This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft File: DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json) Hash identifier: wqoU90RtvVzpNuHnqpGeUxg9m45V2RRfJb8CltHrnvs= Subject key identifier: 2B:EB:8C:87:9F:1B:A8:C4:86:95:F5:5F:1F:B1:A3:FC:90:C9:DC:3F Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft Manifest number: FE Signing time: Tue 23 Dec 2025 04:15:08 +0000 Manifest this update: Tue 23 Dec 2025 04:15:08 +0000 Manifest next update: Tue 30 Dec 2025 04:15:08 +0000 Files and hashes: 1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: dgQ7Qm51esrQedrauukpVSJ0X2lp14L+I2QWKmgiHcY=) 2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: wnPWBmIvERZidNx6EbW5pekeL8Z2zXnUdVzGtoi292M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Validity Not Before: Dec 23 04:15:08 2025 GMT Not After : Dec 30 04:15:08 2025 GMT Subject: CN=694a174c-bb08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:d5:7a:e0:ce:21:f7:8b:c7:7b:1e:5e:b8: 1f:2d:ba:98:4e:40:e7:b2:b9:88:07:b6:06:6b:12: 10:b7:9e:4c:74:60:f0:4a:c6:00:d7:f6:d6:e8:1e: 72:f1:7b:35:e5:44:ce:e4:a0:a7:f3:0f:ef:44:40: e9:f2:78:f7:b4:a3:0c:07:94:73:32:0d:85:de:34: 1f:93:ef:42:c5:68:ff:fb:c8:89:9e:f0:30:f3:13: 30:8e:e9:02:82:2e:b2:02:02:ca:02:ba:b2:12:a7: 78:39:f3:af:e6:a3:03:00:42:80:68:59:6e:71:af: c6:5a:b9:d9:a2:c3:9b:00:de:70:0b:47:52:f5:c4: a9:6b:f9:d5:d0:a1:eb:f4:dd:24:81:59:68:ad:b2: 69:dc:f0:b5:e7:f2:64:e5:a3:db:e0:9a:0f:3b:55: 2f:fb:ac:cc:d5:0d:e6:2c:79:35:6c:62:fb:3b:48: f5:ba:8d:a7:a8:87:4e:e5:ae:8f:36:4d:01:f0:a7: 46:d3:45:a9:ad:dc:c4:0b:59:da:07:c7:dd:33:28: 8b:b1:61:6b:c2:61:08:6a:b4:b0:08:e1:3e:54:df: ba:f0:4e:44:7d:57:97:50:46:4b:28:74:9c:30:96: e2:a4:8d:17:16:95:e3:f1:ae:ed:cd:7f:db:12:90: bc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EB:8C:87:9F:1B:A8:C4:86:95:F5:5F:1F:B1:A3:FC:90:C9:DC:3F X509v3 Authority Key Identifier: keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:d2:3c:4a:7b:13:65:4d:3a:12:fd:d4:dd:c1:2c:4c:08:1e: 78:eb:00:94:34:59:11:29:27:27:17:fa:b7:98:d0:5a:50:5f: 33:21:e8:39:6b:f7:ff:15:71:58:4d:6c:e9:33:65:b4:5a:48: b8:7e:ee:5c:e0:ab:d5:ed:b3:42:62:69:3e:25:3d:a8:b4:31: 93:a9:6d:c8:8c:ec:df:32:c3:e6:79:6d:fc:54:06:0f:2b:40: 3e:5f:69:89:10:22:52:e7:0e:8a:02:6b:00:ff:ce:f0:44:4d: f7:60:a0:5d:c1:d5:ac:2c:71:0e:83:29:46:b1:98:f4:ad:29: a1:13:4d:83:09:1c:66:e9:8b:b4:7f:e3:02:7a:c7:d8:5b:61: 5e:5c:ae:21:57:2f:b6:1a:ea:be:47:56:33:73:57:64:6a:51: e1:d8:64:b8:44:7c:0c:61:c6:bd:76:b8:62:c1:d3:a8:9c:15: e5:97:54:da:ac:b1:80:4f:16:60:59:a5:c4:53:ff:e1:74:ea: 3e:37:5b:30:f2:0d:24:cd:70:7c:02:15:43:64:9d:f0:44:5c: c6:2c:62:a1:5a:53:df:2d:9d:36:54:87:31:6d:69:10:e1:b9: 92:6a:15:00:a6:cb:3b:a3:bf:44:d9:93:27:0c:40:57:fd:6e: 0e:14:5d:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NkExMTAvBgNVBAUTKDBDREQ1MDU4MzJFQThDOUE0RDIzQjEwNjM3MjAxRDc5 NDI5NTY0QzAwHhcNMjUxMjIzMDQxNTA4WhcNMjUxMjMwMDQxNTA4WjAYMRYwFAYD VQQDDA02OTRhMTc0Yy1iYjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPzVeuDOIfeLx3seXrgfLbqYTkDnsrmIB7YGaxIQt55MdGDwSsYA1/bW6B5y 8Xs15UTO5KCn8w/vREDp8nj3tKMMB5RzMg2F3jQfk+9CxWj/+8iJnvAw8xMwjukC gi6yAgLKArqyEqd4OfOv5qMDAEKAaFluca/GWrnZosObAN5wC0dS9cSpa/nV0KHr 9N0kgVlorbJp3PC15/Jk5aPb4JoPO1Uv+6zM1Q3mLHk1bGL7O0j1uo2nqIdO5a6P Nk0B8KdG00WprdzEC1naB8fdMyiLsWFrwmEIarSwCOE+VN+68E5EfVeXUEZLKHSc MJbipI0XFpXj8a7tzX/bEpC8XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvrjIef G6jEhpX1Xx+xo/yQydw/MB8GA1UdIwQYMBaAFAzdUFgy6oyaTSOxBjcgHXlClWTA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk2QS9ENEMxNjg4MjZB NkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpKcE5JN0VHTnlBZGVVS1Za TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROMVFXRExxakpwTkk3RUdOeUFkZVVLVlpNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk2QS9ENEMxNjg4MjZBNkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpK cE5JN0VHTnlBZGVVS1ZaTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw0jxKexNlTToS/dTdwSxMCB546wCUNFkRKScnF/q3mNBaUF8zIeg5 a/f/FXFYTWzpM2W0Wki4fu5c4KvV7bNCYmk+JT2otDGTqW3IjOzfMsPmeW38VAYP K0A+X2mJECJS5w6KAmsA/87wRE33YKBdwdWsLHEOgylGsZj0rSmhE02DCRxm6Yu0 f+MCesfYW2FeXK4hVy+2Guq+R1Yzc1dkalHh2GS4RHwMYca9drhiwdOonBXll1Ta rLGATxZgWaXEU//hdOo+N1sw8g0kzXB8AhVDZJ3wRFzGLGKhWlPfLZ02VIcxbWkQ 4bmSahUApss7o79E2ZMnDEBX/W4OFF0C -----END CERTIFICATE-----Generated at Wed Dec 24 19:30:23 2025 by rpki-client