This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: vH8g3NJFq2ZzN8t5/ejSbMznm76bX/ARSdrI7esCCc0= Subject key identifier: 21:D4:56:EE:76:C9:4D:FC:B8:AA:4D:55:4B:F7:97:CA:75:A8:22:4C Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: C2 Signing time: Fri 05 Dec 2025 03:53:47 +0000 Manifest this update: Fri 05 Dec 2025 03:53:46 +0000 Manifest next update: Fri 12 Dec 2025 03:53:46 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: +bCcx+VkWGw6wfD/vVsMLcSBVPqkE7uZdwItvlNlM4c=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: im2ulDC6TuJxDzTWTDZh2iCRPtHb9EQEE+xjYBtaU3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Dec 5 03:53:46 2025 GMT Not After : Dec 12 03:53:46 2025 GMT Subject: CN=6932574b-d37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4c:a3:27:5d:70:06:b5:91:c4:82:62:6d:70: 84:80:89:49:8c:2b:51:8f:c7:81:21:9e:09:b5:99: 35:a1:e1:ec:c5:06:6f:0e:f6:ed:18:ce:a6:5d:f4: 7a:fa:8c:5f:32:99:56:c1:b1:51:26:3a:ed:f2:5f: 34:e4:06:c3:4a:c6:7f:75:0a:6d:b2:87:06:eb:a3: 85:bc:02:9a:46:50:d3:60:b6:ac:d4:a3:15:7c:10: 47:59:43:af:76:be:da:7f:5c:23:22:d6:25:03:2f: 56:6e:02:bb:ef:47:84:ef:6c:41:6e:68:60:92:bd: 9b:a7:97:a2:e6:cb:87:eb:07:1d:9a:f1:41:1b:b6: 3f:f0:d4:9e:3f:c0:d4:86:2e:6a:ca:3a:96:31:97: c8:dc:91:f9:c8:32:58:7c:d2:bc:bf:5b:ce:af:b6: 97:db:e3:55:cd:2d:fe:c4:fa:21:7a:12:b9:b6:a3: 22:e9:4c:17:43:de:a1:4e:19:ed:21:56:d1:fc:4f: 70:88:44:a7:b9:1d:4e:80:cc:7b:03:2c:10:64:dc: d0:0a:59:36:da:0e:ce:0d:28:fe:ef:dd:47:a5:7d: e1:df:3b:09:18:a6:36:b9:2c:19:7a:07:1d:9a:1d: cd:b6:85:b4:fe:46:ff:81:cf:f3:2c:80:f0:43:ac: 4d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D4:56:EE:76:C9:4D:FC:B8:AA:4D:55:4B:F7:97:CA:75:A8:22:4C X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:ec:b9:d0:a8:17:37:11:31:b7:b6:b7:e2:52:e7:77:c6:42: c8:ea:91:24:e7:6a:76:bd:8f:29:27:14:be:dd:c4:9c:68:5c: 06:20:7f:99:f9:3c:72:0f:3d:32:5a:1f:6e:c8:a5:64:e7:92: 0f:5f:8e:fd:77:e6:c1:fe:0d:24:46:cb:23:44:9c:94:55:9a: 05:70:82:12:58:5e:d5:d4:ca:90:f8:19:73:93:0f:67:ee:74: ce:bb:3a:7f:40:19:e3:37:68:21:63:50:7f:e0:e8:48:0c:e7: 7e:9d:67:70:85:3c:d6:db:86:3c:49:5e:27:4c:96:a7:fd:1c: 55:42:3e:f0:bb:58:e2:d8:48:36:b5:19:67:6a:db:4f:7a:6e: f8:8a:ff:b2:9a:c3:2d:f4:4b:3b:51:7c:5d:9a:c7:c0:46:aa: c1:5d:79:1d:88:98:52:6b:2b:ce:a8:b6:33:0e:13:42:66:8e: 2b:42:09:69:a5:8e:2d:c0:c5:04:83:df:3e:ce:a2:74:6f:9a: 8e:7c:3f:b0:f8:74:27:89:99:81:84:8e:ad:f3:ee:d7:08:9b: 71:11:a8:ba:d9:28:3d:92:b8:7f:a2:f6:b9:2f:68:4e:d5:0d: 24:1c:07:9a:2d:33:48:48:5b:5a:bb:ba:61:04:20:77:b1:f8: 5e:b6:f2:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDMzgxMTAvBgNVBAUTKEFBMzVFMkY5NzdCNTVFNzJGOTE2MzVCRjdENTNCQ0VC NTM0Nzk4M0IwHhcNMjUxMjA1MDM1MzQ2WhcNMjUxMjEyMDM1MzQ2WjAYMRYwFAYD VQQDEw02OTMyNTc0Yi1kMzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEyjJ11wBrWRxIJibXCEgIlJjCtRj8eBIZ4JtZk1oeHsxQZvDvbtGM6mXfR6 +oxfMplWwbFRJjrt8l805AbDSsZ/dQptsocG66OFvAKaRlDTYLas1KMVfBBHWUOv dr7af1wjItYlAy9WbgK770eE72xBbmhgkr2bp5ei5suH6wcdmvFBG7Y/8NSeP8DU hi5qyjqWMZfI3JH5yDJYfNK8v1vOr7aX2+NVzS3+xPohehK5tqMi6UwXQ96hThnt IVbR/E9wiESnuR1OgMx7AywQZNzQClk22g7ODSj+791HpX3h3zsJGKY2uSwZegcd mh3NtoW0/kb/gc/zLIDwQ6xNRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHUVu52 yU38uKpNVUv3l8p1qCJMMB8GA1UdIwQYMBaAFKo14vl3tV5y+RY1v31TvOtTR5g7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wNEJBQTYxNEE5 OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhuTDVGaldfZlZPODYxTkht RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkMzOC8wNEJBQTYxNEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhu TDVGaldfZlZPODYxTkhtRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ7LnQqBc3ETG3trfiUud3xkLI6pEk52p2vY8pJxS+3cScaFwGIH+Z +TxyDz0yWh9uyKVk55IPX479d+bB/g0kRssjRJyUVZoFcIISWF7V1MqQ+Blzkw9n 7nTOuzp/QBnjN2ghY1B/4OhIDOd+nWdwhTzW24Y8SV4nTJan/RxVQj7wu1ji2Eg2 tRlnattPem74iv+ymsMt9Es7UXxdmsfARqrBXXkdiJhSayvOqLYzDhNCZo4rQglp pY4twMUEg98+zqJ0b5qOfD+w+HQniZmBhI6t8+7XCJtxEai62Sg9krh/ova5L2hO 1Q0kHAeaLTNISFtau7phBCB3sfhetvKs -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:58 2025 by rpki-client