This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft File: qfCsl7nBjDLiFpwBpJhsemwlX_4.mft (raw, json) Hash identifier: Tung1j7TDJI//5W3Oy0MKfFOMYnPWdeQciAc3GXOfMI= Subject key identifier: 99:B9:E3:B7:1F:8D:EF:C0:3F:F6:A2:F3:56:26:73:56:3B:86:75:47 Authority key identifier: A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE Certificate issuer: /CN=A91585F0/serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft Manifest number: 4B Signing time: Tue 09 Dec 2025 05:11:52 +0000 Manifest this update: Tue 09 Dec 2025 05:11:51 +0000 Manifest next update: Tue 16 Dec 2025 05:11:51 +0000 Files and hashes: 1: qfCsl7nBjDLiFpwBpJhsemwlX_4.crl (hash: BeiOhlaO/zJ/aBVhSUksHQIaQV+VlLcaPxtpJP1JfXA=) 2: C9479880646611F0B371D156C4F9AE02.roa (hash: ebNb1cqmZBUz7WL9tCF2PExl+FU65/gDmGjSUW9LYDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 05:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91585F0, serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE Validity Not Before: Dec 9 05:11:51 2025 GMT Not After : Dec 16 05:11:51 2025 GMT Subject: CN=6937af97-3acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:e2:3d:62:20:66:8e:df:f3:41:7a:06:ce: 49:b6:0f:81:e0:63:ae:7b:5a:1c:a5:45:a7:36:75: 65:59:44:9c:c1:50:2f:25:5e:66:a9:bd:1c:c2:10: 50:b5:3d:32:b1:f2:2c:c2:93:91:99:aa:a9:66:27: af:a2:17:e8:53:d2:03:5a:76:26:47:8b:bd:99:62: dd:e6:5d:eb:c3:89:f2:7f:0f:92:f0:24:d3:6a:42: 8d:4c:50:81:e0:b5:7d:5e:9c:88:39:d1:d2:6a:34: d3:cd:00:63:e3:0a:03:38:7c:19:fb:7c:ac:2c:d5: 0c:9b:fd:ab:ce:c9:a8:4b:e9:3f:fd:db:29:43:f2: e3:a4:56:b4:32:7a:70:8d:12:0f:a4:d6:93:bc:bf: c7:f2:8c:6a:de:d9:6f:d5:17:95:35:6c:f7:db:0b: f4:02:0e:cc:6c:ab:65:a0:f7:26:79:aa:ce:2f:db: a4:b5:6f:26:59:bd:60:78:7b:6b:41:e5:38:92:43: 01:fa:74:06:3b:50:e0:cb:c6:08:a4:cb:fc:88:09: 5c:9f:87:c9:51:1a:24:20:e8:26:1d:55:41:a8:89: 16:89:2e:4a:b6:ba:05:b5:19:c5:4f:77:3d:fd:1d: 18:ec:cc:90:fd:88:a9:a7:89:5e:5c:cc:de:4b:4f: 11:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B9:E3:B7:1F:8D:EF:C0:3F:F6:A2:F3:56:26:73:56:3B:86:75:47 X509v3 Authority Key Identifier: keyid:A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:65:72:b1:1d:03:b0:8e:4f:50:67:fd:b3:90:88:51:69:88: 3f:62:88:1d:32:8f:4a:b9:a7:68:8e:e0:49:99:86:78:df:55: 66:e2:08:0a:42:0e:d1:98:77:66:d4:2a:54:8d:1b:38:a2:e5: 72:4e:31:ee:85:a5:44:84:65:ad:13:7f:9c:17:a5:f3:ab:e5: 9a:b0:e6:8b:39:1f:c4:3c:08:a7:d5:01:f2:20:7f:32:c8:21: 78:4e:ae:19:d6:72:d6:a0:a7:e5:50:53:c0:1c:bb:5f:17:a0: d4:33:83:5f:b8:c7:2e:a1:5f:99:87:73:51:75:f5:74:b0:6c: 51:09:14:5f:15:f0:0d:7b:76:ad:db:b9:74:e9:5f:d2:16:59: 3b:55:9d:dd:08:84:d3:8d:39:08:62:1b:1e:44:33:2e:a1:99: 46:48:c2:5b:25:b2:0d:2b:73:09:32:a9:56:71:35:69:e0:08: f6:ef:83:11:2f:a1:01:d8:ee:7b:eb:99:0d:d8:22:a8:fe:ab: 71:cd:3d:7c:c4:38:04:b9:c6:c0:8b:39:c3:6c:d5:59:c4:b8: 93:25:e1:eb:e1:78:77:12:12:fd:40:15:98:2e:55:c3:bb:5b: f7:ef:94:bc:11:d7:16:58:89:99:0a:74:0b:2a:c0:7d:fa:d6: 90:19:33:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODVGMDExMC8GA1UEBRMoQTlGMEFDOTdCOUMxOEMzMkUyMTY5QzAxQTQ5ODZDN0E2 QzI1NUZGRTAeFw0yNTEyMDkwNTExNTFaFw0yNTEyMTYwNTExNTFaMBgxFjAUBgNV BAMTDTY5MzdhZjk3LTNhY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvteI9YiBmjt/zQXoGzkm2D4HgY657WhylRac2dWVZRJzBUC8lXmapvRzCEFC1 PTKx8izCk5GZqqlmJ6+iF+hT0gNadiZHi72ZYt3mXevDifJ/D5LwJNNqQo1MUIHg tX1enIg50dJqNNPNAGPjCgM4fBn7fKws1Qyb/avOyahL6T/92ylD8uOkVrQyenCN Eg+k1pO8v8fyjGre2W/VF5U1bPfbC/QCDsxsq2Wg9yZ5qs4v26S1byZZvWB4e2tB 5TiSQwH6dAY7UODLxgiky/yICVyfh8lRGiQg6CYdVUGoiRaJLkq2ugW1GcVPdz39 HRjszJD9iKmniV5czN5LTxGrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmbnjtx+N 78A/9qLzViZzVjuGdUcwHwYDVR0jBBgwFoAUqfCsl7nBjDLiFpwBpJhsemwlX/4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NUYwLzU2MzU2Q0Q0NjQw MDExRjBCMUExRDU3RUM0RjlBRTAyL3FmQ3NsN25CakRMaUZwd0JwSmhzZW13bFhf NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWZDc2w3bkJqRExpRnB3QnBKaHNlbXdsWF80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NUYwLzU2MzU2Q0Q0NjQwMDExRjBCMUExRDU3RUM0RjlBRTAyL3FmQ3NsN25CakRM aUZwd0JwSmhzZW13bFhfNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABxlcrEdA7COT1Bn/bOQiFFpiD9iiB0yj0q5p2iO4EmZhnjfVWbiCApC DtGYd2bUKlSNGzii5XJOMe6FpUSEZa0Tf5wXpfOr5Zqw5os5H8Q8CKfVAfIgfzLI IXhOrhnWctagp+VQU8Acu18XoNQzg1+4xy6hX5mHc1F19XSwbFEJFF8V8A17dq3b uXTpX9IWWTtVnd0IhNONOQhiGx5EMy6hmUZIwlslsg0rcwkyqVZxNWngCPbvgxEv oQHY7nvrmQ3YIqj+q3HNPXzEOAS5xsCLOcNs1VnEuJMl4evheHcSEv1AFZguVcO7 W/fvlLwR1xZYiZkKdAsqwH361pAZM5k= -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:05 2025 by rpki-client