This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json) Hash identifier: fpiZ1q8MSoYGeHnpsyNhfXoEPXcSkyUZoP1EEBtK4Ek= Subject key identifier: E2:92:76:68:F3:D4:3B:26:4C:E7:D5:C4:7C:71:25:8B:A3:34:0A:6F Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Certificate serial: 34EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft Manifest number: 34EA Signing time: Sat 06 Dec 2025 14:54:15 +0000 Manifest this update: Sat 06 Dec 2025 14:54:14 +0000 Manifest next update: Sat 13 Dec 2025 14:54:14 +0000 Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: 1kTVbd4/Y3WwYbBd6M+DbM5DCSd6IGdyRYk7ToKs2W8=) 2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: Ijy1uWFshu2uXbMSDNdrdIor4pwld2OcIkcbdYGoQws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Validity Not Before: Dec 6 14:54:14 2025 GMT Not After : Dec 13 14:54:14 2025 GMT Subject: CN=69344396-19cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:19:da:2a:af:7d:7f:9e:f0:ea:da:c3:cb:b4: ce:4f:e8:3b:f8:45:21:25:5c:b3:88:2d:77:5c:7f: 6e:d4:54:c0:8d:42:1d:70:40:4e:b4:b3:7e:65:2b: d2:5b:2c:2f:4d:a6:a3:21:97:3c:63:8a:7d:5f:17: ca:7e:b5:dc:ea:37:4d:85:b5:d6:58:24:42:c2:ea: 67:48:be:ee:b2:fa:40:cb:c8:1e:5d:20:7d:10:c1: 1e:76:54:a8:df:77:12:0c:47:56:a7:57:d9:98:44: 7f:e5:8a:87:fb:cf:83:98:fa:36:ec:8d:8c:c6:26: 61:49:1b:13:68:36:86:84:51:97:c7:03:85:94:ff: 47:c7:1f:d5:fc:2d:cf:0b:02:4e:8b:d8:e9:e9:34: b4:56:3a:1a:a8:04:38:51:ff:06:42:bd:a6:21:bd: b5:8b:02:1c:0c:11:1f:90:b6:08:f7:ca:16:82:c0: eb:9a:35:7e:cf:c1:ba:a8:78:f2:24:c5:0a:85:33: 5e:c6:6a:f6:53:c7:c9:6b:c0:ae:35:bc:1e:f7:e1: eb:a0:dd:b4:fb:4d:e7:3e:2c:b9:71:13:2a:db:69: 1b:eb:e7:80:2a:a8:0e:4a:6c:29:d0:a1:9d:fb:3c: c1:4f:0b:9e:78:54:7a:3a:3f:35:82:49:bb:bc:fc: 5e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:92:76:68:F3:D4:3B:26:4C:E7:D5:C4:7C:71:25:8B:A3:34:0A:6F X509v3 Authority Key Identifier: keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:aa:64:a2:15:1f:75:94:f4:60:4f:1d:bc:e7:bc:7c:0f:84: 49:7d:d3:3a:48:06:e1:0b:50:ce:3a:e6:f8:9a:cc:85:6d:c2: 89:ba:75:f4:9a:75:df:1f:fe:cf:6f:92:7f:02:67:7a:b7:a2: 82:5c:d2:78:28:99:9c:9f:18:99:06:fe:09:90:7c:b5:b1:ad: 35:44:d1:f7:54:a0:53:a3:ed:38:11:18:0e:b1:a0:ad:6d:2f: c4:a0:76:3f:56:4f:a9:81:88:9a:22:b9:99:6e:d0:fc:5c:56: b8:5f:88:98:5a:6e:f8:74:01:a6:56:92:bb:91:03:e3:59:1e: 22:d4:ac:e8:cd:b7:67:0b:77:3b:e8:43:bf:94:b8:d1:c5:a5: 3b:73:04:0c:4b:7c:a0:50:b6:78:0f:1c:5e:2e:c9:ef:6b:95: 32:d2:c4:73:4c:55:7e:55:b4:4a:ce:be:15:a7:5e:ce:2a:83: 46:0e:08:38:1b:1c:11:73:79:a8:54:59:51:fa:df:3a:74:8a: 3a:81:68:20:10:0e:d7:04:d0:68:90:3b:2b:bc:0d:1e:0a:fa: 66:02:92:c4:54:0a:86:fb:1b:93:fb:36:c4:64:c4:69:60:0b: 88:32:9d:f5:13:64:30:e8:33:db:73:16:f1:72:30:58:33:e1: 97:db:37:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4OUQxMTAvBgNVBAUTKDQwQjhEMjJFRjIzQjM3QjBCOUU1M0YzQzRFMTBENkFF M0VCOEE5OUYwHhcNMjUxMjA2MTQ1NDE0WhcNMjUxMjEzMTQ1NDE0WjAYMRYwFAYD VQQDEw02OTM0NDM5Ni0xOWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RnaKq99f57w6trDy7TOT+g7+EUhJVyziC13XH9u1FTAjUIdcEBOtLN+ZSvS WywvTaajIZc8Y4p9XxfKfrXc6jdNhbXWWCRCwupnSL7usvpAy8geXSB9EMEedlSo 33cSDEdWp1fZmER/5YqH+8+DmPo27I2MxiZhSRsTaDaGhFGXxwOFlP9Hxx/V/C3P CwJOi9jp6TS0VjoaqAQ4Uf8GQr2mIb21iwIcDBEfkLYI98oWgsDrmjV+z8G6qHjy JMUKhTNexmr2U8fJa8CuNbwe9+HroN20+03nPiy5cRMq22kb6+eAKqgOSmwp0KGd +zzBTwueeFR6Oj81gkm7vPxeOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKSdmjz 1DsmTOfVxHxxJYujNApvMB8GA1UdIwQYMBaAFEC40i7yOzewueU/PE4Q1q4+uKmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg5RC9DN0M2M0RBODFE OUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043QzU1VDg4VGhEV3JqNjRx WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMalNMdkk3TjdDNTVUODhUaERXcmo2NHFaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg5RC9DN0M2M0RBODFEOUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043 QzU1VDg4VGhEV3JqNjRxWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXqmSiFR91lPRgTx2857x8D4RJfdM6SAbhC1DOOub4msyFbcKJunX0 mnXfH/7Pb5J/Amd6t6KCXNJ4KJmcnxiZBv4JkHy1sa01RNH3VKBTo+04ERgOsaCt bS/EoHY/Vk+pgYiaIrmZbtD8XFa4X4iYWm74dAGmVpK7kQPjWR4i1KzozbdnC3c7 6EO/lLjRxaU7cwQMS3ygULZ4DxxeLsnva5Uy0sRzTFV+VbRKzr4Vp17OKoNGDgg4 GxwRc3moVFlR+t86dIo6gWggEA7XBNBokDsrvA0eCvpmApLEVAqG+xuT+zbEZMRp YAuIMp31E2Qw6DPbcxbxcjBYM+GX2zfN -----END CERTIFICATE-----Generated at Sat Dec 6 22:26:21 2025 by rpki-client