This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json) Hash identifier: dLo/7ReU73IIIiPfXkiWKX2w6G8uQJOtPbVtbSV+BnE= Subject key identifier: E9:FE:CD:3B:4A:79:4E:47:96:33:18:87:B5:B9:7A:3A:5B:99:DB:3A Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft Manifest number: 028C Signing time: Fri 19 Dec 2025 00:46:40 +0000 Manifest this update: Fri 19 Dec 2025 00:46:39 +0000 Manifest next update: Fri 26 Dec 2025 00:46:39 +0000 Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: Q23eurBsRsscfS1iS/+Q8quMDq474b+7UA4XrT58AOc=) 2: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: 7cBmRSUB3GK5yJL7yaxAGg0XDgWGErxNw0g36JGOJzQ=) 3: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: uhIrsP1ipJFX3Ct1IhnIwZmCjEIkpTywt0iwOfj/NzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Validity Not Before: Dec 19 00:46:39 2025 GMT Not After : Dec 26 00:46:39 2025 GMT Subject: CN=6944a06f-06c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:02:b9:40:ad:23:78:33:59:55:ba:7b:2f: f5:d3:af:15:f2:b4:3c:84:6f:b2:1d:5e:5b:e1:0c: 7b:b4:88:87:de:a6:70:b5:96:c7:da:80:51:fb:ae: 8e:5a:60:5c:a3:e2:9b:08:51:1d:69:21:38:1d:5b: e8:e3:11:14:ee:2c:84:98:d7:ad:9f:71:b1:80:ec: 13:b2:91:8a:29:ac:ae:e3:31:e8:87:43:58:d0:1e: 61:bc:ca:c1:3c:62:b7:00:8a:dc:57:02:94:a8:5d: 0e:fe:81:ee:22:19:5f:cb:7e:0c:a1:ea:c4:05:af: 96:ac:c6:57:c2:00:3d:11:a9:42:83:c7:00:8d:d4: dc:cb:dd:9f:54:59:9c:07:6a:5c:b0:9e:e1:62:a7: dc:56:2b:39:36:3e:59:57:5b:db:3f:95:2a:6d:77: f5:c3:27:6f:b7:d8:77:b8:3b:9a:ea:fe:b7:7c:1f: 44:61:39:fe:ee:e3:55:9a:cd:dc:a3:9c:a0:b6:02: 77:f0:ab:14:af:cb:6c:77:9d:b4:cc:91:ce:03:79: fe:7d:0b:c4:c3:0c:13:72:58:b5:8e:76:5e:b3:c9: 08:59:18:c5:a5:3a:69:f2:54:41:bb:7e:5d:69:5c: 3d:55:7b:30:fc:14:15:60:ed:58:cf:cb:37:ea:14: 64:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FE:CD:3B:4A:79:4E:47:96:33:18:87:B5:B9:7A:3A:5B:99:DB:3A X509v3 Authority Key Identifier: keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:93:23:c0:4f:1d:83:f5:88:21:55:ea:1c:ba:00:21:76:9a: b0:83:f7:e2:f1:1f:bf:1e:5e:dd:5b:2e:96:56:09:b0:7c:93: 2e:96:f6:71:40:c7:14:df:70:cb:ef:7f:5e:a8:87:6e:69:1a: 94:ad:dd:87:f3:b8:2d:7a:48:94:4f:91:b2:cd:b4:11:15:6f: 87:12:0f:07:8f:fe:2a:24:c2:3f:1f:19:58:b3:78:72:02:54: 42:d9:5f:f9:94:cb:aa:be:95:a8:62:8b:b6:ee:73:dc:21:b0: 3c:eb:1e:27:b8:e1:8f:1c:fc:e1:93:b8:7e:2d:ee:90:98:0a: c6:0b:e6:f5:d7:a1:58:23:a6:c8:0d:5e:fd:3d:fd:5e:1f:bf: 4b:f7:06:01:f0:08:f0:4e:34:99:c1:37:b3:70:62:85:75:8a: c7:7f:b0:a4:c2:0a:b9:dd:2b:dd:a0:71:88:7f:34:92:e5:37: 54:5c:9c:c3:2d:68:17:b6:eb:cd:8d:46:39:cb:08:49:9b:5d: dc:50:9e:48:5c:bc:5e:25:95:db:c4:47:59:05:51:92:3d:53: b5:f4:32:31:68:a6:d4:ef:29:0a:72:90:06:28:24:17:da:e4: 68:59:1f:7c:2f:ff:25:70:bc:03:ff:4d:b4:94:8e:a4:40:78: 36:22:58:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RDAxMTAvBgNVBAUTKEFFQTZERkIzNjRBMkIzQjU5MjdGMDA3QTRFODI0RjMy QzQwOEU1QzgwHhcNMjUxMjE5MDA0NjM5WhcNMjUxMjI2MDA0NjM5WjAYMRYwFAYD VQQDDA02OTQ0YTA2Zi0wNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2YCuUCtI3gzWVW6ey/1068V8rQ8hG+yHV5b4Qx7tIiH3qZwtZbH2oBR+66O WmBco+KbCFEdaSE4HVvo4xEU7iyEmNetn3GxgOwTspGKKayu4zHoh0NY0B5hvMrB PGK3AIrcVwKUqF0O/oHuIhlfy34MoerEBa+WrMZXwgA9EalCg8cAjdTcy92fVFmc B2pcsJ7hYqfcVis5Nj5ZV1vbP5UqbXf1wydvt9h3uDua6v63fB9EYTn+7uNVms3c o5ygtgJ38KsUr8tsd520zJHOA3n+fQvEwwwTcli1jnZes8kIWRjFpTpp8lRBu35d aVw9VXsw/BQVYO1Yz8s36hRkEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOn+zTtK eU5HljMYh7W5ejpbmds6MB8GA1UdIwQYMBaAFK6m37NkorO1kn8Aek6CTzLECOXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdEMC9CODlGQTNDNjMw MzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3V1Nmd0I2VG9KUE1zUUk1 Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JxYmZzMlNpczdXU2Z3QjZUb0pQTXNRSTVjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdEMC9CODlGQTNDNjMwMzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3 V1Nmd0I2VG9KUE1zUUk1Y2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVkyPATx2D9YghVeocugAhdpqwg/fi8R+/Hl7dWy6WVgmwfJMulvZx QMcU33DL739eqIduaRqUrd2H87gtekiUT5GyzbQRFW+HEg8Hj/4qJMI/HxlYs3hy AlRC2V/5lMuqvpWoYou27nPcIbA86x4nuOGPHPzhk7h+Le6QmArGC+b116FYI6bI DV79Pf1eH79L9wYB8AjwTjSZwTezcGKFdYrHf7Ckwgq53SvdoHGIfzSS5TdUXJzD LWgXtuvNjUY5ywhJm13cUJ5IXLxeJZXbxEdZBVGSPVO19DIxaKbU7ykKcpAGKCQX 2uRoWR98L/8lcLwD/020lI6kQHg2IlgH -----END CERTIFICATE-----Generated at Fri Dec 19 12:03:34 2025 by rpki-client