This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json) Hash identifier: +Ml9ToVTxTuyB2PFAXzKH3oUWJVPKdGb5TURYcK2wN8= Subject key identifier: C7:6B:E7:85:FE:B6:32:AB:D5:DE:BB:31:FB:28:67:9B:C9:4B:90:FC Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft Manifest number: 63 Signing time: Fri 05 Dec 2025 04:57:11 +0000 Manifest this update: Fri 05 Dec 2025 04:57:11 +0000 Manifest next update: Fri 12 Dec 2025 04:57:11 +0000 Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: zsg9Yl3bj4eIB1taMCQfo0gti8i5YsgZDrBH4E/nSys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Validity Not Before: Dec 5 04:57:11 2025 GMT Not After : Dec 12 04:57:11 2025 GMT Subject: CN=69326627-7d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:36:af:f2:c8:25:e5:b8:22:af:de:40:f2:66: e6:e4:ea:8d:9f:6b:01:2b:4d:6b:b2:98:c7:59:c1: 9b:ca:85:f6:da:69:63:91:8d:39:78:b7:e6:38:37: b6:e0:dc:67:91:03:73:e6:0a:d0:ba:6e:a0:da:28: 83:18:8c:ce:91:25:7a:57:ac:a7:69:e2:80:52:ac: a5:7c:11:85:74:4d:b3:99:1a:ab:82:f4:9a:5a:59: 7b:fc:7f:bc:a1:fd:c6:6f:9b:86:ab:c9:02:2a:62: ff:a7:63:70:bf:a2:ad:cc:1b:92:c7:a3:76:dc:17: a4:b7:b5:ef:0a:fd:bf:1c:05:ed:50:50:ca:a0:f5: 61:01:d3:4a:1b:25:71:7b:f3:53:3d:21:00:c9:5d: f9:2a:c6:f4:56:52:72:aa:1b:a5:41:d3:0c:91:2b: db:ce:11:21:43:57:29:95:76:db:91:9f:eb:b6:fe: bb:01:b3:85:02:fb:f5:60:96:ff:f9:5b:be:7d:97: 9e:d8:12:3b:28:96:01:48:99:6c:e5:ad:d1:78:c7: 80:37:d2:68:12:64:16:b9:b0:04:77:7a:9b:0f:a5: 7d:8f:51:82:75:9a:95:42:85:4c:35:d3:60:ca:57: e5:0e:e1:96:1e:6e:95:bf:b2:ed:c1:aa:58:8a:38: 57:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6B:E7:85:FE:B6:32:AB:D5:DE:BB:31:FB:28:67:9B:C9:4B:90:FC X509v3 Authority Key Identifier: keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:31:42:93:65:0c:8e:8d:55:28:98:32:80:48:ca:6d:ee:96: d3:1b:fd:55:7f:0d:9e:e3:75:9b:d1:c0:2f:49:13:0b:ea:07: 5f:e1:ab:2d:d4:44:da:c8:2a:62:68:17:38:85:b7:fe:25:a4: 51:0b:a7:c2:e2:30:e0:94:ac:c1:66:31:5a:49:28:15:b4:aa: 75:d0:f4:e8:1d:c3:b4:68:7c:5b:5a:69:bd:17:2e:62:9e:f5: a6:f5:97:1b:03:1a:3f:fe:b8:bb:1a:dd:60:df:91:99:b1:1b: 8e:7f:c3:50:d8:06:18:fc:59:f7:b1:d5:16:05:90:a3:81:60: 62:72:7e:e1:d3:19:43:a9:40:f9:ed:8e:7c:14:e3:9f:93:d8: 7e:36:a2:4c:91:d1:ac:cc:b4:af:92:77:f1:ad:36:6f:0f:c1: 72:66:9e:69:2d:4f:e9:6e:ad:bc:c4:3f:c8:e8:52:f2:4b:c9: 60:3c:24:71:dd:21:5d:c6:49:32:20:6d:78:dd:64:b2:2e:80: 04:62:db:3d:1d:5a:aa:a1:6b:3f:67:19:9e:1e:71:15:da:39: 2e:d6:44:40:a9:4f:23:52:aa:67:53:0c:19:49:05:40:04:66: e6:88:23:32:63:86:a2:e2:9f:4a:80:f8:fc:f1:8b:e7:ee:a4: 78:57:cb:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEJCMTExMC8GA1UEBRMoNDEyQThEMTdERjkwN0E3ODM3NjUwMTJBODNCNzhCN0NC MUNBMjUxMjAeFw0yNTEyMDUwNDU3MTFaFw0yNTEyMTIwNDU3MTFaMBgxFjAUBgNV BAMTDTY5MzI2NjI3LTdkMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVNq/yyCXluCKv3kDyZubk6o2fawErTWuymMdZwZvKhfbaaWORjTl4t+Y4N7bg 3GeRA3PmCtC6bqDaKIMYjM6RJXpXrKdp4oBSrKV8EYV0TbOZGquC9JpaWXv8f7yh /cZvm4aryQIqYv+nY3C/oq3MG5LHo3bcF6S3te8K/b8cBe1QUMqg9WEB00obJXF7 81M9IQDJXfkqxvRWUnKqG6VB0wyRK9vOESFDVymVdtuRn+u2/rsBs4UC+/Vglv/5 W759l57YEjsolgFImWzlrdF4x4A30mgSZBa5sAR3epsPpX2PUYJ1mpVChUw102DK V+UO4ZYebpW/su3BqliKOFd3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx2vnhf62 MqvV3rsx+yhnm8lLkPwwHwYDVR0jBBgwFoAUQSqNF9+Qeng3ZQEqg7eLfLHKJRIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QkIxLzUxRjlGNjE0M0Qy NTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5nM1pRRXFnN2VMZkxIS0pS SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVNxTkY5LVFlbmczWlFFcWc3ZUxmTEhLSlJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QkIxLzUxRjlGNjE0M0QyNTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5n M1pRRXFnN2VMZkxIS0pSSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK0xQpNlDI6NVSiYMoBIym3ultMb/VV/DZ7jdZvRwC9JEwvqB1/hqy3U RNrIKmJoFziFt/4lpFELp8LiMOCUrMFmMVpJKBW0qnXQ9Ogdw7RofFtaab0XLmKe 9ab1lxsDGj/+uLsa3WDfkZmxG45/w1DYBhj8Wfex1RYFkKOBYGJyfuHTGUOpQPnt jnwU45+T2H42okyR0azMtK+Sd/GtNm8PwXJmnmktT+lurbzEP8joUvJLyWA8JHHd IV3GSTIgbXjdZLIugARi2z0dWqqhaz9nGZ4ecRXaOS7WRECpTyNSqmdTDBlJBUAE ZuaIIzJjhqLin0qA+Pzxi+fupHhXy0E= -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:03 2025 by rpki-client