This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft File: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft (raw, json) Hash identifier: AMETwYbCnNyGXsDWbTsQK1xfA/itIeAFnEPaEp7/m78= Subject key identifier: 40:F8:AF:08:4A:DE:FD:1F:A1:8B:3A:D6:51:8C:FD:8E:E8:0B:55:D7 Authority key identifier: D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 Certificate issuer: /CN=A91CB6E8/serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft Manifest number: 23 Signing time: Tue 23 Dec 2025 06:34:44 +0000 Manifest this update: Tue 23 Dec 2025 06:34:44 +0000 Manifest next update: Tue 30 Dec 2025 06:34:44 +0000 Files and hashes: 1: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl (hash: e6G78wSm66aOEr1B2W0ZNKxiMg3J0qfKXifb/sDzzJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Validity Not Before: Dec 23 06:34:44 2025 GMT Not After : Dec 30 06:34:44 2025 GMT Subject: CN=694a3804-97a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:19:2a:61:f8:b8:e8:cb:dd:b6:4a:ad:c9:dd: db:f3:5a:69:96:0f:64:86:7b:2c:95:e5:cb:6a:4b: 3e:c6:66:8e:e6:f4:47:fd:1a:89:94:9e:c3:7b:8c: 84:a3:2d:1a:9f:01:8b:74:17:5a:38:c2:77:f1:3d: 78:c5:df:19:83:90:7a:5d:99:00:a8:27:c7:5c:89: 80:27:6d:5d:ba:21:dc:bf:c2:90:94:70:5e:ab:5c: 00:fc:66:da:90:4a:f8:94:ff:1b:b3:e2:fb:12:2f: f0:35:1d:f6:51:28:d4:6e:92:83:4c:d1:00:6d:58: 94:a0:8a:9e:b9:96:7b:05:87:06:e0:64:9a:8b:5c: a0:94:0e:d8:0b:f7:88:5f:9f:ac:15:b5:c9:92:b1: 47:c6:ee:36:a4:f8:3a:e1:a6:3f:38:75:73:3d:be: c7:4c:28:0f:c1:dd:97:c8:cf:65:5e:fc:34:5d:73: 96:e3:6d:4d:05:fe:13:49:ce:1a:23:1a:9a:8d:86: f5:8c:aa:aa:38:09:a5:a1:5c:45:93:e2:49:11:16: 23:6b:48:51:5c:48:e6:3e:ae:72:85:e3:57:21:38: 15:e2:0d:21:fe:77:62:89:d6:df:62:69:98:a9:5b: d7:99:a9:8c:0a:ae:ae:2d:c5:4d:f0:a1:eb:56:56: ba:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F8:AF:08:4A:DE:FD:1F:A1:8B:3A:D6:51:8C:FD:8E:E8:0B:55:D7 X509v3 Authority Key Identifier: keyid:D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:e7:7c:cf:bd:74:99:b3:fe:b6:23:62:a4:88:d1:7a:34:c8: 24:23:e1:a9:55:4d:ab:cf:20:e2:ef:a4:39:cf:98:a6:da:36: 2a:eb:80:ad:3d:a9:23:d0:41:39:f2:44:cc:b7:01:88:22:c4: e4:d4:ea:aa:a6:06:f5:9d:ae:e8:14:8f:3a:9d:c9:fb:a2:d1: 0d:90:88:7d:53:25:42:e5:ca:fc:09:e2:c7:9f:88:9f:54:c4: e0:c8:cd:5f:42:c5:63:ea:23:f1:a0:cd:83:14:96:70:bb:c7: e6:cc:f5:aa:9a:4e:6b:fa:58:7b:f7:da:a7:06:b5:d1:0f:cb: f2:44:4c:b3:2d:a2:f8:cd:ba:28:24:e9:ec:1c:f9:82:3e:76: 39:6f:1a:26:80:d6:8a:b5:d0:be:df:0f:98:92:08:8b:c1:b8: 6d:91:62:9c:38:86:4d:47:1a:3f:97:a2:6b:54:ae:04:ef:01: 48:9b:80:aa:b2:5a:0f:a2:46:0e:62:14:c8:1c:76:3a:4e:d0: 6c:5f:c7:5b:2c:15:ba:32:54:aa:47:39:26:da:34:de:4a:da: 84:1f:5f:6b:0a:c7:31:b9:cd:01:67:f7:fc:8d:fb:41:5e:5d: f1:d6:eb:40:fd:f7:bf:17:dc:2f:ce:3d:87:37:bf:9f:86:c9: 17:90:f2:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoRDUwODdFQjcxRkI4MTJGMTAwMkZGODg0QjJGOUQ1NkUz QkRENENGMjAeFw0yNTEyMjMwNjM0NDRaFw0yNTEyMzAwNjM0NDRaMBgxFjAUBgNV BAMMDTY5NGEzODA0LTk3YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuGSph+Ljoy922Sq3J3dvzWmmWD2SGeyyV5ctqSz7GZo7m9Ef9GomUnsN7jISj LRqfAYt0F1o4wnfxPXjF3xmDkHpdmQCoJ8dciYAnbV26Idy/wpCUcF6rXAD8ZtqQ SviU/xuz4vsSL/A1HfZRKNRukoNM0QBtWJSgip65lnsFhwbgZJqLXKCUDtgL94hf n6wVtcmSsUfG7jak+Drhpj84dXM9vsdMKA/B3ZfIz2Ve/DRdc5bjbU0F/hNJzhoj GpqNhvWMqqo4CaWhXEWT4kkRFiNrSFFcSOY+rnKF41chOBXiDSH+d2KJ1t9iaZip W9eZqYwKrq4txU3woetWVro3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQPivCEre /R+hizrWUYz9jugLVdcwHwYDVR0jBBgwFoAU1Qh+tx+4EvEAL/iEsvnVbjvdTPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4LzMyRTM0REVFQUUy QjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZFQUxfaUVzdm5WYmp2ZFRQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMVFoLXR4LTRFdkVBTF9pRXN2blZianZkVFBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4LzMyRTM0REVFQUUyQjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZF QUxfaUVzdm5WYmp2ZFRQSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAADnfM+9dJmz/rYjYqSI0Xo0yCQj4alVTavPIOLvpDnPmKbaNirrgK09 qSPQQTnyRMy3AYgixOTU6qqmBvWdrugUjzqdyfui0Q2QiH1TJULlyvwJ4sefiJ9U xODIzV9CxWPqI/GgzYMUlnC7x+bM9aqaTmv6WHv32qcGtdEPy/JETLMtovjNuigk 6ewc+YI+djlvGiaA1oq10L7fD5iSCIvBuG2RYpw4hk1HGj+XomtUrgTvAUibgKqy Wg+iRg5iFMgcdjpO0Gxfx1ssFboyVKpHOSbaNN5K2oQfX2sKxzG5zQFn9/yN+0Fe XfHW60D9978X3C/OPYc3v5+GyReQ8pk= -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:15 2025 by rpki-client