This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft File: q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft (raw, json) Hash identifier: TQhZTPKBexuEOGp4VybtJax2Fnd6mPkATVMUZ3YD5vU= Subject key identifier: EF:81:BB:E0:34:97:30:EC:BB:01:E2:E6:90:75:18:8D:0A:85:39:0D Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5 Certificate issuer: /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5 Certificate serial: 0949 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft Manifest number: 093A Signing time: Mon 22 Dec 2025 19:35:43 +0000 Manifest this update: Mon 22 Dec 2025 19:35:42 +0000 Manifest next update: Mon 29 Dec 2025 19:35:42 +0000 Files and hashes: 1: q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl (hash: 3A8Dd22i2WG+FhXhu1rqbkXWyZRJbtuvG7tN4SzK5JA=) 2: 7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa (hash: WYE1oD8S3ftmPZ9P42MC6m1geSKXvRB8dw3HalDWvGA=) 3: E3829F3CB1CF11EAA8732709C4F9AE02.roa (hash: YwnEBUIIwCJtRBxz+rjLHt3w237awmJC1uWnaTU6Q3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2377 (0x949) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5 Validity Not Before: Dec 22 19:35:42 2025 GMT Not After : Dec 29 19:35:42 2025 GMT Subject: CN=69499d8f-bba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:ac:d8:15:74:e1:75:9c:d2:8f:5b:f1:6e: 11:7c:11:21:4e:92:8f:70:0b:e5:87:07:df:f9:3c: 4e:df:0a:f9:e8:b6:d0:2a:c1:d9:4d:f0:5c:6d:7e: 0c:02:99:88:f1:bd:38:5c:75:78:99:23:60:67:79: 5d:66:7e:e1:c1:58:61:fd:83:4d:6c:92:57:89:e0: 90:3f:10:81:36:e1:a7:94:ba:cc:38:73:e7:ec:bc: 37:e9:31:02:f1:90:e5:a0:38:a9:63:36:06:ea:bd: 29:0c:08:8b:7e:a3:d8:89:25:fb:95:82:e0:7c:1a: a8:e8:45:61:14:1a:46:e6:a0:e3:49:9d:da:2e:ee: fe:f4:06:b3:75:12:37:d1:71:5c:c4:44:c1:f8:62: 01:69:5c:f6:06:e9:64:7b:df:6b:ee:0c:af:fa:3c: 30:82:da:c7:6b:c4:98:2b:dd:3f:fb:1d:a6:6b:bc: 96:31:e7:3d:ff:ad:99:57:50:3b:62:07:fe:f6:30: ba:f3:aa:fe:cb:20:89:b3:ad:26:4c:72:b5:d0:5e: 0a:63:d3:40:d4:c9:93:65:a5:74:4b:90:96:5b:4c: 24:b1:02:15:0c:d4:77:3f:d8:32:d0:18:f4:c6:5d: ff:d5:93:7c:a1:a9:f2:de:48:88:e7:d6:0e:c9:56: 52:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:81:BB:E0:34:97:30:EC:BB:01:E2:E6:90:75:18:8D:0A:85:39:0D X509v3 Authority Key Identifier: keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:6d:14:c9:f5:af:eb:c5:84:9d:77:a5:d8:84:46:cb:c8:46: fd:a4:01:83:1e:e8:9b:9d:fc:79:2e:0f:a2:00:ac:13:8a:23: af:07:f5:a6:80:03:95:8f:73:25:ed:cd:2a:17:65:18:16:f1: 09:9e:ee:73:ef:f9:c8:eb:02:bf:b4:5b:93:7f:32:59:b9:b1: bf:b9:83:b3:4c:ad:96:5b:ea:21:2d:af:05:20:cb:bf:1e:77: 76:5d:d9:d1:75:21:74:81:b3:d9:eb:33:a1:c6:77:51:d9:77: 5a:b0:50:56:17:ae:28:db:dc:1a:c0:6b:ee:c9:dc:b0:ad:98: b4:48:0d:56:09:4c:43:07:fb:95:b4:ab:d6:b4:2b:da:5b:a1: ae:c1:1b:a4:a2:61:9c:5c:bf:3f:1c:12:e0:e8:76:8d:78:98: 96:ca:13:13:d7:fd:eb:19:df:0d:1e:81:1c:30:72:fd:9e:ab: d8:69:79:b3:9a:1f:03:5f:62:99:bf:e9:3a:0f:12:d0:07:4c: 69:10:57:23:4a:d8:7a:88:45:2e:cd:04:ce:d1:50:4a:87:d3: 56:c3:19:c7:83:bf:46:78:db:ec:f9:5e:65:54:fc:61:cc:20: 8f:a1:02:66:1f:0a:30:03:7c:b6:37:8d:cd:93:2f:e2:c9:53: 44:f9:e0:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3RjUxMTAvBgNVBAUTKEFCRjE3M0RDMEEyNTg2OTU5MjkxNzY5QTA2NzAzNzMx OUFGQThGRDUwHhcNMjUxMjIyMTkzNTQyWhcNMjUxMjI5MTkzNTQyWjAYMRYwFAYD VQQDDA02OTQ5OWQ4Zi1iYmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsA+s2BV04XWc0o9b8W4RfBEhTpKPcAvlhwff+TxO3wr56LbQKsHZTfBcbX4M ApmI8b04XHV4mSNgZ3ldZn7hwVhh/YNNbJJXieCQPxCBNuGnlLrMOHPn7Lw36TEC 8ZDloDipYzYG6r0pDAiLfqPYiSX7lYLgfBqo6EVhFBpG5qDjSZ3aLu7+9AazdRI3 0XFcxETB+GIBaVz2Bulke99r7gyv+jwwgtrHa8SYK90/+x2ma7yWMec9/62ZV1A7 Ygf+9jC686r+yyCJs60mTHK10F4KY9NA1MmTZaV0S5CWW0wksQIVDNR3P9gy0Bj0 xl3/1ZN8oany3kiI59YOyVZSaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+Bu+A0 lzDsuwHi5pB1GI0KhTkNMB8GA1UdIwQYMBaAFKvxc9wKJYaVkpF2mgZwNzGa+o/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdGNS9CRDEwQjREQ0Ix QzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhwV1NrWGFhQm5BM01acjZq OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FfRnozQW9saHBXU2tYYWFCbkEzTVpyNmo5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdGNS9CRDEwQjREQ0IxQzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhw V1NrWGFhQm5BM01acjZqOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIbRTJ9a/rxYSdd6XYhEbLyEb9pAGDHuibnfx5Lg+iAKwTiiOvB/Wm gAOVj3Ml7c0qF2UYFvEJnu5z7/nI6wK/tFuTfzJZubG/uYOzTK2WW+ohLa8FIMu/ Hnd2XdnRdSF0gbPZ6zOhxndR2XdasFBWF64o29wawGvuydywrZi0SA1WCUxDB/uV tKvWtCvaW6GuwRukomGcXL8/HBLg6HaNeJiWyhMT1/3rGd8NHoEcMHL9nqvYaXmz mh8DX2KZv+k6DxLQB0xpEFcjSth6iEUuzQTO0VBKh9NWwxnHg79GeNvs+V5lVPxh zCCPoQJmHwowA3y2N43Nky/iyVNE+eDZ -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:10 2025 by rpki-client