This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft File: q-SlyJP0_Kxy2WRGir563z5vyP4.mft (raw, json) Hash identifier: 7vR9PzskJ2IhliRTAy531jQ8BSPJLL4fG2BWp8Gw67Q= Subject key identifier: 83:F0:6A:E0:A2:91:83:DA:AC:6A:14:E6:82:29:8D:2B:F9:85:40:05 Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Certificate serial: 02D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft Manifest number: 02D1 Signing time: Tue 23 Dec 2025 00:22:09 +0000 Manifest this update: Tue 23 Dec 2025 00:22:08 +0000 Manifest next update: Tue 30 Dec 2025 00:22:08 +0000 Files and hashes: 1: q-SlyJP0_Kxy2WRGir563z5vyP4.crl (hash: 6Z+BBkDvPXhuC1esdZLfir1H/33Ah5eYYMB9o+9GK3w=) 2: 942BF3C013CA11ED983E350EC4F9AE02.roa (hash: tH7DpxrT1+e/Lt/+bByYZUzT2x8zTHDA1878fnsonMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 726 (0x2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91894BE, serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Validity Not Before: Dec 23 00:22:08 2025 GMT Not After : Dec 30 00:22:08 2025 GMT Subject: CN=6949e0b1-d104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:f5:3a:05:e7:3a:88:11:64:8e:d3:09:ff: 23:24:a2:a8:b1:88:74:94:a1:85:94:a0:32:30:86: db:f1:fc:f0:29:c6:52:f7:1f:f2:2a:77:c8:6e:14: 70:17:79:f9:4a:1c:70:60:39:56:46:80:61:ac:28: df:1d:cf:37:9c:d2:23:46:76:89:5c:fa:97:4f:de: 2a:18:ce:aa:cc:f3:58:c8:a4:7f:6c:94:69:03:9d: e6:9c:1c:20:c9:97:5f:67:18:8f:06:54:a5:da:9c: 7a:eb:f0:c9:5f:cb:6a:ea:f9:72:4b:33:71:b4:d8: df:ca:b5:ea:4a:c5:dd:3f:af:4c:08:a9:89:72:f1: 57:fa:62:36:8f:94:c0:7e:2e:57:01:64:13:65:a7: 95:41:9c:fe:eb:43:1f:66:92:f0:c7:ec:39:b7:80: aa:91:08:26:96:13:26:52:27:06:b1:8c:50:7e:3b: 70:ee:4b:ad:79:83:fc:51:db:e7:a2:c3:ef:30:6e: eb:5c:6b:5d:e8:40:a7:c2:84:47:a2:f6:dc:f4:1a: bb:12:38:0a:86:09:30:e6:47:f6:46:f9:ae:b9:35: 99:9b:87:bf:ef:6f:47:cb:36:81:44:48:c2:b6:32: 81:2d:b2:47:00:44:13:03:a0:81:fc:65:b9:a7:3e: c6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F0:6A:E0:A2:91:83:DA:AC:6A:14:E6:82:29:8D:2B:F9:85:40:05 X509v3 Authority Key Identifier: keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7f:9e:11:a5:4c:5b:72:50:9d:e6:78:98:8d:dd:a0:52:69: f3:23:bc:b7:a3:f7:15:56:27:93:b0:b7:eb:98:a3:1f:27:81: 5d:99:e4:b7:ec:5a:5b:fa:bb:31:27:25:39:06:e1:93:81:4d: 4d:9e:f6:3f:87:f3:fb:3c:83:9b:31:05:1f:e6:b5:3b:2c:c2: 13:db:91:17:c2:89:f9:2b:97:d1:82:0e:22:37:5f:6b:16:53: 9e:42:b0:4f:83:f9:b2:61:a8:75:4f:a1:c6:d5:35:3d:cb:ae: 89:56:23:4d:31:49:9e:81:df:22:97:1c:62:c4:ee:6f:b1:f9: 87:31:de:c4:8d:5f:f8:fd:10:95:7a:c9:0c:70:68:5a:0b:0c: 1e:ed:3e:df:0a:47:f2:87:11:df:43:85:00:95:b0:e7:2a:03: 5c:90:08:ed:83:1e:10:24:f1:32:a4:17:2a:5c:12:be:7e:43: 43:78:8b:f5:e3:54:04:40:19:51:05:d6:68:0a:4f:79:19:07: df:f2:90:f9:79:ff:32:aa:73:dc:92:40:a6:e5:a8:1e:69:7d: 87:50:5a:44:1e:81:3f:b3:28:fe:67:23:f6:43:d8:da:c6:33: 39:99:a1:3e:d0:df:d2:f1:cb:ac:3f:35:58:22:f5:33:b3:67: 25:79:30:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk0QkUxMTAvBgNVBAUTKEFCRTRBNUM4OTNGNEZDQUM3MkQ5NjQ0NjhBQkU3QURG M0U2RkM4RkUwHhcNMjUxMjIzMDAyMjA4WhcNMjUxMjMwMDAyMjA4WjAYMRYwFAYD VQQDDA02OTQ5ZTBiMS1kMTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf/1OgXnOogRZI7TCf8jJKKosYh0lKGFlKAyMIbb8fzwKcZS9x/yKnfIbhRw F3n5ShxwYDlWRoBhrCjfHc83nNIjRnaJXPqXT94qGM6qzPNYyKR/bJRpA53mnBwg yZdfZxiPBlSl2px66/DJX8tq6vlySzNxtNjfyrXqSsXdP69MCKmJcvFX+mI2j5TA fi5XAWQTZaeVQZz+60MfZpLwx+w5t4CqkQgmlhMmUicGsYxQfjtw7kuteYP8Udvn osPvMG7rXGtd6ECnwoRHovbc9Bq7EjgKhgkw5kf2RvmuuTWZm4e/729HyzaBREjC tjKBLbJHAEQTA6CB/GW5pz7GVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPwauCi kYParGoU5oIpjSv5hUAFMB8GA1UdIwQYMBaAFKvkpciT9PysctlkRoq+et8+b8j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTRCRS8wQjREMDI5QzEz QzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9LeHkyV1JHaXI1NjN6NXZ5 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtU2x5SlAwX0t4eTJXUkdpcjU2M3o1dnlQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTRCRS8wQjREMDI5QzEzQzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9L eHkyV1JHaXI1NjN6NXZ5UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALf54RpUxbclCd5niYjd2gUmnzI7y3o/cVVieTsLfrmKMfJ4FdmeS3 7Fpb+rsxJyU5BuGTgU1NnvY/h/P7PIObMQUf5rU7LMIT25EXwon5K5fRgg4iN19r FlOeQrBPg/myYah1T6HG1TU9y66JViNNMUmegd8ilxxixO5vsfmHMd7EjV/4/RCV eskMcGhaCwwe7T7fCkfyhxHfQ4UAlbDnKgNckAjtgx4QJPEypBcqXBK+fkNDeIv1 41QEQBlRBdZoCk95GQff8pD5ef8yqnPckkCm5ageaX2HUFpEHoE/syj+ZyP2Q9ja xjM5maE+0N/S8cusPzVYIvUzs2cleTCZ -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:38 2025 by rpki-client