This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json) Hash identifier: IFCuIQ2Ivax6avvW3pLDCllwpGSIIRVAPiToZUJmI4I= Subject key identifier: AE:EA:ED:A4:A6:ED:8B:5F:C3:C0:55:E9:BE:DE:3D:33:3E:D1:B5:2A Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft Manifest number: 025E Signing time: Sat 20 Dec 2025 21:28:23 +0000 Manifest this update: Sat 20 Dec 2025 21:28:22 +0000 Manifest next update: Sat 27 Dec 2025 21:28:22 +0000 Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: eq3zbdfoUI/e4YxtiEXzViSI6BZ8pTMgwlAmfMb+mLg=) 2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: xsRGj9an13o+ozRk8T0R12ysRESN2vJXv8XQcYafKCU=) 3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: 0ZDkLkZaaQfnmuzBjz0ljr58b+EeHu6qJ0K1k0tRYzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Validity Not Before: Dec 20 21:28:22 2025 GMT Not After : Dec 27 21:28:22 2025 GMT Subject: CN=694714f6-9531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:00:73:6b:63:a4:06:a7:7d:ad:ff:4a:b6: e9:92:e4:91:0a:6b:0b:31:51:bd:af:24:5a:6d:28: 5f:62:4b:50:9d:8b:f6:60:9c:d8:24:cc:42:fe:ed: cc:d1:c6:26:94:6f:60:a3:13:18:9d:48:f4:ec:8f: b4:3f:71:c1:de:6d:5b:cd:c9:86:87:35:2e:1d:2d: 2e:7a:cd:7d:bf:20:a6:81:04:a7:b9:16:59:3b:94: 55:2e:2b:37:35:1d:ac:d3:04:19:f4:fb:99:e6:1b: 2f:15:79:13:2a:40:e7:f7:bc:45:e0:fb:f9:df:b7: c1:bc:db:d5:5b:ca:42:97:e1:14:c5:eb:73:bd:af: 7a:d4:9a:40:d8:57:b2:2a:f0:82:df:45:77:25:12: e2:c6:7c:9c:c6:5d:83:89:45:97:9f:16:77:89:f2: 96:43:7a:a9:24:3e:75:c7:12:de:af:03:94:12:a2: 12:17:f4:ea:3f:2b:ae:40:7b:8c:eb:83:43:88:79: 2c:66:4c:d2:8e:f8:a9:21:74:9f:b4:89:d6:78:1b: 9a:1b:87:b0:95:fd:23:ea:4f:68:bb:64:1e:44:ad: 0b:2e:5e:1f:33:4a:1d:45:db:c7:77:2b:f9:3a:9c: fb:96:4f:36:11:15:3e:2a:86:58:7f:b3:85:eb:e0: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EA:ED:A4:A6:ED:8B:5F:C3:C0:55:E9:BE:DE:3D:33:3E:D1:B5:2A X509v3 Authority Key Identifier: keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:05:b1:5b:7c:32:66:74:00:b0:31:6b:d1:ea:b8:a7:f3:14: 35:26:48:00:11:ef:40:5f:41:fe:ff:a6:9a:7e:79:2d:30:41: a1:81:fa:ef:fb:57:29:a4:ee:e1:2f:be:15:d6:83:95:60:66: 50:03:b4:de:54:87:22:31:b7:26:8e:1b:5e:fc:e4:c4:dd:d2: 88:b0:29:41:83:35:0f:ba:52:43:51:ab:0a:67:6c:0e:4e:36: 64:0f:78:31:e6:5f:32:e9:d0:99:03:9a:e4:9b:26:04:fc:5a: 1e:ee:4a:61:59:05:18:27:4f:17:44:6e:e1:48:44:a0:fb:e6: 60:ef:36:ed:fb:1a:fb:83:e7:aa:60:87:45:1c:f6:ae:32:ed: 53:87:fe:1b:e2:03:28:0e:d8:4a:6f:05:6c:73:bc:62:5f:1e: 0a:2d:e7:4f:59:3f:79:86:bf:86:28:48:84:2b:73:61:dd:d6: f6:ff:29:8e:55:45:dd:95:f2:91:79:06:36:1e:ea:1b:55:3e: 08:b0:ec:8d:78:04:24:04:c5:fe:92:6f:5d:03:3c:6c:1a:ec: 5c:00:49:90:f2:b0:61:4f:9c:f4:07:1e:9f:7e:d5:bc:fa:73: cc:c2:c1:76:dd:d1:a7:86:d8:37:91:c4:2b:45:ee:aa:60:bc: 70:e6:53:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5 OTFDQzQwRkIwHhcNMjUxMjIwMjEyODIyWhcNMjUxMjI3MjEyODIyWjAYMRYwFAYD VQQDDA02OTQ3MTRmNi05NTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvsAc2tjpAanfa3/SrbpkuSRCmsLMVG9ryRabShfYktQnYv2YJzYJMxC/u3M 0cYmlG9goxMYnUj07I+0P3HB3m1bzcmGhzUuHS0ues19vyCmgQSnuRZZO5RVLis3 NR2s0wQZ9PuZ5hsvFXkTKkDn97xF4Pv537fBvNvVW8pCl+EUxetzva961JpA2Fey KvCC30V3JRLixnycxl2DiUWXnxZ3ifKWQ3qpJD51xxLerwOUEqISF/TqPyuuQHuM 64NDiHksZkzSjvipIXSftInWeBuaG4ewlf0j6k9ou2QeRK0LLl4fM0odRdvHdyv5 Opz7lk82ERU+KoZYf7OF6+BirwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7q7aSm 7Ytfw8BV6b7ePTM+0bUqMB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0 NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByBbFbfDJmdACwMWvR6rin8xQ1JkgAEe9AX0H+/6aafnktMEGhgfrv +1cppO7hL74V1oOVYGZQA7TeVIciMbcmjhte/OTE3dKIsClBgzUPulJDUasKZ2wO TjZkD3gx5l8y6dCZA5rkmyYE/Foe7kphWQUYJ08XRG7hSESg++Zg7zbt+xr7g+eq YIdFHPauMu1Th/4b4gMoDthKbwVsc7xiXx4KLedPWT95hr+GKEiEK3Nh3db2/ymO VUXdlfKReQY2HuobVT4IsOyNeAQkBMX+km9dAzxsGuxcAEmQ8rBhT5z0Bx6fftW8 +nPMwsF23dGnhtg3kcQrRe6qYLxw5lNj -----END CERTIFICATE-----Generated at Mon Dec 22 06:33:07 2025 by rpki-client