This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json) Hash identifier: 2Jz08ymQJHsSCFd4mfv9Vk2bo5HIVb7+ECINHRhZF3g= Subject key identifier: F9:73:79:FC:0D:CC:C5:3C:59:48:5A:8E:D6:F3:53:24:84:9D:4E:69 Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234 Certificate serial: 1BFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft Manifest number: 1BE7 Signing time: Mon 22 Dec 2025 16:01:24 +0000 Manifest this update: Mon 22 Dec 2025 16:01:24 +0000 Manifest next update: Mon 29 Dec 2025 16:01:24 +0000 Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: 7S+4bjcvsILyTEc+dFoPE9ktwwrJPIIyG6JRtSonxUo=) 2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: d9C+rmMNQQZELmuy5aIPVlKeATtzTC5JJ8WoYiMXlHI=) 3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: V0J+K3DJnN+osBZ9dwTDUPh/HvfjgBzZSWLUoCMaCuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7166 (0x1bfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234 Validity Not Before: Dec 22 16:01:24 2025 GMT Not After : Dec 29 16:01:24 2025 GMT Subject: CN=69496b54-3a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:37:10:a7:93:b0:80:67:d5:61:c5:3d:a7:45: c3:2d:18:d3:dd:30:6e:52:31:4f:a7:e0:8a:b6:c5: 14:93:b8:50:00:45:6f:fd:02:29:d7:bb:af:d0:81: b9:bd:b4:94:cb:64:83:bb:09:4d:9c:19:fb:86:57: 48:00:f2:bb:3a:84:a6:c8:f2:91:dd:48:bd:5c:39: a7:41:fc:a6:fb:43:c9:df:45:28:f7:a7:d7:9d:d1: 5e:8d:8a:c4:86:df:14:84:94:83:4d:f2:74:02:31: dc:a2:af:81:83:7c:c5:ba:d5:d4:3b:c6:85:f4:c9: 99:4f:aa:26:66:9f:60:0a:db:41:b7:1e:43:57:40: c3:a2:8d:eb:f5:7e:c2:c6:b0:47:6b:3c:85:01:9e: 12:1d:53:6f:4f:da:c5:83:56:4d:78:b6:40:93:22: c0:49:81:f6:93:60:e1:a1:18:9b:d2:98:fe:a8:5c: 72:40:76:cd:66:c6:93:d2:92:80:d1:1d:31:f7:72: 90:dd:6c:ac:1b:0c:89:3a:64:ed:21:f1:09:05:18: ac:6e:9a:7d:e3:8c:be:4a:32:72:93:49:56:90:c6: cc:e6:33:70:3c:f8:1f:bb:66:3b:69:55:06:c6:54: 10:24:fb:38:71:1f:74:26:c1:e3:77:cc:87:cc:b2: 99:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:73:79:FC:0D:CC:C5:3C:59:48:5A:8E:D6:F3:53:24:84:9D:4E:69 X509v3 Authority Key Identifier: keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:07:91:04:c3:7d:b7:a8:26:ab:ec:92:ee:bf:d4:9a:96:de: 2a:76:e3:27:47:e3:24:55:30:69:f2:85:48:4b:30:1a:f0:a6: 53:8c:4f:77:f3:e7:a2:fb:75:0e:af:3d:53:51:98:86:88:e7: 30:20:87:c5:e8:8f:f6:7a:a5:75:a9:7d:ff:3b:ca:6a:33:43: 98:7d:ac:3e:df:68:7e:6a:7f:3d:42:72:69:85:c0:9d:90:d2: 81:4b:53:93:c8:20:ef:49:5f:90:28:b4:2f:5b:c4:a6:57:02: 55:ba:b5:d1:21:99:76:c4:31:4a:09:da:d7:0e:52:05:93:a7: 03:a2:c4:6e:41:e8:6e:1d:03:56:bf:d1:bc:29:ab:63:d1:c0: c2:b3:6f:3c:cc:79:b7:bf:8c:5b:75:6c:8d:a3:ee:35:6a:70: 64:59:6e:71:45:bb:5c:8c:35:02:6b:bf:fc:5f:13:be:72:1d: 78:b2:0e:a0:b8:88:86:17:b2:15:34:cb:85:2b:c4:c0:64:1c: 3e:54:e0:30:92:1c:67:47:a6:d2:1a:68:9e:75:4b:7c:cb:8f: d4:61:7e:9b:27:cc:e4:ea:1d:d1:f7:a2:ff:e2:57:01:a8:89: 0d:6b:3a:4a:d6:2e:7f:98:7f:08:ff:5f:45:5b:94:2e:75:7f: fb:1a:96:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3 OUQzMDUyMzQwHhcNMjUxMjIyMTYwMTI0WhcNMjUxMjI5MTYwMTI0WjAYMRYwFAYD VQQDDA02OTQ5NmI1NC0zYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjcQp5OwgGfVYcU9p0XDLRjT3TBuUjFPp+CKtsUUk7hQAEVv/QIp17uv0IG5 vbSUy2SDuwlNnBn7hldIAPK7OoSmyPKR3Ui9XDmnQfym+0PJ30Uo96fXndFejYrE ht8UhJSDTfJ0AjHcoq+Bg3zFutXUO8aF9MmZT6omZp9gCttBtx5DV0DDoo3r9X7C xrBHazyFAZ4SHVNvT9rFg1ZNeLZAkyLASYH2k2DhoRib0pj+qFxyQHbNZsaT0pKA 0R0x93KQ3WysGwyJOmTtIfEJBRisbpp944y+SjJyk0lWkMbM5jNwPPgfu2Y7aVUG xlQQJPs4cR90JsHjd8yHzLKZKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlzefwN zMU8WUhajtbzUySEnU5pMB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5 ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX ckZQRU03bGxoRzk1MHdValEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASB5EEw323qCar7JLuv9Salt4qduMnR+MkVTBp8oVISzAa8KZTjE93 8+ei+3UOrz1TUZiGiOcwIIfF6I/2eqV1qX3/O8pqM0OYfaw+32h+an89QnJphcCd kNKBS1OTyCDvSV+QKLQvW8SmVwJVurXRIZl2xDFKCdrXDlIFk6cDosRuQehuHQNW v9G8Katj0cDCs288zHm3v4xbdWyNo+41anBkWW5xRbtcjDUCa7/8XxO+ch14sg6g uIiGF7IVNMuFK8TAZBw+VOAwkhxnR6bSGmiedUt8y4/UYX6bJ8zk6h3R96L/4lcB qIkNazpK1i5/mH8I/19FW5QudX/7Gpb8 -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:40 2025 by rpki-client