This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft File: QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft (raw, json) Hash identifier: cq/eG6ixpJu+ZW6q8aKdMc0yS/czJ9W8o3DaMKb7lAo= Subject key identifier: 80:A3:28:E9:20:AD:30:82:3F:8F:AE:4F:FC:35:1D:04:B8:DB:4D:18 Authority key identifier: 41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D Certificate issuer: /CN=A91A25DF/serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft Manifest number: 54 Signing time: Fri 19 Dec 2025 06:11:52 +0000 Manifest this update: Fri 19 Dec 2025 06:11:51 +0000 Manifest next update: Fri 26 Dec 2025 06:11:51 +0000 Files and hashes: 1: QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl (hash: pD/2sPLWNcTqMw0B3VF/JbGz8eY3Q/uzZ6Q0OnZC6aY=) 2: C5B717905EDA11F0A5EAB579C4F9AE02.roa (hash: PqNnMtc0YzN3eHNjrg0ykkeSPjuNLhEa4HAV6yMUzA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A25DF, serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D Validity Not Before: Dec 19 06:11:51 2025 GMT Not After : Dec 26 06:11:51 2025 GMT Subject: CN=6944eca8-20c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9b:a8:be:be:f0:ea:e0:0d:06:a3:bf:b1:04: 6f:93:d5:05:36:5b:61:1e:34:48:34:8d:46:a4:44: ae:d9:9f:1f:12:54:83:67:ce:c7:35:c2:34:b5:63: 9a:1a:97:1f:f2:fd:48:a2:5b:e4:9c:3e:a6:eb:aa: af:72:fa:a1:b0:12:b6:80:9d:36:cf:c5:4a:8f:a7: 69:d6:b5:22:c2:a6:b1:a1:b7:9a:e1:88:0a:2f:c3: db:27:d8:5e:b0:2b:a5:ec:32:75:72:6d:4f:f5:27: 6a:58:f2:b2:86:ce:8f:ed:42:b5:ef:07:b5:b4:55: 65:c9:fd:4c:c2:e1:fa:26:27:05:6e:2b:ff:9f:df: 0a:be:96:83:6c:b4:03:8f:f4:57:6e:0d:29:bf:d0: f0:fb:59:57:3b:d7:4d:70:8f:de:a9:db:9f:b1:5f: 70:ad:a6:fe:eb:79:19:59:07:8c:37:f7:26:7f:3e: 36:e7:00:34:20:a0:2f:8d:be:e1:6a:25:91:3a:df: 37:cb:89:94:3a:1c:ee:a3:02:25:22:f0:77:cc:1b: 2c:4a:9c:8b:62:ee:92:c8:80:74:13:cf:04:e9:bc: 3d:14:42:86:0e:ff:c0:dd:50:b6:7f:95:ce:5b:cb: 1e:ff:76:d5:8c:55:80:68:a1:b6:fb:51:6a:b2:85: 0b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A3:28:E9:20:AD:30:82:3F:8F:AE:4F:FC:35:1D:04:B8:DB:4D:18 X509v3 Authority Key Identifier: keyid:41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:78:f2:46:6c:f0:23:f9:88:0f:c8:55:1c:32:16:be:f7:82: 97:54:4c:63:5f:72:cc:13:f2:58:dc:43:0a:bc:c2:ac:23:d6: b9:29:21:37:41:bd:67:64:a4:55:d3:20:a5:91:51:59:7e:c4: 92:7c:80:84:09:53:10:42:d6:18:b6:a1:f1:88:7f:08:23:0d: 37:e6:9a:a6:e7:bc:53:4c:3c:28:d3:06:8a:d3:c9:22:f7:89: a4:b3:f6:d8:b4:4a:33:cb:ac:3e:42:d2:8d:55:14:80:c5:0c: 91:f2:13:07:13:10:bc:d6:38:f7:2a:23:69:9a:10:2c:d9:8f: 29:90:82:33:ae:92:44:da:26:18:32:26:d1:92:b2:68:81:b6: aa:10:bd:2e:e4:16:16:15:16:82:a1:c4:b0:8e:05:a0:12:0b: a8:11:53:90:a0:f9:37:77:21:b4:69:28:3f:c9:05:56:5b:96: 5f:15:ff:da:5e:84:e7:76:b7:90:63:e4:ec:8a:26:41:15:f5: af:62:c3:db:7e:1c:a6:cf:1a:c8:65:1e:77:b6:52:d2:e4:f7: 34:73:0b:f3:b3:88:2b:4c:d6:ba:ba:b6:67:10:83:27:18:b2: d1:a0:4a:f8:d8:e1:eb:ff:65:e2:af:03:fe:a4:ad:f3:34:d5: c9:7b:15:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MjVERjExMC8GA1UEBRMoNDFCNDM0OTE1QTQ5MTlEQ0VGNTdENjk3N0M0MDQ4MERG QzMxMTM0RDAeFw0yNTEyMTkwNjExNTFaFw0yNTEyMjYwNjExNTFaMBgxFjAUBgNV BAMMDTY5NDRlY2E4LTIwYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtm6i+vvDq4A0Go7+xBG+T1QU2W2EeNEg0jUakRK7Znx8SVINnzsc1wjS1Y5oa lx/y/UiiW+ScPqbrqq9y+qGwEraAnTbPxUqPp2nWtSLCprGht5rhiAovw9sn2F6w K6XsMnVybU/1J2pY8rKGzo/tQrXvB7W0VWXJ/UzC4fomJwVuK/+f3wq+loNstAOP 9FduDSm/0PD7WVc7101wj96p25+xX3Ctpv7reRlZB4w39yZ/PjbnADQgoC+NvuFq JZE63zfLiZQ6HO6jAiUi8HfMGyxKnIti7pLIgHQTzwTpvD0UQoYO/8DdULZ/lc5b yx7/dtWMVYBoobb7UWqyhQu1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgKMo6SCt MII/j65P/DUdBLjbTRgwHwYDVR0jBBgwFoAUQbQ0kVpJGdzvV9aXfEBIDfwxE00w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyNURGL0VGNEFENDUyNUVE NTExRjA5Q0YxRDUwQ0M0RjlBRTAyL1FiUTBrVnBKR2R6dlY5YVhmRUJJRGZ3eEUw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUWJRMGtWcEpHZHp2VjlhWGZFQklEZnd4RTAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy NURGL0VGNEFENDUyNUVENTExRjA5Q0YxRDUwQ0M0RjlBRTAyL1FiUTBrVnBKR2R6 dlY5YVhmRUJJRGZ3eEUwMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACp48kZs8CP5iA/IVRwyFr73gpdUTGNfcswT8ljcQwq8wqwj1rkpITdB vWdkpFXTIKWRUVl+xJJ8gIQJUxBC1hi2ofGIfwgjDTfmmqbnvFNMPCjTBorTySL3 iaSz9ti0SjPLrD5C0o1VFIDFDJHyEwcTELzWOPcqI2maECzZjymQgjOukkTaJhgy JtGSsmiBtqoQvS7kFhYVFoKhxLCOBaASC6gRU5Cg+Td3IbRpKD/JBVZbll8V/9pe hOd2t5Bj5OyKJkEV9a9iw9t+HKbPGshlHne2UtLk9zRzC/OziCtM1rq6tmcQgycY stGgSvjY4ev/ZeKvA/6krfM01cl7FUI= -----END CERTIFICATE-----Generated at Fri Dec 19 19:22:29 2025 by rpki-client