This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft File: q4PFkhuEDFQXM78Ucyl13UlzP_w.mft (raw, json) Hash identifier: HsRl3OOsfjXiG7+5e7jWgszeFNX3WMgVkH+PPjp3t5s= Subject key identifier: AD:2E:72:F7:FE:F3:9D:D1:A8:16:38:8A:99:3A:B6:AC:20:12:75:51 Authority key identifier: AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC Certificate issuer: /CN=A91F523F/serialNumber=AB83C5921B840C541733BF14732975DD49733FFC Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft Manifest number: C6 Signing time: Tue 23 Dec 2025 04:49:11 +0000 Manifest this update: Tue 23 Dec 2025 04:49:10 +0000 Manifest next update: Tue 30 Dec 2025 04:49:10 +0000 Files and hashes: 1: q4PFkhuEDFQXM78Ucyl13UlzP_w.crl (hash: R8rEdUXWlDeHMQ1CrKsOM8ty89CrNWRpwte45qxqi8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F523F, serialNumber=AB83C5921B840C541733BF14732975DD49733FFC Validity Not Before: Dec 23 04:49:10 2025 GMT Not After : Dec 30 04:49:10 2025 GMT Subject: CN=694a1f47-4a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e2:87:64:ec:2e:ee:00:39:0a:b3:4d:7a:0c: db:79:cf:7d:95:7f:5b:b4:4d:ad:5b:cb:95:cb:17: 4e:5c:2e:e3:cf:5d:38:6e:4a:11:75:65:2e:51:15: c6:1c:01:3f:e3:78:2b:4f:3c:1c:da:87:76:80:d7: 38:07:dd:09:73:41:63:f4:56:81:37:01:c9:93:9d: 31:47:26:9f:91:1a:9a:03:1c:05:0f:d6:e6:ef:4b: b2:98:11:9e:8b:b7:bd:15:2a:2b:0e:85:60:57:70: 5b:d3:f2:82:13:4c:e2:3b:b1:b2:2c:01:2f:3e:19: 81:7b:9a:d9:95:37:ad:d5:f0:e4:7d:a3:e4:aa:52: 22:3e:7e:11:55:70:5f:e3:fb:86:26:fe:87:5e:0f: 98:0b:0b:77:ed:6e:8b:35:ec:b3:5b:a5:c7:9e:03: 04:a5:67:69:b0:56:e3:96:9f:95:f8:35:b7:a3:5f: 15:b3:b2:e9:cd:d5:dc:d6:d8:7f:e7:7f:b0:2d:8a: e4:da:a6:d7:4f:43:10:94:aa:b4:1c:79:95:70:85: 2a:f1:68:ae:24:29:88:bc:a4:12:a4:0d:ae:d4:24: ed:7f:ae:b1:3c:0d:89:65:07:ef:97:79:25:a2:b2: b9:07:4b:0e:c2:de:fb:3e:74:90:ce:b6:b3:26:a4: 4e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2E:72:F7:FE:F3:9D:D1:A8:16:38:8A:99:3A:B6:AC:20:12:75:51 X509v3 Authority Key Identifier: keyid:AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:04:ed:4a:b7:83:49:4e:e5:6a:9a:f8:1e:3a:2a:55:48:8d: f7:57:58:b9:04:86:fd:46:61:9d:a8:dd:e6:f0:0b:70:dd:bb: 1d:68:74:95:df:3b:69:96:c6:ca:9c:2e:a2:5d:cc:c3:94:17: fa:ca:12:79:ff:5d:31:af:cd:c0:16:99:09:0d:81:20:0a:fd: 14:b5:dc:6a:05:0e:3f:b2:91:64:0a:ca:e2:91:a7:ea:97:bd: 56:fb:cd:49:7b:ed:c8:02:e1:a5:2e:9d:46:a2:b8:90:b7:d2: d8:13:c9:b6:2c:e3:57:24:53:16:80:10:41:c4:d2:d9:44:6a: fa:5e:86:84:82:93:58:92:93:8e:c0:ca:e6:52:32:97:b5:01: 2c:a2:31:98:6b:9d:3c:6b:39:49:5b:fe:88:6e:f6:70:9d:73: 96:bb:83:0f:95:fa:37:5d:e5:b9:91:1d:e9:8b:e9:11:9f:de: ca:66:77:87:55:df:c0:cb:41:b8:7e:ea:8c:15:1b:a7:6d:4d: fe:09:36:9d:7a:3d:cc:95:b0:97:c3:8e:37:0c:7a:20:ed:6d: 90:c1:19:0a:e3:3b:c3:9d:fc:4d:a8:7d:d5:0c:a8:5c:17:3f: 10:2a:e4:a3:10:58:3b:1c:ad:b1:d2:dc:b0:21:ff:b9:7f:39: bd:e0:eb:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyM0YxMTAvBgNVBAUTKEFCODNDNTkyMUI4NDBDNTQxNzMzQkYxNDczMjk3NURE NDk3MzNGRkMwHhcNMjUxMjIzMDQ0OTEwWhcNMjUxMjMwMDQ0OTEwWjAYMRYwFAYD VQQDDA02OTRhMWY0Ny00YTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOKHZOwu7gA5CrNNegzbec99lX9btE2tW8uVyxdOXC7jz104bkoRdWUuURXG HAE/43grTzwc2od2gNc4B90Jc0Fj9FaBNwHJk50xRyafkRqaAxwFD9bm70uymBGe i7e9FSorDoVgV3Bb0/KCE0ziO7GyLAEvPhmBe5rZlTet1fDkfaPkqlIiPn4RVXBf 4/uGJv6HXg+YCwt37W6LNeyzW6XHngMEpWdpsFbjlp+V+DW3o18Vs7LpzdXc1th/ 53+wLYrk2qbXT0MQlKq0HHmVcIUq8WiuJCmIvKQSpA2u1CTtf66xPA2JZQfvl3kl orK5B0sOwt77PnSQzrazJqROEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0ucvf+ 853RqBY4ipk6tqwgEnVRMB8GA1UdIwQYMBaAFKuDxZIbhAxUFzO/FHMpdd1Jcz/8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIzRi81NkE0Q0I4QUIw NTMxMUVGOUMyQjhEM0ZDNEY5QUUwMi9xNFBGa2h1RURGUVhNNzhVY3lsMTNVbHpQ X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E0UEZraHVFREZRWE03OFVjeWwxM1VselBfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIzRi81NkE0Q0I4QUIwNTMxMUVGOUMyQjhEM0ZDNEY5QUUwMi9xNFBGa2h1RURG UVhNNzhVY3lsMTNVbHpQX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaBO1Kt4NJTuVqmvgeOipVSI33V1i5BIb9RmGdqN3m8Atw3bsdaHSV 3ztplsbKnC6iXczDlBf6yhJ5/10xr83AFpkJDYEgCv0UtdxqBQ4/spFkCsrikafq l71W+81Je+3IAuGlLp1GoriQt9LYE8m2LONXJFMWgBBBxNLZRGr6XoaEgpNYkpOO wMrmUjKXtQEsojGYa508azlJW/6IbvZwnXOWu4MPlfo3XeW5kR3pi+kRn97KZneH Vd/Ay0G4fuqMFRunbU3+CTadej3MlbCXw443DHog7W2QwRkK4zvDnfxNqH3VDKhc Fz8QKuSjEFg7HK2x0tywIf+5fzm94Osh -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:34 2025 by rpki-client