This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft File: Q7wDqZcxeefuI0ayjnTeET9jNWw.mft (raw, json) Hash identifier: WHd8pHE/wRQMvdyEukJuQjR8QktGKL+sS27FAz3Opvw= Subject key identifier: 24:43:78:BD:E6:3F:2A:22:D5:C2:7E:06:E1:84:E6:9D:B8:2F:08:7C Authority key identifier: 43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C Certificate issuer: /CN=A91A15B3/serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft Manifest number: 3B Signing time: Tue 23 Dec 2025 06:19:12 +0000 Manifest this update: Tue 23 Dec 2025 06:19:12 +0000 Manifest next update: Tue 30 Dec 2025 06:19:12 +0000 Files and hashes: 1: Q7wDqZcxeefuI0ayjnTeET9jNWw.crl (hash: JPlvx1qGv1IxU0alE3NlPaePWnt5jYIFIeIZSQUh+R0=) 2: A95853C684AE11F0BC9BFE85C4F9AE02.roa (hash: Crg6eEA+ImfPHspcxe55nFPiMJ47NKQMZB7ytChE440=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A15B3, serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C Validity Not Before: Dec 23 06:19:12 2025 GMT Not After : Dec 30 06:19:12 2025 GMT Subject: CN=694a3460-bd1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c7:4b:6c:0a:4f:f6:a5:0f:3c:66:bf:4a:47: 35:46:a2:7a:b9:90:61:82:4c:33:b2:3c:dd:97:f1: d5:09:ff:4f:0f:33:9d:11:ee:0d:b3:35:df:c5:53: d4:95:53:51:b5:cf:01:3f:26:1a:04:14:35:ab:21: bb:00:ea:7f:30:88:29:54:4d:5a:d7:36:86:49:70: 48:ee:4f:ab:a8:da:18:05:a9:16:65:44:2b:f1:c7: 9e:8f:3e:d4:66:21:9b:ef:0f:53:87:0d:b3:d1:7e: e8:a4:4e:27:6e:88:79:a5:71:2c:2f:5d:d8:cb:17: ee:e2:3d:fa:cb:da:14:9a:f2:d3:b8:1e:c3:88:a1: b7:1e:df:34:db:e5:17:c3:06:27:b4:78:24:1c:d0: 11:d6:3c:99:e1:63:f8:f4:f0:c5:9c:76:a6:99:d4: 28:5f:4d:5c:da:15:17:f4:13:23:3c:cc:90:85:96: 56:95:a6:a3:a9:16:6e:ac:c8:cd:af:f5:d5:fa:48: e0:47:0a:67:19:de:27:11:fc:4e:13:38:4b:77:15: 74:41:85:36:ee:19:da:a3:fe:c5:93:51:37:7c:73: 1a:dd:bd:90:9e:6f:fa:cb:bd:c3:bf:a4:ed:b6:84: 8f:36:28:6e:f6:23:2f:1f:6b:4d:fe:f5:b7:ff:0c: 85:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:43:78:BD:E6:3F:2A:22:D5:C2:7E:06:E1:84:E6:9D:B8:2F:08:7C X509v3 Authority Key Identifier: keyid:43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:3d:e6:20:b1:de:b0:7c:4b:26:1f:d1:83:f3:f5:4c:05:10: 5b:a5:63:37:6b:06:cc:16:06:47:cb:00:8c:94:f0:18:85:6b: 9e:b4:c8:c6:53:59:8f:f7:a7:d0:21:6e:08:8a:e6:de:22:1f: 77:4a:b2:d4:c5:3e:dc:27:26:fc:83:f8:3a:96:e3:8a:4c:b9: 42:37:a9:33:d4:e0:4e:46:7f:fd:81:ab:0f:9f:7c:e2:5d:29: 37:d3:ab:c6:e6:c8:1e:8f:9f:7a:e6:44:7d:cd:3a:ff:5b:cc: ec:b0:0c:db:3f:c0:0a:80:9d:cf:d8:1d:4b:bd:78:10:b4:55: c2:32:63:82:21:5f:ad:bc:27:32:eb:22:2d:12:22:af:64:1a: 10:b1:78:89:a1:60:c6:72:a4:86:3e:8f:14:ac:50:1e:14:92: 95:be:e8:fa:ec:e5:a9:78:bc:a5:4b:a6:58:ed:78:f1:0e:9e: 83:bc:2f:f2:bf:34:c0:18:28:5e:de:a7:8e:2c:f0:af:8d:1d: e3:9e:bc:f6:7e:29:45:16:c4:13:d4:83:25:4b:e8:57:f8:f4: f3:b9:25:83:35:fe:6a:9a:8d:ad:f0:ff:5e:e8:17:de:7d:6b: 54:86:b8:f2:bd:5f:ec:c2:2b:dc:8f:f9:e9:7f:8b:c1:24:36: b0:2d:cc:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTVCMzExMC8GA1UEBRMoNDNCQzAzQTk5NzMxNzlFN0VFMjM0NkIyOEU3NERFMTEz RjYzMzU2QzAeFw0yNTEyMjMwNjE5MTJaFw0yNTEyMzAwNjE5MTJaMBgxFjAUBgNV BAMMDTY5NGEzNDYwLWJkMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCax0tsCk/2pQ88Zr9KRzVGonq5kGGCTDOyPN2X8dUJ/08PM50R7g2zNd/FU9SV U1G1zwE/JhoEFDWrIbsA6n8wiClUTVrXNoZJcEjuT6uo2hgFqRZlRCvxx56PPtRm IZvvD1OHDbPRfuikTiduiHmlcSwvXdjLF+7iPfrL2hSa8tO4HsOIobce3zTb5RfD Bie0eCQc0BHWPJnhY/j08MWcdqaZ1ChfTVzaFRf0EyM8zJCFllaVpqOpFm6syM2v 9dX6SOBHCmcZ3icR/E4TOEt3FXRBhTbuGdqj/sWTUTd8cxrdvZCeb/rLvcO/pO22 hI82KG72Iy8fa03+9bf/DIUPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJEN4veY/ KiLVwn4G4YTmnbgvCHwwHwYDVR0jBBgwFoAUQ7wDqZcxeefuI0ayjnTeET9jNWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExNUIzL0Y3QjI0ODhFODRB RDExRjBBRkU4OTc4MEM0RjlBRTAyL1E3d0RxWmN4ZWVmdUkwYXlqblRlRVQ5ak5X dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUTd3RHFaY3hlZWZ1STBheWpuVGVFVDlqTld3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx NUIzL0Y3QjI0ODhFODRBRDExRjBBRkU4OTc4MEM0RjlBRTAyL1E3d0RxWmN4ZWVm dUkwYXlqblRlRVQ5ak5Xdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKY95iCx3rB8SyYf0YPz9UwFEFulYzdrBswWBkfLAIyU8BiFa560yMZT WY/3p9AhbgiK5t4iH3dKstTFPtwnJvyD+DqW44pMuUI3qTPU4E5Gf/2Bqw+ffOJd KTfTq8bmyB6Pn3rmRH3NOv9bzOywDNs/wAqAnc/YHUu9eBC0VcIyY4IhX628JzLr Ii0SIq9kGhCxeImhYMZypIY+jxSsUB4UkpW+6Prs5al4vKVLpljtePEOnoO8L/K/ NMAYKF7ep44s8K+NHeOevPZ+KUUWxBPUgyVL6Ff49PO5JYM1/mqaja3w/17oF959 a1SGuPK9X+zCK9yP+el/i8EkNrAtzGM= -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:23 2025 by rpki-client