This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: KqQIPpf7tSXPo49eV/ILsaFD+ylTJK7bFK5gzruBus8= Subject key identifier: E7:8B:84:E4:B2:A5:D8:83:48:EC:97:DD:91:23:57:31:F7:7B:DE:C8 Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0C86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0C5B Signing time: Sat 20 Dec 2025 18:17:51 +0000 Manifest this update: Sat 20 Dec 2025 18:17:51 +0000 Manifest next update: Sat 27 Dec 2025 18:17:51 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: cwhyek+MtzQ9pniCXX8DdvDyf9RlctsqAkdEvjXFlLM=) 2: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: TPKfdTfxUUuIA7sEFu9uyoS27pbd1XEvcyM1zWvu3+I=) 3: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: 9WFKUJqUOgDB07wt9CN3L8jHFMm+Bp2TRv/IY0cRCLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: Dec 20 18:17:51 2025 GMT Not After : Dec 27 18:17:51 2025 GMT Subject: CN=6946e84f-5a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:28:18:a1:fe:ae:38:ab:0a:7a:aa:5c:e0:fe: 7e:18:f7:63:bc:ec:67:f7:fb:37:7a:a2:2d:ca:b5: 65:cd:ef:5a:84:05:be:ea:05:bc:17:b4:96:98:85: 24:77:7e:e1:02:42:e9:7f:97:bd:ba:8f:6f:46:df: 9f:63:94:cc:64:bb:f6:66:df:7d:6f:86:fa:e4:b5: ce:9e:d5:6c:e2:8a:53:cf:14:d2:71:6c:44:bf:5d: 99:e5:da:65:d4:15:c1:16:78:e8:ed:60:4b:34:f2: 3c:1f:61:5b:36:28:6a:ec:d8:72:33:3f:69:69:10: b0:4e:0e:75:1c:a8:b5:64:37:29:7f:18:36:78:63: c5:b2:d6:3a:44:91:80:f3:ff:aa:3e:d7:e3:22:9e: b9:db:85:29:7c:64:fb:6e:9e:30:32:6f:59:05:37: 08:c5:08:be:6a:2a:ed:f8:79:7f:83:2a:da:e4:98: b5:06:30:c8:40:f6:b7:9c:7f:cd:83:1f:53:6f:29: 23:5e:12:eb:e7:24:f7:8f:66:f3:5b:20:15:05:ab: 87:aa:9b:e3:93:48:2f:64:74:68:ad:5b:58:0d:ed: 71:94:d7:ee:86:83:14:f5:38:25:c0:e0:9a:85:65: ce:35:fd:66:d7:78:8a:f8:b7:3f:00:d8:78:72:33: c9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8B:84:E4:B2:A5:D8:83:48:EC:97:DD:91:23:57:31:F7:7B:DE:C8 X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:de:70:fc:f9:41:3a:52:a1:55:df:bf:02:90:50:8d:e5:2d: 6b:a5:3b:e6:d9:b0:11:f9:ba:f1:c8:3a:9a:e3:48:83:24:ed: 72:22:4b:f1:a6:93:3a:41:87:b8:38:7f:08:bd:1d:58:7f:8d: 96:a2:28:0f:c6:34:c2:34:3c:5b:d4:dd:56:e5:27:c0:66:30: 8f:7c:85:68:d8:a4:a0:3d:cf:4a:65:a8:c1:57:e9:15:65:09: d5:a7:b9:1b:59:5c:fc:20:c7:43:db:41:89:54:d6:d5:d8:ac: 38:6a:19:b0:43:1b:f7:c8:29:a8:49:ad:86:f1:34:16:ec:15: 90:4a:0e:f0:41:b6:6d:15:53:8f:51:e9:01:1d:ba:21:ac:6e: e7:db:49:d4:bf:95:f6:71:fa:77:6d:1c:b0:7c:1b:8a:a6:bc: 48:54:de:bc:40:34:ae:85:28:b0:4c:5b:e2:ee:54:70:02:b7: 02:5f:96:27:cd:8d:91:27:e3:77:9d:23:f9:ef:fc:ca:91:1c: 2b:0f:be:04:38:07:70:f5:a8:3a:96:0d:82:05:72:8b:9e:95: 30:72:70:54:8c:1f:e7:67:f5:34:e2:b9:59:cf:73:b4:a1:36: 42:de:b5:f9:d9:be:e3:ba:7f:fe:04:a5:fe:5b:6e:45:77:fe: fd:3c:b0:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjUxMjIwMTgxNzUxWhcNMjUxMjI3MTgxNzUxWjAYMRYwFAYD VQQDDA02OTQ2ZTg0Zi01YTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CgYof6uOKsKeqpc4P5+GPdjvOxn9/s3eqItyrVlze9ahAW+6gW8F7SWmIUk d37hAkLpf5e9uo9vRt+fY5TMZLv2Zt99b4b65LXOntVs4opTzxTScWxEv12Z5dpl 1BXBFnjo7WBLNPI8H2FbNihq7NhyMz9paRCwTg51HKi1ZDcpfxg2eGPFstY6RJGA 8/+qPtfjIp6524UpfGT7bp4wMm9ZBTcIxQi+airt+Hl/gyra5Ji1BjDIQPa3nH/N gx9TbykjXhLr5yT3j2bzWyAVBauHqpvjk0gvZHRorVtYDe1xlNfuhoMU9TglwOCa hWXONf1m13iK+Lc/ANh4cjPJzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeLhOSy pdiDSOyX3ZEjVzH3e97IMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm3nD8+UE6UqFV378CkFCN5S1rpTvm2bAR+brxyDqa40iDJO1yIkvx ppM6QYe4OH8IvR1Yf42WoigPxjTCNDxb1N1W5SfAZjCPfIVo2KSgPc9KZajBV+kV ZQnVp7kbWVz8IMdD20GJVNbV2Kw4ahmwQxv3yCmoSa2G8TQW7BWQSg7wQbZtFVOP UekBHbohrG7n20nUv5X2cfp3bRywfBuKprxIVN68QDSuhSiwTFvi7lRwArcCX5Yn zY2RJ+N3nSP57/zKkRwrD74EOAdw9ag6lg2CBXKLnpUwcnBUjB/nZ/U04rlZz3O0 oTZC3rX52b7jun/+BKX+W25Fd/79PLAV -----END CERTIFICATE-----Generated at Sun Dec 21 19:25:43 2025 by rpki-client