This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json) Hash identifier: 3gC9J8iFAI+ULEoqorQGqeynE6Cq8Aqcr985nCF1C9g= Subject key identifier: EB:04:69:42:37:62:58:AF:EA:A1:BE:39:D7:70:D8:E6:9A:49:68:22 Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Certificate serial: 1A5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft Manifest number: 1A54 Signing time: Sat 20 Dec 2025 16:08:58 +0000 Manifest this update: Sat 20 Dec 2025 16:08:58 +0000 Manifest next update: Sat 27 Dec 2025 16:08:58 +0000 Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: uRj0430mmEpl/G91fH3CEDzTfSrwO1twg7ydgDqC82E=) 2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: JD/t6QBbxRTutJyXKFJnddzibwxtjVqq1blAC5X3uC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6747 (0x1a5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Validity Not Before: Dec 20 16:08:58 2025 GMT Not After : Dec 27 16:08:58 2025 GMT Subject: CN=6946ca1a-ea0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:c4:c0:a8:0a:0b:ed:c4:40:76:d5:0b:9d: 7e:0e:01:cb:7d:87:8b:3f:0c:0e:4a:03:7f:a0:7d: 99:d1:f5:2c:90:55:58:59:25:b1:6b:1a:3c:dc:d3: 5d:d6:ef:5a:9f:60:dd:d8:fa:42:41:ef:45:bf:5c: 07:da:8f:d4:a3:a7:3a:75:fd:db:65:c8:78:f0:2a: 00:c4:3d:b1:47:45:08:de:64:c7:c0:ce:8a:bf:9f: 58:f5:04:0b:32:57:f0:53:3a:45:e0:59:7b:ae:a7: 75:9c:1f:19:66:77:06:5e:87:b2:17:cf:2c:c8:90: 30:ea:42:4a:66:61:49:73:03:31:b0:5a:49:f0:0b: 9b:f1:9e:f6:d5:4b:b3:1b:02:69:a2:d3:87:61:a0: bd:bf:96:e0:c5:ae:89:b2:b7:85:82:7a:0a:ec:04: 7e:bb:93:02:e4:9a:f5:02:7a:f8:e2:c2:e5:b8:6b: a1:f5:fb:c8:1d:4c:de:4f:08:28:eb:b2:4a:61:29: ba:6e:78:1d:f2:6b:c4:80:dc:a5:fb:21:d7:88:24: 51:d0:44:43:da:83:c0:6d:5b:3f:c6:0b:2b:a9:9c: 29:61:13:a5:6b:fc:2c:2e:e8:11:9a:2e:5f:a6:ef: b0:87:52:d0:fe:e2:a6:c2:c2:2c:47:74:0b:a3:1b: 36:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:04:69:42:37:62:58:AF:EA:A1:BE:39:D7:70:D8:E6:9A:49:68:22 X509v3 Authority Key Identifier: keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:e3:82:a5:16:a2:49:fc:87:38:d7:b6:24:27:a1:7a:6d:d8: de:53:82:31:a0:00:23:54:86:8f:58:ca:df:e5:8f:19:35:b4: a0:00:72:23:59:9d:99:64:97:92:28:a8:e1:55:18:ce:85:0d: 19:e7:a7:89:bb:c9:65:91:f1:35:20:3c:19:cd:95:0c:32:74: df:d0:c8:12:d2:16:4e:56:37:aa:14:32:19:aa:89:e2:c5:30: cd:1e:d9:ba:10:22:ee:af:a0:2e:b7:71:c9:1f:15:1f:4b:44: 0e:6a:5f:4d:5d:b3:ec:3a:c5:55:f2:6b:b8:56:85:3e:a3:ad: 0d:c0:21:79:57:7c:30:80:05:13:68:2f:89:b3:8d:ee:a3:66: 6a:1d:d7:e2:2e:93:38:e1:bf:02:e7:53:32:85:b1:a4:d4:9b: ce:95:83:3e:94:85:bb:57:28:be:f7:16:62:0f:d9:35:8f:62: 67:91:c8:39:eb:92:ef:8b:15:43:42:46:f2:ad:15:75:05:94: 0f:86:cd:53:dc:e3:27:c8:6b:e1:05:3a:ff:99:0b:04:52:5a: 48:b4:8f:97:41:57:cd:4d:c8:d4:77:c7:d2:2a:c2:1b:c9:d0: 96:18:6b:12:4f:b7:84:ab:09:9f:a6:29:50:07:37:e2:e1:13: ed:af:24:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1 OTgxRUU4RUMwHhcNMjUxMjIwMTYwODU4WhcNMjUxMjI3MTYwODU4WjAYMRYwFAYD VQQDDA02OTQ2Y2ExYS1lYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFjEwKgKC+3EQHbVC51+DgHLfYeLPwwOSgN/oH2Z0fUskFVYWSWxaxo83NNd 1u9an2Dd2PpCQe9Fv1wH2o/Uo6c6df3bZch48CoAxD2xR0UI3mTHwM6Kv59Y9QQL MlfwUzpF4Fl7rqd1nB8ZZncGXoeyF88syJAw6kJKZmFJcwMxsFpJ8Aub8Z721Uuz GwJpotOHYaC9v5bgxa6JsreFgnoK7AR+u5MC5Jr1Anr44sLluGuh9fvIHUzeTwgo 67JKYSm6bngd8mvEgNyl+yHXiCRR0ERD2oPAbVs/xgsrqZwpYROla/wsLugRmi5f pu+wh1LQ/uKmwsIsR3QLoxs2HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsEaUI3 Yliv6qG+Oddw2OaaSWgiMB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1 M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2 T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2 ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS44KlFqJJ/Ic417YkJ6F6bdjeU4IxoAAjVIaPWMrf5Y8ZNbSgAHIj WZ2ZZJeSKKjhVRjOhQ0Z56eJu8llkfE1IDwZzZUMMnTf0MgS0hZOVjeqFDIZqoni xTDNHtm6ECLur6Aut3HJHxUfS0QOal9NXbPsOsVV8mu4VoU+o60NwCF5V3wwgAUT aC+Js43uo2ZqHdfiLpM44b8C51MyhbGk1JvOlYM+lIW7Vyi+9xZiD9k1j2Jnkcg5 65LvixVDQkbyrRV1BZQPhs1T3OMnyGvhBTr/mQsEUlpItI+XQVfNTcjUd8fSKsIb ydCWGGsST7eEqwmfpilQBzfi4RPtryTi -----END CERTIFICATE-----Generated at Sun Dec 21 14:15:12 2025 by rpki-client