This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft File: PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft (raw, json) Hash identifier: p6vFTk3C4cOlyQkbdeNJ9tSKX518c/CFb4P4YMJjJFM= Subject key identifier: 98:0A:9E:8E:E0:A7:DD:A5:7C:05:F1:81:94:80:86:DD:31:01:72:5D Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Certificate serial: 0EE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft Manifest number: 0EDC Signing time: Thu 18 Dec 2025 17:26:46 +0000 Manifest this update: Thu 18 Dec 2025 17:26:46 +0000 Manifest next update: Thu 25 Dec 2025 17:26:46 +0000 Files and hashes: 1: PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl (hash: 5da9er5P5lbPpeOT9wStEBqAyWB6BytPJrc3ZdXJklc=) 2: A5B7D874091F11EFA6EDE141C4F9AE02.roa (hash: vN4eTkgE+NqzrGCF55MmLQiQ1U4uCoJcvi6VZO9X/KY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3816 (0xee8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Validity Not Before: Dec 18 17:26:46 2025 GMT Not After : Dec 25 17:26:46 2025 GMT Subject: CN=69443956-2689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3d:98:43:00:85:77:f2:1f:78:15:f0:ab:65: e3:e0:17:ec:e0:99:7d:d9:34:7e:d8:d2:1b:14:0d: b6:d4:c3:08:30:1e:88:bb:49:26:31:b7:f2:ee:21: 78:c3:a7:da:cc:ca:90:30:69:72:73:b4:28:ca:cb: bb:50:4e:b0:52:9d:7f:a5:ed:2f:0d:00:85:56:1f: f1:dc:06:e9:f2:af:e8:03:77:50:7c:e9:1f:b1:98: 54:56:87:51:17:80:45:eb:42:2b:07:0e:27:78:33: ba:fb:a6:72:f9:f0:c4:6d:d0:51:78:14:50:c5:f8: 4e:6b:72:37:ce:4a:a9:5a:20:1e:05:b2:95:79:43: 8c:81:d8:26:4f:b2:93:c9:fe:d1:ee:9e:89:89:8b: bd:ad:f6:87:ca:3e:66:0a:ce:0b:54:2d:44:3c:d2: 80:02:3f:9d:34:cd:6f:24:48:43:8e:f3:1b:5e:a9: e6:bf:66:1d:6a:03:63:f6:79:54:b3:56:70:45:86: 81:eb:fe:53:e1:4d:9a:4b:54:e2:7a:65:41:0c:3d: b3:66:16:85:e2:10:9f:bb:4b:97:a2:02:be:04:fa: dd:cb:58:ac:ca:32:42:b8:c3:ef:72:f2:0c:92:a3: c8:d9:f9:c0:92:a4:c3:25:9e:b0:12:6a:92:a7:8d: ea:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0A:9E:8E:E0:A7:DD:A5:7C:05:F1:81:94:80:86:DD:31:01:72:5D X509v3 Authority Key Identifier: keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:77:b5:e1:48:2e:43:78:cd:ef:a3:3a:d1:02:30:13:7b:af: 54:91:be:99:b4:a2:c5:ab:39:13:b8:fb:c0:e6:a5:1a:57:56: bc:c3:7d:9a:06:c5:43:0b:c9:8c:84:d6:f9:20:0b:76:18:b5: 06:73:9c:fd:e7:af:b7:e1:5e:63:38:1a:07:25:84:51:33:e5: ea:a4:99:d9:8f:7a:64:01:93:e1:5a:b5:3b:7a:14:4d:2b:3f: 35:9a:f4:e4:9e:c9:9c:5f:f9:f4:a8:ed:16:ca:7f:49:d3:f3: 4b:19:ae:e3:dd:0a:79:63:42:63:d7:0d:0e:c1:cd:c3:37:d0: 5f:b4:c5:ae:52:a8:8c:97:5f:5d:cc:06:cb:c0:ef:4c:cf:31: cf:3b:49:e9:6f:63:9b:0a:d5:a3:02:6b:dc:f4:23:4a:94:6a: bc:d7:48:71:c4:9f:72:26:04:17:29:96:68:7f:04:b5:8c:7f: 41:b9:e3:82:48:ba:31:ce:cd:6d:04:f1:e0:0f:3b:ea:e5:c5: 20:91:c2:dc:2c:c0:3c:58:f9:12:fc:59:58:9f:cd:0a:d1:99: 9b:0f:f4:2e:c5:1c:c4:a4:cb:8d:23:6c:d2:35:0c:29:ce:c6: da:d2:f2:08:ef:e0:4a:ad:6e:e5:31:e8:15:73:21:f8:d6:6e: 20:5b:5a:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2NjgxMTAvBgNVBAUTKDNEMDU1NkQxOTNCQzkyQTIxRUE3NDdGOTU4QzY5N0E5 N0VDNUQ1RDYwHhcNMjUxMjE4MTcyNjQ2WhcNMjUxMjI1MTcyNjQ2WjAYMRYwFAYD VQQDDA02OTQ0Mzk1Ni0yNjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArj2YQwCFd/IfeBXwq2Xj4Bfs4Jl92TR+2NIbFA221MMIMB6Iu0kmMbfy7iF4 w6fazMqQMGlyc7Qoysu7UE6wUp1/pe0vDQCFVh/x3Abp8q/oA3dQfOkfsZhUVodR F4BF60IrBw4neDO6+6Zy+fDEbdBReBRQxfhOa3I3zkqpWiAeBbKVeUOMgdgmT7KT yf7R7p6JiYu9rfaHyj5mCs4LVC1EPNKAAj+dNM1vJEhDjvMbXqnmv2YdagNj9nlU s1ZwRYaB6/5T4U2aS1TiemVBDD2zZhaF4hCfu0uXogK+BPrdy1isyjJCuMPvcvIM kqPI2fnAkqTDJZ6wEmqSp43q0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgKno7g p92lfAXxgZSAht0xAXJdMB8GA1UdIwQYMBaAFD0FVtGTvJKiHqdH+VjGl6l+xdXW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY2OC83QzkwMDlBQzk3 RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtxSWVwMGY1V01hWHFYN0Yx ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRVlcwWk84a3FJZXAwZjVXTWFYcVg3RjFkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY2OC83QzkwMDlBQzk3RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtx SWVwMGY1V01hWHFYN0YxZFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpd7XhSC5DeM3vozrRAjATe69Ukb6ZtKLFqzkTuPvA5qUaV1a8w32a BsVDC8mMhNb5IAt2GLUGc5z956+34V5jOBoHJYRRM+XqpJnZj3pkAZPhWrU7ehRN Kz81mvTknsmcX/n0qO0Wyn9J0/NLGa7j3Qp5Y0Jj1w0Owc3DN9BftMWuUqiMl19d zAbLwO9MzzHPO0npb2ObCtWjAmvc9CNKlGq810hxxJ9yJgQXKZZofwS1jH9BueOC SLoxzs1tBPHgDzvq5cUgkcLcLMA8WPkS/FlYn80K0ZmbD/QuxRzEpMuNI2zSNQwp zsba0vII7+BKrW7lMegVcyH41m4gW1qb -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:53 2025 by rpki-client