f5:79:6c:36:76: 6c:7f:ea:f3:57:42:35:42:5c:d7:23:d4:0f:4f:65: dd:fc:ae:45:a8:91:9c:0d:c7:33:81:6e:4f:d9:cf: a2:92:90:9f:d4:28:f3:3e:b8:7e:fa:55:69:e1:19: fa:9b:53:34:f9:70:d1:e2:69:e8:e0:96:f0:91:34: 50:8d:35:3e:6c:be:61:dd:0e:76:51:d3:43:6b:4f: 20:7c:b4:cc:57:b0:24:89:0a:a6:d0:c6:3a:6c:28: af:29:43:88:c2:ed:6b:a0:79:4c:65:85:22:ed:f8: 8d:aa:46:3e:fb:95:d9:26:a1:4d:20:e7:a0:8b:7d: 90:46:ac:d4:9f:11:99:a7:95:15:08:5b:84:22:d1: 6b:8f:d0:75:75:c8:4c:79:f3:0c:e8:73:b4:b8:50: 4d:b2:1f:89:1b:c4:7d:3e:f3:1e:b3:bb:29:f4:3a: b8:81:5c:6e:59:7a:ea:c4:5f:b2:81:23:39:2b:12: 04:17:cb:51:ae:1c:a6:35:58:5c:03:2f:34:80:a6: b4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0F:93:2C:F6:F4:FC:A7:29:D5:85:13:D4:AA:ED:D2:ED:E1:1F:08 X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:11:97:ec:33:53:e5:46:ba:7b:25:99:db:e5:24:6d:b4:c9: 6c:61:9e:d3:a7:b3:e1:59:98:b4:61:45:82:54:eb:75:80:ba: 70:86:bc:d7:1b:bc:fa:90:0c:60:14:99:ab:66:6b:fd:e3:10: 99:86:b9:a0:dc:de:cb:5f:94:f1:f5:29:8a:ff:a1:f1:27:3b: 9b:66:89:6e:c2:6e:e0:10:b4:27:d1:13:13:e8:9e:2e:37:5b: 47:0e:43:b1:a5:2f:6e:36:06:f1:32:30:d5:c3:f5:67:5b:c0: eb:13:c0:cc:d4:92:da:8c:bd:2f:3a:86:e9:3b:e4:47:e5:99: e7:4e:0f:98:c3:64:0e:1f:13:df:d9:93:b0:e2:a4:0d:fb:35: 2a:89:43:52:ff:1d:aa:ff:c4:be:cf:fe:d5:5d:5c:96:ee:b9: 1e:14:cd:41:cc:b1:4f:3f:5a:c8:6e:d2:40:ef:d1:3b:a4:1c: ed:fd:ae:d9:5d:ef:de:41:70:e3:6d:0e:35:d2:46:28:a5:c7: db:0f:96:b4:c6:44:c8:6a:15:b0:2a:0f:37:4d:d2:8f:e8:2d: 50:18:8f:25:53:f6:40:69:62:22:40:e3:8d:f4:ed:8f:d9:12: 55:6b:ff:1b:30:8d:c4:67:07:7b:81:00:63:89:9a:10:3b:da: c7:8c:ce:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjUxMjIwMTc0OTEzWhcNMjUxMjI3MTc0OTEzWjAYMRYwFAYD VQQDDA02OTQ2ZTE5OS04MDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqITLxj3zcKxkpL2hbA5OEtNIi1KDgYwuxpFkj77RSf426mXVUcaDv2KxnMkT zR6np0NoBxX69XlsNnZsf+rzV0I1QlzXI9QPT2Xd/K5FqJGcDcczgW5P2c+ikpCf 1CjzPrh++lVp4Rn6m1M0+XDR4mno4JbwkTRQjTU+bL5h3Q52UdNDa08gfLTMV7Ak iQqm0MY6bCivKUOIwu1roHlMZYUi7fiNqkY++5XZJqFNIOegi32QRqzUnxGZp5UV CFuEItFrj9B1dchMefMM6HO0uFBNsh+JG8R9PvMes7sp9Dq4gVxuWXrqxF+ygSM5 KxIEF8tRrhymNVhcAy80gKa0XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcPkyz2 9PynKdWFE9Sq7dLt4R8IMB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzEZfsM1PlRrp7JZnb5SRttMlsYZ7Tp7PhWZi0YUWCVOt1gLpwhrzX G7z6kAxgFJmrZmv94xCZhrmg3N7LX5Tx9SmK/6HxJzubZoluwm7gELQn0RMT6J4u N1tHDkOxpS9uNgbxMjDVw/VnW8DrE8DM1JLajL0vOobpO+RH5ZnnTg+Yw2QOHxPf 2ZOw4qQN+zUqiUNS/x2q/8S+z/7VXVyW7rkeFM1BzLFPP1rIbtJA79E7pBzt/a7Z Xe/eQXDjbQ410kYopcfbD5a0xkTIahWwKg83TdKP6C1QGI8lU/ZAaWIiQOON9O2P 2RJVa/8bMI3EZwd7gQBjiZoQO9rHjM4L -----END CERTIFICATE-----Generated at Sun Dec 21 12:50:09 2025 by rpki-client