This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: GAhe+BFIOYbFn48SrTvSiNkQlOAArV9BQ1Qz8KYr0ZE= Subject key identifier: F7:47:F3:C6:4A:17:C7:11:4C:89:9E:DE:DB:94:92:0A:CE:D9:6B:02 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 03DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 03D6 Signing time: Thu 18 Dec 2025 23:52:27 +0000 Manifest this update: Thu 18 Dec 2025 23:52:26 +0000 Manifest next update: Thu 25 Dec 2025 23:52:26 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: tz+YM/jq9q0mFAVu/n/Qb7xH5KVxu3IlhPJFghjn5PQ=) 2: FA3E8D68BA2911F0A4AFE171C4F9AE02.roa (hash: H4c2167/k5Ul/Jd2rdZpeNc0eDfRXqGo52dTMlrcW1k=) 3: ADDCA5F4BA2911F0B6E66A71C4F9AE02.roa (hash: H+STQ1E/JUpy5S0r72n/zNh28glR7Zy7UzRfBCi1atI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 990 (0x3de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: Dec 18 23:52:26 2025 GMT Not After : Dec 25 23:52:26 2025 GMT Subject: CN=694493ba-ee57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b5:e2:79:a8:f8:16:69:72:ec:08:c1:9d:69: fb:ae:9a:e7:d0:aa:0d:b5:fe:ae:9b:4e:c4:f5:f2: 9c:31:48:b2:ca:db:f9:ee:e0:c4:66:e0:6a:fc:30: d2:9a:0c:f6:58:b1:67:d7:36:9b:2e:84:f1:88:29: 33:59:b0:8b:03:f2:5f:c1:78:b0:f2:d6:75:9c:5d: b7:c3:99:8a:7d:fa:00:ce:92:10:7a:55:b4:72:a1: 23:46:f9:50:93:a2:5f:35:57:da:fb:09:d9:6c:9c: f2:46:f2:1f:1a:8f:30:f2:fd:c3:dc:3b:b5:9b:f9: c2:ab:e6:3f:94:66:1c:33:2d:e3:0d:cd:99:df:5e: d5:0c:49:16:b6:80:c8:4a:05:75:0a:6b:2d:be:50: 4a:a5:76:2d:b3:5c:27:0b:21:3b:18:b3:7d:a2:4f: 50:87:49:b4:fa:eb:c4:04:6a:bb:26:ee:7b:8b:9f: 3a:8f:34:08:bd:53:f8:a2:63:b5:72:4f:43:ed:c0: 11:8a:d1:a7:5f:7e:06:4d:80:4a:cc:60:16:55:ea: 3e:5d:e1:0b:11:39:af:50:f6:54:ac:8c:ae:3d:ec: 81:de:a1:9f:36:d8:7d:18:59:a4:01:bf:e9:42:8a: 88:be:90:0c:a7:87:a4:6d:4a:97:c8:e5:5b:16:c3: 90:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:47:F3:C6:4A:17:C7:11:4C:89:9E:DE:DB:94:92:0A:CE:D9:6B:02 X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:fd:63:b3:7b:6d:93:63:6b:e0:8d:9f:2e:57:83:cc:98:c9: 56:4e:78:97:c1:7a:5f:80:60:f0:d6:69:a2:18:12:9a:6d:b5: 38:a1:f7:9f:c5:bf:98:d1:ac:2e:b1:68:6c:9f:0e:cf:38:63: ba:bb:2b:01:9f:18:b1:89:8a:b2:e0:a8:48:fe:ed:23:e7:d9: bb:b6:4b:01:a1:2b:b6:07:fb:fd:c0:2e:30:ce:54:65:dc:b0: 3e:23:4e:68:97:1d:ac:ee:08:c6:95:d1:65:e5:ee:83:06:b8: b1:92:09:86:95:c3:5f:9e:e9:d7:12:0b:e2:74:f1:77:59:73: 03:fa:da:83:49:5b:5d:ff:82:be:e6:08:a9:a3:24:ca:93:47: dc:5f:62:41:07:05:55:53:e2:f9:e6:e2:aa:6c:12:c0:b7:e9: 65:95:15:63:c1:a2:ae:2c:64:ec:0d:1f:0e:a5:50:e7:72:d0: d0:8d:4f:aa:09:b4:0f:ec:db:c8:47:ed:a4:f0:9e:32:3f:7c: ac:51:92:12:09:a3:37:89:bf:ee:dc:f6:a3:0a:56:72:86:c2: b7:9d:dc:db:9d:40:a2:93:d9:a9:da:0f:05:3e:49:ba:da:69: 23:55:50:81:d0:37:7d:16:20:47:b7:9c:07:10:d4:5e:df:4d: e0:01:05:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjUxMjE4MjM1MjI2WhcNMjUxMjI1MjM1MjI2WjAYMRYwFAYD VQQDDA02OTQ0OTNiYS1lZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bXieaj4Fmly7AjBnWn7rprn0KoNtf6um07E9fKcMUiyytv57uDEZuBq/DDS mgz2WLFn1zabLoTxiCkzWbCLA/JfwXiw8tZ1nF23w5mKffoAzpIQelW0cqEjRvlQ k6JfNVfa+wnZbJzyRvIfGo8w8v3D3Du1m/nCq+Y/lGYcMy3jDc2Z317VDEkWtoDI SgV1CmstvlBKpXYts1wnCyE7GLN9ok9Qh0m0+uvEBGq7Ju57i586jzQIvVP4omO1 ck9D7cARitGnX34GTYBKzGAWVeo+XeELETmvUPZUrIyuPeyB3qGfNth9GFmkAb/p QoqIvpAMp4ekbUqXyOVbFsOQ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdH88ZK F8cRTIme3tuUkgrO2WsCMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC/WOze22TY2vgjZ8uV4PMmMlWTniXwXpfgGDw1mmiGBKabbU4ofef xb+Y0awusWhsnw7POGO6uysBnxixiYqy4KhI/u0j59m7tksBoSu2B/v9wC4wzlRl 3LA+I05olx2s7gjGldFl5e6DBrixkgmGlcNfnunXEgvidPF3WXMD+tqDSVtd/4K+ 5gipoyTKk0fcX2JBBwVVU+L55uKqbBLAt+lllRVjwaKuLGTsDR8OpVDnctDQjU+q CbQP7NvIR+2k8J4yP3ysUZISCaM3ib/u3PajClZyhsK3ndzbnUCik9mp2g8FPkm6 2mkjVVCB0Dd9FiBHt5wHENRe303gAQXF -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:07 2025 by rpki-client