This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft File: MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json) Hash identifier: M5HD3USWff0Pv2WiYO1LgWLHWJxAPIp/tDIu0oU5pAs= Subject key identifier: A2:2C:29:96:0B:C3:3A:B6:EA:CB:2C:E7:24:94:BA:B9:22:91:A4:99 Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 Certificate issuer: /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Certificate serial: 06D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft Manifest number: 06CC Signing time: Tue 30 Dec 2025 21:28:41 +0000 Manifest this update: Tue 30 Dec 2025 21:28:41 +0000 Manifest next update: Tue 06 Jan 2026 21:28:41 +0000 Files and hashes: 1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: /HcT7b3FPDM4gAr4xpSa0sMNMi2dTI4yHJAjRMja8Vc=) 2: 4863E7886BEA11F0AA50230BC4F9AE02.roa (hash: GcIFK8Guk5Mw4MCQJvhTgzOgqMQrjbwbQ9Fg20gZQJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 21:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1CF4, serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Validity Not Before: Dec 30 21:28:41 2025 GMT Not After : Jan 6 21:28:41 2026 GMT Subject: CN=69544409-d1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:42:96:dd:ec:7b:1d:d6:59:b6:3e:04:92: d3:73:6a:a0:21:6c:93:67:28:0e:14:dc:f6:f3:fd: ae:ba:81:39:95:4d:53:29:d6:37:70:c3:f6:98:b8: 5b:f4:5b:82:8d:66:d1:92:ab:56:fb:30:79:aa:3d: 78:70:52:e4:30:df:b9:61:b4:6a:f3:60:cc:03:09: 57:05:13:86:ee:64:18:73:ae:8e:b3:46:c6:07:17: f8:b8:2c:8f:d9:42:e0:06:b8:e4:83:08:54:ce:34: a5:68:98:88:c9:d4:92:88:0d:40:c5:d8:86:ac:e3: 92:63:36:01:d2:94:95:3c:04:1d:4a:63:6c:42:14: c6:a9:76:3b:76:86:b0:03:51:f8:33:30:b4:09:38: 5f:a1:20:77:d4:e5:da:6a:0e:9e:63:a6:91:9c:81: c3:bf:1c:96:a7:5a:4d:f5:a4:b7:4b:20:1a:2f:db: c8:41:66:80:40:ff:c7:d0:13:32:66:e9:fb:c9:87: e1:12:1d:85:42:db:4a:da:ef:42:22:14:f2:03:b0: 70:70:d7:50:e2:8c:6a:0a:99:3b:76:e5:2c:8f:3e: 61:9c:74:f2:5f:d3:c9:aa:66:ab:ea:0d:50:34:06: c3:b1:84:4f:91:8b:b6:c6:3a:39:3d:44:9d:42:6d: fd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2C:29:96:0B:C3:3A:B6:EA:CB:2C:E7:24:94:BA:B9:22:91:A4:99 X509v3 Authority Key Identifier: keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:e3:27:94:9a:45:f2:7a:bd:10:01:f2:04:8c:b3:71:d8:b3: b3:91:64:69:e6:f8:f3:b0:3c:03:5f:3b:bc:35:a4:21:5c:7b: 1d:62:d5:ad:06:4a:ec:cb:ac:b6:1f:37:06:04:39:49:0b:56: b0:6d:37:03:42:c3:63:8d:73:37:00:94:30:6a:af:47:dc:27: ee:d8:88:d5:10:12:f4:d6:0b:83:30:47:cf:e0:b7:57:09:50: 06:2e:a4:a7:cf:2f:20:90:4f:d7:cb:99:a0:34:73:b9:d2:60: 76:34:53:71:2c:87:e3:65:5f:ae:21:b4:a9:43:97:60:81:42: 1f:74:06:cb:48:c5:b1:ab:6c:3d:86:2d:f7:27:56:eb:97:dc: 51:e3:72:3d:8d:83:cc:16:3d:fa:cc:51:3a:3f:d4:44:1f:af: 7d:79:f9:bf:d6:de:e5:de:b4:3e:4e:9d:f5:8c:0c:0b:76:59: 56:4a:b9:a5:fe:91:6a:2c:5f:14:d6:9e:75:30:dd:8f:29:05: 82:f1:26:24:08:83:df:ed:6f:41:a5:81:ae:69:74:20:fd:67: 55:9f:50:59:97:bb:47:7d:b4:b4:1a:2f:53:ae:e7:c5:63:94: 09:ad:9c:4c:ad:68:d3:db:3a:49:55:63:42:95:1f:94:39:bf: d5:06:bd:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDRjQxMTAvBgNVBAUTKDMyQTRGNjcwREEwRjUyODU4RURERUYwNjkwQzhFNTUw REZEQjM0MTEwHhcNMjUxMjMwMjEyODQxWhcNMjYwMTA2MjEyODQxWjAYMRYwFAYD VQQDDA02OTU0NDQwOS1kMWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiNClt3sex3WWbY+BJLTc2qgIWyTZygOFNz28/2uuoE5lU1TKdY3cMP2mLhb 9FuCjWbRkqtW+zB5qj14cFLkMN+5YbRq82DMAwlXBROG7mQYc66Os0bGBxf4uCyP 2ULgBrjkgwhUzjSlaJiIydSSiA1AxdiGrOOSYzYB0pSVPAQdSmNsQhTGqXY7doaw A1H4MzC0CThfoSB31OXaag6eY6aRnIHDvxyWp1pN9aS3SyAaL9vIQWaAQP/H0BMy Zun7yYfhEh2FQttK2u9CIhTyA7BwcNdQ4oxqCpk7duUsjz5hnHTyX9PJqmar6g1Q NAbDsYRPkYu2xjo5PUSdQm39NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIsKZYL wzq26sss5ySUurkikaSZMB8GA1UdIwQYMBaAFDKk9nDaD1KFjt3vBpDI5VDf2zQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUNGNC85QUM0ODUxQTg1 N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVvV08zZThHa01qbFVOX2JO QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01xVDJjTm9QVW9XTzNlOEdrTWpsVU5fYk5CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUNGNC85QUM0ODUxQTg1N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVv V08zZThHa01qbFVOX2JOQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB34yeUmkXyer0QAfIEjLNx2LOzkWRp5vjzsDwDXzu8NaQhXHsdYtWt Bkrsy6y2HzcGBDlJC1awbTcDQsNjjXM3AJQwaq9H3Cfu2IjVEBL01guDMEfP4LdX CVAGLqSnzy8gkE/Xy5mgNHO50mB2NFNxLIfjZV+uIbSpQ5dggUIfdAbLSMWxq2w9 hi33J1brl9xR43I9jYPMFj36zFE6P9REH699efm/1t7l3rQ+Tp31jAwLdllWSrml /pFqLF8U1p51MN2PKQWC8SYkCIPf7W9BpYGuaXQg/WdVn1BZl7tHfbS0Gi9TrufF Y5QJrZxMrWjT2zpJVWNClR+UOb/VBr1t -----END CERTIFICATE-----Generated at Wed Dec 31 02:00:40 2025 by rpki-client