This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: c18yP/9teYUne4U4cX6L/6H0MXT+00pmllgwVtGYV4A= Subject key identifier: DD:1F:17:70:43:43:9D:B4:E8:46:02:F5:70:73:F6:5C:1F:E4:97:DD Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 20F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 2861 Signing time: Mon 22 Dec 2025 15:45:42 +0000 Manifest this update: Mon 22 Dec 2025 15:45:42 +0000 Manifest next update: Mon 29 Dec 2025 15:45:42 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: z7nP9bJuRvdZED8cJtQw4DO78mS+7BUJ9+DP4gnkucg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8437 (0x20f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: Dec 22 15:45:42 2025 GMT Not After : Dec 29 15:45:42 2025 GMT Subject: CN=694967a6-68d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:3c:2f:5f:cb:9b:aa:53:dd:46:7c:5e:30: 7f:22:75:af:f7:11:4c:76:63:01:5b:dc:16:24:d6: a4:26:3b:ef:00:61:b8:c6:8a:f1:09:32:b0:5d:8e: 23:d6:16:ee:0c:a3:9a:dc:6a:25:ee:bb:f6:df:3d: 06:06:b7:5b:b1:fd:68:38:5d:3a:eb:af:d0:2b:70: c2:83:7d:10:c2:8b:fd:b4:10:93:a6:6c:ff:31:f7: 45:a8:77:8a:3f:f6:86:85:0b:f6:1f:53:69:20:27: 4b:47:d2:fc:e8:b0:0b:0c:6c:e1:78:54:76:46:f5: f6:83:45:5b:51:20:2b:c5:6a:de:50:70:b7:8e:cb: e0:97:43:ca:7d:a5:77:44:21:19:57:85:3a:23:c0: 50:d3:b4:cd:c9:b6:5e:3d:16:5d:49:5a:bd:54:3e: a6:94:76:ef:1c:19:39:42:59:b7:5d:6e:71:e2:d4: 01:ca:c8:ab:8b:5c:74:47:ee:04:8a:77:9d:48:63: fc:81:6e:65:3a:77:4f:b2:0b:3f:2e:c4:ea:b9:6f: ee:bb:34:d7:a0:e4:b1:f6:2a:77:e4:23:28:f6:23: 00:4e:71:55:70:fa:d9:75:25:0a:13:7f:0e:53:52: 7f:c6:88:a5:b9:d4:79:d9:4e:a0:72:70:dc:de:77: c1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1F:17:70:43:43:9D:B4:E8:46:02:F5:70:73:F6:5C:1F:E4:97:DD X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:91:1f:3e:11:42:a7:fa:a4:d5:4a:bf:bd:3b:ca:2d:d2:0d: 14:7a:4b:0b:47:a1:d2:c8:e5:83:71:18:88:4b:07:82:e1:e4: d2:c7:fa:9b:d9:91:7a:69:dd:5e:42:b1:88:75:5d:e3:f8:1c: d4:0a:a1:e7:c3:83:f8:3d:9c:f3:92:d4:92:e2:0f:bd:ca:7c: 75:fb:6c:ac:e1:23:78:de:e9:19:b5:f1:66:ca:58:cf:42:7f: e9:01:e2:47:14:71:e0:1e:4f:ee:ab:f3:41:ac:76:f5:9a:4b: e8:d8:01:ad:d3:da:12:09:a6:41:93:58:ed:ad:92:b0:1f:40: f7:0c:0e:63:47:cd:90:c4:c9:31:32:76:2b:ac:e1:32:c6:ca: 41:ba:51:37:89:19:b4:32:dc:3a:71:48:78:c5:79:df:23:c4: 1d:07:9a:c1:80:6f:24:fc:a3:ea:f6:85:f1:08:fe:5c:9b:69: 99:5e:21:3d:a2:12:99:a2:99:20:e1:d2:f7:6a:64:56:57:e0: 9a:5f:cf:1a:d9:5a:41:10:31:31:5e:da:d8:0f:11:dd:70:3d: 94:67:88:15:cb:48:7e:25:5d:ea:95:56:f1:e7:0d:22:70:46: 08:0c:23:e1:a5:b7:70:96:02:a0:e1:67:0c:b8:45:6e:6d:1f: 51:89:67:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjUxMjIyMTU0NTQyWhcNMjUxMjI5MTU0NTQyWjAYMRYwFAYD VQQDDA02OTQ5NjdhNi02OGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvw8L1/Lm6pT3UZ8XjB/InWv9xFMdmMBW9wWJNakJjvvAGG4xorxCTKwXY4j 1hbuDKOa3Gol7rv23z0GBrdbsf1oOF0666/QK3DCg30Qwov9tBCTpmz/MfdFqHeK P/aGhQv2H1NpICdLR9L86LALDGzheFR2RvX2g0VbUSArxWreUHC3jsvgl0PKfaV3 RCEZV4U6I8BQ07TNybZePRZdSVq9VD6mlHbvHBk5Qlm3XW5x4tQBysiri1x0R+4E inedSGP8gW5lOndPsgs/LsTquW/uuzTXoOSx9ip35CMo9iMATnFVcPrZdSUKE38O U1J/xoiludR52U6gcnDc3nfB6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0fF3BD Q5206EYC9XBz9lwf5JfdMB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgkR8+EUKn+qTVSr+9O8ot0g0UeksLR6HSyOWDcRiISweC4eTSx/qb 2ZF6ad1eQrGIdV3j+BzUCqHnw4P4PZzzktSS4g+9ynx1+2ys4SN43ukZtfFmyljP Qn/pAeJHFHHgHk/uq/NBrHb1mkvo2AGt09oSCaZBk1jtrZKwH0D3DA5jR82QxMkx MnYrrOEyxspBulE3iRm0Mtw6cUh4xXnfI8QdB5rBgG8k/KPq9oXxCP5cm2mZXiE9 ohKZopkg4dL3amRWV+CaX88a2VpBEDExXtrYDxHdcD2UZ4gVy0h+JV3qlVbx5w0i cEYIDCPhpbdwlgKg4WcMuEVubR9RiWfa -----END CERTIFICATE-----Generated at Tue Dec 23 20:46:02 2025 by rpki-client