This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft File: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft (raw, json) Hash identifier: uJMfBUYyNkXopJ4gEJrBjqjRcm4E3fHD2MU9g6W7W5I= Subject key identifier: E5:92:42:C5:D5:45:C3:1C:FA:B7:1D:A1:93:7F:56:76:75:62:69:BB Authority key identifier: D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 Certificate issuer: /CN=A91CB6E8/serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft Manifest number: 1A Signing time: Fri 05 Dec 2025 05:39:52 +0000 Manifest this update: Fri 05 Dec 2025 05:39:51 +0000 Manifest next update: Fri 12 Dec 2025 05:39:51 +0000 Files and hashes: 1: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl (hash: xtl3N4ZBV0J1NC0Abdhch+4/2vByavH9XA4sMWzfD8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Validity Not Before: Dec 5 05:39:51 2025 GMT Not After : Dec 12 05:39:51 2025 GMT Subject: CN=69327028-c111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2b:fe:48:6a:b4:3d:01:cb:2b:ec:57:9b:01: e6:65:c3:e2:8d:95:14:ef:cc:a7:97:49:8c:35:9f: f7:7e:9c:db:50:99:26:14:80:ce:fa:df:87:ea:87: 16:b4:9c:4c:18:54:d3:27:9d:6c:5d:d2:8b:63:81: a2:f9:43:78:ff:9a:c3:78:e5:5a:79:79:b5:99:6a: eb:79:87:e7:ea:3d:4c:58:56:a4:13:9b:c3:f0:ea: 7c:d2:db:b3:70:e9:7a:e9:6c:66:16:77:30:f0:ee: ce:44:d5:b3:db:d8:82:b0:5b:cb:df:f2:85:f8:3f: 85:c2:ae:4c:d5:80:fe:c5:62:7a:4c:99:0f:0e:fc: e3:59:14:13:58:b8:03:62:bb:e3:32:b3:63:67:b0: 68:95:a8:33:d4:81:41:61:01:a8:e5:0d:d7:df:a7: 24:03:3b:25:56:75:ef:7d:25:94:f5:bc:76:b8:11: af:18:b0:e7:37:e4:ff:7c:1a:2a:95:64:d1:58:d9: c8:61:3d:7d:0a:96:87:e1:60:40:95:02:6a:5f:a8: e6:2d:81:35:15:7e:95:40:84:56:9b:8c:f6:87:42: 3a:84:f4:4b:eb:d2:13:a0:5f:1d:e9:08:fb:d4:42: e4:4c:a4:01:61:7a:73:23:fd:cf:6d:9c:d0:6e:9c: e7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:92:42:C5:D5:45:C3:1C:FA:B7:1D:A1:93:7F:56:76:75:62:69:BB X509v3 Authority Key Identifier: keyid:D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:fe:ac:34:14:3c:5e:d3:76:b7:d2:26:48:80:9e:1a:bc:1b: 7f:d9:88:d4:a7:f6:0c:68:70:74:52:e4:79:5e:b7:6a:b7:1e: 90:a1:3f:10:c8:d7:bf:66:a6:1a:34:a6:be:04:45:6a:98:bb: 69:4f:e6:f7:ce:9e:36:9f:8b:70:92:8f:fe:d2:00:28:a1:c0: 1d:9d:57:87:10:bc:13:83:f1:f2:c9:e1:be:e1:74:79:c2:12: b6:05:11:20:a5:92:d5:f5:40:d9:bd:ab:4e:5e:b2:11:06:53: 47:29:e5:93:66:d3:5f:26:16:9c:cd:53:c6:22:21:f9:19:28: 01:e0:cb:01:e8:54:b2:ca:8a:dc:d7:f0:24:c4:37:a8:45:7c: cb:8b:a8:39:f8:2c:b3:e2:11:94:06:4f:a5:da:02:e1:db:c9: 72:a1:81:f7:7a:9b:f0:5c:9b:5f:d7:75:08:de:95:c1:c8:8d: 3a:45:f1:42:26:cd:11:bc:97:44:c6:bd:9f:ec:e8:a7:44:cb: b1:bf:ea:b6:73:31:a9:e3:ac:6a:b3:2f:c4:fc:38:b3:a0:91: 28:f5:e2:62:98:e3:20:a9:93:80:c0:87:bf:be:b8:b0:dd:64: 2a:74:a4:ae:b9:79:0c:62:e7:c0:d0:aa:a6:ce:e5:5a:3b:93: c1:7a:ca:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoRDUwODdFQjcxRkI4MTJGMTAwMkZGODg0QjJGOUQ1NkUz QkRENENGMjAeFw0yNTEyMDUwNTM5NTFaFw0yNTEyMTIwNTM5NTFaMBgxFjAUBgNV BAMTDTY5MzI3MDI4LWMxMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDK/5IarQ9Acsr7FebAeZlw+KNlRTvzKeXSYw1n/d+nNtQmSYUgM7634fqhxa0 nEwYVNMnnWxd0otjgaL5Q3j/msN45Vp5ebWZaut5h+fqPUxYVqQTm8Pw6nzS27Nw 6XrpbGYWdzDw7s5E1bPb2IKwW8vf8oX4P4XCrkzVgP7FYnpMmQ8O/ONZFBNYuANi u+Mys2NnsGiVqDPUgUFhAajlDdffpyQDOyVWde99JZT1vHa4Ea8YsOc35P98GiqV ZNFY2chhPX0KlofhYECVAmpfqOYtgTUVfpVAhFabjPaHQjqE9Evr0hOgXx3pCPvU QuRMpAFhenMj/c9tnNBunOexAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5ZJCxdVF wxz6tx2hk39WdnViabswHwYDVR0jBBgwFoAU1Qh+tx+4EvEAL/iEsvnVbjvdTPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4LzMyRTM0REVFQUUy QjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZFQUxfaUVzdm5WYmp2ZFRQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMVFoLXR4LTRFdkVBTF9pRXN2blZianZkVFBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4LzMyRTM0REVFQUUyQjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZF QUxfaUVzdm5WYmp2ZFRQSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHb+rDQUPF7TdrfSJkiAnhq8G3/ZiNSn9gxocHRS5Hlet2q3HpChPxDI 179mpho0pr4ERWqYu2lP5vfOnjafi3CSj/7SACihwB2dV4cQvBOD8fLJ4b7hdHnC ErYFESClktX1QNm9q05eshEGU0cp5ZNm018mFpzNU8YiIfkZKAHgywHoVLLKitzX 8CTEN6hFfMuLqDn4LLPiEZQGT6XaAuHbyXKhgfd6m/Bcm1/XdQjelcHIjTpF8UIm zRG8l0TGvZ/s6KdEy7G/6rZzManjrGqzL8T8OLOgkSj14mKY4yCpk4DAh7++uLDd ZCp0pK65eQxi58DQqqbO5Vo7k8F6ygw= -----END CERTIFICATE-----Generated at Sun Dec 7 07:31:23 2025 by rpki-client