This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft File: mCQhgadVSijnjBropzvieUUsy_Q.mft (raw, json) Hash identifier: gBloMm73w8OuOaF5NWJlRD6zWti22lW7q7NqDw8tGlk= Subject key identifier: 24:FD:54:EE:F6:46:CF:90:7F:0C:6B:77:C9:7C:3B:B3:E8:B3:D9:D9 Authority key identifier: 98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4 Certificate issuer: /CN=A91DEDC1/serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft Manifest number: 50 Signing time: Sun 07 Dec 2025 05:19:14 +0000 Manifest this update: Sun 07 Dec 2025 05:19:13 +0000 Manifest next update: Sun 14 Dec 2025 05:19:13 +0000 Files and hashes: 1: mCQhgadVSijnjBropzvieUUsy_Q.crl (hash: AI/KMI1XA1Be0Gj8TzI3UfnJEz2Vs62PazMpFGBzVq0=) 2: 5C5BA8365D6A11F081971E0DC4F9AE02.roa (hash: lMMp/Z5aJImzHek/MJHR1M6D45Ar+B1jRsvx5k7nHRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDC1, serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4 Validity Not Before: Dec 7 05:19:13 2025 GMT Not After : Dec 14 05:19:13 2025 GMT Subject: CN=69350e51-85bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:98:57:6f:97:1b:ba:a6:04:9d:7d:9f:53: 20:83:73:2c:4b:a9:c1:1a:38:fe:f2:42:43:e5:a8: b6:79:85:28:3b:9f:e0:cf:4e:cd:01:f4:b6:8c:ea: e6:b7:54:56:af:7b:9b:bb:8e:32:b8:00:ab:4a:6f: 4f:6b:65:3c:7f:ad:31:45:d7:c1:80:10:74:0f:26: 4f:ec:cc:b4:18:0f:1e:4e:c6:b7:59:9b:3c:75:09: b3:55:bb:a4:f2:8a:e5:01:81:45:cf:ed:7a:70:3f: d7:80:34:f6:d5:de:38:81:7d:8c:95:28:6a:6a:f1: fd:36:78:c4:7f:0e:4d:a0:d5:15:6c:88:f8:7b:4c: 4c:f4:4c:f3:db:6a:fa:aa:92:c8:0d:b1:5a:a3:51: 97:60:b5:28:e3:35:84:4f:60:7c:62:95:b5:ca:63: 2b:0c:dc:54:14:1e:b3:b5:62:7d:a6:20:7c:46:0e: dd:13:4f:2c:2f:74:64:db:a0:d5:b5:df:ad:3b:90: 26:95:dd:a3:14:de:c0:e2:15:3c:1d:f1:32:51:ac: 11:ea:8e:10:77:85:f5:94:d7:6e:18:a5:5b:2a:69: fc:4e:e0:ac:9e:88:94:84:82:fd:8c:68:99:6e:2f: d5:d0:66:7b:3d:3b:33:f4:c5:51:8a:ab:12:36:5e: cd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FD:54:EE:F6:46:CF:90:7F:0C:6B:77:C9:7C:3B:B3:E8:B3:D9:D9 X509v3 Authority Key Identifier: keyid:98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:8a:0c:f7:56:e2:04:e8:8f:5d:43:e9:f2:79:a1:58:8f:4f: b7:df:90:04:98:60:95:5d:75:88:22:d8:cf:01:bc:86:13:f8: 75:c7:fc:7a:f3:25:7c:0f:76:c2:92:2f:3a:79:aa:5f:1b:3e: 9e:fa:da:13:1a:62:c8:4a:c3:0e:9a:f2:fd:6c:6e:6f:99:c4: 8d:13:da:00:f7:d5:21:b7:be:2b:12:95:d5:ca:4a:05:49:38: 6e:35:eb:5c:80:ca:71:e0:57:b3:f7:f0:ce:04:76:c8:66:72: 85:86:b8:fc:21:23:91:eb:43:40:69:15:56:84:4b:02:be:8f: ab:f5:78:e9:87:cb:e3:30:e6:f5:cc:bd:bc:0f:05:d6:d5:52: 94:49:6f:b8:33:eb:60:79:c4:86:5c:db:f7:44:08:06:2a:cc: fd:4c:28:3e:e4:06:59:43:0f:68:f6:71:e1:e4:a1:75:3a:c5: 72:6c:db:65:20:4f:6c:c2:a8:69:bc:61:42:ee:cc:9c:5f:e1: 07:b3:dd:eb:dd:ac:93:97:1d:51:3b:73:99:d8:29:fa:f7:3a: c5:1e:7e:80:31:3e:1f:bc:92:ed:ea:50:fd:2d:e7:20:67:39: ef:76:3b:51:9f:05:a7:f4:bb:27:5a:fb:1b:eb:47:23:fe:ad: fc:67:66:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RURDMTExMC8GA1UEBRMoOTgyNDIxODFBNzU1NEEyOEU3OEMxQUU4QTczQkUyNzk0 NTJDQ0JGNDAeFw0yNTEyMDcwNTE5MTNaFw0yNTEyMTQwNTE5MTNaMBgxFjAUBgNV BAMTDTY5MzUwZTUxLTg1YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxeJhXb5cbuqYEnX2fUyCDcyxLqcEaOP7yQkPlqLZ5hSg7n+DPTs0B9LaM6ua3 VFave5u7jjK4AKtKb09rZTx/rTFF18GAEHQPJk/szLQYDx5OxrdZmzx1CbNVu6Ty iuUBgUXP7XpwP9eANPbV3jiBfYyVKGpq8f02eMR/Dk2g1RVsiPh7TEz0TPPbavqq ksgNsVqjUZdgtSjjNYRPYHxilbXKYysM3FQUHrO1Yn2mIHxGDt0TTywvdGTboNW1 3607kCaV3aMU3sDiFTwd8TJRrBHqjhB3hfWU124YpVsqafxO4KyeiJSEgv2MaJlu L9XQZns9OzP0xVGKqxI2Xs0jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJP1U7vZG z5B/DGt3yXw7s+iz2dkwHwYDVR0jBBgwFoAUmCQhgadVSijnjBropzvieUUsy/Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFREMxL0ZEMTEyQjc2NUQ2 OTExRjA5MTFENzIwQ0M0RjlBRTAyL21DUWhnYWRWU2lqbmpCcm9wenZpZVVVc3lf US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUNRaGdhZFZTaWpuakJyb3B6dmllVVVzeV9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF REMxL0ZEMTEyQjc2NUQ2OTExRjA5MTFENzIwQ0M0RjlBRTAyL21DUWhnYWRWU2lq bmpCcm9wenZpZVVVc3lfUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKSKDPdW4gToj11D6fJ5oViPT7ffkASYYJVddYgi2M8BvIYT+HXH/Hrz JXwPdsKSLzp5ql8bPp762hMaYshKww6a8v1sbm+ZxI0T2gD31SG3visSldXKSgVJ OG4161yAynHgV7P38M4EdshmcoWGuPwhI5HrQ0BpFVaESwK+j6v1eOmHy+Mw5vXM vbwPBdbVUpRJb7gz62B5xIZc2/dECAYqzP1MKD7kBllDD2j2ceHkoXU6xXJs22Ug T2zCqGm8YULuzJxf4Qez3evdrJOXHVE7c5nYKfr3OsUefoAxPh+8ku3qUP0t5yBn Oe92O1GfBaf0uyda+xvrRyP+rfxnZpE= -----END CERTIFICATE-----Generated at Sun Dec 7 18:58:50 2025 by rpki-client