This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json) Hash identifier: lI+iMykIPdOAnqV1qvTkwHF1IfpThorQ40m5ZIrApxQ= Subject key identifier: A2:8C:6A:F0:CD:59:6C:B3:DF:14:5A:4D:2E:20:73:AE:FE:5C:55:F7 Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft Manifest number: 01D5 Signing time: Sun 21 Dec 2025 02:06:20 +0000 Manifest this update: Sun 21 Dec 2025 02:06:20 +0000 Manifest next update: Sun 28 Dec 2025 02:06:20 +0000 Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: pTzoKdXo6k9kRTD9J80sIxWswjRmraM6s3CUIgx8qDE=) 2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: d+JJ+I8S/10V6aRjr1ig3NwOOf5vZtvPjsJauOreVMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Validity Not Before: Dec 21 02:06:20 2025 GMT Not After : Dec 28 02:06:20 2025 GMT Subject: CN=6947561c-efb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0b:66:d9:4c:5f:70:ff:0d:ec:f3:05:2d:70: 46:38:d8:6c:cc:47:40:d1:00:28:a5:f7:29:01:1d: 03:94:d0:2e:7f:23:db:0a:71:e7:a0:8e:07:76:40: f9:2f:e9:68:8b:27:eb:23:32:27:95:8f:31:64:19: 50:e6:2a:2c:4a:57:49:4a:46:98:24:32:1f:a7:0f: 9c:cd:80:fd:c9:09:43:11:22:27:b9:61:b1:d7:29: 73:89:be:8b:48:e9:8e:b5:a2:70:c1:66:ef:13:2d: 27:21:3d:7c:cf:12:c7:51:43:e3:15:5c:dd:8d:1f: a0:9f:ae:a5:1b:27:71:bd:0a:48:5c:bf:ae:15:13: 84:58:ba:f7:c1:ec:f8:05:0f:14:bd:26:d5:78:da: c6:2b:7d:de:6e:9f:b0:12:03:9c:53:d3:05:1f:2a: 42:d6:20:97:8c:86:c8:25:59:3e:1d:a7:8d:de:d8: 31:05:fa:f5:9e:1f:e5:5e:e1:09:e2:5a:6f:b5:f5: 16:7e:e8:9c:36:e2:c7:f4:fe:2e:f0:a1:ab:da:1e: a8:c9:ca:3d:fb:95:de:87:61:66:07:02:f4:c6:f5: a0:e9:95:1f:ba:1d:d8:17:2d:32:30:96:9e:03:c8: c2:d8:f9:c1:c6:ba:f5:5f:db:9e:0b:df:9e:78:7d: ca:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8C:6A:F0:CD:59:6C:B3:DF:14:5A:4D:2E:20:73:AE:FE:5C:55:F7 X509v3 Authority Key Identifier: keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:23:ac:cd:6b:7d:9c:ea:d0:c3:c9:0e:4c:b9:6a:20:a6:7e: a1:1b:c0:88:45:83:c1:47:12:7f:e8:30:35:40:78:d3:5b:02: 30:44:b5:52:a1:f7:43:91:c2:bd:13:ba:34:18:ec:58:78:62: 06:14:64:e3:a0:0a:51:78:d9:29:cc:20:2f:cc:49:a4:62:24: 63:e8:d9:ce:68:46:26:dc:86:58:87:f3:a6:86:85:c1:90:bf: 3a:48:80:79:34:40:65:63:23:b9:9b:f1:1d:4f:70:bb:0a:db: fb:96:e1:11:3b:eb:5c:06:2a:1b:b3:e5:10:ce:03:ee:c0:6b: ee:df:fd:1f:17:9e:3d:e8:20:3a:c6:80:81:3b:48:17:6a:72: ec:bd:1c:03:1d:f6:da:d1:4f:2c:75:b9:cf:2d:72:8f:bf:59: 8a:7e:f4:ed:e3:9a:ec:1a:8a:a8:a6:ae:e7:df:04:49:b6:ce: 0e:a4:86:97:4c:ca:79:1a:b5:6e:60:a9:8c:fb:96:c7:18:2b: 2e:a3:6d:c8:70:f5:f2:ee:3e:df:79:35:11:25:80:3a:42:cd: 72:48:eb:87:f5:40:cc:74:c8:98:0e:bb:dc:fa:fb:51:77:7e: 7f:c1:e7:98:98:2e:08:54:e9:d1:0f:71:d5:db:1e:29:6e:48: 06:8b:7e:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwOTUxMTAvBgNVBAUTKEIyOTExMDIxNTQ0NzIxODNDRjUwRDJBRTZGQTMwRTFC REUzNDJCRjQwHhcNMjUxMjIxMDIwNjIwWhcNMjUxMjI4MDIwNjIwWjAYMRYwFAYD VQQDDA02OTQ3NTYxYy1lZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAtm2UxfcP8N7PMFLXBGONhszEdA0QAopfcpAR0DlNAufyPbCnHnoI4HdkD5 L+loiyfrIzInlY8xZBlQ5iosSldJSkaYJDIfpw+czYD9yQlDESInuWGx1ylzib6L SOmOtaJwwWbvEy0nIT18zxLHUUPjFVzdjR+gn66lGydxvQpIXL+uFROEWLr3wez4 BQ8UvSbVeNrGK33ebp+wEgOcU9MFHypC1iCXjIbIJVk+HaeN3tgxBfr1nh/lXuEJ 4lpvtfUWfuicNuLH9P4u8KGr2h6oyco9+5Xeh2FmBwL0xvWg6ZUfuh3YFy0yMJae A8jC2PnBxrr1X9ueC9+eeH3K9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKMavDN WWyz3xRaTS4gc67+XFX3MB8GA1UdIwQYMBaAFLKRECFURyGDz1DSrm+jDhveNCv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjA5NS9BQUJFQjU2QTFB NTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZUFBVTkt1YjZNT0c5NDBL X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwRVFJVlJISVlQUFVOS3ViNk1PRzk0MEtfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjA5NS9BQUJFQjU2QTFBNTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZ UFBVTkt1YjZNT0c5NDBLX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqI6zNa32c6tDDyQ5MuWogpn6hG8CIRYPBRxJ/6DA1QHjTWwIwRLVS ofdDkcK9E7o0GOxYeGIGFGTjoApReNkpzCAvzEmkYiRj6NnOaEYm3IZYh/OmhoXB kL86SIB5NEBlYyO5m/EdT3C7Ctv7luERO+tcBiobs+UQzgPuwGvu3/0fF5496CA6 xoCBO0gXanLsvRwDHfba0U8sdbnPLXKPv1mKfvTt45rsGoqopq7n3wRJts4OpIaX TMp5GrVuYKmM+5bHGCsuo23IcPXy7j7feTURJYA6Qs1ySOuH9UDMdMiYDrvc+vtR d35/weeYmC4IVOnRD3HV2x4pbkgGi37X -----END CERTIFICATE-----Generated at Mon Dec 22 20:46:59 2025 by rpki-client