This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft File: qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json) Hash identifier: DGBob92do72I/Vt5ZXu9in3NmAFBaMXX9rRrNrpj21Q= Subject key identifier: BD:8B:AF:F0:98:20:4E:7F:56:9D:38:7F:71:4D:1D:A9:2C:42:84:50 Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 Certificate issuer: /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft Manifest number: 0238 Signing time: Wed 03 Dec 2025 00:36:01 +0000 Manifest this update: Wed 03 Dec 2025 00:36:00 +0000 Manifest next update: Wed 10 Dec 2025 00:36:00 +0000 Files and hashes: 1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: JeY3OgaM/9p6qdbc2pc3UO35lG2FmfBo6iZ3s5gZZ8o=) 2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: 5xUQVljU0BWWuc6LYolHHzG3Hqi8KmssX696YCKuce8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Validity Not Before: Dec 3 00:36:00 2025 GMT Not After : Dec 10 00:36:00 2025 GMT Subject: CN=692f85f1-4c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:7d:83:2b:ca:43:32:a8:02:51:c0:ee:c8: 5e:36:8e:59:64:4a:10:1f:cc:e9:83:c2:eb:05:ad: 45:af:7d:84:ba:2f:a7:52:47:de:e0:56:b9:9c:b3: 2d:27:3a:5f:52:92:0b:8c:fd:ff:53:8f:f6:23:28: e2:24:26:3c:55:cd:ef:62:2f:96:c8:ff:fb:74:75: 41:fc:e2:29:d9:2a:f8:06:b1:8b:21:8a:59:08:20: f2:de:c9:3b:5b:48:f5:5f:92:75:37:51:62:5b:22: 6c:53:2b:86:1b:b9:af:84:ac:d1:d7:51:18:21:ce: fe:8f:96:8d:4e:04:f6:69:fc:a3:09:ff:64:64:23: ed:1f:ed:e8:ac:b6:03:72:74:74:8b:98:86:5e:8c: a7:2e:56:ed:25:76:81:b9:88:e0:d6:cd:e6:89:5a: 29:e5:10:6c:31:3d:de:50:fc:3e:a4:c5:42:7c:5a: ba:b8:cb:6d:92:d6:4e:a2:85:9d:75:8d:75:c0:9d: e3:5b:ff:e7:3c:73:99:34:cc:cf:f4:58:8a:8b:75: f8:38:b1:cf:28:7c:df:cf:1a:93:2d:2b:e7:f7:6b: fe:78:ba:74:dd:c7:42:de:f5:c4:85:88:97:55:d2: a9:d4:f5:0a:8d:b5:01:02:f1:c0:a8:ef:ca:28:8b: 29:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8B:AF:F0:98:20:4E:7F:56:9D:38:7F:71:4D:1D:A9:2C:42:84:50 X509v3 Authority Key Identifier: keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c6:4a:fd:22:d2:ec:11:60:56:28:7a:1c:c5:be:9f:a1:75: 06:22:6b:5c:e6:8d:2c:a5:34:c4:01:56:89:93:76:e9:39:df: b3:94:6a:77:64:8f:43:df:53:88:96:d4:8e:90:25:4f:27:c5: 56:c5:f6:c1:40:2b:a6:05:87:f9:ec:23:75:28:cc:1a:72:3c: 1a:1c:a0:ac:54:14:82:23:fe:67:ce:b4:e2:53:b6:3e:83:5a: 46:55:05:fa:f3:44:c1:70:2d:63:ab:d4:bb:b5:38:6b:af:db: c3:d5:36:d0:52:e3:77:95:ee:59:50:ed:db:a3:8b:52:97:2c: c9:9d:c5:c4:4c:41:70:2d:33:fd:cb:57:42:4f:d8:e1:09:02: e8:f5:c1:2f:7b:09:55:28:36:a6:8e:27:a9:dc:13:53:8a:d1: fa:af:9c:b5:ff:f3:63:95:53:d8:fd:d1:cb:39:69:1f:98:33: 7f:1c:6c:e1:21:dc:87:09:e4:4c:4d:75:7e:c7:3e:bb:f0:bc: 4f:48:ab:41:43:f5:54:fe:65:69:45:c2:9e:c9:bb:3d:0f:4e: bb:ec:4c:8b:31:a5:09:e5:b2:4e:eb:e0:d2:14:43:6a:7e:7e: 73:96:a7:a3:95:f6:e6:71:10:d1:1c:58:f3:fd:e7:99:d7:1a: e3:c9:5a:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0 NUVFOTYzQjUwHhcNMjUxMjAzMDAzNjAwWhcNMjUxMjEwMDAzNjAwWjAYMRYwFAYD VQQDEw02OTJmODVmMS00YzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyr19gyvKQzKoAlHA7sheNo5ZZEoQH8zpg8LrBa1Fr32Eui+nUkfe4Fa5nLMt JzpfUpILjP3/U4/2IyjiJCY8Vc3vYi+WyP/7dHVB/OIp2Sr4BrGLIYpZCCDy3sk7 W0j1X5J1N1FiWyJsUyuGG7mvhKzR11EYIc7+j5aNTgT2afyjCf9kZCPtH+3orLYD cnR0i5iGXoynLlbtJXaBuYjg1s3miVop5RBsMT3eUPw+pMVCfFq6uMttktZOooWd dY11wJ3jW//nPHOZNMzP9FiKi3X4OLHPKHzfzxqTLSvn92v+eLp03cdC3vXEhYiX VdKp1PUKjbUBAvHAqO/KKIspdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2Lr/CY IE5/Vp04f3FNHaksQoRQMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi81Q0Q1RTczMDZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZh Q3BXNGhVWVJQS2RGN3BZN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVxkr9ItLsEWBWKHocxb6foXUGImtc5o0spTTEAVaJk3bpOd+zlGp3 ZI9D31OIltSOkCVPJ8VWxfbBQCumBYf57CN1KMwacjwaHKCsVBSCI/5nzrTiU7Y+ g1pGVQX680TBcC1jq9S7tThrr9vD1TbQUuN3le5ZUO3bo4tSlyzJncXETEFwLTP9 y1dCT9jhCQLo9cEvewlVKDamjiep3BNTitH6r5y1//NjlVPY/dHLOWkfmDN/HGzh IdyHCeRMTXV+xz678LxPSKtBQ/VU/mVpRcKeybs9D0677EyLMaUJ5bJO6+DSFENq fn5zlqejlfbmcRDRHFjz/eeZ1xrjyVpx -----END CERTIFICATE-----Generated at Wed Dec 3 16:53:09 2025 by rpki-client