This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft File: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft (raw, json) Hash identifier: zf0zS5c15el4oA6lSX5yhssxZLlsd8Gu9nhulodZpyo= Subject key identifier: 7D:7C:7A:18:85:43:61:C1:8B:12:D6:9F:10:D4:64:5F:1F:8E:00:7B Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 Certificate issuer: /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft Manifest number: 01BA Signing time: Fri 05 Dec 2025 08:10:38 +0000 Manifest this update: Fri 05 Dec 2025 08:10:38 +0000 Manifest next update: Fri 12 Dec 2025 08:10:38 +0000 Files and hashes: 1: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl (hash: ot5cTSYDBJGL/3a6f5VEmdGoYXrhx1NhT+TV2/GkBWw=) 2: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (hash: quzgA63SpLjcb7xHGEjv3O11w0qxKCOwrlK8xFLHM54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 08:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF9B9, serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Validity Not Before: Dec 5 08:10:38 2025 GMT Not After : Dec 12 08:10:38 2025 GMT Subject: CN=6932937e-4469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:a9:8c:c9:e6:15:e8:88:b2:c0:34:ae:28: 48:a2:a4:4e:bd:f2:77:ac:3e:2e:d4:99:7b:f1:d0: 27:ab:d8:2f:b0:20:0d:75:06:11:02:43:3b:4a:8c: 55:13:6c:8d:bb:d4:00:02:b6:b7:f0:e7:6c:9e:90: 25:d0:23:88:47:12:fd:09:bc:a7:51:e8:f4:4b:be: 79:68:a6:1e:e5:6f:e1:82:fd:14:0d:cf:72:95:89: 54:b2:02:3f:3b:6b:07:85:b2:bb:eb:33:a7:c5:ff: 8d:e7:1f:fb:6f:ed:a1:a9:96:0a:64:10:46:64:43: 33:49:af:fe:d5:07:6e:00:67:68:2d:ae:2c:73:7f: 5f:2e:df:8f:18:7b:5d:60:c3:12:5a:ea:3a:67:85: 2b:32:99:75:63:30:b1:41:e7:26:70:24:b9:72:16: b5:85:78:b1:e0:d8:c8:c4:53:fc:fc:c4:ca:76:13: 6c:a6:da:f1:0a:c6:c2:14:ef:ff:f9:5f:1a:a8:85: d3:2a:76:cc:be:f6:f3:9e:49:ca:06:73:5e:c6:f5: 3e:b2:c7:5f:4d:50:b3:c8:b1:6b:ca:30:67:2a:6d: e4:6e:7b:27:30:d9:73:c9:d4:16:a4:54:6d:cc:82: bc:00:eb:a7:aa:0c:aa:5c:50:03:d5:a5:fd:b2:78: 30:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7C:7A:18:85:43:61:C1:8B:12:D6:9F:10:D4:64:5F:1F:8E:00:7B X509v3 Authority Key Identifier: keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c8:da:b6:89:41:de:7d:05:41:9f:eb:f8:f9:9a:93:32:6f: 55:91:fb:2f:dd:77:40:9f:f6:df:91:7d:22:62:04:96:2e:bc: 5d:2a:37:0c:47:ad:61:70:45:4a:cf:f0:1e:6f:2d:1d:db:2e: 55:fe:e6:96:23:55:39:ad:2c:4e:7e:fc:cb:d9:7f:27:1b:c8: 03:4d:d2:57:00:8c:f0:d4:a2:e2:03:8f:bb:58:c9:95:19:89: a3:98:8d:d4:77:ff:b6:5f:1c:f8:33:9d:24:c1:5d:1f:c8:83: 99:8f:33:5c:91:f8:82:36:ec:e4:b6:4f:b4:84:78:c2:9e:5c: f9:cc:e3:8e:f7:a3:9d:02:ca:db:2f:32:32:06:1c:0c:38:8a: 84:d2:bc:8f:77:97:b9:1e:7a:02:e1:cc:12:54:ed:39:f1:18: 8e:ae:57:fc:5f:87:d7:be:9c:7f:8d:53:b8:e7:59:c8:84:0e: a5:8e:9a:3d:ff:6d:40:e0:4c:3b:c6:4e:d4:50:ad:9f:5b:48: 34:cb:85:ed:f7:08:a3:5b:1c:b2:18:70:8b:09:73:43:33:da: fd:c9:fb:d9:57:f8:b2:22:2f:af:06:24:c8:b7:64:dc:0f:0c: b6:7a:6a:f0:13:77:90:b6:03:32:15:89:e8:f8:8d:ec:c0:3e: 89:7e:19:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5QjkxMTAvBgNVBAUTKDQyQ0U1MEUxQUM3MzNENUExNjZCNTQyQzNDNDkzMDlG MzY1NkJGMjIwHhcNMjUxMjA1MDgxMDM4WhcNMjUxMjEyMDgxMDM4WjAYMRYwFAYD VQQDEw02OTMyOTM3ZS00NDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQmpjMnmFeiIssA0rihIoqROvfJ3rD4u1Jl78dAnq9gvsCANdQYRAkM7SoxV E2yNu9QAAra38OdsnpAl0COIRxL9CbynUej0S755aKYe5W/hgv0UDc9ylYlUsgI/ O2sHhbK76zOnxf+N5x/7b+2hqZYKZBBGZEMzSa/+1QduAGdoLa4sc39fLt+PGHtd YMMSWuo6Z4UrMpl1YzCxQecmcCS5cha1hXix4NjIxFP8/MTKdhNsptrxCsbCFO// +V8aqIXTKnbMvvbznknKBnNexvU+ssdfTVCzyLFryjBnKm3kbnsnMNlzydQWpFRt zIK8AOunqgyqXFAD1aX9sngw6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH18ehiF Q2HBixLWnxDUZF8fjgB7MB8GA1UdIwQYMBaAFELOUOGscz1aFmtULDxJMJ82Vr8i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjlCOS85NTFGOThFQTMy RDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBWb1dhMVFzUEVrd256Wld2 eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzNVE0YXh6UFZvV2ExUXNQRWt3bnpaV3Z5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjlCOS85NTFGOThFQTMyRDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBW b1dhMVFzUEVrd256Wld2eUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNyNq2iUHefQVBn+v4+ZqTMm9Vkfsv3XdAn/bfkX0iYgSWLrxdKjcM R61hcEVKz/Aeby0d2y5V/uaWI1U5rSxOfvzL2X8nG8gDTdJXAIzw1KLiA4+7WMmV GYmjmI3Ud/+2Xxz4M50kwV0fyIOZjzNckfiCNuzktk+0hHjCnlz5zOOO96OdAsrb LzIyBhwMOIqE0ryPd5e5HnoC4cwSVO058RiOrlf8X4fXvpx/jVO451nIhA6ljpo9 /21A4Ew7xk7UUK2fW0g0y4Xt9wijWxyyGHCLCXNDM9r9yfvZV/iyIi+vBiTIt2Tc Dwy2emrwE3eQtgMyFYno+I3swD6JfhmH -----END CERTIFICATE-----Generated at Sun Dec 7 01:30:37 2025 by rpki-client