This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft File: qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft (raw, json) Hash identifier: qTenQzgAyXQxfVbZBW7sgN38LCqwl62A/moc/sQvaVI= Subject key identifier: 9E:2A:C6:58:2F:16:12:54:BC:C5:0C:96:02:C2:16:1B:A6:25:6F:08 Authority key identifier: AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29 Certificate issuer: /CN=A91C0BE1/serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229 Certificate serial: 065F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft Manifest number: 065A Signing time: Mon 22 Dec 2025 21:48:52 +0000 Manifest this update: Mon 22 Dec 2025 21:48:52 +0000 Manifest next update: Mon 29 Dec 2025 21:48:52 +0000 Files and hashes: 1: qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl (hash: xQG4CPocoKATar50yrKQPVBQ5gDHBztkfm5wvcte3Ms=) 2: 0C3EAFF6F84111EC926CBF53C4F9AE02.roa (hash: QP4syOi96y5XvL9Sdw2J+adgOyFXDCa3foh8bqHg19c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BE1, serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229 Validity Not Before: Dec 22 21:48:52 2025 GMT Not After : Dec 29 21:48:52 2025 GMT Subject: CN=6949bcc4-9228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ce:62:3e:97:93:3f:ca:33:d0:39:e7:33:63: e6:dd:8e:a2:d0:91:9a:fd:0a:88:8c:c8:e6:2f:b0: 73:0b:78:c7:4f:ba:7f:1d:ea:72:29:42:ce:fa:94: 8c:9f:7a:9d:ed:0b:2e:fe:31:0c:36:cd:cd:41:6e: a2:b0:fb:00:1f:97:9f:7b:ce:be:6d:1a:b1:48:cf: 23:51:ad:86:1c:da:17:f1:d4:d4:33:e6:73:71:c9: 5c:d7:8d:0f:f6:e4:ce:01:fc:f4:fc:60:fd:69:24: d7:76:ee:16:a5:c7:14:58:c3:3b:0b:53:d4:3e:8d: 0e:48:ae:86:68:e9:b8:29:0b:23:26:25:62:09:0b: 3b:82:ec:72:d6:fe:14:24:9b:5d:ee:88:85:d4:53: 40:96:00:9f:3d:78:85:4c:f1:49:04:9b:19:9b:5e: 93:4a:2a:92:96:1c:89:4f:13:0a:4f:4a:a5:b3:85: ff:00:27:23:29:ad:ee:dc:75:e6:81:e9:9d:83:7b: 70:c5:b9:19:e3:08:83:cf:9b:12:2e:68:92:87:54: ae:37:f9:1b:db:f5:01:5b:76:b9:2f:3d:3d:d5:78: b0:9e:e7:7a:6d:b2:a2:0a:3c:70:7f:05:ca:f5:44: 3d:49:ef:7a:40:68:78:a2:d8:3d:e7:e7:41:71:5d: 90:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2A:C6:58:2F:16:12:54:BC:C5:0C:96:02:C2:16:1B:A6:25:6F:08 X509v3 Authority Key Identifier: keyid:AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:98:92:ec:e1:d5:ca:94:3d:38:cb:30:29:21:90:0b:4a:70: 1d:b5:74:d9:12:5f:24:82:54:91:9c:8e:f3:49:a2:eb:cf:b6: 09:44:18:5e:a8:66:0e:6f:01:10:ea:ca:9b:7b:11:84:1e:d9: e0:c6:7e:b5:33:e0:28:c8:9d:a1:b2:ba:09:18:d6:7f:12:d6: 3c:70:1d:52:11:4b:77:ef:3b:3d:d1:c0:00:64:48:3e:16:30: c8:c7:9f:78:5f:57:b9:43:44:ee:de:f0:a0:84:ed:4b:84:fd: 4e:8f:36:83:30:1f:2d:2b:e8:6e:e6:70:f4:5d:85:de:33:8a: 9f:28:e3:39:1d:22:60:4f:b8:94:ac:19:8a:fc:74:bc:c4:91: 2e:81:75:f7:79:c4:39:30:48:9d:5e:39:6c:d0:89:9d:28:72: 42:ea:9d:9a:1c:7e:43:e5:96:1f:38:49:19:22:ae:e7:93:39: 0e:70:f0:fb:86:1f:a5:d8:fb:d7:50:60:20:42:7e:42:07:e6: c2:9b:47:3f:f8:61:6e:1b:4d:3c:e3:4b:00:6f:0b:f8:d4:3f: 89:31:d3:5c:b6:69:82:85:32:92:50:8c:39:5a:51:e0:be:79: b9:29:d2:d7:b7:86:d3:72:2f:b0:0c:01:c2:ad:b8:44:e3:3b: 65:2c:c7:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCRTExMTAvBgNVBAUTKEFBMjFCNjkwQzFENjNDQkY0NDFBQTNCRDExN0VEOEI3 ODY4ODIyMjkwHhcNMjUxMjIyMjE0ODUyWhcNMjUxMjI5MjE0ODUyWjAYMRYwFAYD VQQDDA02OTQ5YmNjNC05MjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArc5iPpeTP8oz0DnnM2Pm3Y6i0JGa/QqIjMjmL7BzC3jHT7p/HepyKULO+pSM n3qd7Qsu/jEMNs3NQW6isPsAH5efe86+bRqxSM8jUa2GHNoX8dTUM+Zzcclc140P 9uTOAfz0/GD9aSTXdu4WpccUWMM7C1PUPo0OSK6GaOm4KQsjJiViCQs7guxy1v4U JJtd7oiF1FNAlgCfPXiFTPFJBJsZm16TSiqSlhyJTxMKT0qls4X/ACcjKa3u3HXm gemdg3twxbkZ4wiDz5sSLmiSh1SuN/kb2/UBW3a5Lz091Xiwnud6bbKiCjxwfwXK 9UQ9Se96QGh4otg95+dBcV2QhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4qxlgv FhJUvMUMlgLCFhumJW8IMB8GA1UdIwQYMBaAFKohtpDB1jy/RBqjvRF+2LeGiCIp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJFMS9FNDZGRjQ5MEFF MkIxMUVCOTU2MjdGODJDNEY5QUUwMi9xaUcya01IV1BMOUVHcU85RVg3WXQ0YUlJ aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FpRzJrTUhXUEw5RUdxTzlFWDdZdDRhSUlpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJFMS9FNDZGRjQ5MEFFMkIxMUVCOTU2MjdGODJDNEY5QUUwMi9xaUcya01IV1BM OUVHcU85RVg3WXQ0YUlJaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9mJLs4dXKlD04yzApIZALSnAdtXTZEl8kglSRnI7zSaLrz7YJRBhe qGYObwEQ6sqbexGEHtngxn61M+AoyJ2hsroJGNZ/EtY8cB1SEUt37zs90cAAZEg+ FjDIx594X1e5Q0Tu3vCghO1LhP1OjzaDMB8tK+hu5nD0XYXeM4qfKOM5HSJgT7iU rBmK/HS8xJEugXX3ecQ5MEidXjls0ImdKHJC6p2aHH5D5ZYfOEkZIq7nkzkOcPD7 hh+l2PvXUGAgQn5CB+bCm0c/+GFuG00840sAbwv41D+JMdNctmmChTKSUIw5WlHg vnm5KdLXt4bTci+wDAHCrbhE4ztlLMeU -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:55 2025 by rpki-client