This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json) Hash identifier: 6p4KdnRqEwHpcMLeXgPa68kcjCtht4qTuiWt7jUGUUU= Subject key identifier: 88:50:5F:51:E8:2F:FD:9E:99:D3:E2:98:B4:70:90:36:6F:00:AD:95 Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft Manifest number: 0198 Signing time: Fri 19 Dec 2025 03:00:46 +0000 Manifest this update: Fri 19 Dec 2025 03:00:46 +0000 Manifest next update: Fri 26 Dec 2025 03:00:46 +0000 Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: cj+E9pS2yJRPC1ac4wZIXYSUJaasGwdr4HFXA5qdwbo=) 2: C352565AC6E011EF87D90241C4F9AE02.roa (hash: mUqqXY0c6pz96Csa4vpgVVN0TcEzh2ALUeu6fy0AUoM=) 3: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: uACmpnSBSy2IF2u/5ZZ5RmpW3FYah3J395Q52mX87Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Validity Not Before: Dec 19 03:00:46 2025 GMT Not After : Dec 26 03:00:46 2025 GMT Subject: CN=6944bfde-280d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:f5:33:e1:ba:c7:f4:88:72:ec:11:d7:a6: 20:bb:5a:e2:ee:7a:bb:a8:0c:c9:26:49:86:43:e3: fc:8d:ea:ab:c9:64:36:6f:56:7c:7e:66:31:ad:28: d2:d9:17:17:f1:f4:ed:50:a3:10:b0:6f:7e:ef:8d: 5c:29:a6:33:25:e2:20:24:2c:c1:70:c4:ce:d9:76: 1d:da:12:ca:d1:0a:cb:d5:95:18:5c:4e:5c:ad:df: 90:60:ea:47:d1:59:05:b4:31:2d:7d:81:83:df:82: 42:fc:d1:60:e9:6a:e3:c8:64:3f:65:b6:d2:53:d9: 9b:4c:da:77:97:cd:97:7d:8b:e0:c1:c7:08:f1:55: 4f:5d:40:60:21:b6:24:fd:f8:6a:48:38:70:bf:dc: fa:81:d0:b2:a0:9c:4a:e7:4d:8f:e4:71:a0:8a:45: c0:9f:15:b2:28:3a:15:33:83:ad:7b:49:c7:ae:a6: b5:16:11:20:62:8a:80:85:7a:a7:1e:9f:26:67:f5: 29:00:95:c2:40:cc:8f:87:b6:9a:e6:03:42:27:92: 8e:9d:aa:c1:37:64:86:fa:59:c1:4d:40:b0:0f:d8: 46:f0:0b:fb:ee:fa:15:18:20:d8:7d:93:13:26:16: 39:09:6d:d7:5a:b2:e8:30:6f:f7:75:2f:b1:4a:51: 74:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:50:5F:51:E8:2F:FD:9E:99:D3:E2:98:B4:70:90:36:6F:00:AD:95 X509v3 Authority Key Identifier: keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5e:5a:2d:e7:80:0d:24:db:c5:3b:a8:05:d9:7d:a0:2f:64: eb:da:fa:dd:0e:ab:c2:06:64:0d:29:46:3f:8e:c2:2c:d6:7c: 70:34:b7:13:45:48:cd:62:bd:f9:7f:c7:f3:5c:33:63:f6:41: e3:d0:7c:09:34:bb:97:43:31:e4:e4:21:b4:c5:7d:8b:eb:22: fa:5e:8f:4b:c2:d1:d4:e7:88:6d:ab:6e:14:36:0c:2b:41:35: 51:77:d8:0b:25:81:03:f0:1d:69:e8:1f:7a:a2:ff:1d:81:57: 44:6d:02:df:fb:4b:10:38:35:dd:cd:23:04:cd:2c:48:00:13: 53:7d:5b:5f:57:1e:11:af:1e:c2:53:fe:e5:7b:eb:b8:0e:30: 9f:c1:01:67:6c:84:76:69:15:5c:79:9b:89:43:9b:c1:fc:f7: bf:9d:32:ae:89:54:ca:b2:64:10:c3:b1:66:71:3b:d2:c3:bf: 70:1c:f4:19:d8:2d:1d:55:22:aa:8e:16:2a:3b:69:3b:6e:8a: 81:cc:71:7c:f8:76:84:f4:57:e3:3c:d6:c4:6e:18:09:84:bf: 43:d1:2e:0b:2f:91:41:45:e5:8a:7a:90:34:ef:1b:55:23:26: 5d:20:cf:f0:0d:07:12:82:4e:b7:82:f0:59:93:25:19:af:3f: f1:c1:9a:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MkQxMTAvBgNVBAUTKEE4MUQwRDYxRjdCNzMwRERCNzQyQ0M0OEFERDg4QTA0 RDQ2RkQwMjQwHhcNMjUxMjE5MDMwMDQ2WhcNMjUxMjI2MDMwMDQ2WjAYMRYwFAYD VQQDDA02OTQ0YmZkZS0yODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkr1M+G6x/SIcuwR16Ygu1ri7nq7qAzJJkmGQ+P8jeqryWQ2b1Z8fmYxrSjS 2RcX8fTtUKMQsG9+741cKaYzJeIgJCzBcMTO2XYd2hLK0QrL1ZUYXE5crd+QYOpH 0VkFtDEtfYGD34JC/NFg6WrjyGQ/ZbbSU9mbTNp3l82XfYvgwccI8VVPXUBgIbYk /fhqSDhwv9z6gdCyoJxK502P5HGgikXAnxWyKDoVM4Ote0nHrqa1FhEgYoqAhXqn Hp8mZ/UpAJXCQMyPh7aa5gNCJ5KOnarBN2SG+lnBTUCwD9hG8Av77voVGCDYfZMT JhY5CW3XWrLoMG/3dS+xSlF0zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhQX1Ho L/2emdPimLRwkDZvAK2VMB8GA1UdIwQYMBaAFKgdDWH3tzDdt0LMSK3YigTUb9Ak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkyRC9DQzY3RDI1MkE0 QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01OMjNRc3hJcmRpS0JOUnYw Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTkyRC9DQzY3RDI1MkE0QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01O MjNRc3hJcmRpS0JOUnYwQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Xlot54ANJNvFO6gF2X2gL2Tr2vrdDqvCBmQNKUY/jsIs1nxwNLcT RUjNYr35f8fzXDNj9kHj0HwJNLuXQzHk5CG0xX2L6yL6Xo9LwtHU54htq24UNgwr QTVRd9gLJYED8B1p6B96ov8dgVdEbQLf+0sQODXdzSMEzSxIABNTfVtfVx4Rrx7C U/7le+u4DjCfwQFnbIR2aRVceZuJQ5vB/Pe/nTKuiVTKsmQQw7FmcTvSw79wHPQZ 2C0dVSKqjhYqO2k7boqBzHF8+HaE9FfjPNbEbhgJhL9D0S4LL5FBReWKepA07xtV IyZdIM/wDQcSgk63gvBZkyUZrz/xwZpj -----END CERTIFICATE-----Generated at Sat Dec 20 14:14:58 2025 by rpki-client