This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft File: QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json) Hash identifier: +EGHxW6JnNkW3SpJ1Ycs3sSw8IGCJjwpucQVs/sALos= Subject key identifier: C8:32:D4:7C:51:BD:EC:62:63:7C:53:22:05:B7:44:24:DC:BA:D9:4E Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft Manifest number: 64 Signing time: Fri 05 Dec 2025 05:02:24 +0000 Manifest this update: Fri 05 Dec 2025 05:02:24 +0000 Manifest next update: Fri 12 Dec 2025 05:02:24 +0000 Files and hashes: 1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: tM/2zVGdWVrFHfTh4R2wgQDctZknVOGJYCzwEkII+qA=) 2: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: egGFXylp1SINEbzgRCNIJHPPft/NT6vkIWCWpdsdfdM=) 3: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: fil/oQotRM+MIGw/cNqLrz8OgmoOYQq+ywbG5ZxtQK8=) 4: B8F6B5E6889D11F096782036C4F9AE02.roa (hash: /A/rBXc2op08yj3uZittOvl641NY0+V2n8zZ3/LDWUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Validity Not Before: Dec 5 05:02:24 2025 GMT Not After : Dec 12 05:02:24 2025 GMT Subject: CN=69326760-793f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8d:76:ad:8e:e9:be:0b:90:fd:ab:b3:02:44: 08:9f:f5:70:26:68:75:44:89:f4:f6:b3:df:ea:5b: 4e:35:7a:cd:87:33:a5:ce:c5:94:15:43:97:8d:f5: e3:e6:a1:f2:d8:7e:23:ae:95:f6:e7:c7:ea:e0:49: fa:90:6f:59:c0:85:3e:9d:ae:f2:2b:f3:c5:77:b7: a5:bf:e3:71:18:ca:71:e8:b1:a0:c0:9a:3d:57:5b: 61:e5:86:3d:7a:c8:91:4b:96:b1:a5:ba:17:75:3e: 41:e0:d0:8c:57:a8:fc:e7:34:e4:64:96:6b:50:b4: 49:79:6e:1a:b9:8c:65:c8:eb:11:cf:72:ee:68:d2: 45:e5:c3:80:04:1a:52:4f:96:6c:7e:16:4a:7f:c7: db:e3:bf:ed:83:a7:3e:61:5a:7b:0e:e9:ee:4e:f0: cd:b8:0d:bb:83:5b:67:68:dd:bc:b8:cf:91:66:38: 85:aa:65:d7:cc:7a:06:d0:1e:8f:27:68:c9:9b:ea: f2:cd:c2:f8:e3:74:b8:28:e1:91:d6:4a:33:5a:57: f3:32:76:38:2b:f9:cc:3b:67:9e:d8:06:e7:51:97: 68:d6:0c:7e:3a:95:cc:56:3f:d7:cb:2f:26:c5:3f: d3:93:ca:87:b0:a9:2e:f6:d5:57:b2:04:df:85:60: bd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:32:D4:7C:51:BD:EC:62:63:7C:53:22:05:B7:44:24:DC:BA:D9:4E X509v3 Authority Key Identifier: keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:ff:87:b5:c5:3a:3a:b7:31:77:fa:b0:4c:cd:b7:b4:04:d2: 10:e2:2a:75:d2:1c:7f:64:53:e8:dc:2e:7a:16:23:12:0d:c7: 58:21:82:84:bc:5c:53:6f:50:61:b1:e4:6a:42:14:88:35:d5: fe:25:66:9f:01:72:ca:49:51:5c:cf:a2:10:13:9a:58:90:7d: 36:00:ad:ca:80:74:9a:66:17:28:2c:4e:e6:a0:c7:7c:72:fc: 45:5a:1b:d6:e0:7b:90:12:d2:3e:9d:05:96:8b:c5:b1:c1:f9: 5d:5a:fe:30:a5:79:2f:4f:1e:b5:7e:58:01:a9:e5:58:e0:2e: d1:37:d6:e2:c9:c7:0e:80:4b:06:5f:b1:ef:99:b0:8c:46:b2: d0:f3:76:fa:c7:4b:bc:ad:ab:fe:ce:ad:ae:d0:76:d1:ab:76: 50:f6:27:72:19:02:39:04:89:98:83:01:86:9c:7d:bf:a3:c2: 15:94:21:1e:53:4c:e8:d9:f8:fc:c3:bc:ca:69:04:de:0c:76: d1:45:9d:d0:07:bf:39:fa:47:78:42:f0:26:6b:1f:30:62:00: 43:ae:eb:57:b1:54:f8:05:8c:4c:fd:00:d6:ea:9b:19:d9:6b: 79:28:ff:9b:34:15:db:e6:b6:ed:a1:e4:02:f7:fc:58:b7:bf: b7:ec:fd:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUE4QjExMC8GA1UEBRMoNDFDNzU3MTQyOTlBNTc4REQxOTBGRDFGNzMwOTU1QjFG RDlBQzFGNDAeFw0yNTEyMDUwNTAyMjRaFw0yNTEyMTIwNTAyMjRaMBgxFjAUBgNV BAMTDTY5MzI2NzYwLTc5M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPjXatjum+C5D9q7MCRAif9XAmaHVEifT2s9/qW041es2HM6XOxZQVQ5eN9ePm ofLYfiOulfbnx+rgSfqQb1nAhT6drvIr88V3t6W/43EYynHosaDAmj1XW2Hlhj16 yJFLlrGluhd1PkHg0IxXqPznNORklmtQtEl5bhq5jGXI6xHPcu5o0kXlw4AEGlJP lmx+Fkp/x9vjv+2Dpz5hWnsO6e5O8M24DbuDW2do3by4z5FmOIWqZdfMegbQHo8n aMmb6vLNwvjjdLgo4ZHWSjNaV/Mydjgr+cw7Z57YBudRl2jWDH46lcxWP9fLLybF P9OTyoewqS721VeyBN+FYL2HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyDLUfFG9 7GJjfFMiBbdEJNy62U4wHwYDVR0jBBgwFoAUQcdXFCmaV43RkP0fcwlVsf2awfQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQThCL0JBMDhBQTQyNEI4 MTExRjA4RjY1NTA3RUM0RjlBRTAyL1FjZFhGQ21hVjQzUmtQMGZjd2xWc2YyYXdm US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUWNkWEZDbWFWNDNSa1AwZmN3bFZzZjJhd2ZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF QThCL0JBMDhBQTQyNEI4MTExRjA4RjY1NTA3RUM0RjlBRTAyL1FjZFhGQ21hVjQz UmtQMGZjd2xWc2YyYXdmUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOv/h7XFOjq3MXf6sEzNt7QE0hDiKnXSHH9kU+jcLnoWIxINx1ghgoS8 XFNvUGGx5GpCFIg11f4lZp8BcspJUVzPohATmliQfTYArcqAdJpmFygsTuagx3xy /EVaG9bge5AS0j6dBZaLxbHB+V1a/jCleS9PHrV+WAGp5VjgLtE31uLJxw6ASwZf se+ZsIxGstDzdvrHS7ytq/7Ora7QdtGrdlD2J3IZAjkEiZiDAYacfb+jwhWUIR5T TOjZ+PzDvMppBN4MdtFFndAHvzn6R3hC8CZrHzBiAEOu61exVPgFjEz9ANbqmxnZ a3ko/5s0Fdvmtu2h5AL3/Fi3v7fs/c8= -----END CERTIFICATE-----Generated at Sat Dec 6 19:04:51 2025 by rpki-client