This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft File: mqzM8QlZesZbyPegUCo-pK4cXxk.mft (raw, json) Hash identifier: z8PtH1PXnNDVH7QfNAGVZyorJ8ncPi8A6oIVSECYHEg= Subject key identifier: 0D:BE:50:A9:A0:25:59:0B:7D:67:15:FF:7F:91:E5:BB:1C:85:56:E5 Authority key identifier: 9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19 Certificate issuer: /CN=A91232CA/serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft Manifest number: 5B Signing time: Fri 05 Dec 2025 05:00:13 +0000 Manifest this update: Fri 05 Dec 2025 05:00:13 +0000 Manifest next update: Fri 12 Dec 2025 05:00:12 +0000 Files and hashes: 1: mqzM8QlZesZbyPegUCo-pK4cXxk.crl (hash: Kn78lcWtHVFNWnH9l/W2E8CGfyz4ZGcGTdnkvUlhRew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91232CA, serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19 Validity Not Before: Dec 5 05:00:13 2025 GMT Not After : Dec 12 05:00:12 2025 GMT Subject: CN=693266dd-5820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c4:42:9d:bf:84:36:ad:90:13:2a:18:5f:84: 6b:9e:40:d8:d6:3d:87:f3:e6:80:6c:7a:51:ab:65: 61:e4:17:b6:f6:2e:9b:b6:2c:3f:75:30:2c:02:c2: 7a:9e:53:db:41:33:62:af:21:1c:00:42:80:e3:00: 0e:17:2e:ae:86:bd:9b:56:03:e9:97:5d:b6:cd:9e: d0:a2:2b:f7:4f:45:76:dd:91:83:db:76:ae:14:6a: 02:1e:d4:df:2b:a4:94:26:52:79:19:aa:f2:79:14: bc:9f:6c:59:40:ae:0b:a6:99:45:51:cd:f4:b7:7a: dc:95:8c:79:8f:b8:d7:6b:8c:67:06:d4:ad:a3:3f: 94:c7:b1:ab:47:83:ff:ef:7d:13:3b:12:ad:3c:13: 24:5c:a0:6a:bb:39:41:ad:45:60:97:31:8d:20:50: 63:e2:8c:a3:26:9f:0b:22:15:11:be:9f:79:b4:ec: 14:75:15:59:32:17:3c:f2:49:fc:57:55:49:16:b6: 2f:06:98:61:c2:ff:d1:09:ec:68:29:8e:2d:69:b2: 79:69:93:b5:c5:61:06:3d:ba:87:a4:36:99:a5:e9: 67:4d:67:13:18:91:da:19:a6:e9:85:a2:36:e3:cd: d8:e7:05:31:84:9d:36:e7:60:e6:19:b6:11:26:e1: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BE:50:A9:A0:25:59:0B:7D:67:15:FF:7F:91:E5:BB:1C:85:56:E5 X509v3 Authority Key Identifier: keyid:9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f0:a8:6f:3f:36:e3:e1:f9:00:16:1b:09:b2:31:82:e8:0d: a2:6b:8c:0b:e6:e3:33:94:e3:a3:54:15:8e:b6:61:b8:1b:fd: ff:0c:c5:03:3c:c3:f9:6e:8c:2e:9d:9b:b2:3a:0d:7a:cc:51: f3:51:95:7f:46:10:37:34:38:c7:31:14:f0:89:79:d0:fa:4f: e6:0d:c3:af:b7:c2:bb:9f:db:bf:a6:6f:bb:cd:90:44:27:30: f4:58:f0:bb:7d:83:2d:af:d6:37:61:23:1d:de:88:ba:a9:2f: b1:fc:b8:7a:95:98:ef:e9:15:ff:d8:3b:57:a9:4b:89:49:cc: 7d:96:05:62:0d:91:db:a3:d2:5d:50:e8:da:d6:af:1b:06:2c: ac:5f:36:a8:90:86:36:8d:f9:d4:27:b5:b6:7e:ea:2a:50:55: af:f5:62:0d:cc:0b:9c:2d:8f:70:02:3e:94:a4:4f:bc:e0:2b: da:2a:27:08:71:5e:6d:59:e5:81:a4:05:f8:a6:98:ca:93:a7: 3d:04:6a:ad:59:24:91:a2:35:4a:bc:0f:92:36:e4:5b:07:0c: 12:58:2e:96:83:94:41:f1:c2:14:66:78:6f:db:34:bc:0a:66: fb:65:24:21:3f:54:e5:b9:fe:f6:19:1b:9c:3c:f2:e7:4b:ff: 8c:cc:81:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzJDQTExMC8GA1UEBRMoOUFBQ0NDRjEwOTU5N0FDNjVCQzhGN0EwNTAyQTNFQTRB RTFDNUYxOTAeFw0yNTEyMDUwNTAwMTNaFw0yNTEyMTIwNTAwMTJaMBgxFjAUBgNV BAMTDTY5MzI2NmRkLTU4MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlxEKdv4Q2rZATKhhfhGueQNjWPYfz5oBselGrZWHkF7b2Lpu2LD91MCwCwnqe U9tBM2KvIRwAQoDjAA4XLq6GvZtWA+mXXbbNntCiK/dPRXbdkYPbdq4UagIe1N8r pJQmUnkZqvJ5FLyfbFlArgummUVRzfS3etyVjHmPuNdrjGcG1K2jP5THsatHg//v fRM7Eq08EyRcoGq7OUGtRWCXMY0gUGPijKMmnwsiFRG+n3m07BR1FVkyFzzySfxX VUkWti8GmGHC/9EJ7Ggpji1psnlpk7XFYQY9uoekNpml6WdNZxMYkdoZpumFojbj zdjnBTGEnTbnYOYZthEm4fsdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDb5QqaAl WQt9ZxX/f5HluxyFVuUwHwYDVR0jBBgwFoAUmqzM8QlZesZbyPegUCo+pK4cXxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMkNBLzgxNThFRDJFNDY4 NjExRjBBOTc0Rjc0MEM0RjlBRTAyL21xek04UWxaZXNaYnlQZWdVQ28tcEs0Y1h4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXF6TThRbFplc1pieVBlZ1VDby1wSzRjWHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MkNBLzgxNThFRDJFNDY4NjExRjBBOTc0Rjc0MEM0RjlBRTAyL21xek04UWxaZXNa YnlQZWdVQ28tcEs0Y1h4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACjwqG8/NuPh+QAWGwmyMYLoDaJrjAvm4zOU46NUFY62Ybgb/f8MxQM8 w/lujC6dm7I6DXrMUfNRlX9GEDc0OMcxFPCJedD6T+YNw6+3wruf27+mb7vNkEQn MPRY8Lt9gy2v1jdhIx3eiLqpL7H8uHqVmO/pFf/YO1epS4lJzH2WBWINkduj0l1Q 6NrWrxsGLKxfNqiQhjaN+dQntbZ+6ipQVa/1Yg3MC5wtj3ACPpSkT7zgK9oqJwhx Xm1Z5YGkBfimmMqTpz0Eaq1ZJJGiNUq8D5I25FsHDBJYLpaDlEHxwhRmeG/bNLwK ZvtlJCE/VOW5/vYZG5w88udL/4zMgbI= -----END CERTIFICATE-----Generated at Sun Dec 7 04:37:05 2025 by rpki-client