This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft File: qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json) Hash identifier: KAlccpwT0lbeHVdJtFknEzBFoRwWHG+FqATixlpsgg8= Subject key identifier: 41:B3:1E:54:3C:88:7C:F4:55:C7:47:40:AC:6F:56:1E:07:0E:E8:A9 Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD Certificate issuer: /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Certificate serial: 34EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft Manifest number: 34EF Signing time: Wed 24 Dec 2025 15:09:07 +0000 Manifest this update: Wed 24 Dec 2025 15:09:07 +0000 Manifest next update: Wed 31 Dec 2025 15:09:07 +0000 Files and hashes: 1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: /H9QMd4TvFu8TXhdMhk6KbZLK/ns0o2vzfbTt7+n3Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CACCA, serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Validity Not Before: Dec 24 15:09:07 2025 GMT Not After : Dec 31 15:09:07 2025 GMT Subject: CN=694c0213-1b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:db:5e:b6:1e:72:32:df:93:84:fc:73:58: 15:f3:c0:59:1c:29:5a:31:bb:3e:a3:99:22:6c:9c: 16:49:ea:b7:39:01:ff:e0:42:5a:15:2c:d0:b9:d4: 13:20:c3:20:c5:bc:bb:d7:eb:c6:9e:90:31:39:7a: 54:da:4b:be:fb:29:99:9a:93:39:aa:eb:08:9a:7b: ae:32:aa:33:b4:19:fb:e3:3f:d9:a1:8f:22:ea:bc: fa:b9:dc:e9:34:91:32:4c:d3:e0:11:f4:45:1d:04: 2c:48:6a:b1:84:8d:27:16:40:d8:18:0d:0c:7f:19: e1:fa:f5:d3:8a:4e:d2:07:ac:0b:1e:4a:99:d2:a1: 43:54:84:f1:06:e9:60:0c:32:75:4d:9e:99:99:56: c6:7d:c9:12:77:8c:a8:b9:be:4d:08:c4:01:fa:90: 6a:b9:88:a0:94:56:13:81:97:62:d1:a5:96:9b:f6: 18:82:c5:7c:a4:03:39:bd:f4:4e:0b:47:d5:c7:90: 3b:b5:59:bd:53:83:97:a6:c8:35:c6:50:99:77:28: 65:46:8a:3d:8d:d3:48:f9:d6:24:ca:12:29:79:18: c9:ec:11:ca:81:33:a8:3a:fd:56:56:4d:95:50:04: 85:ad:2c:61:de:e5:76:33:ec:e0:6e:eb:d0:c3:35: bd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B3:1E:54:3C:88:7C:F4:55:C7:47:40:AC:6F:56:1E:07:0E:E8:A9 X509v3 Authority Key Identifier: keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:e8:98:40:13:31:04:2f:67:75:21:87:fa:4b:87:aa:d2:54: 0c:c2:ac:55:8d:64:98:74:e7:c8:e8:b4:c9:05:22:f8:75:a9: c2:f8:0b:d7:80:c8:55:b5:cb:af:3a:18:56:84:f8:aa:af:d7: a7:c3:37:9b:d5:d7:68:da:b6:4e:88:ec:b6:a6:32:4a:d7:e1: 28:8e:49:f9:89:6f:11:21:b6:4c:47:84:44:85:d7:f1:74:6e: 6d:d8:d2:2d:31:7e:03:50:ea:c7:6c:79:7f:a7:7d:46:33:39: 6f:84:78:3b:28:af:0c:da:49:d8:e4:d1:dc:fe:79:c9:f9:b8: 39:5c:4d:28:ee:7f:99:c7:e8:e8:0f:d3:cd:48:ec:80:6a:75: b9:ff:15:3a:60:5b:92:2e:b6:21:52:07:ea:82:0f:b9:69:44: 51:df:e1:97:c3:a3:95:bc:9a:1f:09:77:b8:d7:f4:82:c8:08: 28:00:b0:ab:8f:f9:2f:81:ec:6c:94:d5:4d:78:c4:10:4a:84: e8:95:76:50:3a:a5:1c:30:1b:bf:6c:56:25:b6:91:da:02:59: b4:37:68:63:df:f3:19:7d:db:d4:93:1c:1d:44:ad:85:24:12: c1:04:a0:25:ba:3b:fd:53:46:6f:1c:6b:0d:f7:76:93:84:e0: da:74:28:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FDQ0ExMTAvBgNVBAUTKEE5OUY2Njk4NjkyNzIwMTE1NDk2Q0I0NTk3MDJDNDNB REM0OEQ2QUQwHhcNMjUxMjI0MTUwOTA3WhcNMjUxMjMxMTUwOTA3WjAYMRYwFAYD VQQDDA02OTRjMDIxMy0xYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGLbXrYecjLfk4T8c1gV88BZHClaMbs+o5kibJwWSeq3OQH/4EJaFSzQudQT IMMgxby71+vGnpAxOXpU2ku++ymZmpM5qusImnuuMqoztBn74z/ZoY8i6rz6udzp NJEyTNPgEfRFHQQsSGqxhI0nFkDYGA0Mfxnh+vXTik7SB6wLHkqZ0qFDVITxBulg DDJ1TZ6ZmVbGfckSd4youb5NCMQB+pBquYiglFYTgZdi0aWWm/YYgsV8pAM5vfRO C0fVx5A7tVm9U4OXpsg1xlCZdyhlRoo9jdNI+dYkyhIpeRjJ7BHKgTOoOv1WVk2V UASFrSxh3uV2M+zgbuvQwzW9xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGzHlQ8 iHz0VcdHQKxvVh4HDuipMB8GA1UdIwQYMBaAFKmfZphpJyARVJbLRZcCxDrcSNat MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUNDQS82MDg2RDc4MjFE QTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklCRlVsc3RGbHdMRU90eEkx cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaOW1tR2tuSUJGVWxzdEZsd0xFT3R4STFxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUNDQS82MDg2RDc4MjFEQTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklC RlVsc3RGbHdMRU90eEkxcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl6JhAEzEEL2d1IYf6S4eq0lQMwqxVjWSYdOfI6LTJBSL4danC+AvX gMhVtcuvOhhWhPiqr9enwzeb1ddo2rZOiOy2pjJK1+Eojkn5iW8RIbZMR4REhdfx dG5t2NItMX4DUOrHbHl/p31GMzlvhHg7KK8M2knY5NHc/nnJ+bg5XE0o7n+Zx+jo D9PNSOyAanW5/xU6YFuSLrYhUgfqgg+5aURR3+GXw6OVvJofCXe41/SCyAgoALCr j/kvgexslNVNeMQQSoTolXZQOqUcMBu/bFYltpHaAlm0N2hj3/MZfdvUkxwdRK2F JBLBBKAlujv9U0ZvHGsN93aThODadCjd -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:15 2025 by rpki-client