This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json) Hash identifier: 7gPf+xgtb7py99Pc7XJRRj5B8V4uc1WjejZeG4x0td8= Subject key identifier: CF:FB:DE:FC:14:85:F7:3C:41:49:55:41:CB:5B:1D:44:48:CC:0E:73 Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft Manifest number: 0213 Signing time: Fri 05 Dec 2025 00:31:47 +0000 Manifest this update: Fri 05 Dec 2025 00:31:46 +0000 Manifest next update: Fri 12 Dec 2025 00:31:46 +0000 Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: unil2uPaO0iTNALXu2Z21aGUfaNk2TmCvqHZGOOe5K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Validity Not Before: Dec 5 00:31:46 2025 GMT Not After : Dec 12 00:31:46 2025 GMT Subject: CN=693227f3-70c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:22:86:87:b8:61:f8:d8:45:62:24:38:d1: 69:2d:7d:60:4a:f7:cd:dd:95:b5:da:59:73:48:90: 0d:f6:03:c7:bd:1c:3a:56:cd:a6:a8:2f:d0:27:a1: 9d:1a:cc:2c:9c:7d:8a:49:9f:e4:f9:b7:1c:d4:96: a0:55:3d:7d:07:02:f6:f0:92:44:b2:8c:a4:3c:31: 91:5c:e1:b6:7e:4f:2c:66:ff:be:65:a9:bb:46:49: c9:72:b4:74:53:22:7c:aa:de:b4:a2:58:ec:01:da: 93:e5:b8:bc:c5:b9:0b:c7:dd:a9:5e:0d:20:b1:e1: 56:fd:8d:e9:5d:85:f5:66:cb:b0:d2:a6:8d:fd:c1: 07:11:4a:2f:17:06:b2:30:9e:a0:a3:5a:f7:01:54: b7:df:51:b1:be:d5:c4:65:b4:64:3e:42:10:30:56: 60:b6:cb:09:63:c8:41:14:ce:cd:68:49:c6:db:ea: 8d:16:04:9d:70:79:19:cc:79:42:f5:8a:49:0a:09: a1:7e:18:1a:c1:fb:25:92:f2:1a:ec:b1:6e:22:47: e8:2a:4c:d1:47:14:66:f5:88:17:c8:71:dc:17:23: 74:88:d3:9e:c5:ad:c4:3e:3a:e9:6b:b3:30:11:e1: 93:65:b0:e7:8e:5f:93:df:45:bd:36:05:4c:ed:b0: c7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FB:DE:FC:14:85:F7:3C:41:49:55:41:CB:5B:1D:44:48:CC:0E:73 X509v3 Authority Key Identifier: keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:fa:0b:e0:d1:9e:f3:b9:76:1e:2d:43:6f:dd:0e:4b:d7:69: 0c:2f:a9:25:3f:5d:03:61:01:59:60:11:d7:a5:fe:b8:1f:81: 42:73:23:86:0c:ff:13:19:10:3e:e9:4e:a1:d8:12:28:9e:fb: 40:65:33:d5:ea:cf:b7:11:ab:94:00:b4:40:71:36:44:7d:1f: ec:56:39:c7:84:b9:5e:81:8b:93:6a:56:31:2e:11:c6:83:da: f1:28:4f:20:40:2f:77:67:ff:25:e5:aa:0c:12:b0:22:b2:ba: 63:d1:3a:79:74:87:44:bb:04:1f:6d:a6:9e:c6:da:78:3c:d2: 99:1e:83:2f:53:c9:80:d4:4f:56:15:bb:b5:51:37:79:6f:b4: 35:08:ab:d5:b3:f9:17:9b:f2:cc:ae:31:75:e8:75:1d:d4:1d: 85:23:48:d6:9f:7f:ba:44:b9:60:65:12:4e:72:dc:b4:81:e9: bb:3b:38:1b:95:4e:c8:94:bd:3c:74:c3:d9:58:bb:f3:18:be: 9c:e9:8f:23:89:d6:d9:0b:80:f0:09:bb:81:9d:f5:53:c8:4a: 75:ff:9e:0a:e6:fa:a9:b0:25:d4:ea:5f:58:90:e1:5f:fb:de: a3:bd:7c:19:d4:dc:14:4c:48:63:ed:f4:56:34:7d:7b:e5:23: 90:6b:29:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD RDI4QTRBRUYwHhcNMjUxMjA1MDAzMTQ2WhcNMjUxMjEyMDAzMTQ2WjAYMRYwFAYD VQQDEw02OTMyMjdmMy03MGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuikihoe4YfjYRWIkONFpLX1gSvfN3ZW12llzSJAN9gPHvRw6Vs2mqC/QJ6Gd GswsnH2KSZ/k+bcc1JagVT19BwL28JJEsoykPDGRXOG2fk8sZv++Zam7RknJcrR0 UyJ8qt60oljsAdqT5bi8xbkLx92pXg0gseFW/Y3pXYX1Zsuw0qaN/cEHEUovFway MJ6go1r3AVS331GxvtXEZbRkPkIQMFZgtssJY8hBFM7NaEnG2+qNFgSdcHkZzHlC 9YpJCgmhfhgawfslkvIa7LFuIkfoKkzRRxRm9YgXyHHcFyN0iNOexa3EPjrpa7Mw EeGTZbDnjl+T30W9NgVM7bDHMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/73vwU hfc8QUlVQctbHURIzA5zMB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011 QjZGVlRWNmJvTFROS0tTdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG+gvg0Z7zuXYeLUNv3Q5L12kML6klP10DYQFZYBHXpf64H4FCcyOG DP8TGRA+6U6h2BIonvtAZTPV6s+3EauUALRAcTZEfR/sVjnHhLlegYuTalYxLhHG g9rxKE8gQC93Z/8l5aoMErAisrpj0Tp5dIdEuwQfbaaextp4PNKZHoMvU8mA1E9W Fbu1UTd5b7Q1CKvVs/kXm/LMrjF16HUd1B2FI0jWn3+6RLlgZRJOcty0gem7Ozgb lU7IlL08dMPZWLvzGL6c6Y8jidbZC4DwCbuBnfVTyEp1/54K5vqpsCXU6l9YkOFf +96jvXwZ1NwUTEhj7fRWNH175SOQaymr -----END CERTIFICATE-----Generated at Sat Dec 6 18:19:54 2025 by rpki-client