This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft (raw, json) Hash identifier: Aupk7uV/ZC0EzBGZ9WbXxo7OSBi6KpDeo1L0ZaDgrZM= Subject key identifier: 71:61:05:E2:1D:83:C8:97:B0:08:1D:8A:CE:80:1E:8B:3A:63:6C:35 Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 Certificate issuer: /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Certificate serial: 06FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft Manifest number: 06DB Signing time: Thu 04 Dec 2025 21:02:47 +0000 Manifest this update: Thu 04 Dec 2025 21:02:46 +0000 Manifest next update: Thu 11 Dec 2025 21:02:46 +0000 Files and hashes: 1: lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl (hash: k4myetqVVHwfMBjZhMl8HRHQfK7kQ5Ez8RYKcO/pb4E=) 2: 1C9DA52E9BD011F0AE2D7868C4F9AE02.roa (hash: DWlVGSmUTrs+mVqgzEs4ZghKv3WdHzrNxG9RIMrV1aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1788 (0x6fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91211D4, serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Validity Not Before: Dec 4 21:02:46 2025 GMT Not After : Dec 11 21:02:46 2025 GMT Subject: CN=6931f6f6-8a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:d9:4e:79:51:5a:38:18:9b:44:88:bd:7a: 43:f2:c8:8a:52:40:0a:b5:9c:79:4b:d1:61:1b:2f: 4f:66:db:9e:e2:41:47:8b:ae:69:db:00:60:69:51: 99:79:b9:e5:60:cd:f0:5f:a0:37:d9:be:65:a0:8d: 30:1a:45:58:23:e1:2e:0f:6b:db:60:a1:9c:b2:77: cb:13:85:68:e2:8c:e7:76:f0:58:1d:b0:64:c1:4b: e9:76:6e:ac:61:c5:65:9e:f1:6f:c7:63:2b:6f:d9: 38:e0:61:bd:cd:90:40:0b:e5:14:09:07:56:c3:f3: 8d:4a:84:4e:8e:2c:93:6a:c8:d0:8f:0b:b6:07:a8: 07:f0:ba:e5:e1:c0:3a:e3:79:e1:14:6f:df:f1:e9: 59:a5:c9:aa:a7:87:ab:6a:54:c1:22:e2:e4:23:bd: 64:21:b2:f4:74:d2:b9:7f:cc:31:af:9b:5e:f3:60: 50:2c:7a:d9:96:e9:d9:bd:7e:0d:a4:17:57:4a:27: 8b:0c:77:81:db:07:a8:23:b9:dc:b6:6b:14:6b:c7: 42:e3:23:86:5c:a8:b1:7c:1c:07:f3:25:64:9a:77: 48:e5:cb:65:0a:4e:bf:09:42:c6:f4:23:da:23:69: dc:5a:ae:81:32:ff:e1:e1:88:94:e9:91:76:7b:c3: a0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:61:05:E2:1D:83:C8:97:B0:08:1D:8A:CE:80:1E:8B:3A:63:6C:35 X509v3 Authority Key Identifier: keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:04:ee:c9:db:4a:7d:50:c4:dc:1a:00:3e:09:af:38:8d:bd: 5b:3f:8f:95:e9:b0:2b:8a:5a:4b:12:d5:dc:0e:9b:05:44:72: f2:60:a8:3e:43:09:74:0d:2e:71:3b:f6:74:f8:5a:97:eb:e8: b8:13:eb:8f:bb:7d:7b:cb:27:50:81:86:e0:fa:c0:24:8a:30: 7d:71:68:5b:64:2b:2a:0a:e1:ff:4e:09:d6:3c:76:96:21:20: ed:32:9d:e6:22:ec:dd:aa:b5:bc:32:94:cd:a4:08:19:25:5f: a8:cf:3b:8c:81:4d:87:58:f5:46:0b:85:a9:22:b2:bb:9e:43: 3c:6b:9b:24:c3:06:f9:6d:80:61:75:74:06:4e:b9:01:60:20: 38:36:7f:6f:36:a0:b8:af:58:83:2e:e2:06:42:14:c8:d7:e0: b3:c5:a5:5e:53:fd:ab:5b:3e:60:3f:fd:31:ff:36:11:00:cf: 37:2d:f5:ab:ff:e8:a1:56:cd:30:23:82:84:52:37:1d:7b:5d: 04:4b:60:95:a2:89:6c:08:75:fb:f3:1f:fd:ec:17:cb:85:c0: 07:5f:c3:89:0b:0d:1a:53:29:63:dd:7e:28:0b:93:34:45:2c: 88:68:92:79:a4:c7:15:eb:5e:df:76:1e:c1:1d:f2:eb:59:08: 3c:d2:57:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExRDQxMTAvBgNVBAUTKDk2OEQyQUFBNjE2OENCNDk2OTQ0QTcyNzAxOEFGQjQy QTI2RTMxRTEwHhcNMjUxMjA0MjEwMjQ2WhcNMjUxMjExMjEwMjQ2WjAYMRYwFAYD VQQDEw02OTMxZjZmNi04YTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqY/ZTnlRWjgYm0SIvXpD8siKUkAKtZx5S9FhGy9PZtue4kFHi65p2wBgaVGZ ebnlYM3wX6A32b5loI0wGkVYI+EuD2vbYKGcsnfLE4Vo4ozndvBYHbBkwUvpdm6s YcVlnvFvx2Mrb9k44GG9zZBAC+UUCQdWw/ONSoROjiyTasjQjwu2B6gH8Lrl4cA6 43nhFG/f8elZpcmqp4eralTBIuLkI71kIbL0dNK5f8wxr5te82BQLHrZlunZvX4N pBdXSieLDHeB2weoI7nctmsUa8dC4yOGXKixfBwH8yVkmndI5ctlCk6/CULG9CPa I2ncWq6BMv/h4YiU6ZF2e8OguwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFhBeId g8iXsAgdis6AHos6Y2w1MB8GA1UdIwQYMBaAFJaNKqphaMtJaUSnJwGK+0KibjHh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTFENC9BOUY0OTY1Mjg2 Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kwbHBSS2NuQVlyN1FxSnVN ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvMHFxbUZveTBscFJLY25BWXI3UXFKdU1lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTFENC9BOUY0OTY1Mjg2Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kw bHBSS2NuQVlyN1FxSnVNZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9BO7J20p9UMTcGgA+Ca84jb1bP4+V6bArilpLEtXcDpsFRHLyYKg+ Qwl0DS5xO/Z0+FqX6+i4E+uPu317yydQgYbg+sAkijB9cWhbZCsqCuH/TgnWPHaW ISDtMp3mIuzdqrW8MpTNpAgZJV+ozzuMgU2HWPVGC4WpIrK7nkM8a5skwwb5bYBh dXQGTrkBYCA4Nn9vNqC4r1iDLuIGQhTI1+CzxaVeU/2rWz5gP/0x/zYRAM83LfWr /+ihVs0wI4KEUjcde10ES2CVoolsCHX78x/97BfLhcAHX8OJCw0aUylj3X4oC5M0 RSyIaJJ5pMcV617fdh7BHfLrWQg80lcU -----END CERTIFICATE-----Generated at Sat Dec 6 18:28:32 2025 by rpki-client