This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft File: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json) Hash identifier: GLTpyD/8MKDtdV5HrHTx4IUhGe/FKHncR5BPzTVORZM= Subject key identifier: 4B:7B:97:D2:59:A3:4A:09:D0:84:4B:4F:F5:F4:83:B2:37:F2:CC:71 Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 Certificate issuer: /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft Manifest number: 01DF Signing time: Tue 23 Dec 2025 01:45:51 +0000 Manifest this update: Tue 23 Dec 2025 01:45:50 +0000 Manifest next update: Tue 30 Dec 2025 01:45:50 +0000 Files and hashes: 1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: 834vg7NPml+CRUUsrYnBOCRFDF8TX+hxSStONlkIg3Y=) 2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: Bs60NAJODIvyPbTdOei+RIwraizPMP8YmkDLpLSSqzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Validity Not Before: Dec 23 01:45:50 2025 GMT Not After : Dec 30 01:45:50 2025 GMT Subject: CN=6949f44f-ef3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:59:ae:f9:00:b6:da:cf:dd:42:04:39:0e:64: 56:66:cc:3a:07:f4:aa:de:11:37:88:7e:2a:25:c4: d1:32:d8:fa:4c:25:15:b6:26:92:6d:10:10:8a:57: d2:8e:7a:9c:10:13:a9:48:fc:14:4b:41:db:28:7f: 13:da:b6:b8:1c:37:29:80:4a:65:d6:c4:8b:46:17: 59:e1:48:f0:ae:95:55:d0:fd:22:71:52:64:f6:e8: f5:0c:9b:10:ca:4e:3a:b0:c4:3c:26:1d:5c:c1:e8: 20:1f:e2:a2:7d:ba:3a:0a:66:ed:ae:f4:db:c0:8e: 96:dd:77:d7:f8:fc:25:dd:ba:b2:79:18:05:04:86: 00:5c:b6:ca:73:bc:f7:61:09:ad:ae:dc:da:34:eb: 2f:01:8b:c1:7d:77:69:3f:bc:67:38:74:a3:e8:63: b6:df:53:fa:7b:8c:f3:b7:40:67:05:ac:ff:82:34: b0:63:20:e1:46:59:d0:61:73:77:48:d3:97:9c:99: 3c:a8:ef:1e:11:c8:d5:03:73:3b:67:e9:14:e9:ce: b0:4e:77:74:50:6e:ee:dc:9c:7a:bd:d4:7a:74:05: ae:4d:0f:6f:09:eb:57:52:01:c9:e7:cb:8f:4a:1a: 3a:c4:ec:0d:b5:70:09:20:b3:10:52:2b:e2:8c:97: ff:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7B:97:D2:59:A3:4A:09:D0:84:4B:4F:F5:F4:83:B2:37:F2:CC:71 X509v3 Authority Key Identifier: keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:67:60:a6:a9:ed:7d:7d:6a:68:44:9e:7b:b1:a6:41:2c:aa: da:cc:4d:91:11:09:28:22:d6:bf:26:c3:85:36:df:24:c9:1e: b4:cc:bb:7e:c0:35:8b:ff:00:19:31:b6:8b:c0:af:b0:c0:38: 25:36:d4:bb:31:bd:48:1f:88:ef:e5:81:a8:c9:c8:f9:7e:e2: 6f:b9:9e:27:af:97:e0:3b:30:e8:3f:f4:e5:45:ef:e8:24:e2: eb:ff:d9:06:2b:25:31:f8:aa:33:29:15:a6:4e:72:39:44:30: bf:a7:48:0a:31:78:71:65:58:70:0d:ac:9e:14:22:b1:5c:64: 69:94:6c:94:8b:ac:d9:29:60:cc:ba:ed:cb:a9:c4:c4:e0:ae: b9:f5:8b:d6:d1:b3:7b:e3:74:bf:92:5e:9e:a8:c6:89:af:79: 7a:48:82:06:d6:60:30:43:8c:9d:d9:79:98:12:d8:82:58:97: b5:a4:16:9a:56:91:4f:77:58:a9:c3:00:43:d3:ec:31:ea:1e: 07:cb:52:3b:3a:ef:75:ab:91:a4:bd:3d:e2:9a:07:0d:8a:61: 49:9e:6d:4e:14:c5:6d:27:4b:00:8f:fa:a0:7c:5b:60:b8:41: 2c:72:e6:bb:88:1e:6e:cc:0f:fd:5f:19:c0:ba:e5:ba:c2:5c: c3:17:9f:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxOTcxMTAvBgNVBAUTKEI3RkU2QTQyNERCNTY1MjYxQjQ3M0E3MTIzMUQ1OUUy MThEQzQ1MDQwHhcNMjUxMjIzMDE0NTUwWhcNMjUxMjMwMDE0NTUwWjAYMRYwFAYD VQQDDA02OTQ5ZjQ0Zi1lZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Vmu+QC22s/dQgQ5DmRWZsw6B/Sq3hE3iH4qJcTRMtj6TCUVtiaSbRAQilfS jnqcEBOpSPwUS0HbKH8T2ra4HDcpgEpl1sSLRhdZ4UjwrpVV0P0icVJk9uj1DJsQ yk46sMQ8Jh1cweggH+Kifbo6CmbtrvTbwI6W3XfX+Pwl3bqyeRgFBIYAXLbKc7z3 YQmtrtzaNOsvAYvBfXdpP7xnOHSj6GO231P6e4zzt0BnBaz/gjSwYyDhRlnQYXN3 SNOXnJk8qO8eEcjVA3M7Z+kU6c6wTnd0UG7u3Jx6vdR6dAWuTQ9vCetXUgHJ58uP Sho6xOwNtXAJILMQUivijJf//QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEt7l9JZ o0oJ0IRLT/X0g7I38sxxMB8GA1UdIwQYMBaAFLf+akJNtWUmG0c6cSMdWeIY3EUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTE5Ny80RjNDNzk4QTA2 OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpTWWJSenB4SXgxWjRoamNS UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfNXFRazIxWlNZYlJ6cHhJeDFaNGhqY1JRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTE5Ny80RjNDNzk4QTA2OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpT WWJSenB4SXgxWjRoamNSUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCZ2Cmqe19fWpoRJ57saZBLKrazE2REQkoIta/JsOFNt8kyR60zLt+ wDWL/wAZMbaLwK+wwDglNtS7Mb1IH4jv5YGoycj5fuJvuZ4nr5fgOzDoP/TlRe/o JOLr/9kGKyUx+KozKRWmTnI5RDC/p0gKMXhxZVhwDayeFCKxXGRplGyUi6zZKWDM uu3LqcTE4K659YvW0bN743S/kl6eqMaJr3l6SIIG1mAwQ4yd2XmYEtiCWJe1pBaa VpFPd1ipwwBD0+wx6h4Hy1I7Ou91q5GkvT3imgcNimFJnm1OFMVtJ0sAj/qgfFtg uEEscua7iB5uzA/9XxnAuuW6wlzDF592 -----END CERTIFICATE-----Generated at Wed Dec 24 21:23:54 2025 by rpki-client