This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft File: 15qMdwXiQZ6rQpU7a8ilcga6xiY.mft (raw, json) Hash identifier: eyG77ubTys5Bx5kNs7wLD64F5kvVaH707ljjVBAcl8A= Subject key identifier: 16:CE:DE:22:46:31:2C:F1:06:B0:2C:31:5D:7D:D0:35:75:EA:BC:72 Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Certificate serial: 0511 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft Manifest number: 0505 Signing time: Tue 30 Dec 2025 22:51:38 +0000 Manifest this update: Tue 30 Dec 2025 22:51:38 +0000 Manifest next update: Tue 06 Jan 2026 22:51:38 +0000 Files and hashes: 1: 15qMdwXiQZ6rQpU7a8ilcga6xiY.crl (hash: g5XRf9a+Njv21LF+qU02UfvlT7QHkUg8j7jI+owqI/A=) 2: 56C4925E3B0711EC9715501EC4F9AE02.roa (hash: fn18Z/WO3LMBPpMiEymfF/J9ml4DPzxPa9csD1f45R4=) 3: 4BD423FE3AF911EC918C643AC4F9AE02.roa (hash: zGe92eYB2T/6F6go2IsVT92hr41aOIJDE55tjsezOT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 22:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1297 (0x511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BADCE, serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Validity Not Before: Dec 30 22:51:38 2025 GMT Not After : Jan 6 22:51:38 2026 GMT Subject: CN=6954577a-e2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ee:be:2d:6a:09:71:4f:a7:21:1e:2c:00:6b: 98:cc:27:d9:41:3a:7f:79:63:c9:ea:78:6b:20:5c: 28:1a:2e:da:75:ae:17:2b:3a:78:db:21:06:33:45: 46:04:c7:e4:01:cc:73:f2:8c:e9:e3:01:d1:92:3d: 32:ff:d5:4d:45:3e:57:ec:5e:3e:5a:a9:da:f3:75: b1:01:7a:85:90:01:0d:1b:e3:c7:62:8d:42:4b:8d: 67:9c:9b:b6:e0:4f:b2:89:c8:69:d0:06:52:13:44: 6a:fb:ed:14:69:0f:cd:c1:c6:22:30:7f:cc:30:8b: 37:27:20:bc:9c:87:6e:40:01:c0:68:e0:37:b8:af: dc:21:91:4b:c9:60:5c:17:9a:51:63:0d:73:41:cf: 40:6a:7d:39:69:06:06:78:23:6a:92:4a:ac:f5:8a: cc:11:11:54:7c:b1:63:ce:6e:1a:2f:11:2d:ac:97: 79:17:c8:17:fd:b8:1b:32:ae:8f:b1:31:ec:aa:ae: d5:94:b9:df:d9:ab:01:91:f8:2d:f9:a1:55:bf:b3: 89:66:d0:c7:4b:60:ea:fb:fe:4f:19:2d:22:0c:10: ea:28:69:c3:38:fa:27:b7:8a:e8:7a:a6:e9:2a:c4: 63:53:d2:c1:de:02:b4:35:45:85:d6:8b:f5:70:fb: 5b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CE:DE:22:46:31:2C:F1:06:B0:2C:31:5D:7D:D0:35:75:EA:BC:72 X509v3 Authority Key Identifier: keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:70:10:8b:2a:a1:b2:4f:e7:da:a7:9f:1d:0f:17:47:4a:88: 5c:ee:b1:58:5f:3f:34:b0:f3:37:30:cf:22:ba:34:12:8b:80: 2f:27:89:a3:c7:6f:bf:d1:c8:6a:93:09:bb:a1:70:2e:b7:61: 7d:46:2e:0c:8b:06:95:6c:1a:48:ee:09:00:72:25:5d:00:08: 64:f7:fd:2f:c5:27:b0:bc:f9:c3:de:b5:5d:e6:a2:41:77:24: 33:d7:98:f8:72:cc:68:8f:11:41:aa:dd:96:aa:55:2f:6f:f6: a9:ea:d4:3d:5a:f9:5a:f7:68:35:6e:e5:59:44:88:d6:1f:97: 27:ff:a3:b0:9c:b8:b0:18:bb:6c:61:0b:73:b2:45:ee:8d:bf: 5d:88:9e:7d:dc:8a:d0:ec:83:cc:49:d2:3f:3d:0b:39:be:aa: 4a:ef:b1:49:22:87:11:23:8b:96:80:e1:e9:d6:0a:1d:5b:e6: fd:45:9f:2e:52:9d:15:04:75:b6:84:d1:ef:bb:b2:5f:23:50: 73:6f:36:9e:64:34:6d:e5:73:21:c2:14:85:00:55:e6:ec:61: 1c:9f:bd:00:86:82:1d:8b:ca:2f:22:e2:1e:4b:aa:e0:6b:36: 37:95:5a:9f:3b:5b:ec:99:59:8e:9b:00:56:89:b1:c9:43:45: 28:72:4a:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEQ0UxMTAvBgNVBAUTKEQ3OUE4Qzc3MDVFMjQxOUVBQjQyOTUzQjZCQzhBNTcy MDZCQUM2MjYwHhcNMjUxMjMwMjI1MTM4WhcNMjYwMTA2MjI1MTM4WjAYMRYwFAYD VQQDDA02OTU0NTc3YS1lMmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+6+LWoJcU+nIR4sAGuYzCfZQTp/eWPJ6nhrIFwoGi7ada4XKzp42yEGM0VG BMfkAcxz8ozp4wHRkj0y/9VNRT5X7F4+Wqna83WxAXqFkAENG+PHYo1CS41nnJu2 4E+yichp0AZSE0Rq++0UaQ/NwcYiMH/MMIs3JyC8nIduQAHAaOA3uK/cIZFLyWBc F5pRYw1zQc9Aan05aQYGeCNqkkqs9YrMERFUfLFjzm4aLxEtrJd5F8gX/bgbMq6P sTHsqq7VlLnf2asBkfgt+aFVv7OJZtDHS2Dq+/5PGS0iDBDqKGnDOPont4roeqbp KsRjU9LB3gK0NUWF1ov1cPtb0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbO3iJG MSzxBrAsMV190DV16rxyMB8GA1UdIwQYMBaAFNeajHcF4kGeq0KVO2vIpXIGusYm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQURDRS8wRjcyODFCQzNB RjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFaNnJRcFU3YThpbGNnYTZ4 aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1cU1kd1hpUVo2clFwVTdhOGlsY2dhNnhpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QURDRS8wRjcyODFCQzNBRjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFa NnJRcFU3YThpbGNnYTZ4aVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIcBCLKqGyT+fap58dDxdHSohc7rFYXz80sPM3MM8iujQSi4AvJ4mj x2+/0chqkwm7oXAut2F9Ri4MiwaVbBpI7gkAciVdAAhk9/0vxSewvPnD3rVd5qJB dyQz15j4csxojxFBqt2WqlUvb/ap6tQ9Wvla92g1buVZRIjWH5cn/6OwnLiwGLts YQtzskXujb9diJ593IrQ7IPMSdI/PQs5vqpK77FJIocRI4uWgOHp1godW+b9RZ8u Up0VBHW2hNHvu7JfI1BzbzaeZDRt5XMhwhSFAFXm7GEcn70AhoIdi8ovIuIeS6rg azY3lVqfO1vsmVmOmwBWibHJQ0UockrO -----END CERTIFICATE-----Generated at Wed Dec 31 03:41:29 2025 by rpki-client