This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: IhNo+wCZYNlK8n7XunaipYr4TKzvvT7uIAlrRXiy4fA= Subject key identifier: 62:8E:A8:74:75:0B:1D:60:8D:96:A4:E0:05:B8:A5:54:81:19:61:88 Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0C85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0C5A Signing time: Thu 18 Dec 2025 18:24:50 +0000 Manifest this update: Thu 18 Dec 2025 18:24:50 +0000 Manifest next update: Thu 25 Dec 2025 18:24:50 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: 4ynP2Q5lt2dM+NOmtp6upFpiHzGYakOvk1ZEeks5Rn0=) 2: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: TPKfdTfxUUuIA7sEFu9uyoS27pbd1XEvcyM1zWvu3+I=) 3: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: 9WFKUJqUOgDB07wt9CN3L8jHFMm+Bp2TRv/IY0cRCLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3205 (0xc85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: Dec 18 18:24:50 2025 GMT Not After : Dec 25 18:24:50 2025 GMT Subject: CN=694446f2-8c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1e:1c:e0:10:81:13:ad:93:00:86:9d:9a:01: 84:4c:0e:30:b0:5d:ca:8c:11:ce:d7:70:9c:fb:65: 6c:64:95:5c:1f:31:8a:b3:74:ec:f6:05:c4:96:60: 69:42:45:48:68:1e:8f:e8:68:57:ac:fe:51:04:4e: ef:c1:c4:84:06:ff:90:50:b1:33:77:12:f5:fb:43: bc:23:ef:0f:c3:58:b6:7a:fc:81:28:cd:53:ac:56: 39:fc:96:95:3b:9d:9e:6f:73:43:4a:9f:d8:8d:97: 22:d0:53:1a:06:25:9a:b3:d9:35:e5:0b:b3:fe:13: f5:7e:4d:7b:e7:f2:69:1b:14:8d:c5:8f:b0:0d:cc: 83:74:56:2b:37:a7:3a:fa:75:b5:44:f3:6b:dd:af: 02:e3:67:7c:34:23:ab:81:17:7e:d0:0e:17:ff:e6: e7:9a:dd:48:2b:70:fc:36:3d:cf:7f:a8:38:55:db: be:fd:8c:7c:08:7c:ec:de:96:e1:c1:91:0a:c8:e9: fe:c7:25:e8:4c:12:9e:b8:31:8f:4e:df:62:5b:46: c0:90:6a:7e:02:7a:e8:7f:5f:11:70:7a:aa:8c:39: fe:6d:11:17:06:4a:e6:9a:f8:2c:fe:71:16:ef:14: 62:3e:b4:2a:51:db:8a:22:bb:62:69:e0:1b:1c:44: d4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8E:A8:74:75:0B:1D:60:8D:96:A4:E0:05:B8:A5:54:81:19:61:88 X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:96:6d:d5:5d:a1:af:92:30:3d:a3:1e:97:f0:4a:e6:57:19: e8:80:e3:28:94:c4:32:f3:f6:37:56:2e:22:bd:f0:54:4d:71: 1f:26:6b:bd:39:f7:fb:00:12:4d:35:76:4a:24:52:ae:80:a9: 11:71:fd:a4:d0:8d:e5:b6:8d:86:43:c2:91:eb:a4:a0:13:a4: 88:e4:6d:d5:35:c8:2b:16:88:b1:50:d4:8a:99:08:aa:30:ff: fd:de:77:14:7a:fd:c6:b3:5e:99:83:a7:bf:44:5b:6e:95:8d: 96:ed:e4:d2:dc:77:d0:ec:3a:2a:c0:5e:66:b4:f3:e1:f3:b9: bb:0f:e6:de:f5:20:50:19:34:80:43:c3:42:6b:e1:bd:72:8b: 33:f8:79:89:6e:a0:d0:19:8c:bc:a7:db:22:cf:91:03:bc:06: e9:c4:80:fd:a4:4c:40:3c:fd:98:38:a9:0d:dc:13:a1:5d:1b: a8:b5:bb:43:f4:e3:85:c7:af:29:64:04:c4:c6:aa:35:4b:b4: a8:68:51:5c:de:36:75:03:5f:f4:51:94:4b:21:cb:38:54:c2: e4:0b:c4:3e:7b:b2:c9:56:f4:4a:3c:2c:00:0b:52:97:e5:12: 1d:9e:62:b4:11:9a:e2:60:4b:ba:1b:79:b2:cc:6e:92:7f:f2: 69:65:06:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjUxMjE4MTgyNDUwWhcNMjUxMjI1MTgyNDUwWjAYMRYwFAYD VQQDDA02OTQ0NDZmMi04YzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5B4c4BCBE62TAIadmgGETA4wsF3KjBHO13Cc+2VsZJVcHzGKs3Ts9gXElmBp QkVIaB6P6GhXrP5RBE7vwcSEBv+QULEzdxL1+0O8I+8Pw1i2evyBKM1TrFY5/JaV O52eb3NDSp/YjZci0FMaBiWas9k15Quz/hP1fk175/JpGxSNxY+wDcyDdFYrN6c6 +nW1RPNr3a8C42d8NCOrgRd+0A4X/+bnmt1IK3D8Nj3Pf6g4Vdu+/Yx8CHzs3pbh wZEKyOn+xyXoTBKeuDGPTt9iW0bAkGp+Anrof18RcHqqjDn+bREXBkrmmvgs/nEW 7xRiPrQqUduKIrtiaeAbHETUbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKOqHR1 Cx1gjZak4AW4pVSBGWGIMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAylm3VXaGvkjA9ox6X8ErmVxnogOMolMQy8/Y3Vi4ivfBUTXEfJmu9 Off7ABJNNXZKJFKugKkRcf2k0I3lto2GQ8KR66SgE6SI5G3VNcgrFoixUNSKmQiq MP/93ncUev3Gs16Zg6e/RFtulY2W7eTS3HfQ7DoqwF5mtPPh87m7D+be9SBQGTSA Q8NCa+G9cosz+HmJbqDQGYy8p9siz5EDvAbpxID9pExAPP2YOKkN3BOhXRuotbtD 9OOFx68pZATExqo1S7SoaFFc3jZ1A1/0UZRLIcs4VMLkC8Q+e7LJVvRKPCwAC1KX 5RIdnmK0EZriYEu6G3myzG6Sf/JpZQa+ -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:06 2025 by rpki-client