This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft File: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft (raw, json) Hash identifier: GdWmeZZF9nPc57+qZN6b9DLQqPtfBFLWnZhxWGWbs5o= Subject key identifier: B3:82:EB:DF:1C:B7:20:3C:2A:EB:1C:F6:19:C4:A1:FE:75:39:FB:05 Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 Certificate issuer: /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft Manifest number: 72 Signing time: Tue 23 Dec 2025 05:50:45 +0000 Manifest this update: Tue 23 Dec 2025 05:50:45 +0000 Manifest next update: Tue 30 Dec 2025 05:50:45 +0000 Files and hashes: 1: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl (hash: NkdR7R395NFQ11r9GJ+IooaBRgwhmdzo3aC34DlYGdU=) 2: 35CA66BABC2111F0A08A6F79C4F9AE02.roa (hash: rpmrXdQJLd8mWrJCCVBclKAPg3Mu6Bj/cHb9ZSARUHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Validity Not Before: Dec 23 05:50:45 2025 GMT Not After : Dec 30 05:50:45 2025 GMT Subject: CN=694a2db5-ba8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4f:b1:d9:fc:aa:b6:be:70:38:02:f6:f0:2f: 11:4e:e0:bd:ba:5d:f0:7e:84:e5:f5:86:cf:26:a3: db:1d:4e:c0:4a:1c:77:55:f2:d0:1e:d1:dd:f6:e9: 3a:a8:79:5a:57:07:9c:43:5c:e2:aa:78:24:bc:90: a2:55:21:73:c6:78:72:b2:b9:75:3c:52:00:e1:38: fe:ab:f7:72:d0:9d:6f:42:41:88:41:45:02:4f:e7: 69:70:fc:1f:e7:70:6a:56:78:4e:18:49:20:8c:e8: 6c:6c:08:c5:71:f9:1a:6d:86:d7:f1:50:aa:9e:e4: 79:01:82:d1:f5:0c:ee:45:83:10:87:bf:55:52:2b: 1e:19:c6:5a:f3:ea:03:4c:20:08:04:53:9d:91:e0: 38:d8:51:88:1d:f8:e3:bb:79:00:61:a2:81:2a:f9: 11:e9:5d:8c:29:cc:fe:06:32:2e:79:b0:5b:24:96: a6:28:8f:22:5c:df:9f:7b:d3:39:0b:fa:78:82:9a: 1e:0d:73:af:77:fc:2e:07:ea:3c:e6:41:42:81:e4: 68:ca:6b:27:31:e7:89:4e:87:d3:e3:d3:7e:bf:1d: bd:08:44:91:e7:01:cf:51:61:c1:29:1c:86:34:79: c6:43:6e:06:a2:a6:23:45:ab:1c:69:8d:dc:c2:5b: 7d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:82:EB:DF:1C:B7:20:3C:2A:EB:1C:F6:19:C4:A1:FE:75:39:FB:05 X509v3 Authority Key Identifier: keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:b2:f2:e6:c5:af:e5:41:7c:0f:01:74:63:a8:c4:6e:24:43: df:5b:f8:6f:6f:9f:6d:0b:b8:77:48:8d:53:d5:e3:b9:e7:ca: e2:fa:35:e8:0c:14:ee:18:4b:8d:7f:75:96:8e:8c:d6:16:69: 13:5f:8f:97:64:fc:7f:3e:da:4a:5e:fc:2b:a3:92:d8:32:92: c8:a8:ed:f6:9a:16:7f:92:1d:8b:a2:c2:cb:98:51:5c:1c:7b: 9d:20:7d:5f:6e:3d:91:a9:25:cf:5a:9f:5c:77:6a:6c:2f:22: db:19:3b:7f:92:c7:9d:b1:60:51:0d:ce:07:6d:19:21:e1:93: 8f:86:ac:df:89:ce:5b:15:8b:76:63:e5:59:30:f3:69:63:b3: fb:4d:58:4e:3b:6b:fe:67:20:d0:83:d6:97:23:50:fb:e9:88: 11:d9:41:6a:aa:9d:31:6d:35:63:60:e7:3c:e5:f1:6f:6d:7f: 11:f1:2b:8c:87:38:cc:28:31:59:e3:78:77:2e:ef:85:26:f9: 44:5b:6b:93:6e:81:1c:28:d3:30:55:43:59:c5:fd:64:1a:a7: 28:0f:5c:39:0e:0d:16:cc:0c:17:dc:ab:2e:b1:ac:a2:f3:d5: 54:a3:b5:7b:44:51:43:c0:e0:7c:77:d7:47:92:0b:3e:1b:da: 3c:f7:5a:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0U1QjExMC8GA1UEBRMoQUI1M0Q5OTI4MTAyQjkxOURCN0M1NDY1QzhERDVGRjI2 Njc0NDNCMzAeFw0yNTEyMjMwNTUwNDVaFw0yNTEyMzAwNTUwNDVaMBgxFjAUBgNV BAMMDTY5NGEyZGI1LWJhOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYT7HZ/Kq2vnA4AvbwLxFO4L26XfB+hOX1hs8mo9sdTsBKHHdV8tAe0d326Tqo eVpXB5xDXOKqeCS8kKJVIXPGeHKyuXU8UgDhOP6r93LQnW9CQYhBRQJP52lw/B/n cGpWeE4YSSCM6GxsCMVx+RpthtfxUKqe5HkBgtH1DO5FgxCHv1VSKx4Zxlrz6gNM IAgEU52R4DjYUYgd+OO7eQBhooEq+RHpXYwpzP4GMi55sFsklqYojyJc35970zkL +niCmh4Nc693/C4H6jzmQUKB5GjKaycx54lOh9Pj036/Hb0IRJHnAc9RYcEpHIY0 ecZDbgaipiNFqxxpjdzCW32VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs4Lr3xy3 IDwq6xz2GcSh/nU5+wUwHwYDVR0jBBgwFoAUq1PZkoECuRnbfFRlyN1f8mZ0Q7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RTVCL0Q4NEU3QkYyM0M2 RTExRjA5RDc2QTI0REM0RjlBRTAyL3ExUFprb0VDdVJuYmZGUmx5TjFmOG1aMFE3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcTFQWmtvRUN1Um5iZkZSbHlOMWY4bVowUTdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RTVCL0Q4NEU3QkYyM0M2RTExRjA5RDc2QTI0REM0RjlBRTAyL3ExUFprb0VDdVJu YmZGUmx5TjFmOG1aMFE3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOGy8ubFr+VBfA8BdGOoxG4kQ99b+G9vn20LuHdIjVPV47nnyuL6NegM FO4YS41/dZaOjNYWaRNfj5dk/H8+2kpe/Cujktgyksio7faaFn+SHYuiwsuYUVwc e50gfV9uPZGpJc9an1x3amwvItsZO3+Sx52xYFENzgdtGSHhk4+GrN+JzlsVi3Zj 5Vkw82ljs/tNWE47a/5nINCD1pcjUPvpiBHZQWqqnTFtNWNg5zzl8W9tfxHxK4yH OMwoMVnjeHcu74Um+URba5NugRwo0zBVQ1nF/WQapygPXDkODRbMDBfcqy6xrKLz 1VSjtXtEUUPA4Hx310eSCz4b2jz3WqQ= -----END CERTIFICATE-----Generated at Wed Dec 24 22:57:01 2025 by rpki-client