This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft File: mqzM8QlZesZbyPegUCo-pK4cXxk.mft (raw, json) Hash identifier: /5LB3TOUxSW3+mCPfx6vLJzu4EBssQvIdLHROR00zTw= Subject key identifier: 14:D9:EB:A8:71:51:AF:D2:55:14:17:A8:B6:19:70:FF:83:20:F0:F8 Authority key identifier: 9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19 Certificate issuer: /CN=A91232CA/serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft Manifest number: 64 Signing time: Tue 23 Dec 2025 05:54:34 +0000 Manifest this update: Tue 23 Dec 2025 05:54:34 +0000 Manifest next update: Tue 30 Dec 2025 05:54:34 +0000 Files and hashes: 1: mqzM8QlZesZbyPegUCo-pK4cXxk.crl (hash: hSUNzUSiMJj5917MX7uwXYaJHCzchu/IlGyfqQxfaFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91232CA, serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19 Validity Not Before: Dec 23 05:54:34 2025 GMT Not After : Dec 30 05:54:34 2025 GMT Subject: CN=694a2e9a-8f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d1:ac:83:e0:89:23:80:32:d6:51:ff:d1:2e: 65:8e:12:d8:54:b3:a0:e1:71:70:2a:1d:82:a7:52: d0:c1:a1:83:15:74:44:c3:f0:6a:64:8c:ec:fc:36: d6:b2:75:be:51:27:e6:2e:e0:8a:37:f7:7a:92:29: 58:81:2b:6a:42:41:79:97:2f:49:2d:3b:62:2a:b6: 14:fc:8d:08:86:cf:cf:e4:c9:c8:0a:83:ff:bc:63: ce:c8:f2:61:3c:fa:ba:3b:83:ad:9b:b0:16:8b:1e: 4b:d1:1a:fb:18:0b:5a:fa:cd:c7:e9:25:8f:d4:6a: 66:d0:5c:78:38:a4:30:0a:07:96:6a:14:52:af:31: a9:25:42:02:81:56:14:38:08:74:25:4f:0d:c7:a7: 94:33:a5:63:9c:4e:3f:75:d2:82:62:cf:82:f6:19: 5c:0b:99:ad:70:20:6f:37:c6:c7:16:92:d6:88:38: 39:4e:bf:71:90:a0:b4:01:6b:b3:d1:5a:bc:ed:ae: 24:b7:ca:a8:ed:f2:2a:71:bb:df:0d:81:41:e2:6a: 95:24:cd:57:d9:8e:74:de:b7:b6:6c:4c:98:a9:46: 48:d5:a4:d6:d4:65:9e:c7:82:e2:9d:1f:79:37:e8: 74:46:5e:14:f7:18:c5:07:b8:f6:be:8e:5f:c8:03: 6f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D9:EB:A8:71:51:AF:D2:55:14:17:A8:B6:19:70:FF:83:20:F0:F8 X509v3 Authority Key Identifier: keyid:9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c7:8e:6f:e5:06:a6:93:c4:b8:52:11:3e:48:72:08:4d:d0: 45:37:c6:7e:9f:4d:e1:23:28:95:2f:4d:bc:79:32:e2:97:9a: 5a:72:8e:42:ea:c3:1e:80:81:b9:a8:02:58:76:ff:ed:59:48: b3:85:e4:80:69:6e:e1:29:9a:27:5f:1b:57:91:58:cf:7c:f0: 6a:e3:4a:86:35:87:ab:21:6f:61:65:8d:e2:be:07:2e:db:fe: 02:47:75:85:11:d4:a3:c0:d5:86:3a:3d:5b:d4:8b:e1:53:4b: 97:51:88:1e:e7:51:ee:bc:c1:7f:f7:03:9e:d6:4b:f0:4d:c4: a0:1f:6d:5d:92:e4:8a:be:dc:5c:72:8c:88:88:16:a8:2c:cb: 75:6a:15:35:2d:81:0e:79:7c:fe:31:31:b8:55:6b:8d:36:ab: 5a:89:c6:ed:a2:54:63:47:59:5d:2a:f7:eb:8f:c0:0b:36:56: 28:af:63:07:25:76:e2:dc:d6:1d:cf:a2:01:89:6e:7f:dd:30: b7:c8:98:74:10:8f:1c:0b:a4:78:47:f6:10:ee:be:75:46:b9: 39:ab:0a:c3:01:1d:04:e8:68:f4:8d:27:94:87:25:8d:34:47: 91:3d:ae:88:95:ff:2e:ed:11:b7:68:dc:c9:7d:ce:b6:c0:f3: 1d:7b:ec:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzJDQTExMC8GA1UEBRMoOUFBQ0NDRjEwOTU5N0FDNjVCQzhGN0EwNTAyQTNFQTRB RTFDNUYxOTAeFw0yNTEyMjMwNTU0MzRaFw0yNTEyMzAwNTU0MzRaMBgxFjAUBgNV BAMMDTY5NGEyZTlhLThmNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS0ayD4IkjgDLWUf/RLmWOEthUs6DhcXAqHYKnUtDBoYMVdETD8GpkjOz8Ntay db5RJ+Yu4Io393qSKViBK2pCQXmXL0ktO2IqthT8jQiGz8/kycgKg/+8Y87I8mE8 +ro7g62bsBaLHkvRGvsYC1r6zcfpJY/UambQXHg4pDAKB5ZqFFKvMaklQgKBVhQ4 CHQlTw3Hp5QzpWOcTj910oJiz4L2GVwLma1wIG83xscWktaIODlOv3GQoLQBa7PR WrztriS3yqjt8ipxu98NgUHiapUkzVfZjnTet7ZsTJipRkjVpNbUZZ7HguKdH3k3 6HRGXhT3GMUHuPa+jl/IA29NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFNnrqHFR r9JVFBeothlw/4Mg8PgwHwYDVR0jBBgwFoAUmqzM8QlZesZbyPegUCo+pK4cXxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMkNBLzgxNThFRDJFNDY4 NjExRjBBOTc0Rjc0MEM0RjlBRTAyL21xek04UWxaZXNaYnlQZWdVQ28tcEs0Y1h4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXF6TThRbFplc1pieVBlZ1VDby1wSzRjWHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MkNBLzgxNThFRDJFNDY4NjExRjBBOTc0Rjc0MEM0RjlBRTAyL21xek04UWxaZXNa YnlQZWdVQ28tcEs0Y1h4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIvHjm/lBqaTxLhSET5IcghN0EU3xn6fTeEjKJUvTbx5MuKXmlpyjkLq wx6AgbmoAlh2/+1ZSLOF5IBpbuEpmidfG1eRWM988GrjSoY1h6shb2FljeK+By7b /gJHdYUR1KPA1YY6PVvUi+FTS5dRiB7nUe68wX/3A57WS/BNxKAfbV2S5Iq+3Fxy jIiIFqgsy3VqFTUtgQ55fP4xMbhVa402q1qJxu2iVGNHWV0q9+uPwAs2ViivYwcl duLc1h3PogGJbn/dMLfImHQQjxwLpHhH9hDuvnVGuTmrCsMBHQToaPSNJ5SHJY00 R5E9roiV/y7tEbdo3Ml9zrbA8x177Hw= -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:23 2025 by rpki-client