This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json) Hash identifier: HdFxKbCYdT9rtvoVJpdXqjN1VTRheQFMjQqLdzV7h80= Subject key identifier: B6:83:39:23:7A:F6:26:CA:97:5C:71:63:1F:8C:35:29:E4:90:67:BB Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0B7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft Manifest number: 0B6B Signing time: Thu 04 Dec 2025 18:30:18 +0000 Manifest this update: Thu 04 Dec 2025 18:30:17 +0000 Manifest next update: Thu 11 Dec 2025 18:30:17 +0000 Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: ggBRGf8ZGzlmaatoGQPzueplaC1C3wnuUAIk+oXL41Q=) 2: 5B94B082C6C411F08872F86DC4F9AE02.roa (hash: ikwecTf7GYRmmkKlpmcTdo9WGbYpUh8VjUYHN+mpru8=) 3: 208F4DA8C6C411F0BEF62B6BC4F9AE02.roa (hash: JleVMwL9aP898EmaYuIzvHSQHOwb+NFkXuXkHYoagfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2941 (0xb7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: Dec 4 18:30:17 2025 GMT Not After : Dec 11 18:30:17 2025 GMT Subject: CN=6931d339-4c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f3:08:c9:17:d1:31:00:fc:c5:fb:9d:8c:94: d7:9b:30:98:cf:6d:fd:8b:b2:f2:73:cb:07:cf:da: 06:fd:c2:18:5c:e6:dc:f2:b5:d5:84:ce:43:25:54: 36:b7:4b:09:da:29:e1:24:b4:b2:ed:7c:9f:8c:a3: 87:fb:e5:ea:88:5f:9a:dd:22:72:74:56:e8:55:f2: 63:82:e5:11:b0:8c:98:ed:23:62:70:9a:dc:76:6b: 88:59:d3:f3:a4:df:81:4c:13:5d:f2:7e:9f:d4:5d: 7d:6a:91:d8:f0:f9:f6:d7:2a:60:c7:6b:5b:f2:e9: 46:da:9c:7d:70:01:ba:d4:bc:70:00:a0:43:a3:85: fc:d2:42:1e:56:37:54:30:af:cf:82:a7:bb:83:e9: 7f:f3:9b:e5:13:6f:21:9c:3f:3c:a1:6b:bb:d8:03: 52:7a:f2:42:28:61:31:12:52:9a:37:2a:f7:d3:cc: 93:ae:7c:95:47:ea:a4:7a:2f:17:9c:8b:4e:19:86: cb:b7:82:e5:71:73:c8:f6:d7:73:5b:6e:fc:e5:a1: 06:94:fb:e1:ae:01:3d:17:38:a8:c2:9c:5e:21:3a: ec:70:4c:a8:94:7c:7e:72:a8:dd:99:6b:1e:13:77: d7:19:9e:3d:82:aa:24:77:9a:e2:b0:da:ce:c5:5a: b0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:83:39:23:7A:F6:26:CA:97:5C:71:63:1F:8C:35:29:E4:90:67:BB X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:3f:78:79:bf:58:20:e8:1c:7d:cb:18:26:9c:f6:9b:e8:e6: 68:e4:bb:e5:c7:32:68:ff:33:9d:50:65:94:c0:df:c9:8d:4e: 4d:b0:a5:3d:93:9d:ad:ac:02:9c:c9:df:e8:aa:9a:89:e1:55: e8:35:91:69:ab:7f:2c:ef:8c:00:74:5f:94:a8:ef:d6:26:15: ca:26:df:d6:1c:b3:f4:7e:da:22:67:80:3e:ec:81:8b:b8:fe: 89:a4:0a:c4:a9:b0:df:49:a1:69:72:4a:47:13:f0:c9:10:05: fb:bb:20:10:ed:6e:2f:0a:a4:c7:3f:48:46:bd:ca:6d:21:35: 54:41:ad:a8:2e:cc:33:b4:26:f1:41:00:cf:2d:91:49:36:9d: 16:9a:c2:b2:d7:a8:ab:f8:e0:c4:dc:0c:14:b5:39:00:40:ba: e8:d3:e8:51:63:0d:73:2a:e0:08:72:67:1b:07:99:e2:5f:06: ff:47:5d:9e:8f:67:1e:33:56:87:32:e3:b4:41:e6:93:e8:b9: 01:80:3c:42:d8:3d:97:ad:e4:de:28:8a:28:58:86:ff:5c:e5: 39:27:5f:6c:a0:10:b2:b6:13:63:6a:df:0d:5f:c4:8e:72:19: ed:c9:89:ab:da:f9:da:1e:e0:00:e3:ac:9e:be:f4:95:10:d2: 23:04:bb:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjUxMjA0MTgzMDE3WhcNMjUxMjExMTgzMDE3WjAYMRYwFAYD VQQDEw02OTMxZDMzOS00YzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fMIyRfRMQD8xfudjJTXmzCYz239i7Lyc8sHz9oG/cIYXObc8rXVhM5DJVQ2 t0sJ2inhJLSy7XyfjKOH++XqiF+a3SJydFboVfJjguURsIyY7SNicJrcdmuIWdPz pN+BTBNd8n6f1F19apHY8Pn21ypgx2tb8ulG2px9cAG61LxwAKBDo4X80kIeVjdU MK/Pgqe7g+l/85vlE28hnD88oWu72ANSevJCKGExElKaNyr308yTrnyVR+qkei8X nItOGYbLt4LlcXPI9tdzW2785aEGlPvhrgE9FziowpxeITrscEyolHx+cqjdmWse E3fXGZ49gqokd5risNrOxVqwbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaDOSN6 9ibKl1xxYx+MNSnkkGe7MB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4 MjQxX1JNYnh6UlBuUEM4akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZP3h5v1gg6Bx9yxgmnPab6OZo5LvlxzJo/zOdUGWUwN/JjU5NsKU9 k52trAKcyd/oqpqJ4VXoNZFpq38s74wAdF+UqO/WJhXKJt/WHLP0ftoiZ4A+7IGL uP6JpArEqbDfSaFpckpHE/DJEAX7uyAQ7W4vCqTHP0hGvcptITVUQa2oLswztCbx QQDPLZFJNp0WmsKy16ir+ODE3AwUtTkAQLro0+hRYw1zKuAIcmcbB5niXwb/R12e j2ceM1aHMuO0QeaT6LkBgDxC2D2XreTeKIooWIb/XOU5J19soBCythNjat8NX8SO chntyYmr2vnaHuAA46yevvSVENIjBLuN -----END CERTIFICATE-----Generated at Sat Dec 6 16:14:29 2025 by rpki-client