This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft File: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json) Hash identifier: rksSr862uj/Ryp5BNxLgBgjBSNmp6qWTU52aacc1gZY= Subject key identifier: AD:D3:12:48:A1:11:8E:7C:73:98:B0:77:96:D8:24:8C:65:6C:8C:B3 Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 Certificate issuer: /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18 Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft Manifest number: 0209 Signing time: Sat 20 Dec 2025 15:45:11 +0000 Manifest this update: Sat 20 Dec 2025 15:45:10 +0000 Manifest next update: Sat 27 Dec 2025 15:45:10 +0000 Files and hashes: 1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: Zjn/6h14V9Fg4kMxEBAfOySJyMO0HD/e7aIyrbN8Ck8=) 2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: Kqt9mEj0giKftuB2DBO692CGsOF5kZIoQznyePkJFyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18 Validity Not Before: Dec 20 15:45:10 2025 GMT Not After : Dec 27 15:45:10 2025 GMT Subject: CN=6946c487-41cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3f:2a:18:07:21:ab:47:d1:58:a0:6a:58:64: 72:33:41:1d:d5:28:e7:da:5c:18:f8:30:a7:af:76: de:50:0c:38:c9:e8:2e:3d:21:83:e8:e3:a7:dd:ea: c4:6c:0f:2a:13:d2:3c:4d:f0:4c:ce:c7:f4:d9:26: bd:17:b5:22:86:9e:b2:4d:db:c9:7e:69:2c:69:2a: 83:36:8e:48:51:c9:59:ee:12:0d:e4:aa:66:7e:95: 03:cb:81:54:aa:fb:41:37:c0:5c:f0:84:e6:d2:49: 61:63:6c:dc:88:59:30:e4:11:8b:1b:e2:64:3d:5f: dc:cf:34:37:a8:6f:21:79:9c:e8:3f:ac:d1:d6:f6: 2b:ca:30:4e:ee:81:da:6d:5f:d1:66:38:15:b3:6e: d4:92:5a:d6:ee:b8:b4:42:f4:87:a3:61:6d:17:d3: 66:e7:9a:0d:94:26:5c:7d:0f:cb:d2:6d:f7:0b:33: fa:cd:8a:ba:2a:dd:24:56:86:a9:9d:80:06:cc:0b: bf:58:b7:9c:2d:de:47:55:2c:1d:82:be:c9:32:ff: fb:a2:19:d5:5e:91:62:cc:6a:0a:47:35:6e:0d:98: ef:b7:30:29:4b:1d:06:d6:97:94:1f:a4:80:13:20: 30:04:98:2e:ee:c3:8e:ff:2b:80:d2:59:c9:12:db: 2d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D3:12:48:A1:11:8E:7C:73:98:B0:77:96:D8:24:8C:65:6C:8C:B3 X509v3 Authority Key Identifier: keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9c:03:98:59:a9:08:87:43:3b:bd:22:e6:2a:6e:62:c7:fc: 0d:2f:65:fc:c7:a7:be:7a:a5:9d:45:de:41:f2:8a:98:fa:99: da:b3:f4:18:1e:0e:ca:fd:33:d6:fd:f3:a4:67:15:62:de:22: 6b:ae:f4:62:91:73:69:7e:c2:b3:54:f0:80:84:90:5e:95:41: 60:01:07:42:ba:4c:54:f6:57:77:46:46:01:97:1f:4b:7f:83: 0d:be:75:f9:6c:76:0a:14:50:ee:a7:53:45:f1:9c:1b:e3:5c: 87:bc:e1:ea:02:1c:b5:96:29:12:9a:b5:7e:bf:26:79:0e:19: 56:02:17:59:0f:7e:59:c8:91:f5:0a:63:22:2f:27:7f:43:24: 0e:44:d6:0b:57:26:72:7b:76:27:4e:04:35:8a:67:3f:40:e5: 1d:ca:22:5c:bf:92:da:8f:9b:43:bd:00:c7:dd:ee:14:d4:9b: 6e:cc:db:6f:4b:49:ab:b9:b2:eb:cd:5b:ff:6e:a6:d2:6b:55: b1:5d:6c:54:44:b7:67:9a:f3:52:2a:e3:12:8c:39:21:5d:6c: 13:c4:2f:2e:49:7e:73:3d:da:e1:7e:d7:cb:7d:bd:4f:0b:2e: 2d:d8:7b:b6:2a:58:b9:92:fb:d6:05:70:32:10:f4:3c:b4:d7: 7a:70:af:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEQ1MEMyOTU3REZBODQwQTk0MzBGQjlFRTI1RDREQ0ZB MTcxMjlDMTgwHhcNMjUxMjIwMTU0NTEwWhcNMjUxMjI3MTU0NTEwWjAYMRYwFAYD VQQDDA02OTQ2YzQ4Ny00MWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsj8qGAchq0fRWKBqWGRyM0Ed1Sjn2lwY+DCnr3beUAw4yeguPSGD6OOn3erE bA8qE9I8TfBMzsf02Sa9F7Uihp6yTdvJfmksaSqDNo5IUclZ7hIN5KpmfpUDy4FU qvtBN8Bc8ITm0klhY2zciFkw5BGLG+JkPV/czzQ3qG8heZzoP6zR1vYryjBO7oHa bV/RZjgVs27UklrW7ri0QvSHo2FtF9Nm55oNlCZcfQ/L0m33CzP6zYq6Kt0kVoap nYAGzAu/WLecLd5HVSwdgr7JMv/7ohnVXpFizGoKRzVuDZjvtzApSx0G1peUH6SA EyAwBJgu7sOO/yuA0lnJEtstmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3TEkih EY58c5iwd5bYJIxlbIyzMB8GA1UdIwQYMBaAFNUMKVffqECpQw+57iXU3PoXEpwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82NjBFMDU4OEQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FLbEREN251SmRUYy1oY1Nu QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzFRd3BWOS1vUUtsREQ3bnVKZFRjLWhjU25CZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82NjBFMDU4OEQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FL bEREN251SmRUYy1oY1NuQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/nAOYWakIh0M7vSLmKm5ix/wNL2X8x6e+eqWdRd5B8oqY+pnas/QY Hg7K/TPW/fOkZxVi3iJrrvRikXNpfsKzVPCAhJBelUFgAQdCukxU9ld3RkYBlx9L f4MNvnX5bHYKFFDup1NF8Zwb41yHvOHqAhy1likSmrV+vyZ5DhlWAhdZD35ZyJH1 CmMiLyd/QyQORNYLVyZye3YnTgQ1imc/QOUdyiJcv5Laj5tDvQDH3e4U1JtuzNtv S0mrubLrzVv/bqbSa1WxXWxURLdnmvNSKuMSjDkhXWwTxC8uSX5zPdrhftfLfb1P Cy4t2Hu2Kli5kvvWBXAyEPQ8tNd6cK+g -----END CERTIFICATE-----Generated at Sun Dec 21 07:11:03 2025 by rpki-client