This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft File: qSFjXHST8hzSYJPVkDUQgC9ONYY.mft (raw, json) Hash identifier: xrqbRjUHoToYvIZ3y7szjyxG3fmbAOokCwCBjZioziA= Subject key identifier: A1:D3:56:54:B4:F0:1C:34:EC:C5:3A:B6:F7:02:70:08:16:3A:4B:4C Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 Certificate issuer: /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Certificate serial: 0BDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft Manifest number: 0BBC Signing time: Mon 08 Dec 2025 18:23:28 +0000 Manifest this update: Mon 08 Dec 2025 18:23:27 +0000 Manifest next update: Mon 15 Dec 2025 18:23:27 +0000 Files and hashes: 1: qSFjXHST8hzSYJPVkDUQgC9ONYY.crl (hash: VtVrmfWtAcyxGnZ0oHpdsOIyVm7ucuN+VIXr62FyApg=) 2: 8610B9DCF33F11EEB412F210C4F9AE02.roa (hash: pnaBbR2DtiTGY+c3G7fBP288UhK6UiUJopbmpztAwNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 18:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3035 (0xbdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A4E, serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Validity Not Before: Dec 8 18:23:27 2025 GMT Not After : Dec 15 18:23:27 2025 GMT Subject: CN=693717a0-6670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:f6:03:78:22:92:f5:c0:18:04:26:09:20: b0:72:9c:a5:52:80:90:d9:31:13:13:b8:d7:33:a9: 90:72:0b:26:ca:95:f0:77:e1:9a:ca:40:f6:6b:a6: 1a:2f:0e:a2:24:c3:74:41:ce:69:51:da:e2:9e:da: 3c:d9:ef:e9:82:d3:b5:86:d7:31:4a:74:c8:ea:31: ae:4b:84:ec:7a:d3:c7:48:2f:96:0f:69:f0:de:62: 74:c3:17:58:7b:8b:ab:24:3c:fe:b3:21:34:4f:a8: c0:f8:c5:cb:a2:9a:f7:c1:57:44:e9:a1:ce:ea:96: 98:8d:97:6e:17:7b:c5:e3:69:13:74:b1:39:a2:a8: 18:f4:9b:66:d3:1a:42:c3:e3:53:d6:b1:6b:30:99: e4:67:4c:4e:ff:39:2f:41:c7:c9:aa:55:30:bf:a0: fe:65:93:cb:34:91:d0:b9:9d:9a:7e:ad:55:87:2a: 55:e9:9f:ed:2d:4d:d5:aa:2d:96:6e:21:02:6f:66: b8:71:98:95:15:90:77:83:94:0c:68:84:69:05:79: 52:8c:f5:4b:62:0b:b4:34:ac:35:8b:ec:15:d3:9f: 7c:4e:8d:b5:a0:37:df:b5:16:39:07:45:e1:24:68: 31:89:1f:0d:60:d1:f3:dc:8a:2f:4e:09:95:22:16: f4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D3:56:54:B4:F0:1C:34:EC:C5:3A:B6:F7:02:70:08:16:3A:4B:4C X509v3 Authority Key Identifier: keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:de:f9:6a:4c:97:a4:fb:67:a6:c3:2a:1a:93:a1:42:f0:7d: d5:15:66:3c:be:14:35:fb:aa:69:6a:86:0d:02:4c:ca:f3:18: 4d:89:0d:fd:9b:7b:ed:3b:f4:1e:c9:70:3d:ce:3d:da:6b:5a: 3f:ee:b8:46:9c:79:63:b0:76:0b:b4:8e:f5:b5:24:55:2f:4b: 48:44:63:ba:ae:49:b8:2f:c4:d3:c4:e8:35:70:ee:ec:44:93: c8:fc:01:f5:8b:c0:14:c0:40:d3:d1:f3:3d:47:7c:39:a0:39: 0e:5d:a7:b6:29:89:5d:99:3d:ef:7f:f0:fb:db:de:90:0e:8f: 15:98:63:e3:bd:08:8c:9f:10:a6:a6:07:54:2f:ce:fa:f8:1b: 48:cd:bc:c2:f8:96:f6:b6:9a:eb:4f:da:82:44:d2:7b:3a:bd: 2a:36:27:f9:a4:01:69:98:24:f6:2c:d4:5c:4d:f1:b2:e7:c5: 84:22:d7:8d:ba:c9:88:bb:45:0a:c3:a3:ee:50:3e:ad:1c:06: dd:43:69:05:60:2d:e0:4e:55:81:5f:c3:f0:20:0e:80:eb:e7: 40:75:d2:4a:c3:b9:55:9d:97:6f:22:df:15:e0:9c:98:b0:e8: 22:1f:92:68:f6:0f:c2:e6:f1:bd:1c:d2:fe:6c:36:a0:15:ab: 78:63:aa:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBNEUxMTAvBgNVBAUTKEE5MjE2MzVDNzQ5M0YyMUNEMjYwOTNENTkwMzUxMDgw MkY0RTM1ODYwHhcNMjUxMjA4MTgyMzI3WhcNMjUxMjE1MTgyMzI3WjAYMRYwFAYD VQQDEw02OTM3MTdhMC02NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3D2A3gikvXAGAQmCSCwcpylUoCQ2TETE7jXM6mQcgsmypXwd+GaykD2a6Ya Lw6iJMN0Qc5pUdrinto82e/pgtO1htcxSnTI6jGuS4TsetPHSC+WD2nw3mJ0wxdY e4urJDz+syE0T6jA+MXLopr3wVdE6aHO6paYjZduF3vF42kTdLE5oqgY9Jtm0xpC w+NT1rFrMJnkZ0xO/zkvQcfJqlUwv6D+ZZPLNJHQuZ2afq1VhypV6Z/tLU3Vqi2W biECb2a4cZiVFZB3g5QMaIRpBXlSjPVLYgu0NKw1i+wV0598To21oDfftRY5B0Xh JGgxiR8NYNHz3IovTgmVIhb0YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHTVlS0 8Bw07MU6tvcCcAgWOktMMB8GA1UdIwQYMBaAFKkhY1x0k/Ic0mCT1ZA1EIAvTjWG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUE0RS9BNDlCNEQ3NDM3 QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDhoelNZSlBWa0RVUWdDOU9O WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRmpYSFNUOGh6U1lKUFZrRFVRZ0M5T05ZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUE0RS9BNDlCNEQ3NDM3QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDho elNZSlBWa0RVUWdDOU9OWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN3vlqTJek+2emwyoak6FC8H3VFWY8vhQ1+6ppaoYNAkzK8xhNiQ39 m3vtO/QeyXA9zj3aa1o/7rhGnHljsHYLtI71tSRVL0tIRGO6rkm4L8TTxOg1cO7s RJPI/AH1i8AUwEDT0fM9R3w5oDkOXae2KYldmT3vf/D7296QDo8VmGPjvQiMnxCm pgdUL876+BtIzbzC+Jb2tprrT9qCRNJ7Or0qNif5pAFpmCT2LNRcTfGy58WEIteN usmIu0UKw6PuUD6tHAbdQ2kFYC3gTlWBX8PwIA6A6+dAddJKw7lVnZdvIt8V4JyY sOgiH5Jo9g/C5vG9HNL+bDagFat4Y6on -----END CERTIFICATE-----Generated at Wed Dec 10 14:22:09 2025 by rpki-client