This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft (raw, json) Hash identifier: sGZZAvpw1NM9TJ2M9tkxU0uZoPrM1hoZmddgKEJGxBM= Subject key identifier: D2:BF:35:F6:E4:C6:7A:2A:01:8A:90:D0:3C:3E:7E:6B:80:E9:BA:B4 Authority key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E Certificate issuer: /CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Certificate serial: 34E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft Manifest number: 34E5 Signing time: Sat 06 Dec 2025 14:43:29 +0000 Manifest this update: Sat 06 Dec 2025 14:43:28 +0000 Manifest next update: Sat 13 Dec 2025 14:43:28 +0000 Files and hashes: 1: QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl (hash: BbZmbxwQ7Pg9teT3ITU9zPo30Nulzstztbrrtcr8RtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13541 (0x34e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Validity Not Before: Dec 6 14:43:28 2025 GMT Not After : Dec 13 14:43:28 2025 GMT Subject: CN=69344111-ab66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:65:37:9c:88:aa:cc:2a:08:a7:e5:4e:ac: 0d:e4:f9:25:f5:ab:c8:5d:4a:69:f2:04:d3:a9:6a: ae:ed:33:95:b6:06:c4:bb:f0:73:90:5e:ae:6b:1f: 71:58:a6:0b:ec:ec:44:68:4a:52:34:f3:1a:64:2f: a5:eb:0a:5d:99:cc:77:50:ad:50:ea:91:18:f3:e7: 6d:e1:77:af:d4:0b:72:f9:57:ee:5f:1d:5b:27:a6: 69:76:c1:c5:14:88:60:a2:3a:da:0b:b4:0c:92:3f: 1a:8a:1b:3e:64:c1:23:95:b8:62:69:0f:2c:c1:4e: 48:9c:32:34:1c:d8:16:c8:bf:f2:3b:ca:35:0a:d1: c0:cf:a6:54:e4:d7:dd:d1:b6:ba:61:7e:db:78:65: 9e:2b:6f:12:e4:5e:1e:63:a5:b9:1c:93:35:6c:a9: ec:f7:40:df:dd:0a:cb:6f:1d:af:90:4e:33:9b:72: d0:18:dc:64:38:56:93:5e:e7:cc:f7:14:4a:ec:73: db:11:d5:ad:fc:11:8e:06:07:e3:5e:12:f3:cd:1f: 51:e6:7e:eb:13:c9:01:d7:d7:fb:6a:5e:95:d8:a9: 8a:6b:f2:fb:b8:95:d4:26:dc:14:60:43:51:01:ea: e6:43:b6:4a:0e:09:69:f2:75:c0:eb:6f:ef:19:6c: f5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BF:35:F6:E4:C6:7A:2A:01:8A:90:D0:3C:3E:7E:6B:80:E9:BA:B4 X509v3 Authority Key Identifier: keyid:41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:54:70:88:73:23:b2:86:e6:d9:23:2a:b6:50:6a:21:e2:20: 29:16:d2:b7:c2:fe:49:13:51:22:6e:26:22:5b:05:fb:0c:aa: 32:d3:cd:a9:6a:96:6f:68:45:40:19:33:38:25:16:fb:20:fe: 17:96:62:06:14:99:b6:47:55:fa:41:83:f2:d7:8c:4d:f2:8f: 3c:d0:08:96:41:35:95:f8:6e:ec:c6:db:06:94:7d:41:15:07: a5:22:72:7c:77:84:8f:af:93:29:f8:c3:16:08:40:18:29:d0: 38:a6:28:84:ed:e1:ba:ed:07:3c:74:55:c7:9a:70:83:d8:38: 1a:6a:85:02:16:bd:53:e0:cc:c5:8e:bc:5b:45:0a:de:b4:08: 3d:e9:03:11:ab:3a:14:0d:f4:6c:69:fc:0a:7f:30:f9:31:e5: 7f:fa:c7:1d:a0:55:30:cc:84:a1:aa:06:9f:24:7e:28:08:97: 00:e6:64:71:3d:50:0b:92:7c:e3:0c:1a:95:06:9c:d7:bf:25: 77:98:f5:d2:2f:7b:c7:dc:97:09:1c:e3:5d:e1:b2:3b:8b:54: 69:6b:ae:ab:c5:2e:84:b6:41:89:65:40:5e:84:61:c2:d7:2e: 7b:64:01:17:99:a6:16:2d:87:fa:70:54:1c:44:e2:66:c1:f0: 9b:13:d7:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QUIxMTAvBgNVBAUTKDQxNzZGMTA5MThDOUIxOEQyREVGOEI3QzY2RkM1QTNB NjU4MjIzMUUwHhcNMjUxMjA2MTQ0MzI4WhcNMjUxMjEzMTQ0MzI4WjAYMRYwFAYD VQQDEw02OTM0NDExMS1hYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD5lN5yIqswqCKflTqwN5Pkl9avIXUpp8gTTqWqu7TOVtgbEu/BzkF6uax9x WKYL7OxEaEpSNPMaZC+l6wpdmcx3UK1Q6pEY8+dt4Xev1Aty+VfuXx1bJ6ZpdsHF FIhgojraC7QMkj8aihs+ZMEjlbhiaQ8swU5InDI0HNgWyL/yO8o1CtHAz6ZU5Nfd 0ba6YX7beGWeK28S5F4eY6W5HJM1bKns90Df3QrLbx2vkE4zm3LQGNxkOFaTXufM 9xRK7HPbEdWt/BGOBgfjXhLzzR9R5n7rE8kB19f7al6V2KmKa/L7uJXUJtwUYENR AermQ7ZKDglp8nXA62/vGWz12wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNK/Nfbk xnoqAYqQ0Dw+fmuA6bq0MB8GA1UdIwQYMBaAFEF28QkYybGNLe+LfGb8WjplgiMe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRBQi81RTBBQTlBMjFE OTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZMHQ3NHQ4WnZ4YU9tV0NJ eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYYnhDUmpKc1kwdDc0dDhadnhhT21XQ0l4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRBQi81RTBBQTlBMjFEOTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZ MHQ3NHQ4WnZ4YU9tV0NJeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqVHCIcyOyhubZIyq2UGoh4iApFtK3wv5JE1EibiYiWwX7DKoy082p apZvaEVAGTM4JRb7IP4XlmIGFJm2R1X6QYPy14xN8o880AiWQTWV+G7sxtsGlH1B FQelInJ8d4SPr5Mp+MMWCEAYKdA4piiE7eG67Qc8dFXHmnCD2DgaaoUCFr1T4MzF jrxbRQretAg96QMRqzoUDfRsafwKfzD5MeV/+scdoFUwzIShqgafJH4oCJcA5mRx PVALknzjDBqVBpzXvyV3mPXSL3vH3JcJHONd4bI7i1Rpa66rxS6EtkGJZUBehGHC 1y57ZAEXmaYWLYf6cFQcROJmwfCbE9cR -----END CERTIFICATE-----Generated at Sun Dec 7 11:10:57 2025 by rpki-client