This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft File: Q1TVz6Vk7nGzToh07rG5ho-IB90.mft (raw, json) Hash identifier: naCEFyRy+v5DudjLqhR9eFKNXN7OXIsOpkxO0k9yZZ0= Subject key identifier: E7:6E:02:70:90:DA:05:4C:D5:FB:ED:93:BF:9B:71:83:9C:17:6F:AF Authority key identifier: 43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD Certificate issuer: /CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft Manifest number: 07FB Signing time: Sat 20 Dec 2025 20:27:50 +0000 Manifest this update: Sat 20 Dec 2025 20:27:50 +0000 Manifest next update: Sat 27 Dec 2025 20:27:50 +0000 Files and hashes: 1: Q1TVz6Vk7nGzToh07rG5ho-IB90.crl (hash: 4SJxMmIqEw7dr5Sb9p1GDMiVxC/fPB1AoaqYG0guDak=) 2: 638149B88C2C11EBBB3B260BC4F9AE02.roa (hash: B/FCYm7yp7p+ieEmvmImAhcl/oemA2ZNjMcDSU18oaU=) 3: A10812CA0CD511EB9433AE69C4F9AE02.roa (hash: Pp8lb1nzqx7e9rT/EQLbTNVmmjg6MQa2RdSIFuurOeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC50, serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD Validity Not Before: Dec 20 20:27:50 2025 GMT Not After : Dec 27 20:27:50 2025 GMT Subject: CN=694706c6-81cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:67:ca:b8:ac:2f:eb:0a:1e:13:e3:62:cf:d8: 36:a9:5f:1a:34:20:97:f2:09:c3:14:95:71:31:29: 29:e1:7f:41:5d:32:3a:b7:9d:8b:aa:81:ec:5a:a3: a2:eb:d9:95:b2:94:95:96:1b:ed:e5:1d:19:5b:35: 72:9e:89:b3:04:8b:2a:3d:ad:15:a6:3d:6d:06:22: 6e:fe:4e:4d:a6:6c:f3:e5:aa:6a:ef:9d:96:b3:d9: 70:21:40:36:3f:3e:b0:0d:b3:4f:b2:42:f3:6a:49: 19:7a:df:b6:e6:93:18:8b:dc:c6:5d:65:13:75:42: 3f:c2:3e:f8:bc:f8:15:0b:60:9c:e9:6f:3b:18:c1: bb:35:8e:19:b1:26:be:ba:b5:83:6d:15:fc:7b:06: 42:fb:ac:a2:18:48:f4:56:85:1d:b5:3c:1d:df:e5: b9:63:ba:28:d2:b9:14:c3:5d:89:c2:0e:2f:d3:b9: 25:ec:55:8e:ab:63:e9:ca:9e:b0:03:04:b3:a5:fd: e1:88:82:97:c8:31:7e:16:3d:e0:f7:92:cf:75:e7: 78:1c:3f:ed:eb:57:66:a7:28:59:78:91:27:53:1b: be:fb:47:6d:59:2d:f1:45:4b:87:c6:40:c7:ec:81: cb:e9:e0:92:4c:a3:91:00:a9:b9:5d:c6:d5:f1:23: d5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6E:02:70:90:DA:05:4C:D5:FB:ED:93:BF:9B:71:83:9C:17:6F:AF X509v3 Authority Key Identifier: keyid:43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:04:20:c6:dd:ac:5f:c0:98:bb:10:92:65:39:cb:9b:a8:5f: e7:83:44:9e:44:b2:90:2e:d0:68:e5:63:66:06:c8:52:18:4e: 44:b9:8c:7c:db:7f:21:6c:55:66:25:c7:dc:20:49:56:06:bd: d7:06:39:86:d7:2a:53:25:a6:b2:b4:dd:0c:a3:48:1c:32:04: a9:2e:8c:09:8b:3e:2d:5d:9e:63:22:e3:13:f3:33:45:a7:a5: 64:51:28:bd:ef:6e:9e:c1:c7:82:97:0e:16:cc:8f:7c:e7:de: 17:3b:bb:1d:6d:7e:6f:08:4f:08:42:5d:48:3e:80:e5:2b:6a: ea:f1:90:df:89:45:9a:c0:bf:5c:24:14:1b:c6:e6:10:e0:e1: 1d:d6:b5:97:c0:7b:0a:4a:69:db:c4:9e:d6:b3:1b:45:53:ee: 12:97:9b:2a:de:38:a2:0b:8d:75:d2:d7:1d:21:0d:9e:63:e7: 3a:96:f6:b6:f8:40:c3:c5:07:2b:11:db:17:2a:6b:0d:7c:50: 2d:ab:f8:63:2e:ee:df:f7:fc:f9:9f:9c:9c:7e:5d:ce:72:02: 0d:6d:62:37:13:95:ef:37:d5:b6:82:03:40:c7:48:d1:19:e5: 31:09:0e:bc:ef:e0:24:f8:53:2d:7b:d8:43:36:ed:69:60:13: 47:6a:ab:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNTAxMTAvBgNVBAUTKDQzNTRENUNGQTU2NEVFNzFCMzRFODg3NEVFQjFCOTg2 OEY4ODA3REQwHhcNMjUxMjIwMjAyNzUwWhcNMjUxMjI3MjAyNzUwWjAYMRYwFAYD VQQDDA02OTQ3MDZjNi04MWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGfKuKwv6woeE+Niz9g2qV8aNCCX8gnDFJVxMSkp4X9BXTI6t52LqoHsWqOi 69mVspSVlhvt5R0ZWzVynomzBIsqPa0Vpj1tBiJu/k5Npmzz5apq752Ws9lwIUA2 Pz6wDbNPskLzakkZet+25pMYi9zGXWUTdUI/wj74vPgVC2Cc6W87GMG7NY4ZsSa+ urWDbRX8ewZC+6yiGEj0VoUdtTwd3+W5Y7oo0rkUw12Jwg4v07kl7FWOq2Ppyp6w AwSzpf3hiIKXyDF+Fj3g95LPded4HD/t61dmpyhZeJEnUxu++0dtWS3xRUuHxkDH 7IHL6eCSTKORAKm5XcbV8SPVsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOduAnCQ 2gVM1fvtk7+bcYOcF2+vMB8GA1UdIwQYMBaAFENU1c+lZO5xs06IdO6xuYaPiAfd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM1MC9FNDg1OEFDNDBD RDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazduR3pUb2gwN3JHNWhvLUlC OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ExVFZ6NlZrN25HelRvaDA3ckc1aG8tSUI5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM1MC9FNDg1OEFDNDBDRDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazdu R3pUb2gwN3JHNWhvLUlCOTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwBCDG3axfwJi7EJJlOcubqF/ng0SeRLKQLtBo5WNmBshSGE5EuYx8 238hbFVmJcfcIElWBr3XBjmG1ypTJaaytN0Mo0gcMgSpLowJiz4tXZ5jIuMT8zNF p6VkUSi9726ewceClw4WzI98594XO7sdbX5vCE8IQl1IPoDlK2rq8ZDfiUWawL9c JBQbxuYQ4OEd1rWXwHsKSmnbxJ7WsxtFU+4Sl5sq3jiiC4110tcdIQ2eY+c6lva2 +EDDxQcrEdsXKmsNfFAtq/hjLu7f9/z5n5ycfl3OcgINbWI3E5XvN9W2ggNAx0jR GeUxCQ687+Ak+FMte9hDNu1pYBNHaqse -----END CERTIFICATE-----Generated at Sun Dec 21 15:38:35 2025 by rpki-client