This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft File: ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json) Hash identifier: X9sDnL/M1Oi/ebRSD62FR7n6cPRZp07avNoBnKUE/Tk= Subject key identifier: AF:34:E2:67:C7:CA:7A:80:F7:FC:CA:08:3B:FB:4F:30:28:F7:77:EE Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 Certificate issuer: /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft Manifest number: CC Signing time: Sun 21 Dec 2025 04:55:24 +0000 Manifest this update: Sun 21 Dec 2025 04:55:24 +0000 Manifest next update: Sun 28 Dec 2025 04:55:24 +0000 Files and hashes: 1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: 6nasjh4tCQRZ39dH0pnTuDriPeGIx38VbYRBVGY5rr0=) 2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: J45sLiwW4UVC5sdSS+IxX3cBMgJ0HE+7WdnowtCp0yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Validity Not Before: Dec 21 04:55:24 2025 GMT Not After : Dec 28 04:55:24 2025 GMT Subject: CN=69477dbc-6d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:99:88:68:73:8d:8c:bb:3c:8e:b8:94:c9:b7: 73:f8:6b:99:8c:fb:c7:70:60:36:19:55:b0:fc:8e: 1d:ee:5f:81:9c:70:ea:c2:14:b7:a5:af:c4:c9:ac: 53:55:8d:2f:2c:5d:a1:f3:d0:56:17:98:cd:6b:70: e8:3f:f2:17:cd:8d:88:20:c4:7b:7c:0c:4f:f0:5e: 5f:95:1a:9d:34:ee:01:23:90:6a:90:25:cb:61:e5: c9:60:4a:66:90:81:89:c9:1c:99:7f:7f:ee:fd:c4: d0:6c:ed:09:37:05:1f:f6:01:ce:0e:30:98:63:bc: 9c:91:d5:67:48:27:3e:75:6b:0b:44:c2:aa:77:35: eb:0a:26:c3:a5:99:46:25:d4:03:28:b5:31:92:6f: a9:a4:04:3a:46:a3:72:48:1c:dd:23:a3:13:73:70: 90:6b:0c:2e:12:28:24:6a:4e:00:30:68:28:44:df: ce:4c:bf:70:50:b2:f3:fc:07:4e:05:02:bb:96:2b: a9:dd:29:f7:c4:d8:b4:10:99:f2:86:68:fe:de:6b: d4:92:bf:60:62:48:e2:c6:a9:1e:af:38:ba:ca:17: e4:3f:6d:25:9a:a2:5a:a2:f2:71:e2:bb:00:d6:a2: 0c:ae:5d:2a:ed:9d:4b:d1:31:6e:39:18:4a:e6:19: d7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:34:E2:67:C7:CA:7A:80:F7:FC:CA:08:3B:FB:4F:30:28:F7:77:EE X509v3 Authority Key Identifier: keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6a:f8:86:15:f3:50:fd:78:62:83:41:46:54:ff:00:8f:0c: d4:9e:6b:1c:72:39:f1:9d:69:66:79:5b:c0:f2:c9:e6:89:d1: b2:46:a3:a6:d4:3b:1f:08:db:53:96:27:94:55:54:eb:0d:2e: 23:88:5c:a1:d6:d1:fb:fb:b5:1f:05:3f:6e:e0:37:28:b7:57: 0c:69:37:19:40:4d:0a:31:ce:e0:a1:e5:ef:71:fd:c1:7c:fb: cd:3b:1f:9e:36:95:4f:cf:c3:30:51:36:ab:86:c2:48:79:d7: 26:91:11:36:81:72:fc:63:4f:b3:73:25:04:70:b9:8b:b2:0f: d2:31:75:44:bd:28:38:2a:65:52:dd:64:3e:33:5b:6b:96:29: 3d:7c:19:dc:3b:27:34:bb:ea:9c:63:5a:90:20:c2:a7:98:cf: 80:b5:5f:98:7a:a2:7f:aa:11:86:4f:97:fc:3f:ed:07:26:3c: 36:8c:8f:c4:a0:77:84:d1:74:90:96:7a:eb:7c:3b:2f:11:e3: 8b:ad:69:cb:b6:51:82:2f:d0:8d:e7:05:57:d5:f3:d1:45:a4: dc:b9:97:c3:c5:37:cc:3f:2c:da:5d:5f:83:8d:56:12:ee:94: 19:20:d5:76:09:d1:81:81:df:5d:fd:5c:f1:e6:5e:d9:38:34: 38:f3:7f:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwRjcxMTAvBgNVBAUTKDAwQjcyQUQ1MzMzQ0VBQUUxQTU4NUM4MjgwODlDNDQ1 NTk5OTYzRjIwHhcNMjUxMjIxMDQ1NTI0WhcNMjUxMjI4MDQ1NTI0WjAYMRYwFAYD VQQDDA02OTQ3N2RiYy02ZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypmIaHONjLs8jriUybdz+GuZjPvHcGA2GVWw/I4d7l+BnHDqwhS3pa/EyaxT VY0vLF2h89BWF5jNa3DoP/IXzY2IIMR7fAxP8F5flRqdNO4BI5BqkCXLYeXJYEpm kIGJyRyZf3/u/cTQbO0JNwUf9gHODjCYY7yckdVnSCc+dWsLRMKqdzXrCibDpZlG JdQDKLUxkm+ppAQ6RqNySBzdI6MTc3CQawwuEigkak4AMGgoRN/OTL9wULLz/AdO BQK7liup3Sn3xNi0EJnyhmj+3mvUkr9gYkjixqkerzi6yhfkP20lmqJaovJx4rsA 1qIMrl0q7Z1L0TFuORhK5hnXMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK804mfH ynqA9/zKCDv7TzAo93fuMB8GA1UdIwQYMBaAFAC3KtUzPOquGlhcgoCJxEVZmWPy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBGNy85Rjc2OEFGQUE3 RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZxNGFXRnlDZ0luRVJWbVpZ X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FMY3ExVE04NnE0YVdGeUNnSW5FUlZtWllfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODBGNy85Rjc2OEFGQUE3RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZx NGFXRnlDZ0luRVJWbVpZX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7aviGFfNQ/Xhig0FGVP8AjwzUnmsccjnxnWlmeVvA8snmidGyRqOm 1DsfCNtTlieUVVTrDS4jiFyh1tH7+7UfBT9u4Dcot1cMaTcZQE0KMc7goeXvcf3B fPvNOx+eNpVPz8MwUTarhsJIedcmkRE2gXL8Y0+zcyUEcLmLsg/SMXVEvSg4KmVS 3WQ+M1trlik9fBncOyc0u+qcY1qQIMKnmM+AtV+YeqJ/qhGGT5f8P+0HJjw2jI/E oHeE0XSQlnrrfDsvEeOLrWnLtlGCL9CN5wVX1fPRRaTcuZfDxTfMPyzaXV+DjVYS 7pQZINV2CdGBgd9d/Vzx5l7ZODQ4838r -----END CERTIFICATE-----Generated at Mon Dec 22 00:13:12 2025 by rpki-client