This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft File: Q1TVz6Vk7nGzToh07rG5ho-IB90.mft (raw, json) Hash identifier: 3N4ZdZoQIaqqWkWIxIWBImL9aes+9kzsyOR4bgkCbpc= Subject key identifier: 0A:0D:1C:CB:8A:8F:AF:FD:BE:30:A2:FB:FB:51:E5:15:78:3B:06:2E Authority key identifier: 43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD Certificate issuer: /CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD Certificate serial: 080B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft Manifest number: 07FD Signing time: Wed 24 Dec 2025 20:28:24 +0000 Manifest this update: Wed 24 Dec 2025 20:28:23 +0000 Manifest next update: Wed 31 Dec 2025 20:28:23 +0000 Files and hashes: 1: Q1TVz6Vk7nGzToh07rG5ho-IB90.crl (hash: sM/rL7nNCb/gTqEg1ur+zyYzBpIXjaIIZy34sieoe/U=) 2: 638149B88C2C11EBBB3B260BC4F9AE02.roa (hash: B/FCYm7yp7p+ieEmvmImAhcl/oemA2ZNjMcDSU18oaU=) 3: A10812CA0CD511EB9433AE69C4F9AE02.roa (hash: Pp8lb1nzqx7e9rT/EQLbTNVmmjg6MQa2RdSIFuurOeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 20:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2059 (0x80b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC50, serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD Validity Not Before: Dec 24 20:28:23 2025 GMT Not After : Dec 31 20:28:23 2025 GMT Subject: CN=694c4ce7-8897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:59:df:0c:6a:34:c5:70:e2:68:d9:31:bc: 99:61:2f:a5:25:c5:6c:b1:bb:8a:82:8d:e1:76:18: 40:27:eb:84:8e:20:e5:d0:71:4d:3f:1e:56:d3:f3: d5:99:15:ff:03:a5:a1:c8:f2:dc:44:75:9c:4b:c8: ae:70:a2:82:f7:18:c3:16:1d:d3:d7:d4:46:d1:e4: f9:b1:d7:b1:bd:58:25:c0:28:85:7b:31:92:a8:38: 46:91:99:ed:e1:c9:aa:09:5f:06:91:19:1c:80:e2: e6:7a:2d:77:a3:fb:30:cd:52:e7:cc:9e:25:bb:5b: 67:f9:69:c6:32:dd:c4:83:c5:74:3d:70:d2:83:2f: 55:8a:b7:4f:73:c5:25:9d:55:df:8d:f0:24:50:41: ea:fc:ac:d5:a6:03:0b:44:e1:40:3f:b0:c2:2f:e8: 0a:97:3b:21:ef:be:40:ad:53:db:69:bb:ba:b8:51: 59:13:b0:97:81:d5:2b:cd:b7:e4:54:0d:92:2e:3d: cf:a2:d1:9e:7f:35:19:5a:b0:b3:46:3c:35:09:1f: 19:b0:43:89:01:8a:fb:0e:67:57:04:fb:df:93:8e: 80:d3:a6:17:65:8f:a8:b4:2a:ee:75:44:fd:43:57: 89:68:90:7b:1d:e1:69:0a:3e:5b:67:b6:82:2d:d8: 56:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0D:1C:CB:8A:8F:AF:FD:BE:30:A2:FB:FB:51:E5:15:78:3B:06:2E X509v3 Authority Key Identifier: keyid:43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b9:97:45:a2:46:d2:9f:54:00:ed:27:46:43:5c:e7:c4:0c: 35:ec:f1:69:85:a0:57:cc:f0:16:d2:56:dd:69:41:b1:a6:fa: 56:ca:cb:9c:4b:50:a5:28:06:9b:b0:8f:18:d5:61:4b:c4:05: 91:e7:86:e6:64:be:29:ad:a9:02:fc:6f:9c:a0:e3:a0:07:e7: 59:6e:e5:aa:31:4d:13:70:18:f0:70:09:c7:de:86:46:1d:65: 60:40:a0:7a:22:4f:1e:05:42:85:85:41:dc:5a:dc:37:6f:84: eb:7c:2b:46:d3:8a:6f:0a:e1:c7:84:fe:75:5d:99:bd:39:75: 6b:c5:f5:ca:55:59:3f:98:65:14:80:1b:33:fb:67:ba:a7:4c: 2d:4e:64:09:a7:67:cb:00:4f:7a:70:5d:e7:f4:cf:43:93:03: 9a:e6:48:d2:21:41:3b:3b:1a:43:ef:bb:41:b3:a6:60:0b:2c: 86:e8:88:fd:01:e2:25:2a:8b:be:8f:fb:42:22:89:40:d7:a0: 2a:86:d9:49:d7:e2:a5:4d:94:e7:db:1e:e6:8a:e5:2f:48:a8: a7:79:58:d0:01:f5:b0:9a:ae:98:95:e4:19:53:e3:be:3c:71: 03:15:84:a9:d7:17:ca:95:1b:33:75:7c:d1:dc:aa:ac:a3:f8: 69:4c:2d:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNTAxMTAvBgNVBAUTKDQzNTRENUNGQTU2NEVFNzFCMzRFODg3NEVFQjFCOTg2 OEY4ODA3REQwHhcNMjUxMjI0MjAyODIzWhcNMjUxMjMxMjAyODIzWjAYMRYwFAYD VQQDDA02OTRjNGNlNy04ODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/9Z3wxqNMVw4mjZMbyZYS+lJcVssbuKgo3hdhhAJ+uEjiDl0HFNPx5W0/PV mRX/A6WhyPLcRHWcS8iucKKC9xjDFh3T19RG0eT5sdexvVglwCiFezGSqDhGkZnt 4cmqCV8GkRkcgOLmei13o/swzVLnzJ4lu1tn+WnGMt3Eg8V0PXDSgy9VirdPc8Ul nVXfjfAkUEHq/KzVpgMLROFAP7DCL+gKlzsh775ArVPbabu6uFFZE7CXgdUrzbfk VA2SLj3PotGefzUZWrCzRjw1CR8ZsEOJAYr7DmdXBPvfk46A06YXZY+otCrudUT9 Q1eJaJB7HeFpCj5bZ7aCLdhW3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoNHMuK j6/9vjCi+/tR5RV4OwYuMB8GA1UdIwQYMBaAFENU1c+lZO5xs06IdO6xuYaPiAfd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM1MC9FNDg1OEFDNDBD RDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazduR3pUb2gwN3JHNWhvLUlC OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ExVFZ6NlZrN25HelRvaDA3ckc1aG8tSUI5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM1MC9FNDg1OEFDNDBDRDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazdu R3pUb2gwN3JHNWhvLUlCOTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcuZdFokbSn1QA7SdGQ1znxAw17PFphaBXzPAW0lbdaUGxpvpWysuc S1ClKAabsI8Y1WFLxAWR54bmZL4prakC/G+coOOgB+dZbuWqMU0TcBjwcAnH3oZG HWVgQKB6Ik8eBUKFhUHcWtw3b4TrfCtG04pvCuHHhP51XZm9OXVrxfXKVVk/mGUU gBsz+2e6p0wtTmQJp2fLAE96cF3n9M9DkwOa5kjSIUE7OxpD77tBs6ZgCyyG6Ij9 AeIlKou+j/tCIolA16AqhtlJ1+KlTZTn2x7miuUvSKineVjQAfWwmq6YleQZU+O+ PHEDFYSp1xfKlRszdXzR3Kqso/hpTC1e -----END CERTIFICATE-----Generated at Thu Dec 25 05:16:20 2025 by rpki-client