This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: 0DnteOdlpbpQwDxsHbcn4cmrKaQCgL0QwAl5mcXQe/8= Subject key identifier: 31:B9:C3:54:F3:CC:90:1C:23:5A:F0:BD:63:61:70:70:51:08:31:B8 Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1E2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1E23 Signing time: Thu 04 Dec 2025 15:51:15 +0000 Manifest this update: Thu 04 Dec 2025 15:51:15 +0000 Manifest next update: Thu 11 Dec 2025 15:51:15 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: /BpyXvbjJ1SOlJUtsTtax2X1VY+lXtyEn7wuFNUpBIY=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: OwRMtrtGPYaPPKGjgTatExbq339fV5j/IPlfXafo770=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7725 (0x1e2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: Dec 4 15:51:15 2025 GMT Not After : Dec 11 15:51:15 2025 GMT Subject: CN=6931adf3-56f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ab:91:1f:3f:7a:c4:11:ed:b0:9a:f8:81:33: 00:1c:af:0a:6f:30:09:e3:af:c8:44:d2:7b:a0:b0: fa:ef:5a:c9:09:7a:56:6a:c4:a7:e3:0f:97:98:3d: 8e:32:27:f5:14:17:57:f9:05:a5:f1:20:54:70:4d: a3:27:df:cb:5b:6d:c3:fa:5d:1f:64:bd:bd:66:c9: 2e:53:b4:80:54:6c:7c:a3:04:41:03:bc:eb:c5:a0: 9f:2d:7f:21:ac:be:a3:e8:b3:89:b8:38:18:56:fc: eb:92:e8:3b:28:e2:64:93:b4:62:cc:f8:7e:1f:e6: a1:0f:82:d2:20:9f:a5:cf:fa:e1:9d:da:d2:9f:ac: 1e:0d:f7:6c:17:68:51:07:04:79:77:20:ce:28:26: e4:ea:05:c7:a6:54:59:8c:f1:f6:1d:40:f1:4b:6d: e6:75:1f:a0:3d:11:ef:0d:e8:a7:7e:46:d1:4f:b1: 80:7b:48:e1:0d:e7:02:91:24:0a:68:35:c7:35:27: 10:0d:84:00:0e:45:18:a3:d0:c3:d6:f1:33:9e:b4: c2:be:90:75:ee:3e:69:1f:50:c0:c0:85:4e:fc:49: 7a:09:a4:53:fe:af:a0:7b:bb:ca:be:28:d2:fb:6c: ee:8d:c2:87:43:ad:e5:95:c9:cf:58:ca:8f:11:76: 33:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B9:C3:54:F3:CC:90:1C:23:5A:F0:BD:63:61:70:70:51:08:31:B8 X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:c0:9b:45:89:e3:30:68:9f:ff:9b:15:9e:e5:cf:e0:51:54: 9b:f0:cf:44:d3:04:1c:f4:d5:75:7d:f5:76:70:e1:d3:e2:7f: d9:65:33:39:5d:45:14:7a:8d:cb:29:28:b3:33:ac:94:45:5f: b4:08:01:fb:ef:a3:c3:58:0c:7b:97:ef:5c:b5:7a:ff:5a:6a: 0a:70:91:22:1d:ae:34:a0:b6:68:e6:6a:bc:74:f4:4b:e9:ad: ea:6e:d6:5a:7c:28:d8:5e:ac:a4:95:72:71:5b:8d:92:b0:3d: 1f:75:a7:cf:c1:63:b8:b5:dc:96:29:55:31:2d:14:36:b4:26: ee:63:e0:48:40:e4:6c:1e:54:c1:b1:8a:8e:4a:8a:18:09:bb: 25:f1:6a:3b:10:0e:1f:0d:5e:0c:ca:19:50:d2:4b:d0:2d:1b: db:ff:6a:20:57:b0:40:bc:50:21:ea:a2:31:65:3f:ed:49:a5: 2e:78:eb:c2:9d:c3:8c:22:76:27:aa:81:15:42:d9:47:b6:aa: fb:29:f5:75:fd:37:36:00:cc:fa:81:04:10:84:46:fb:45:00: 5f:6d:3a:b0:b7:8b:f9:43:a1:59:6a:1e:ac:e7:ac:15:73:f6: f2:48:75:2b:01:30:4e:a8:62:28:84:03:13:b2:79:e8:50:9f: 5f:78:21:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjUxMjA0MTU1MTE1WhcNMjUxMjExMTU1MTE1WjAYMRYwFAYD VQQDEw02OTMxYWRmMy01NmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6quRHz96xBHtsJr4gTMAHK8KbzAJ46/IRNJ7oLD671rJCXpWasSn4w+XmD2O Mif1FBdX+QWl8SBUcE2jJ9/LW23D+l0fZL29ZskuU7SAVGx8owRBA7zrxaCfLX8h rL6j6LOJuDgYVvzrkug7KOJkk7RizPh+H+ahD4LSIJ+lz/rhndrSn6weDfdsF2hR BwR5dyDOKCbk6gXHplRZjPH2HUDxS23mdR+gPRHvDeinfkbRT7GAe0jhDecCkSQK aDXHNScQDYQADkUYo9DD1vEznrTCvpB17j5pH1DAwIVO/El6CaRT/q+ge7vKvijS +2zujcKHQ63llcnPWMqPEXYzGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDG5w1Tz zJAcI1rwvWNhcHBRCDG4MB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkwJtFieMwaJ//mxWe5c/gUVSb8M9E0wQc9NV1ffV2cOHT4n/ZZTM5 XUUUeo3LKSizM6yURV+0CAH776PDWAx7l+9ctXr/WmoKcJEiHa40oLZo5mq8dPRL 6a3qbtZafCjYXqyklXJxW42SsD0fdafPwWO4tdyWKVUxLRQ2tCbuY+BIQORsHlTB sYqOSooYCbsl8Wo7EA4fDV4MyhlQ0kvQLRvb/2ogV7BAvFAh6qIxZT/tSaUueOvC ncOMInYnqoEVQtlHtqr7KfV1/Tc2AMz6gQQQhEb7RQBfbTqwt4v5Q6FZah6s56wV c/bySHUrATBOqGIohAMTsnnoUJ9feCHm -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:11 2025 by rpki-client