This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json) Hash identifier: C94y8gaXLPjg2hH6pDW4gnwfMPrt3qx0wuR92NcErdk= Subject key identifier: 08:0A:3A:AE:7E:5C:3C:72:60:CC:8F:32:2B:4B:F4:40:6F:19:A0:CD Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 0386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft Manifest number: 0373 Signing time: Sun 21 Dec 2025 00:10:45 +0000 Manifest this update: Sun 21 Dec 2025 00:10:44 +0000 Manifest next update: Sun 28 Dec 2025 00:10:44 +0000 Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: xmq6rBxzDq0Zy59G+THGJ9GhfAHgfqAuCOGTsZL8eEc=) 2: DCE70C6EF9B911ED8314C10EC4F9AE02.roa (hash: yEYfp9zlxIj6oN/RjQwAEbZkACgBbwz/31Qhgmxz4PU=) 3: 595774341B6211F0B9733473C4F9AE02.roa (hash: 7H1WNXq4e92nwvgGNVFt3drbCtCA0vHzGWt+JS3qJgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902 (0x386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Dec 21 00:10:44 2025 GMT Not After : Dec 28 00:10:44 2025 GMT Subject: CN=69473b04-db43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:82:de:7c:54:59:5a:d4:94:22:75:50:d6:45: 63:fb:f4:b9:2d:27:2c:4d:f5:18:ba:44:15:05:54: 49:bd:be:44:fb:48:f0:ca:04:c5:55:a5:92:b8:0e: 4f:b3:23:95:f3:0a:37:20:69:c2:53:c1:8d:07:3d: 09:ed:1a:df:ea:31:44:2e:8c:f6:cb:fb:9a:7a:69: f8:29:6e:64:0a:54:58:cd:9a:65:d2:6d:52:92:82: 0a:c1:ef:9c:ba:e1:3c:2b:fa:3d:bc:19:14:30:01: dc:13:d0:c4:6d:cd:c9:d5:3c:84:fa:e4:e1:c8:a8: b7:55:92:2b:14:24:dc:2c:c9:77:23:07:1c:38:67: 7a:75:83:f1:ef:ee:95:7e:b5:a6:0a:d4:c5:dc:12: d7:82:cf:c3:c0:26:7f:af:3b:f4:5e:02:79:72:94: 19:13:5d:d9:c6:e8:cd:d1:fc:69:ce:06:96:90:49: 5a:39:6a:d6:54:80:3c:5b:7b:53:88:b7:46:b2:bf: ac:71:92:01:64:8b:bd:a1:55:93:50:7d:0e:9d:8d: ca:e5:83:11:11:9e:c5:57:24:c9:f1:a7:ff:01:07: ec:76:95:62:f8:b2:fb:77:a5:93:d6:93:41:dc:34: 9d:aa:8a:91:6c:2f:64:b4:6a:4a:23:f7:b0:32:02: 3e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0A:3A:AE:7E:5C:3C:72:60:CC:8F:32:2B:4B:F4:40:6F:19:A0:CD X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ba:94:ee:3b:df:14:f4:92:ab:5c:cd:3d:61:7a:90:75:01: 75:61:89:e3:c7:c8:32:a9:da:18:e4:ee:b3:cb:e1:ac:7b:47: af:ec:19:b3:36:05:b2:29:17:3d:d5:de:90:78:46:66:51:7e: 9e:d0:3a:89:5e:3a:47:44:41:16:8d:d2:14:8c:a3:21:69:0b: 0f:f2:68:eb:1e:94:e3:e0:84:c0:7c:86:8a:2f:a8:aa:b3:de: 4a:39:57:d1:a2:51:4e:dc:7e:b2:da:75:eb:b0:34:b4:18:e4: 4c:4b:b3:18:a7:54:b7:8f:ed:19:38:95:27:84:13:40:16:c8: 90:0c:9e:48:2f:9b:23:7b:83:73:68:8c:ac:f9:d5:c0:39:54: 52:e6:09:84:ba:bb:03:36:32:b5:b1:32:8b:39:fe:98:a8:98: e0:71:ed:4c:39:c1:fc:2e:fc:aa:94:da:11:e3:6d:c7:db:eb: a0:d4:8c:0f:1c:2d:58:bb:b5:40:4c:8b:e5:a7:3b:36:f7:aa: d8:93:67:cd:a5:65:bb:b9:d9:42:4a:66:8c:9a:e0:b3:3e:13: 2d:4b:d8:4b:ae:b2:11:37:24:3b:97:0b:d2:b7:ee:5c:d2:e1: 28:b4:b4:b4:22:61:4b:cf:de:ef:f5:d9:79:99:b1:71:d2:31: 32:f5:5c:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjUxMjIxMDAxMDQ0WhcNMjUxMjI4MDAxMDQ0WjAYMRYwFAYD VQQDDA02OTQ3M2IwNC1kYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ILefFRZWtSUInVQ1kVj+/S5LScsTfUYukQVBVRJvb5E+0jwygTFVaWSuA5P syOV8wo3IGnCU8GNBz0J7Rrf6jFELoz2y/uaemn4KW5kClRYzZpl0m1SkoIKwe+c uuE8K/o9vBkUMAHcE9DEbc3J1TyE+uThyKi3VZIrFCTcLMl3IwccOGd6dYPx7+6V frWmCtTF3BLXgs/DwCZ/rzv0XgJ5cpQZE13ZxujN0fxpzgaWkElaOWrWVIA8W3tT iLdGsr+scZIBZIu9oVWTUH0OnY3K5YMREZ7FVyTJ8af/AQfsdpVi+LL7d6WT1pNB 3DSdqoqRbC9ktGpKI/ewMgI+sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgKOq5+ XDxyYMyPMitL9EBvGaDNMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjRBRi9DQzdCMjU1QURDQTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0 MG54QXJvNHlmWnVsTERTMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdupTuO98U9JKrXM09YXqQdQF1YYnjx8gyqdoY5O6zy+Gse0ev7Bmz NgWyKRc91d6QeEZmUX6e0DqJXjpHREEWjdIUjKMhaQsP8mjrHpTj4ITAfIaKL6iq s95KOVfRolFO3H6y2nXrsDS0GORMS7MYp1S3j+0ZOJUnhBNAFsiQDJ5IL5sje4Nz aIys+dXAOVRS5gmEursDNjK1sTKLOf6YqJjgce1MOcH8LvyqlNoR423H2+ug1IwP HC1Yu7VATIvlpzs296rYk2fNpWW7udlCSmaMmuCzPhMtS9hLrrIRNyQ7lwvSt+5c 0uEotLS0ImFLz97v9dl5mbFx0jEy9Vz8 -----END CERTIFICATE-----Generated at Sun Dec 21 06:16:42 2025 by rpki-client