This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft File: IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json) Hash identifier: 7yoBaaoZCsFsHiTQ1YeS6gAgdgreOoqRuitfmoRUlVE= Subject key identifier: 48:69:7E:32:CF:2C:EE:56:29:8C:17:85:46:D7:39:78:94:20:10:E0 Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 Certificate issuer: /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft Manifest number: CE Signing time: Tue 23 Dec 2025 04:42:16 +0000 Manifest this update: Tue 23 Dec 2025 04:42:16 +0000 Manifest next update: Tue 30 Dec 2025 04:42:16 +0000 Files and hashes: 1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: nqwN6WSo52kk8egOqSxC8qi6sl+rxS03WP2f1VBIyFY=) 2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: S974N0P9f8Bg6Jc7BIscRXeUqpVDlIBE/NP1Bo0j0PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Validity Not Before: Dec 23 04:42:16 2025 GMT Not After : Dec 30 04:42:16 2025 GMT Subject: CN=694a1da8-4d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:07:2e:1b:99:d6:3b:65:82:e2:a1:85:9b:e0: 19:96:16:7d:db:41:a0:81:05:fa:1c:29:cd:fc:ae: aa:af:a0:ab:07:2a:64:7c:4e:4c:40:a6:0f:7c:a5: c5:b0:93:6f:27:07:89:43:5e:3a:37:39:92:8e:e8: 16:ad:1b:cc:92:5f:6f:b9:c7:ba:db:fb:5f:cc:2d: 9d:ab:48:bf:be:82:b1:fb:25:50:58:da:41:52:33: c0:32:a8:f2:3a:38:31:84:ff:9e:f5:ca:5e:5d:81: 53:02:a1:28:30:00:f6:df:0b:42:98:f2:13:87:d2: 4f:c5:dd:fb:2b:ad:ef:d0:c1:72:06:4b:c5:52:de: a2:41:91:6e:75:0f:13:85:fc:54:0b:34:3b:f6:64: 15:e2:34:22:33:f7:7d:c8:42:0f:8e:78:02:49:eb: 9d:51:a4:25:9d:ae:ef:6e:e4:02:09:57:ac:a4:d2: 08:bd:b0:ba:98:c1:e9:1e:bf:f7:1d:ad:b9:95:91: 59:78:83:41:71:8f:29:ad:19:db:28:ea:f6:88:26: 68:63:d3:2a:c0:2a:92:17:24:cf:1b:31:ab:8f:50: 46:83:a6:13:d3:4b:b2:98:b7:65:d2:9f:0d:ea:2c: 5c:7b:e6:96:75:14:2d:9b:ee:9f:46:75:11:a9:e1: 3b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:69:7E:32:CF:2C:EE:56:29:8C:17:85:46:D7:39:78:94:20:10:E0 X509v3 Authority Key Identifier: keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:77:63:f9:d9:f0:6e:84:df:ce:ba:e7:96:eb:50:b8:2b:c7: 4f:13:ac:55:21:e5:bb:ee:38:9a:e1:65:6f:a8:46:74:05:d4: 3f:cd:1e:6c:76:c1:77:c6:29:64:f2:98:4f:19:5a:fb:72:3f: a2:49:9b:61:83:12:e2:38:ba:a2:69:72:d8:28:f1:e8:c3:9b: 82:9c:5e:7a:b7:6c:55:10:93:29:8c:d6:40:c5:b7:f8:e7:12: ba:b4:6f:63:01:a6:1c:1e:7e:9e:1c:2e:7c:2a:08:ef:22:d2: 51:ac:27:a5:10:20:a8:49:b2:33:52:0c:aa:f0:18:8c:53:1d: 2e:9e:5e:83:31:7b:4d:94:e2:81:e0:42:0e:b4:8c:30:fc:7e: 13:1f:f9:60:29:c7:52:ae:3a:25:53:88:60:e2:c2:c5:4b:9a: f3:6b:d6:2b:30:f0:8e:f9:e6:7d:c7:0f:1a:f4:1f:d3:e8:aa: 76:20:bc:5e:45:0c:06:b3:1f:4a:0a:e8:ed:ff:33:a9:92:68: f0:91:f0:08:9a:43:49:50:61:a7:a5:79:21:ab:14:51:73:4d: 5e:d1:0e:9a:35:20:09:8a:56:95:b0:09:a5:95:9a:ed:73:9b: dc:fc:6d:ba:0f:0f:91:98:9a:7e:65:02:33:1f:24:28:74:65: ed:8f:50:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MzcxMTAvBgNVBAUTKDIxMDk0NkNEQTlERTc1REVGOTYwOTg5NUZCRjIxRUQ4 NEM3MkY0RTcwHhcNMjUxMjIzMDQ0MjE2WhcNMjUxMjMwMDQ0MjE2WjAYMRYwFAYD VQQDDA02OTRhMWRhOC00ZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wcuG5nWO2WC4qGFm+AZlhZ920GggQX6HCnN/K6qr6CrBypkfE5MQKYPfKXF sJNvJweJQ146NzmSjugWrRvMkl9vuce62/tfzC2dq0i/voKx+yVQWNpBUjPAMqjy OjgxhP+e9cpeXYFTAqEoMAD23wtCmPITh9JPxd37K63v0MFyBkvFUt6iQZFudQ8T hfxUCzQ79mQV4jQiM/d9yEIPjngCSeudUaQlna7vbuQCCVespNIIvbC6mMHpHr/3 Ha25lZFZeINBcY8prRnbKOr2iCZoY9MqwCqSFyTPGzGrj1BGg6YT00uymLdl0p8N 6ixce+aWdRQtm+6fRnURqeE7TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhpfjLP LO5WKYwXhUbXOXiUIBDgMB8GA1UdIwQYMBaAFCEJRs2p3nXe+WCYlfvyHthMcvTn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84N0RENTQ4Q0Ey NzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRkNzVZSmlWLV9JZTJFeHk5 T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRbEd6YW5lZGQ3NVlKaVYtX0llMkV4eTlPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84N0RENTQ4Q0EyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRk NzVZSmlWLV9JZTJFeHk5T2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYd2P52fBuhN/OuueW61C4K8dPE6xVIeW77jia4WVvqEZ0BdQ/zR5s dsF3xilk8phPGVr7cj+iSZthgxLiOLqiaXLYKPHow5uCnF56t2xVEJMpjNZAxbf4 5xK6tG9jAaYcHn6eHC58KgjvItJRrCelECCoSbIzUgyq8BiMUx0unl6DMXtNlOKB 4EIOtIww/H4TH/lgKcdSrjolU4hg4sLFS5rza9YrMPCO+eZ9xw8a9B/T6Kp2ILxe RQwGsx9KCujt/zOpkmjwkfAImkNJUGGnpXkhqxRRc01e0Q6aNSAJilaVsAmllZrt c5vc/G26Dw+RmJp+ZQIzHyQodGXtj1BB -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:30 2025 by rpki-client