This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft File: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft (raw, json) Hash identifier: NZ0vJyVW58fQ57DRJ1zo6PP2daoBczpe/w5nEMPpo7A= Subject key identifier: 45:D5:94:32:64:68:EC:46:13:98:B0:A2:1D:B7:54:D4:41:E0:32:9F Authority key identifier: D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 Certificate issuer: /CN=A91EEA4D/serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft Manifest number: 144C Signing time: Mon 22 Dec 2025 18:41:30 +0000 Manifest this update: Mon 22 Dec 2025 18:41:29 +0000 Manifest next update: Mon 29 Dec 2025 18:41:29 +0000 Files and hashes: 1: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl (hash: 5180/+OJgGlwtFRiNrz9vD5ryGRf2ely+9+vVqG0IlI=) 2: 6B6060E445A311F093AEF324C4F9AE02.roa (hash: KkaxMY/paqE0NvJV6adlijQxx/J7VWmCwLLLInlyw1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Validity Not Before: Dec 22 18:41:29 2025 GMT Not After : Dec 29 18:41:29 2025 GMT Subject: CN=694990da-a415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:61:5c:fe:c0:b0:0c:a1:17:ec:d8:e5:82:ed: 1c:9c:da:16:b5:02:47:60:4d:1b:2b:e0:5f:13:83: d4:0c:10:a0:5d:7d:8c:d2:9c:c7:3a:32:7b:be:ce: 9b:1e:7f:2f:aa:59:69:04:b5:15:3d:40:77:98:9a: 09:61:76:9e:3d:89:ef:30:c7:53:ed:4e:32:4b:83: b0:51:a6:9d:63:3b:53:a4:02:e5:e5:13:4a:a9:ff: 0c:d9:f8:7b:99:eb:35:5c:a0:6a:4d:b3:dc:62:d9: e2:0d:0b:ad:99:1b:44:83:39:84:42:10:43:a0:2d: 8a:f9:0a:e4:8a:1a:6c:a6:9f:45:07:50:76:4a:26: f7:e7:1f:07:f1:63:34:51:66:04:02:e5:9d:0f:f0: d4:65:e6:55:b7:bf:3d:e1:b0:d4:3f:b4:b7:85:cc: 03:30:35:72:38:5c:80:63:d0:32:de:54:b6:4f:5f: 53:45:49:7f:37:70:e8:87:e6:b9:68:20:55:4c:96: 68:e8:ba:cf:52:42:13:e4:de:f6:be:14:be:fd:1f: aa:5a:cc:c4:f4:5b:9f:a7:7b:f4:05:55:bc:23:3f: fa:5f:f2:9f:20:95:96:20:96:d1:e2:f7:fd:89:ba: 78:8b:38:36:2b:c5:d3:23:64:5d:53:7d:16:53:74: c4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D5:94:32:64:68:EC:46:13:98:B0:A2:1D:B7:54:D4:41:E0:32:9F X509v3 Authority Key Identifier: keyid:D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:8c:60:51:1e:09:4a:71:9e:bb:1e:60:2c:9e:94:7c:35:49: 1f:aa:d0:2a:f0:da:b1:cd:bb:10:da:9b:0c:93:7d:3f:3c:f0: dc:0e:e9:ed:ed:b7:1b:86:a2:1e:82:47:b2:ed:cb:59:25:b4: 37:87:9d:7f:98:d2:7a:00:8c:f2:df:e6:d4:78:1b:23:2a:a1: a7:54:27:4f:a7:58:16:83:92:2d:97:c5:2c:65:ac:35:5c:eb: 9f:57:41:f1:1c:5a:22:2a:82:50:b8:b0:53:f2:84:39:a6:46: e2:e1:a8:a3:44:b3:95:b6:82:64:a9:04:08:3e:e9:f0:ca:ef: db:f4:29:e8:5d:26:1a:1e:29:25:95:cc:28:aa:19:9c:2b:00: c0:cc:4e:fc:80:d9:a1:32:14:0f:bd:a9:e0:39:d9:1c:20:b3: 40:85:3c:fa:59:3b:9d:4e:27:b9:57:15:0e:c1:83:a1:6f:cf: 13:ad:3f:fb:01:c2:3f:dd:f8:45:5d:82:a6:3a:82:78:b2:fb: 15:69:db:df:09:c5:90:e7:56:79:d1:3a:fa:c4:27:89:46:b2: 35:0b:ab:e3:3e:b5:99:b5:b7:14:75:b7:0a:e8:30:e8:33:45: b0:6b:7d:eb:a6:23:cc:ed:ff:01:ee:57:d4:1b:3b:4f:44:24: cd:50:68:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUE0RDExMC8GA1UEBRMoRDEwNkZCOTcyQTcxRkVCNzQwOTJFMDYzNzhENTRDRDU5 RTU5RTNBMzAeFw0yNTEyMjIxODQxMjlaFw0yNTEyMjkxODQxMjlaMBgxFjAUBgNV BAMMDTY5NDk5MGRhLWE0MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqYVz+wLAMoRfs2OWC7Ryc2ha1AkdgTRsr4F8Tg9QMEKBdfYzSnMc6Mnu+zpse fy+qWWkEtRU9QHeYmglhdp49ie8wx1PtTjJLg7BRpp1jO1OkAuXlE0qp/wzZ+HuZ 6zVcoGpNs9xi2eINC62ZG0SDOYRCEEOgLYr5CuSKGmymn0UHUHZKJvfnHwfxYzRR ZgQC5Z0P8NRl5lW3vz3hsNQ/tLeFzAMwNXI4XIBj0DLeVLZPX1NFSX83cOiH5rlo IFVMlmjous9SQhPk3va+FL79H6pazMT0W5+ne/QFVbwjP/pf8p8glZYgltHi9/2J uniLODYrxdMjZF1TfRZTdMTZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURdWUMmRo 7EYTmLCiHbdU1EHgMp8wHwYDVR0jBBgwFoAU0Qb7lypx/rdAkuBjeNVM1Z5Z46Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFQTRELzY2MUY3M0VDNDcz NzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3JkQWt1QmplTlZNMVo1WjQ2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFFiN2x5cHhfcmRBa3VCamVOVk0xWjVaNDZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF QTRELzY2MUY3M0VDNDczNzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3Jk QWt1QmplTlZNMVo1WjQ2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMCMYFEeCUpxnrseYCyelHw1SR+q0Crw2rHNuxDamwyTfT888NwO6e3t txuGoh6CR7Lty1kltDeHnX+Y0noAjPLf5tR4GyMqoadUJ0+nWBaDki2XxSxlrDVc 659XQfEcWiIqglC4sFPyhDmmRuLhqKNEs5W2gmSpBAg+6fDK79v0KehdJhoeKSWV zCiqGZwrAMDMTvyA2aEyFA+9qeA52Rwgs0CFPPpZO51OJ7lXFQ7Bg6FvzxOtP/sB wj/d+EVdgqY6gniy+xVp298JxZDnVnnROvrEJ4lGsjULq+M+tZm1txR1twroMOgz RbBrfeumI8zt/wHuV9QbO09EJM1QaKY= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:33 2025 by rpki-client