This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft File: QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json) Hash identifier: cUvum1oxD3aOTpwNRtMb9ZpTI+ET3xPXCLuhyriX6yE= Subject key identifier: 24:3D:A5:33:53:15:2C:D5:5E:9F:81:43:4F:9F:65:1F:A3:75:53:6E Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF Certificate issuer: /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Certificate serial: 08B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft Manifest number: 089B Signing time: Wed 24 Dec 2025 20:01:44 +0000 Manifest this update: Wed 24 Dec 2025 20:01:44 +0000 Manifest next update: Wed 31 Dec 2025 20:01:44 +0000 Files and hashes: 1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: IKpwxTCIKAGo3BxCBbkQOZa3l8yNQT9wmSnMk29gM84=) 2: 4F6913406BBF11EFA2832A74C4F9AE02.roa (hash: dKNk5pPJbrzAnkXqkxI0ZuHUsGDU8sX1yqD52DpKuAQ=) 3: 4EA76BD26BBF11EFA2832A74C4F9AE02.roa (hash: 0ru7xYrLjnDIEAfDou0iidHCCux0ow/jB57Xp7tPDLw=) 4: 036D9582D09611F0AF11A347C4F9AE02.roa (hash: Ntwo+Fe7uong9zZ1PuG17FiWO3z9Eq8JWbvskTqlWWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 20:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2228 (0x8b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Validity Not Before: Dec 24 20:01:44 2025 GMT Not After : Dec 31 20:01:44 2025 GMT Subject: CN=694c46a8-48f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:2e:6c:38:46:32:6b:da:47:f4:b5:1b:ee: d0:cd:f0:88:a9:0b:d0:d5:8b:d1:0b:a7:c4:e0:a7: 64:31:a2:fc:a8:a3:06:d5:a6:c5:34:7e:57:bb:c4: 97:d7:37:de:84:bd:02:8a:01:65:66:8f:19:df:c7: 96:e4:3b:64:0a:94:33:b4:fe:eb:27:aa:c6:41:77: 0c:c0:d6:b4:bd:f8:cc:af:ab:99:e6:69:6d:03:92: 25:83:28:91:c9:6f:97:01:03:f7:43:e5:b0:d0:f0: 4c:65:4a:f0:6e:c8:19:fd:1a:9a:b8:0c:2e:c1:a8: ff:3a:99:96:a5:35:38:0f:08:94:ef:83:f0:dd:0e: c7:dc:c6:94:f2:1f:de:bd:d1:88:5c:8c:b8:b8:40: 51:af:2e:6a:8d:1b:2a:da:c2:1e:89:f2:30:4d:8e: ca:61:9a:51:ec:a9:3d:20:fe:ba:18:41:f0:32:7f: 48:1f:c3:fe:65:ac:91:8b:47:35:bd:a2:b6:46:8b: e7:a1:20:0a:b6:b4:50:48:c0:ce:62:af:de:ff:17: 64:27:33:03:61:92:b4:ac:80:6b:9b:ef:e8:87:17: 27:6a:53:91:c9:48:03:3b:b5:78:61:06:37:ec:20: 95:b4:7a:dd:ff:c9:21:96:cf:60:7b:16:51:53:6e: ee:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3D:A5:33:53:15:2C:D5:5E:9F:81:43:4F:9F:65:1F:A3:75:53:6E X509v3 Authority Key Identifier: keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:bd:22:b2:e5:fb:b9:bc:96:34:62:f8:86:c2:6e:ae:1d:fd: ca:a1:99:ef:59:6d:cf:89:ee:69:60:8d:14:c8:af:65:c6:6a: 92:cc:63:8b:5b:fb:20:13:53:fe:2d:5b:c1:f6:ad:47:dd:f7: cc:ea:57:4c:8a:48:02:71:8b:61:5a:34:50:e5:01:27:bb:56: 1c:01:8a:33:fc:69:57:5f:47:e2:5b:d7:42:bf:36:41:b7:2a: 26:56:c0:0e:57:c0:5e:6c:23:4c:ee:9d:de:48:4d:7c:25:69: c2:7e:ed:84:8a:7a:cc:e5:8d:17:e0:2c:f3:11:30:b8:59:1f: c2:53:45:3b:ad:31:af:86:ed:d9:83:2c:50:c2:cc:c4:c8:8e: 00:90:b1:2e:9e:f2:22:86:a0:75:4b:1a:ec:1f:39:ac:2a:1e: 7a:07:24:a2:cb:24:99:19:4a:3f:01:92:cf:b6:dc:48:d6:2a: 71:ac:49:4a:f8:e8:9d:8f:ac:19:13:7f:17:aa:2c:51:68:7d: 0f:87:3e:7a:59:30:9f:a1:ed:94:78:d8:4c:ce:ab:4b:29:75: bc:2a:0c:8b:c1:cb:51:c7:b3:aa:11:58:05:57:d5:0e:8e:83: 9e:6c:30:bf:b3:19:71:c9:be:d1:04:e1:f1:a5:de:3e:a8:77: 6b:86:0b:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDQyNkI2MjBDMDQwQzgzOTQ2QTRCNzU4NjQzNkVDQkQw RkM0NTQ2Q0YwHhcNMjUxMjI0MjAwMTQ0WhcNMjUxMjMxMjAwMTQ0WjAYMRYwFAYD VQQDDA02OTRjNDZhOC00OGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMYubDhGMmvaR/S1G+7QzfCIqQvQ1YvRC6fE4KdkMaL8qKMG1abFNH5Xu8SX 1zfehL0CigFlZo8Z38eW5DtkCpQztP7rJ6rGQXcMwNa0vfjMr6uZ5mltA5IlgyiR yW+XAQP3Q+Ww0PBMZUrwbsgZ/RqauAwuwaj/OpmWpTU4DwiU74Pw3Q7H3MaU8h/e vdGIXIy4uEBRry5qjRsq2sIeifIwTY7KYZpR7Kk9IP66GEHwMn9IH8P+ZayRi0c1 vaK2RovnoSAKtrRQSMDOYq/e/xdkJzMDYZK0rIBrm+/ohxcnalORyUgDO7V4YQY3 7CCVtHrd/8khls9gexZRU27uSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQ9pTNT FSzVXp+BQ0+fZR+jdVNuMB8GA1UdIwQYMBaAFEJrYgwEDIOUakt1hkNuy9D8RUbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi81MzE5MTA0NkRD MjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1UnFTM1dHUTI3TDBQeEZS czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtdGlEQVFNZzVScVMzV0dRMjdMMFB4RlJzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi81MzE5MTA0NkRDMjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1 UnFTM1dHUTI3TDBQeEZSczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRvSKy5fu5vJY0YviGwm6uHf3KoZnvWW3Pie5pYI0UyK9lxmqSzGOL W/sgE1P+LVvB9q1H3ffM6ldMikgCcYthWjRQ5QEnu1YcAYoz/GlXX0fiW9dCvzZB tyomVsAOV8BebCNM7p3eSE18JWnCfu2EinrM5Y0X4CzzETC4WR/CU0U7rTGvhu3Z gyxQwszEyI4AkLEunvIihqB1SxrsHzmsKh56BySiyySZGUo/AZLPttxI1ipxrElK +Oidj6wZE38XqixRaH0Phz56WTCfoe2UeNhMzqtLKXW8KgyLwctRx7OqEVgFV9UO joOebDC/sxlxyb7RBOHxpd4+qHdrhgtN -----END CERTIFICATE-----Generated at Thu Dec 25 02:41:36 2025 by rpki-client