This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: /LyeoJ8P3X7P1+emHreqfbUjvvso9u8stkSYt+1y6+8= Subject key identifier: 44:71:09:FF:DF:99:3D:3D:1C:E5:43:AE:21:D1:93:77:98:3E:A2:EB Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 20EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 284F Signing time: Thu 04 Dec 2025 15:43:56 +0000 Manifest this update: Thu 04 Dec 2025 15:43:55 +0000 Manifest next update: Thu 11 Dec 2025 15:43:55 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: oQpPo054L0uVbOI7MniZOlWSzX9/lL0h8b2RSYXPfNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8428 (0x20ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: Dec 4 15:43:55 2025 GMT Not After : Dec 11 15:43:55 2025 GMT Subject: CN=6931ac3c-56b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f3:ef:d8:fb:66:dd:d4:15:fb:78:40:c9:73: 39:6e:96:cb:e1:77:d0:bd:95:ba:85:bf:3f:1f:d5: 43:56:96:0c:9e:1e:81:35:86:a5:1e:87:59:40:d8: 66:11:e5:08:3a:9b:0a:74:3e:23:b2:40:7f:73:e4: 2a:20:49:71:c0:6c:dc:4a:b0:bc:a9:7b:ab:53:48: ce:a1:3d:ca:54:3b:f0:e0:90:c6:50:f8:c8:d8:78: d4:16:0e:df:ff:25:64:76:cd:28:9c:b8:4e:c6:f9: be:2a:b9:2e:4c:1d:b3:9d:06:dd:dc:d0:f1:94:06: b4:53:6f:53:ce:8e:24:c7:a5:b8:3d:db:8a:96:e8: b4:ef:04:6a:ed:b9:5b:dc:21:ac:9b:2d:40:47:fa: b7:9f:69:99:c5:03:23:8f:eb:70:6b:b4:47:e8:0f: 04:23:bb:8a:5e:05:b4:56:5b:f8:e3:2c:0a:12:87: a4:a8:b4:9a:f3:51:24:12:09:c2:c6:7f:7e:14:68: 8b:0c:84:ad:bf:4b:8f:ac:39:8a:91:71:83:f2:a0: 7e:c9:f5:d2:e2:a2:cc:91:11:20:64:cf:35:2e:0a: 79:f1:6d:6f:e6:af:bd:89:0d:96:38:7d:04:69:5f: 60:fb:d2:19:77:3f:b9:f8:cd:bd:2e:ce:00:6e:74: 31:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:71:09:FF:DF:99:3D:3D:1C:E5:43:AE:21:D1:93:77:98:3E:A2:EB X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:f8:c8:f4:1a:94:e4:55:03:4a:d7:bd:fe:46:cd:a9:b2:53: 1d:c4:d5:bc:8e:a9:71:07:0f:73:ee:b2:73:17:ec:57:72:b2: 02:4a:5b:41:0c:87:b8:e9:33:d4:9b:be:db:10:14:31:94:d9: 71:9c:8a:78:ec:f0:64:4c:e6:27:36:f3:26:67:a1:84:d7:d5: 45:b1:ac:05:7c:e5:39:ac:37:62:43:e0:d3:ca:46:61:7b:68: 95:01:a2:a0:18:ac:b3:30:d2:f1:e0:ab:e5:b7:d1:d1:98:7c: 72:6f:5b:1d:49:19:82:86:df:02:ae:07:64:4f:cf:1c:cc:25: 62:3a:75:ba:d5:63:26:36:82:19:4c:cc:0d:7a:4a:3e:58:8c: c0:c2:cd:94:62:7d:22:16:55:f8:d0:50:61:56:db:a0:ef:5d: 38:a0:61:98:c9:25:dc:bf:43:7d:cc:69:a5:2d:70:e3:87:14: 04:f5:11:84:aa:38:5d:38:6d:11:b4:d5:dd:d6:b1:a1:01:c4: ff:dc:1e:bc:c2:5a:90:0e:34:a4:6c:c1:54:6a:40:27:d7:81: a1:c8:5a:b2:3e:0f:6c:ff:c9:3e:95:39:0c:c7:0b:2b:09:a0: cb:b0:5d:da:66:40:9c:e6:13:7e:e5:b3:28:05:d2:26:35:8e: 06:2a:eb:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjUxMjA0MTU0MzU1WhcNMjUxMjExMTU0MzU1WjAYMRYwFAYD VQQDEw02OTMxYWMzYy01NmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/Pv2Ptm3dQV+3hAyXM5bpbL4XfQvZW6hb8/H9VDVpYMnh6BNYalHodZQNhm EeUIOpsKdD4jskB/c+QqIElxwGzcSrC8qXurU0jOoT3KVDvw4JDGUPjI2HjUFg7f /yVkds0onLhOxvm+KrkuTB2znQbd3NDxlAa0U29Tzo4kx6W4PduKlui07wRq7blb 3CGsmy1AR/q3n2mZxQMjj+twa7RH6A8EI7uKXgW0Vlv44ywKEoekqLSa81EkEgnC xn9+FGiLDIStv0uPrDmKkXGD8qB+yfXS4qLMkREgZM81Lgp58W1v5q+9iQ2WOH0E aV9g+9IZdz+5+M29Ls4AbnQxUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERxCf/f mT09HOVDriHRk3eYPqLrMB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1+Mj0GpTkVQNK173+Rs2pslMdxNW8jqlxBw9z7rJzF+xXcrICSltB DIe46TPUm77bEBQxlNlxnIp47PBkTOYnNvMmZ6GE19VFsawFfOU5rDdiQ+DTykZh e2iVAaKgGKyzMNLx4Kvlt9HRmHxyb1sdSRmCht8CrgdkT88czCViOnW61WMmNoIZ TMwNeko+WIzAws2UYn0iFlX40FBhVtug7104oGGYySXcv0N9zGmlLXDjhxQE9RGE qjhdOG0RtNXd1rGhAcT/3B68wlqQDjSkbMFUakAn14GhyFqyPg9s/8k+lTkMxwsr CaDLsF3aZkCc5hN+5bMoBdImNY4GKus3 -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:06 2025 by rpki-client