This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json) Hash identifier: zPouESRxB4cSSDT74sf+ieepCy+AU5KxmMfVvY2LLB0= Subject key identifier: AE:BA:EE:25:CB:9D:81:E8:76:A9:97:62:F5:8D:6C:13:5B:94:17:F0 Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0B92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft Manifest number: 0B7C Signing time: Mon 22 Dec 2025 18:38:31 +0000 Manifest this update: Mon 22 Dec 2025 18:38:31 +0000 Manifest next update: Mon 29 Dec 2025 18:38:31 +0000 Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: rgD5XsTMPR+tq0DCzyt7fmwOWaxenHttLwa8+j3WlIE=) 2: 5F47B232DF0711F0899AA5EF5C6F56BC.roa (hash: SauP6nDooiqlWIoLNHqPCC3v5Fx+lq8e50AU0GvqpMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2962 (0xb92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: Dec 22 18:38:31 2025 GMT Not After : Dec 29 18:38:31 2025 GMT Subject: CN=69499027-24a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:db:a6:69:cf:be:c7:e6:4b:0d:b6:67:ae: 1e:23:35:38:20:37:6c:86:a2:9a:26:6e:a7:7b:a6: f7:67:7d:de:21:ef:34:cc:07:c2:99:46:9f:02:a5: ce:06:c3:1f:0b:cf:fe:8d:80:5b:d9:53:97:e3:0d: 13:b9:93:16:53:37:dd:06:b4:3a:00:3f:e4:52:f7: 49:53:a3:61:ce:01:ff:31:a0:57:c0:95:3e:ab:f2: 95:5a:d4:3b:c3:dd:6b:f8:b3:cf:bb:c2:6c:3a:e9: 12:f5:da:c9:63:25:e6:a0:a0:a9:f8:3c:74:29:47: 02:30:29:aa:e8:1b:ea:7c:7b:21:6b:7b:40:9f:ee: 67:a8:f8:2b:8c:ff:df:34:76:6d:81:82:7f:54:d7: cc:97:83:5c:f2:c1:35:d3:92:57:04:9a:88:89:ac: 56:44:44:a7:e0:22:9d:87:03:25:4a:4b:c3:02:f0: ca:bf:87:d7:4a:fd:23:73:b3:9c:01:7f:12:d5:fd: ed:ae:5c:fa:dd:5a:e2:90:e2:0c:76:98:ad:79:68: 62:d8:92:95:8c:4b:92:db:5b:c8:75:f4:9b:b6:30: 3f:57:45:98:2c:17:ce:2e:73:45:78:75:4a:a7:c5: 0a:08:97:d6:b9:aa:84:f3:c2:4e:db:90:e1:89:b7: bf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BA:EE:25:CB:9D:81:E8:76:A9:97:62:F5:8D:6C:13:5B:94:17:F0 X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:97:a7:25:fc:47:6a:fe:68:17:76:ff:5b:73:21:49:b1:1a: 82:06:91:4d:2b:3f:3e:8d:76:87:db:30:fb:7d:b9:0a:b3:09: 62:3d:90:a8:31:4a:d5:19:34:bb:30:0c:e3:d0:94:77:9e:8c: 8d:85:7e:6b:9f:fe:66:c4:6a:f8:75:2a:81:e4:a3:c5:4d:95: 0f:44:c1:fc:dc:82:d6:a0:8c:b6:ff:f7:a5:27:ab:3f:60:cb: 65:19:1f:e5:f7:d4:75:78:d6:e6:df:b7:44:e5:93:3e:dc:e7: 4c:1c:29:9a:b8:1b:53:15:ec:a6:81:e4:d6:1d:4d:f6:09:a1: 88:23:be:a4:09:e3:e7:3e:ea:81:36:8f:1c:9f:a1:21:fa:d4: 23:28:c4:29:0a:08:a3:d2:a1:fe:26:cf:72:b8:f7:fc:e2:0b: b1:a6:87:d2:45:85:a1:2a:ad:50:27:97:63:8a:74:93:a5:fe: c1:20:be:0b:fa:8a:e8:0d:f0:3b:7c:33:03:71:71:f9:91:28: f7:d1:79:75:bc:99:bf:49:4e:49:a8:6e:69:04:79:f0:5a:a8: 58:08:8a:4b:eb:f1:5a:27:07:52:a1:7c:fc:69:35:e8:a0:a6: 52:dd:19:90:bf:89:99:8f:b7:b2:9b:5e:34:98:da:79:8c:f3: 7d:cc:01:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjUxMjIyMTgzODMxWhcNMjUxMjI5MTgzODMxWjAYMRYwFAYD VQQDDA02OTQ5OTAyNy0yNGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1HbpmnPvsfmSw22Z64eIzU4IDdshqKaJm6ne6b3Z33eIe80zAfCmUafAqXO BsMfC8/+jYBb2VOX4w0TuZMWUzfdBrQ6AD/kUvdJU6NhzgH/MaBXwJU+q/KVWtQ7 w91r+LPPu8JsOukS9drJYyXmoKCp+Dx0KUcCMCmq6BvqfHsha3tAn+5nqPgrjP/f NHZtgYJ/VNfMl4Nc8sE105JXBJqIiaxWRESn4CKdhwMlSkvDAvDKv4fXSv0jc7Oc AX8S1f3trlz63VrikOIMdpiteWhi2JKVjEuS21vIdfSbtjA/V0WYLBfOLnNFeHVK p8UKCJfWuaqE88JO25Dhibe/gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK667iXL nYHodqmXYvWNbBNblBfwMB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4 MjQxX1JNYnh6UlBuUEM4akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIl6cl/Edq/mgXdv9bcyFJsRqCBpFNKz8+jXaH2zD7fbkKswliPZCo MUrVGTS7MAzj0JR3noyNhX5rn/5mxGr4dSqB5KPFTZUPRMH83ILWoIy2//elJ6s/ YMtlGR/l99R1eNbm37dE5ZM+3OdMHCmauBtTFeymgeTWHU32CaGII76kCePnPuqB No8cn6Eh+tQjKMQpCgij0qH+Js9yuPf84guxpofSRYWhKq1QJ5djinSTpf7BIL4L +oroDfA7fDMDcXH5kSj30Xl1vJm/SU5JqG5pBHnwWqhYCIpL6/FaJwdSoXz8aTXo oKZS3RmQv4mZj7eym140mNp5jPN9zAFB -----END CERTIFICATE-----Generated at Tue Dec 23 03:20:47 2025 by rpki-client