This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft File: PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft (raw, json) Hash identifier: HYtE8KhoAuK0UF4kglInazByT6aAkGuAn6S/FMOtTkc= Subject key identifier: CC:37:C7:F8:43:2C:64:40:21:66:16:C4:05:81:C3:D8:F1:4C:D9:07 Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Certificate serial: 0885 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft Manifest number: 0838 Signing time: Sat 06 Dec 2025 20:10:03 +0000 Manifest this update: Sat 06 Dec 2025 20:10:02 +0000 Manifest next update: Sat 13 Dec 2025 20:10:02 +0000 Files and hashes: 1: PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl (hash: sWdTzb6Y5fRDHGgJwexL8lQqzbTiHlYIntnmYYnDa0g=) 2: CD1E94321A7D11F09A63C576C4F9AE02.roa (hash: vVJ4ZPcH3lbEogl2hIa71k4678GTw2JTT698EnTX0sk=) 3: DD8B40E41A7E11F098A37378C4F9AE02.roa (hash: L6v9N1lps3HT+4hWevJV8kUzpnpP386yo30tBD8aoeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2181 (0x885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91450A4, serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Validity Not Before: Dec 6 20:10:02 2025 GMT Not After : Dec 13 20:10:02 2025 GMT Subject: CN=69348d9b-d4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:7f:55:43:64:dc:f5:6a:19:37:e4:53:92: e9:8c:c2:d2:66:00:e8:aa:d2:74:03:5b:22:dd:88: ed:6a:06:46:eb:8c:c8:07:73:42:f0:8b:1c:a1:6b: 1a:f8:6e:0c:ab:86:b6:34:8d:5e:aa:8e:d1:2b:1f: a4:d1:af:4a:6c:03:0b:91:20:dd:32:d0:0a:bd:5b: f0:bc:37:74:f6:4b:b7:5c:02:63:ca:6b:9d:4e:1f: 7f:39:ea:2f:58:3c:a3:fb:e8:86:81:be:cf:a9:59: 68:bb:2d:47:de:8d:0e:13:00:a6:84:1a:51:46:59: 2b:97:ce:33:f9:f5:f9:96:be:5b:a8:ab:f3:47:3a: 78:3a:9c:e6:84:f8:df:02:32:71:05:3a:47:dd:5b: 74:13:9b:c7:fd:76:f9:9b:10:d0:eb:95:08:72:f3: a0:50:ea:ce:eb:c2:c8:d8:8f:a2:81:a4:7a:17:41: 9d:bb:4c:dd:8c:de:72:9a:ad:43:a4:9a:da:46:67: 72:f5:ab:d0:85:15:10:f7:52:0c:76:a4:b4:af:01: a1:65:b9:16:cd:2a:fb:c0:6c:55:89:03:83:eb:66: 48:56:50:36:d8:35:27:a8:c6:11:bb:20:01:64:cf: b8:b4:97:5a:34:96:3b:94:8c:90:2b:d1:70:01:fa: 62:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:37:C7:F8:43:2C:64:40:21:66:16:C4:05:81:C3:D8:F1:4C:D9:07 X509v3 Authority Key Identifier: keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c5:62:09:e4:73:25:85:21:a4:55:82:c4:b3:4f:e5:81:2c: de:d7:6d:9e:c8:c5:ef:f8:ed:58:42:30:7e:13:fe:88:87:87: 1e:a5:c9:d6:8b:5f:6b:dc:97:ad:fc:69:4a:7f:f5:1a:28:fb: 27:58:47:67:b4:a9:6f:dd:b9:d6:cc:55:85:47:5a:61:9b:70: 44:43:3d:ce:30:4a:93:df:e8:e0:8a:e7:3a:e4:1d:9f:91:7f: 73:bd:28:37:a9:59:f5:7f:7c:92:b7:04:af:22:c1:3f:22:9a: 34:db:c4:89:dc:2e:41:b8:31:00:da:49:3b:77:c6:a3:23:e5: ec:5a:a1:04:80:00:d6:1e:0f:44:97:79:22:61:dd:03:9f:2e: 99:3a:1b:1a:bd:73:0c:f6:58:49:7a:63:83:0d:31:97:31:ca: a0:2a:ae:65:bb:ec:21:f1:ba:b5:ae:f1:e6:ef:db:c5:04:6a: 35:56:30:8f:c5:e0:81:b7:c2:74:f6:a0:00:b0:63:30:54:44: f9:c3:6d:bb:b2:79:12:78:55:8b:f9:66:d5:02:ac:9f:db:57: 69:07:0f:a7:d3:28:78:50:3c:fc:ec:d1:1a:f8:90:40:fc:50: 67:68:7a:96:1e:74:e5:ee:54:d9:b3:14:00:5b:97:f9:7a:62: 75:6e:1a:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUwQTQxMTAvBgNVBAUTKDNEMUQ2QTMzMkFFQTRFQzUwMjAzN0EwOTA5RjRDQzE5 RDQyREIxOTgwHhcNMjUxMjA2MjAxMDAyWhcNMjUxMjEzMjAxMDAyWjAYMRYwFAYD VQQDEw02OTM0OGQ5Yi1kNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5J/VUNk3PVqGTfkU5LpjMLSZgDoqtJ0A1si3YjtagZG64zIB3NC8IscoWsa +G4Mq4a2NI1eqo7RKx+k0a9KbAMLkSDdMtAKvVvwvDd09ku3XAJjymudTh9/Oeov WDyj++iGgb7PqVlouy1H3o0OEwCmhBpRRlkrl84z+fX5lr5bqKvzRzp4OpzmhPjf AjJxBTpH3Vt0E5vH/Xb5mxDQ65UIcvOgUOrO68LI2I+igaR6F0Gdu0zdjN5ymq1D pJraRmdy9avQhRUQ91IMdqS0rwGhZbkWzSr7wGxViQOD62ZIVlA22DUnqMYRuyAB ZM+4tJdaNJY7lIyQK9FwAfpiwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMw3x/hD LGRAIWYWxAWBw9jxTNkHMB8GA1UdIwQYMBaAFD0dajMq6k7FAgN6CQn0zBnULbGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTBBNC9ERDQ3MzY5ODBD MzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRzVUNBM29KQ2ZUTUdkUXRz WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSMXFNeXJxVHNVQ0Ezb0pDZlRNR2RRdHNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTBBNC9ERDQ3MzY5ODBDMzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRz VUNBM29KQ2ZUTUdkUXRzWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKxWIJ5HMlhSGkVYLEs0/lgSze122eyMXv+O1YQjB+E/6Ih4cepcnW i19r3Jet/GlKf/UaKPsnWEdntKlv3bnWzFWFR1phm3BEQz3OMEqT3+jgiuc65B2f kX9zvSg3qVn1f3yStwSvIsE/Ipo028SJ3C5BuDEA2kk7d8ajI+XsWqEEgADWHg9E l3kiYd0Dny6ZOhsavXMM9lhJemODDTGXMcqgKq5lu+wh8bq1rvHm79vFBGo1VjCP xeCBt8J09qAAsGMwVET5w227snkSeFWL+WbVAqyf21dpBw+n0yh4UDz87NEa+JBA /FBnaHqWHnTl7lTZsxQAW5f5emJ1bhqX -----END CERTIFICATE-----Generated at Sun Dec 7 03:32:24 2025 by rpki-client