This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft File: _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json) Hash identifier: 51OJZOoS01QltnbEsp8wqoSZJi2aRRtvVIdbxcNpYOo= Subject key identifier: 85:F8:67:FB:1E:8F:FD:2C:3D:64:98:E0:B5:BF:62:86:63:19:4C:62 Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft Manifest number: 011F Signing time: Wed 17 Dec 2025 04:20:14 +0000 Manifest this update: Wed 17 Dec 2025 04:20:14 +0000 Manifest next update: Wed 24 Dec 2025 04:20:14 +0000 Files and hashes: 1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: XjiGgytQBmfbuw2hAiALggamAYJpDR26635jdUf3LaM=) 2: C06D45B6961611F0870D4413C4F9AE02.roa (hash: w0+vj4aVz0K4Becg/iBGdIuc8dYR3B+infU6zn+iFnc=) 3: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: SrRGCeTkPcXvi63UKXsEnuqePLRhHVKqBX2soL9amKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 04:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F Validity Not Before: Dec 17 04:20:14 2025 GMT Not After : Dec 24 04:20:14 2025 GMT Subject: CN=69422f7e-da8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ca:53:59:13:62:ab:90:0e:47:5f:5b:5c:59: 8a:3d:51:f1:8a:59:da:0f:ed:49:55:d8:45:49:5f: 3e:ed:8a:03:0e:34:3f:f9:61:79:03:cf:41:23:5f: 40:fe:29:4b:4c:fc:9d:57:3e:48:4b:57:6e:cc:58: 9a:9c:2d:ca:ac:7e:a4:22:86:21:6d:4f:05:0a:3d: 01:97:48:a9:8d:79:7e:19:77:d9:2f:42:40:81:c4: a6:79:be:a2:e6:01:a7:95:6f:66:1a:c3:c0:98:59: 26:02:ea:ef:1b:c7:9f:e7:01:df:1b:1f:da:90:6b: 51:a2:8a:87:74:df:7f:90:f7:ff:3a:83:3a:00:57: b7:e5:34:68:28:1c:26:a3:b0:00:06:14:97:28:0b: 4c:49:e0:54:61:9b:34:24:2f:4c:35:ce:7c:a8:41: ad:b3:c5:a2:bb:11:0a:ae:eb:9e:9f:96:00:75:1e: 14:70:94:76:fd:3f:1a:a0:1c:80:eb:c1:b4:bc:0d: 96:b6:37:d2:fb:a7:f9:43:14:ab:be:1a:10:cb:b7: 4d:56:a3:2f:22:32:06:8c:e0:0e:9f:74:60:7c:60: 84:32:e8:47:1d:a7:27:be:45:cf:ef:2c:04:35:d2: 19:38:5a:25:24:38:b9:4e:12:81:92:e9:da:18:57: a1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F8:67:FB:1E:8F:FD:2C:3D:64:98:E0:B5:BF:62:86:63:19:4C:62 X509v3 Authority Key Identifier: keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:7a:2b:94:90:4f:95:88:fe:12:c0:cc:c2:82:56:75:87:35: 30:1a:ec:58:89:06:d9:9a:17:83:ac:85:da:43:3d:d0:bd:72: f0:69:2c:b2:a0:1b:b7:f7:e8:c8:1a:ac:c0:01:c6:08:b8:29: 47:a7:df:fc:28:95:35:4f:38:ae:ac:1c:f7:b6:52:4d:ca:c2: f7:b0:50:5d:45:ce:0d:c4:af:32:27:d3:77:03:a9:c3:b5:07: e1:4d:d5:32:87:8c:42:4f:0e:c5:4f:c5:43:7d:fe:7e:4d:65: 13:32:c6:92:00:2f:61:81:e0:b8:7c:43:eb:e4:c4:7b:d9:c6: b2:9d:45:14:95:53:b2:95:bc:ad:e1:1e:06:5c:b9:b0:22:a8: 7a:22:36:06:24:b6:52:a3:e1:19:12:69:37:2f:be:8c:61:ac: 83:cc:bc:ee:51:65:12:e1:19:84:4a:7c:5a:d3:92:a4:99:78: f5:17:68:c9:92:25:0d:df:cf:03:32:0f:fd:10:e1:91:5f:28: f4:fa:08:4f:97:f2:61:31:85:84:66:f2:0f:72:ee:c8:ae:a1: af:cd:64:09:05:27:fc:28:81:b4:e1:3c:96:6a:6c:94:b7:27: c0:89:95:87:93:d9:3f:50:38:f2:8f:44:11:43:50:94:37:9e: 46:37:a9:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzREMxMTAvBgNVBAUTKEZFQUJBRDkyMzVBRUYxNzAyM0NEQ0ZCMTYxOTAyNkYz Q0VEQjJDN0YwHhcNMjUxMjE3MDQyMDE0WhcNMjUxMjI0MDQyMDE0WjAYMRYwFAYD VQQDDA02OTQyMmY3ZS1kYThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8pTWRNiq5AOR19bXFmKPVHxilnaD+1JVdhFSV8+7YoDDjQ/+WF5A89BI19A /ilLTPydVz5IS1duzFianC3KrH6kIoYhbU8FCj0Bl0ipjXl+GXfZL0JAgcSmeb6i 5gGnlW9mGsPAmFkmAurvG8ef5wHfGx/akGtRooqHdN9/kPf/OoM6AFe35TRoKBwm o7AABhSXKAtMSeBUYZs0JC9MNc58qEGts8WiuxEKruuen5YAdR4UcJR2/T8aoByA 68G0vA2WtjfS+6f5QxSrvhoQy7dNVqMvIjIGjOAOn3RgfGCEMuhHHacnvkXP7ywE NdIZOFolJDi5ThKBkunaGFeh7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIX4Z/se j/0sPWSY4LW/YoZjGUxiMB8GA1UdIwQYMBaAFP6rrZI1rvFwI83PsWGQJvPO2yx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy85N0RGN0ExMjMw NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThYQWp6Yy14WVpBbTg4N2JM SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19xdXRrald1OFhBanpjLXhZWkFtODg3YkxIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy85N0RGN0ExMjMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThY QWp6Yy14WVpBbTg4N2JMSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVeiuUkE+ViP4SwMzCglZ1hzUwGuxYiQbZmheDrIXaQz3QvXLwaSyy oBu39+jIGqzAAcYIuClHp9/8KJU1TziurBz3tlJNysL3sFBdRc4NxK8yJ9N3A6nD tQfhTdUyh4xCTw7FT8VDff5+TWUTMsaSAC9hgeC4fEPr5MR72caynUUUlVOylbyt 4R4GXLmwIqh6IjYGJLZSo+EZEmk3L76MYayDzLzuUWUS4RmESnxa05KkmXj1F2jJ kiUN388DMg/9EOGRXyj0+ghPl/JhMYWEZvIPcu7IrqGvzWQJBSf8KIG04TyWamyU tyfAiZWHk9k/UDjyj0QRQ1CUN55GN6mD -----END CERTIFICATE-----Generated at Thu Dec 18 06:09:24 2025 by rpki-client