This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json) Hash identifier: eQl7hhCCoxZKNH1TlYmupRDjnvwak7ykqlakHPYVhiw= Subject key identifier: 33:65:88:79:3E:2F:20:23:76:9B:1E:70:35:E1:DD:50:CC:2A:B9:77 Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 Certificate issuer: /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Certificate serial: 0769 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft Manifest number: 0762 Signing time: Thu 04 Dec 2025 20:36:11 +0000 Manifest this update: Thu 04 Dec 2025 20:36:11 +0000 Manifest next update: Thu 11 Dec 2025 20:36:11 +0000 Files and hashes: 1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: BeVkOVW7BnKSGPk9qDVo/mk9G5eE6px6WJjjxduyRrw=) 2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: Mo4ipUAhsJfO561D6WlOKnCiX8/Ti7RsBVjlUT3Jw4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1897 (0x769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Validity Not Before: Dec 4 20:36:11 2025 GMT Not After : Dec 11 20:36:11 2025 GMT Subject: CN=6931f0bb-f72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9e:d9:e4:16:52:d7:9d:05:04:e4:37:a8:f4: d7:7f:c1:5a:0f:c6:ed:c7:b8:5a:31:79:8d:9b:08: ba:3d:8c:81:f2:0f:59:4e:75:26:cf:7e:3c:47:9c: ae:76:2a:58:81:30:2c:61:5e:5f:07:71:61:f4:1c: 71:d5:58:19:3d:62:e0:b5:e7:f2:f6:e1:13:55:84: f0:5b:6c:ed:78:05:a6:62:66:d2:b9:61:45:c7:d7: 22:79:42:c2:9e:b5:c9:13:4b:dc:32:57:4c:6b:9a: 95:b5:df:6f:00:55:58:3a:35:fc:6d:7b:12:33:a0: 49:6e:3d:80:15:79:b3:b3:19:64:d7:da:3c:e7:6c: 8f:9a:75:9f:a9:f0:62:79:42:4c:91:1a:17:40:cd: 97:4f:3c:4a:fe:5b:0d:5e:3d:5b:67:a0:82:36:b8: 03:c1:0c:59:37:68:ef:cb:b3:11:2d:4e:9a:cc:63: 21:7f:fa:8a:30:2f:f9:90:4e:d2:5a:e3:73:81:be: 8b:a1:d4:1c:15:07:6a:59:a7:98:20:3e:b1:1c:f5: 3c:8f:07:15:47:61:3f:43:f1:c1:bd:50:e9:c7:36: cd:f8:17:93:b4:6d:c5:5f:ca:6b:2c:93:b0:cd:16: 6a:fa:ec:ce:4a:bf:9f:38:f1:d7:53:4d:2b:0f:6f: 22:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:65:88:79:3E:2F:20:23:76:9B:1E:70:35:E1:DD:50:CC:2A:B9:77 X509v3 Authority Key Identifier: keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c7:c7:c3:79:27:73:fa:2d:c4:c3:68:1d:f9:1a:72:cc:4a: 6a:23:e4:98:0a:ac:11:ac:99:2b:ac:ff:16:e2:ea:6c:0e:13: 85:6e:b6:a5:e6:89:ad:17:f1:e8:98:72:cd:24:57:66:e6:ae: c0:48:2f:e3:6c:8d:44:c1:44:6f:ef:1c:1a:1d:c7:7c:69:c1: 7f:12:79:7d:f9:d2:1e:20:4a:4d:6e:4f:ff:8f:9b:ed:79:f0: aa:52:05:46:b1:01:25:db:f4:70:ff:99:4f:ee:d4:41:eb:8e: 2f:50:be:16:50:07:6f:8b:7c:47:83:e9:cd:97:6e:76:ad:53: 11:cd:3b:21:cf:85:49:8f:4c:97:fd:31:72:d0:5b:a8:17:4d: 62:9c:94:47:70:7f:ca:78:35:f4:2c:6d:b8:0d:db:4f:ac:fe: 50:3d:c0:2c:a6:6c:4e:fe:e3:4f:ef:2f:20:4e:ca:22:0e:8c: a0:e7:7e:b7:95:0d:8b:e6:2d:51:5d:74:2e:11:2a:64:3a:6b: 3c:47:34:d4:71:82:dd:c7:5e:91:62:b4:9e:78:fb:51:4d:c5: 15:88:f0:37:41:53:7a:6d:36:ae:e6:18:8e:2a:b1:df:c9:24: d2:2d:df:fe:1a:06:02:ad:70:5c:99:5d:b1:97:7b:30:bc:52: 52:7b:f8:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0MzUxMTAvBgNVBAUTKDQyOTExQjEwOUQ0NkU4ODY2MUZBODU2MTZDODEyODAz QzVBQjNDNjQwHhcNMjUxMjA0MjAzNjExWhcNMjUxMjExMjAzNjExWjAYMRYwFAYD VQQDEw02OTMxZjBiYi1mNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJ7Z5BZS150FBOQ3qPTXf8FaD8btx7haMXmNmwi6PYyB8g9ZTnUmz348R5yu dipYgTAsYV5fB3Fh9Bxx1VgZPWLgtefy9uETVYTwW2zteAWmYmbSuWFFx9cieULC nrXJE0vcMldMa5qVtd9vAFVYOjX8bXsSM6BJbj2AFXmzsxlk19o852yPmnWfqfBi eUJMkRoXQM2XTzxK/lsNXj1bZ6CCNrgDwQxZN2jvy7MRLU6azGMhf/qKMC/5kE7S WuNzgb6LodQcFQdqWaeYID6xHPU8jwcVR2E/Q/HBvVDpxzbN+BeTtG3FX8prLJOw zRZq+uzOSr+fOPHXU00rD28ihQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNliHk+ LyAjdpsecDXh3VDMKrl3MB8GA1UdIwQYMBaAFEKRGxCdRuiGYfqFYWyBKAPFqzxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDQzNS9EMjg4NUJDNDQ0 NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJWmgtb1ZoYklFb0E4V3JQ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwRWJFSjFHNklaaC1vVmhiSUVvQThXclBHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDQzNS9EMjg4NUJDNDQ0NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJ Wmgtb1ZoYklFb0E4V3JQR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5x8fDeSdz+i3Ew2gd+RpyzEpqI+SYCqwRrJkrrP8W4upsDhOFbral 5omtF/HomHLNJFdm5q7ASC/jbI1EwURv7xwaHcd8acF/Enl9+dIeIEpNbk//j5vt efCqUgVGsQEl2/Rw/5lP7tRB644vUL4WUAdvi3xHg+nNl252rVMRzTshz4VJj0yX /TFy0FuoF01inJRHcH/KeDX0LG24DdtPrP5QPcAspmxO/uNP7y8gTsoiDoyg5363 lQ2L5i1RXXQuESpkOms8RzTUcYLdx16RYrSeePtRTcUViPA3QVN6bTau5hiOKrHf ySTSLd/+GgYCrXBcmV2xl3swvFJSe/hF -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:04 2025 by rpki-client