This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: +2/gkQ3uctd7xzamMy0RQ3YziH/LG2JpXLOz7IDHeL4= Subject key identifier: 81:23:38:52:A3:A9:11:B1:F3:99:EA:4A:3B:1B:3B:36:A1:A1:59:AC Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 0423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 041B Signing time: Thu 04 Dec 2025 22:50:13 +0000 Manifest this update: Thu 04 Dec 2025 22:50:13 +0000 Manifest next update: Thu 11 Dec 2025 22:50:13 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: hNYQFl9xxmzUnn6DU+UZFwwezUrgwOAQbt2AIwdKuC4=) 2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: qOMt8gV+qKOqfr/cX53ygmFqRFWIxLXDn07p9oOee54=) 3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: vlEni3UTKg6N69bA/qO6bko6oc0V7Y603/5krA0YD5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1059 (0x423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: Dec 4 22:50:13 2025 GMT Not After : Dec 11 22:50:13 2025 GMT Subject: CN=69321025-34a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:cf:af:15:6a:eb:06:65:96:1f:d8:52:0b: db:05:06:7f:70:35:e5:80:02:55:09:28:ce:7d:2d: 14:97:1a:34:1e:68:9d:34:2e:64:9d:89:89:50:19: 61:f3:87:be:99:49:26:29:b0:84:a3:e0:2c:f0:d9: b4:a9:79:fe:bf:34:d0:53:d6:68:ae:73:18:b6:1c: 9d:f0:08:a8:be:84:d0:1c:d7:0a:72:1b:82:79:87: 06:96:4a:b6:e6:c8:a0:e6:d2:36:0d:06:be:b3:ab: 86:f8:90:ad:85:50:ca:a0:ce:47:d7:00:f1:c4:52: d2:23:c8:2c:bc:10:b4:eb:4d:b2:95:c6:09:6e:53: 27:35:c8:f4:76:68:aa:12:19:ee:e4:b2:72:c1:bd: e0:81:4c:fd:1f:25:47:2f:08:c5:92:cd:13:82:9e: 74:05:ee:dd:0c:2e:9d:68:60:bd:fc:47:a4:32:c7: 9d:26:a7:5d:0f:91:99:4a:38:d7:69:ca:4b:d9:d8: 26:fd:1a:39:96:48:bf:89:04:31:58:58:86:a6:f2: dc:50:00:1c:9d:c3:d1:bc:ad:1b:15:d7:86:ad:19: 0d:28:06:94:f5:22:c5:b8:f0:cb:d1:0a:86:db:67: 7b:7a:a1:09:c6:c1:e5:fc:1d:10:59:dc:f3:94:bf: 88:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:23:38:52:A3:A9:11:B1:F3:99:EA:4A:3B:1B:3B:36:A1:A1:59:AC X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:ec:ac:5f:ce:8b:58:fe:c6:5c:86:8f:07:1d:0a:42:94:27: 29:d9:a3:0b:f6:29:70:be:21:e4:c9:46:91:90:b3:6a:0e:ed: 8b:c8:f8:6d:a2:0e:83:83:e4:80:47:34:5b:4a:48:78:73:a6: ee:f2:8a:a1:ae:3f:44:a4:ad:34:99:6a:ba:b5:28:04:48:3b: 32:d9:a8:c4:c1:e2:d1:10:7c:37:6d:6a:35:85:b1:cf:5a:a6: 18:c9:a4:02:20:a0:24:55:8d:a1:8a:d3:a0:e5:d9:85:ac:46: 13:1c:6e:aa:7f:06:09:20:38:7f:a3:44:42:b8:5b:13:a8:96: 73:48:78:b8:19:fe:a8:32:b5:6c:e5:87:ab:2b:8d:45:d4:7d: 6f:00:47:4c:de:54:9e:47:f7:a8:0f:26:f3:b7:7b:29:86:7f: 0d:23:dd:01:8c:2b:42:42:de:91:4a:78:3c:ad:09:43:d9:43: 00:dd:d1:44:c5:12:46:59:6a:8b:53:71:aa:47:0f:37:51:f5: 69:5e:e3:3f:9f:79:13:71:be:05:5f:29:4f:60:c4:a7:6a:21: 7a:a8:17:b8:2f:7b:8e:38:66:56:fa:4c:4a:7d:e0:99:c6:2a: 22:33:d7:58:5f:5b:5c:d9:09:5c:52:02:46:87:c8:67:2e:e9: 40:0c:aa:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjUxMjA0MjI1MDEzWhcNMjUxMjExMjI1MDEzWjAYMRYwFAYD VQQDEw02OTMyMTAyNS0zNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3XPrxVq6wZllh/YUgvbBQZ/cDXlgAJVCSjOfS0Ulxo0HmidNC5knYmJUBlh 84e+mUkmKbCEo+As8Nm0qXn+vzTQU9ZornMYthyd8AiovoTQHNcKchuCeYcGlkq2 5sig5tI2DQa+s6uG+JCthVDKoM5H1wDxxFLSI8gsvBC0602ylcYJblMnNcj0dmiq Ehnu5LJywb3ggUz9HyVHLwjFks0Tgp50Be7dDC6daGC9/EekMsedJqddD5GZSjjX acpL2dgm/Ro5lki/iQQxWFiGpvLcUAAcncPRvK0bFdeGrRkNKAaU9SLFuPDL0QqG 22d7eqEJxsHl/B0QWdzzlL+IXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEjOFKj qRGx85nqSjsbOzahoVmsMB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC57KxfzotY/sZcho8HHQpClCcp2aML9ilwviHkyUaRkLNqDu2LyPht og6Dg+SARzRbSkh4c6bu8oqhrj9EpK00mWq6tSgESDsy2ajEweLREHw3bWo1hbHP WqYYyaQCIKAkVY2hitOg5dmFrEYTHG6qfwYJIDh/o0RCuFsTqJZzSHi4Gf6oMrVs 5YerK41F1H1vAEdM3lSeR/eoDybzt3sphn8NI90BjCtCQt6RSng8rQlD2UMA3dFE xRJGWWqLU3GqRw83UfVpXuM/n3kTcb4FXylPYMSnaiF6qBe4L3uOOGZW+kxKfeCZ xioiM9dYX1tc2QlcUgJGh8hnLulADKoF -----END CERTIFICATE-----Generated at Sat Dec 6 16:11:23 2025 by rpki-client