This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft File: _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json) Hash identifier: DY+UUkCVNhjJZZaWIMIwF9cw1GPOitLF3xELMtFM+fA= Subject key identifier: E0:5D:67:89:18:FB:C6:49:E1:3D:8B:2C:76:BC:3B:D6:96:0B:C1:32 Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft Manifest number: 0120 Signing time: Fri 19 Dec 2025 03:56:41 +0000 Manifest this update: Fri 19 Dec 2025 03:56:40 +0000 Manifest next update: Fri 26 Dec 2025 03:56:40 +0000 Files and hashes: 1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: z/ROhY6rW62+15uiQQlw7RMmNDOpY11rTHmQckJuCAU=) 2: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: SrRGCeTkPcXvi63UKXsEnuqePLRhHVKqBX2soL9amKI=) 3: C06D45B6961611F0870D4413C4F9AE02.roa (hash: w0+vj4aVz0K4Becg/iBGdIuc8dYR3B+infU6zn+iFnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F Validity Not Before: Dec 19 03:56:40 2025 GMT Not After : Dec 26 03:56:40 2025 GMT Subject: CN=6944ccf9-a9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:aa:fc:7a:e5:ce:1f:12:0e:c2:07:a3:fa:bc: f6:ff:df:cc:51:6d:8a:b1:f4:61:91:35:4d:8b:5b: 9d:ae:c2:8d:1e:55:2e:2e:77:c0:a1:c0:a2:76:9a: 78:81:d9:7d:91:68:df:4e:c3:ba:bc:57:90:69:48: 06:e3:c8:73:36:93:55:14:b9:54:8f:94:3d:4a:5a: 88:12:52:df:16:50:44:ab:5e:01:15:ba:c1:8f:40: 9e:8c:a5:e2:31:df:fe:47:1e:3e:44:98:ed:62:22: 55:ed:7c:e3:0d:76:ea:35:54:03:9d:5b:aa:c4:09: 64:66:da:c8:e1:60:4f:d1:cd:f6:58:13:6d:12:e0: 8f:45:b3:26:e5:30:9a:ae:1a:c8:81:68:05:9b:69: 79:14:b4:66:9d:36:ed:a2:e0:42:d0:cf:97:4d:4b: 8e:03:5a:73:93:d7:f7:e4:71:eb:f2:e1:84:c1:ce: b1:be:46:05:c8:83:fc:28:93:64:2f:29:44:75:fb: 95:63:1f:60:42:8e:35:c0:d0:75:11:9a:fd:71:2e: 9b:2e:b2:c8:7f:12:60:35:aa:fd:9f:4b:35:4e:b1: d4:9f:a1:cb:3e:2d:dd:60:e7:65:60:cc:fa:4d:04: c3:34:7a:39:b7:51:54:1b:7a:83:c8:f4:25:e6:84: 99:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5D:67:89:18:FB:C6:49:E1:3D:8B:2C:76:BC:3B:D6:96:0B:C1:32 X509v3 Authority Key Identifier: keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ba:cd:ab:73:f4:e7:19:54:1c:de:88:b3:e3:68:0e:c1:e5: 09:97:04:30:c4:6b:67:65:30:94:aa:10:c3:11:1b:b3:64:1b: ec:49:05:71:fb:0d:e4:e7:cb:d8:21:6d:95:52:03:c7:8f:08: 16:e1:8a:a2:f9:14:1b:f8:d1:eb:01:9e:e2:32:19:e5:59:b1: 83:df:56:32:ad:2f:4e:d1:25:c6:25:b5:75:8c:b8:6e:a3:fd: 94:23:a7:50:c9:b0:07:fb:d6:f4:d5:06:1e:be:95:77:fc:89: ea:40:58:02:a1:aa:41:72:71:3e:03:de:38:b5:17:b9:d8:cc: 31:16:65:dc:10:b2:7d:7d:d4:72:f8:3a:60:58:0e:7a:ba:8d: a6:99:3f:7c:bf:04:a5:1d:d9:11:87:51:1b:ae:43:d6:33:dc: ee:6b:83:72:55:fc:11:46:66:56:a2:8f:7c:54:8a:69:2f:18: 3b:02:26:7a:68:a1:4c:09:82:d5:31:ba:14:f1:e3:64:9d:44: 64:16:d5:0f:c3:af:15:f6:1d:18:99:e7:3c:03:33:b5:ec:f7: b5:bc:70:4a:c4:57:e9:40:0c:84:b9:0c:85:33:3e:1c:ba:14: 26:ba:59:ba:04:2c:12:b5:78:7d:dc:d6:01:a2:22:58:b8:db: bb:e7:4f:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzREMxMTAvBgNVBAUTKEZFQUJBRDkyMzVBRUYxNzAyM0NEQ0ZCMTYxOTAyNkYz Q0VEQjJDN0YwHhcNMjUxMjE5MDM1NjQwWhcNMjUxMjI2MDM1NjQwWjAYMRYwFAYD VQQDDA02OTQ0Y2NmOS1hOWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Kr8euXOHxIOwgej+rz2/9/MUW2KsfRhkTVNi1udrsKNHlUuLnfAocCidpp4 gdl9kWjfTsO6vFeQaUgG48hzNpNVFLlUj5Q9SlqIElLfFlBEq14BFbrBj0CejKXi Md/+Rx4+RJjtYiJV7XzjDXbqNVQDnVuqxAlkZtrI4WBP0c32WBNtEuCPRbMm5TCa rhrIgWgFm2l5FLRmnTbtouBC0M+XTUuOA1pzk9f35HHr8uGEwc6xvkYFyIP8KJNk LylEdfuVYx9gQo41wNB1EZr9cS6bLrLIfxJgNar9n0s1TrHUn6HLPi3dYOdlYMz6 TQTDNHo5t1FUG3qDyPQl5oSZVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBdZ4kY +8ZJ4T2LLHa8O9aWC8EyMB8GA1UdIwQYMBaAFP6rrZI1rvFwI83PsWGQJvPO2yx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy85N0RGN0ExMjMw NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThYQWp6Yy14WVpBbTg4N2JM SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19xdXRrald1OFhBanpjLXhZWkFtODg3YkxIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy85N0RGN0ExMjMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThY QWp6Yy14WVpBbTg4N2JMSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfus2rc/TnGVQc3oiz42gOweUJlwQwxGtnZTCUqhDDERuzZBvsSQVx +w3k58vYIW2VUgPHjwgW4Yqi+RQb+NHrAZ7iMhnlWbGD31YyrS9O0SXGJbV1jLhu o/2UI6dQybAH+9b01QYevpV3/InqQFgCoapBcnE+A944tRe52MwxFmXcELJ9fdRy +DpgWA56uo2mmT98vwSlHdkRh1EbrkPWM9zua4NyVfwRRmZWoo98VIppLxg7AiZ6 aKFMCYLVMboU8eNknURkFtUPw68V9h0Ymec8AzO17Pe1vHBKxFfpQAyEuQyFMz4c uhQmulm6BCwStXh93NYBoiJYuNu75090 -----END CERTIFICATE-----Generated at Sat Dec 20 00:54:41 2025 by rpki-client