This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft File: QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json) Hash identifier: lc85BZMDIvoGNWY/1xdQMn7TIVxfgcz12wg6IHIVH6Q= Subject key identifier: 1B:5D:A1:D9:5F:E6:2A:E4:54:B3:AF:59:5D:81:1D:69:D1:B7:FE:C6 Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF Certificate issuer: /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft Manifest number: 0894 Signing time: Wed 10 Dec 2025 19:34:10 +0000 Manifest this update: Wed 10 Dec 2025 19:34:09 +0000 Manifest next update: Wed 17 Dec 2025 19:34:09 +0000 Files and hashes: 1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: SFw0kf1oWgYKoB9/sXuDt4/3BoLASsSAfsDooM3hwjc=) 2: 4F6913406BBF11EFA2832A74C4F9AE02.roa (hash: dKNk5pPJbrzAnkXqkxI0ZuHUsGDU8sX1yqD52DpKuAQ=) 3: 4EA76BD26BBF11EFA2832A74C4F9AE02.roa (hash: 0ru7xYrLjnDIEAfDou0iidHCCux0ow/jB57Xp7tPDLw=) 4: 036D9582D09611F0AF11A347C4F9AE02.roa (hash: Ntwo+Fe7uong9zZ1PuG17FiWO3z9Eq8JWbvskTqlWWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 19:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Validity Not Before: Dec 10 19:34:09 2025 GMT Not After : Dec 17 19:34:09 2025 GMT Subject: CN=6939cb31-7049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:51:ba:51:3a:9b:8a:fc:c8:37:2e:19:eb: ae:51:da:b0:c9:9a:62:33:c8:76:de:5e:dc:af:f6: 65:ed:d4:24:8d:34:4e:d8:63:b3:d7:31:54:06:cb: c9:87:0c:85:aa:a8:17:59:9e:c0:61:af:50:13:99: 70:95:ca:75:40:60:57:15:45:85:de:98:6e:a3:96: 08:c4:01:45:ae:fa:d0:5e:ed:56:b9:1e:ca:5a:1d: d1:d3:7e:55:38:18:6f:16:78:d8:bc:ee:b0:74:59: 25:6b:81:1d:48:9b:17:9f:4b:7e:24:a7:61:6f:0c: 83:ee:86:76:21:36:bc:76:1f:bd:e7:fd:0e:dc:f5: 3f:98:f6:18:a4:3c:f3:00:2e:9d:56:24:c9:10:60: 26:31:72:ee:1d:9c:a3:b1:83:50:33:fb:56:c5:35: d2:14:6c:83:ce:e0:b1:7a:43:92:d5:bb:18:c6:4a: 0f:af:b0:cc:57:b1:44:d8:ea:e8:40:36:45:8f:ee: 12:0d:f0:28:05:f0:b9:1f:58:9f:48:02:d7:b5:91: 3f:57:28:e1:db:51:7b:1e:15:a0:ea:fb:68:40:32: ee:2e:cc:df:6c:a3:0f:40:da:c8:2f:45:ac:7f:71: 9a:81:a2:84:22:44:07:bd:82:85:22:e2:56:a3:1c: 04:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5D:A1:D9:5F:E6:2A:E4:54:B3:AF:59:5D:81:1D:69:D1:B7:FE:C6 X509v3 Authority Key Identifier: keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:49:00:ed:b6:df:94:06:08:9e:b2:97:49:ae:0a:6b:d1:17: d7:02:0c:5a:c3:ad:48:33:d6:71:6b:c3:cd:77:65:57:a1:d0: 74:74:14:68:2a:f2:33:34:bb:b6:72:15:71:2f:01:31:3c:80: b9:99:8c:81:ff:0e:12:17:ca:d2:44:fe:9e:54:66:ea:a1:b2: db:32:25:79:64:f5:19:b5:78:2e:c2:e2:75:87:e3:df:22:c5: 62:9e:d1:31:09:f6:20:0f:c4:86:6b:23:0f:f8:a1:fa:f4:5d: d1:29:75:08:39:8e:55:97:72:71:59:ef:1b:19:d5:50:5e:fe: 24:cd:55:52:c1:7f:12:3b:e9:57:cf:2d:59:16:4f:08:ab:bb: df:f9:ce:22:31:4b:13:8d:5c:ba:e8:d1:68:01:7f:79:ba:3b: a4:1b:7f:1c:9d:dc:8b:23:6d:0c:44:4c:79:08:d9:ff:8c:d1: 44:78:57:99:33:e4:de:e1:5a:0c:11:fe:bb:ba:0e:a4:bd:4f: c0:5b:94:84:25:84:84:ad:b3:6c:94:7f:4b:9a:9f:a3:3a:c7: 33:cb:3f:cc:e4:ee:5b:f1:1e:d3:aa:db:0f:48:9d:dc:b2:ed: 44:2d:76:af:f7:18:c2:5b:96:13:65:65:e0:ed:4f:29:af:f7: e4:ca:32:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDQyNkI2MjBDMDQwQzgzOTQ2QTRCNzU4NjQzNkVDQkQw RkM0NTQ2Q0YwHhcNMjUxMjEwMTkzNDA5WhcNMjUxMjE3MTkzNDA5WjAYMRYwFAYD VQQDEw02OTM5Y2IzMS03MDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+BRulE6m4r8yDcuGeuuUdqwyZpiM8h23l7cr/Zl7dQkjTRO2GOz1zFUBsvJ hwyFqqgXWZ7AYa9QE5lwlcp1QGBXFUWF3phuo5YIxAFFrvrQXu1WuR7KWh3R035V OBhvFnjYvO6wdFkla4EdSJsXn0t+JKdhbwyD7oZ2ITa8dh+95/0O3PU/mPYYpDzz AC6dViTJEGAmMXLuHZyjsYNQM/tWxTXSFGyDzuCxekOS1bsYxkoPr7DMV7FE2Oro QDZFj+4SDfAoBfC5H1ifSALXtZE/Vyjh21F7HhWg6vtoQDLuLszfbKMPQNrIL0Ws f3GagaKEIkQHvYKFIuJWoxwEDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtdodlf 5irkVLOvWV2BHWnRt/7GMB8GA1UdIwQYMBaAFEJrYgwEDIOUakt1hkNuy9D8RUbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi81MzE5MTA0NkRD MjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1UnFTM1dHUTI3TDBQeEZS czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtdGlEQVFNZzVScVMzV0dRMjdMMFB4RlJzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi81MzE5MTA0NkRDMjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1 UnFTM1dHUTI3TDBQeEZSczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVSQDttt+UBgiespdJrgpr0RfXAgxaw61IM9Zxa8PNd2VXodB0dBRo KvIzNLu2chVxLwExPIC5mYyB/w4SF8rSRP6eVGbqobLbMiV5ZPUZtXguwuJ1h+Pf IsVintExCfYgD8SGayMP+KH69F3RKXUIOY5Vl3JxWe8bGdVQXv4kzVVSwX8SO+lX zy1ZFk8Iq7vf+c4iMUsTjVy66NFoAX95ujukG38cndyLI20MREx5CNn/jNFEeFeZ M+Te4VoMEf67ug6kvU/AW5SEJYSErbNslH9Lmp+jOsczyz/M5O5b8R7TqtsPSJ3c su1ELXav9xjCW5YTZWXg7U8pr/fkyjJj -----END CERTIFICATE-----Generated at Fri Dec 12 13:03:04 2025 by rpki-client