This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft File: ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json) Hash identifier: 3/Z8/ompfqTkcVMXvOdk3uInat5QvcSbJgP8XNBx6pk= Subject key identifier: 24:8F:52:04:14:B4:E5:B0:B7:07:D3:FD:1D:48:F1:27:E7:0C:8B:38 Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 Certificate issuer: /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft Manifest number: C4 Signing time: Fri 05 Dec 2025 03:52:58 +0000 Manifest this update: Fri 05 Dec 2025 03:52:58 +0000 Manifest next update: Fri 12 Dec 2025 03:52:58 +0000 Files and hashes: 1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: b5UTCw34tAE2nwnxmf6bHrLcnuI9ditnmnoNEVpTrvo=) 2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: J45sLiwW4UVC5sdSS+IxX3cBMgJ0HE+7WdnowtCp0yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Validity Not Before: Dec 5 03:52:58 2025 GMT Not After : Dec 12 03:52:58 2025 GMT Subject: CN=6932571a-b96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:07:10:af:3a:b9:03:7f:6e:18:28:19:f1: b8:38:a8:d0:17:05:e2:12:cf:bd:b3:4f:c3:32:94: db:27:b6:73:e4:b7:e3:f2:48:cb:f1:d5:14:63:d5: ba:0e:01:7e:64:85:7f:18:9b:78:c8:6c:2e:99:f6: 26:95:e9:a7:b2:45:19:ab:fd:d7:78:72:46:5d:45: 70:1c:94:48:3a:f2:cd:2c:5c:ed:93:4e:1c:b9:df: 86:8c:63:76:8a:09:f8:05:13:b8:48:a4:04:94:fc: 97:54:c2:e9:97:d1:25:ca:67:97:8f:83:3c:a8:18: fc:6f:1a:45:3a:00:10:c3:a4:70:78:a8:b7:9e:e4: 79:0a:a8:e1:e3:0c:56:3a:89:81:af:a9:2e:67:4f: 4a:13:1a:1d:72:fa:ef:49:8e:80:9b:ee:1b:ca:bd: 13:1d:c3:eb:a5:31:9c:af:32:36:0d:b4:34:87:7f: 63:6c:41:d7:3b:e6:63:fe:0b:8c:2e:11:9f:97:f9: 22:6d:fc:f0:af:e9:bb:25:0f:c8:18:2c:a2:75:de: 95:b5:7b:11:18:e3:eb:c7:a6:53:c1:d5:ed:ad:4c: 61:81:6f:b4:4e:79:22:63:06:11:1d:35:73:ca:46: ef:7b:88:60:e6:69:e3:cc:ca:b3:ba:5b:cb:ca:9a: 52:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8F:52:04:14:B4:E5:B0:B7:07:D3:FD:1D:48:F1:27:E7:0C:8B:38 X509v3 Authority Key Identifier: keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a3:d1:81:ca:f4:2b:02:fe:be:0b:00:47:16:2d:38:0e:cc: d1:f3:41:0f:1b:81:7a:b6:d5:c3:c1:ae:fd:30:a2:75:46:02: ec:e2:a9:c2:54:43:3f:02:43:6b:88:d1:b5:2c:ef:5a:41:29: b3:bc:59:50:98:69:89:70:29:d7:d4:99:d6:6a:d7:6d:cc:04: ce:0d:c6:d8:90:b2:3b:72:f1:b3:c9:42:ab:20:23:25:ae:02: 2b:69:ad:45:49:0c:98:54:44:8b:ff:e0:3a:62:c0:96:44:e8: 8b:ad:d1:ee:e8:ad:a4:23:a1:31:b3:bd:9a:79:cf:1f:a6:8c: 35:aa:58:e0:52:f6:c5:0c:5c:86:89:22:53:fc:f7:7c:0f:0d: f0:56:2e:15:c5:fa:c2:a0:e5:76:a3:7d:fe:4c:ba:74:e3:9c: 85:15:65:11:63:28:94:b7:1c:c5:0e:94:d6:3f:b9:a0:d9:77: 8e:ba:22:7a:05:16:e8:92:a7:cd:52:ee:7c:9c:5b:d3:17:cb: 0c:90:a3:fb:47:4c:d4:9f:72:89:57:2a:bc:98:47:a1:01:d5: 26:3c:5d:2b:fc:5e:13:b0:c3:13:6c:d7:94:d6:3e:41:0e:c9: 2f:09:9a:90:22:a7:b7:b1:d7:8b:e6:e3:ab:9d:d2:1c:85:64: 25:62:55:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwRjcxMTAvBgNVBAUTKDAwQjcyQUQ1MzMzQ0VBQUUxQTU4NUM4MjgwODlDNDQ1 NTk5OTYzRjIwHhcNMjUxMjA1MDM1MjU4WhcNMjUxMjEyMDM1MjU4WjAYMRYwFAYD VQQDEw02OTMyNTcxYS1iOTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLEHEK86uQN/bhgoGfG4OKjQFwXiEs+9s0/DMpTbJ7Zz5Lfj8kjL8dUUY9W6 DgF+ZIV/GJt4yGwumfYmlemnskUZq/3XeHJGXUVwHJRIOvLNLFztk04cud+GjGN2 ign4BRO4SKQElPyXVMLpl9ElymeXj4M8qBj8bxpFOgAQw6RweKi3nuR5Cqjh4wxW OomBr6kuZ09KExodcvrvSY6Am+4byr0THcPrpTGcrzI2DbQ0h39jbEHXO+Zj/guM LhGfl/kibfzwr+m7JQ/IGCyidd6VtXsRGOPrx6ZTwdXtrUxhgW+0TnkiYwYRHTVz ykbve4hg5mnjzMqzulvLyppSBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSPUgQU tOWwtwfT/R1I8SfnDIs4MB8GA1UdIwQYMBaAFAC3KtUzPOquGlhcgoCJxEVZmWPy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBGNy85Rjc2OEFGQUE3 RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZxNGFXRnlDZ0luRVJWbVpZ X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FMY3ExVE04NnE0YVdGeUNnSW5FUlZtWllfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODBGNy85Rjc2OEFGQUE3RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZx NGFXRnlDZ0luRVJWbVpZX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfo9GByvQrAv6+CwBHFi04DszR80EPG4F6ttXDwa79MKJ1RgLs4qnC VEM/AkNriNG1LO9aQSmzvFlQmGmJcCnX1JnWatdtzATODcbYkLI7cvGzyUKrICMl rgIraa1FSQyYVESL/+A6YsCWROiLrdHu6K2kI6Exs72aec8fpow1qljgUvbFDFyG iSJT/Pd8Dw3wVi4VxfrCoOV2o33+TLp045yFFWURYyiUtxzFDpTWP7mg2XeOuiJ6 BRbokqfNUu58nFvTF8sMkKP7R0zUn3KJVyq8mEehAdUmPF0r/F4TsMMTbNeU1j5B DskvCZqQIqe3sdeL5uOrndIchWQlYlUb -----END CERTIFICATE-----Generated at Sat Dec 6 14:15:17 2025 by rpki-client