This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json) Hash identifier: /r0dj9Pt+mqZhwRM04bt3/5zMMChPYyYKlvsLtqIcno= Subject key identifier: 8A:9E:86:45:B0:05:78:1C:38:06:C3:A9:C7:D3:FA:96:0D:50:19:49 Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft Manifest number: 0257 Signing time: Sat 06 Dec 2025 21:06:09 +0000 Manifest this update: Sat 06 Dec 2025 21:06:07 +0000 Manifest next update: Sat 13 Dec 2025 21:06:07 +0000 Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: qfcAaHKnmGD7d2ZEASg0K7RLT/GGXc0wmf6IrCZ0Uo0=) 2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: xsRGj9an13o+ozRk8T0R12ysRESN2vJXv8XQcYafKCU=) 3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: 0ZDkLkZaaQfnmuzBjz0ljr58b+EeHu6qJ0K1k0tRYzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Validity Not Before: Dec 6 21:06:07 2025 GMT Not After : Dec 13 21:06:07 2025 GMT Subject: CN=69349abf-0ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:77:4c:15:fa:09:e8:1e:95:3f:95:a8:45:a9: 76:c4:e2:95:3c:9f:2c:7c:a1:11:ed:2f:ed:97:03: 5b:e9:17:1d:1f:62:dd:6a:01:d5:0e:3d:f7:15:d0: 34:1e:b1:2d:0b:d0:c4:4e:ad:cc:93:b7:2a:3e:cd: 44:d4:47:4e:7a:28:cf:f3:0d:dd:f5:2d:76:63:c9: 4e:6f:f7:33:82:63:13:b9:49:ce:86:73:2e:eb:c4: 0a:c4:de:48:f9:e1:16:61:68:e8:63:85:62:1c:9d: 44:ab:51:f7:a7:74:6a:74:33:89:22:77:33:19:9a: 3c:1b:4b:2d:97:78:8b:1e:1f:d1:b7:7f:dd:18:41: d5:fa:e4:f0:dd:27:d0:0c:35:60:c0:b2:86:e2:0b: 2c:f8:be:38:25:52:84:b3:8a:bd:74:96:ce:44:86: 08:aa:4e:d9:fe:03:44:a5:10:a8:93:8f:d9:d0:b4: f0:27:aa:d5:a6:24:18:36:de:b9:68:48:cb:52:e7: e6:5d:48:fc:30:37:ed:f1:b5:57:3f:4f:5e:62:99: dd:e1:5f:41:66:2e:1b:b1:0b:0d:96:11:d5:d9:8c: 13:c3:75:df:7f:f3:f3:c7:ed:33:94:56:0d:3c:55: 2d:4d:42:49:8e:6b:80:95:f6:4c:a0:a3:a7:c8:c3: f3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9E:86:45:B0:05:78:1C:38:06:C3:A9:C7:D3:FA:96:0D:50:19:49 X509v3 Authority Key Identifier: keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:81:19:76:bf:c3:a0:13:7f:fd:ff:d8:0e:6d:58:09:3f:f4: 23:ef:12:12:f2:a2:1c:1e:20:06:88:47:c0:15:01:fe:e7:52: 19:b7:4c:b3:7d:7e:40:fd:25:6d:ac:68:8c:64:1d:08:56:f6: 76:8e:7c:fa:0d:4c:92:bd:7f:50:f3:49:0a:b5:24:cf:9b:5f: 2d:fb:04:a5:21:1f:c7:dc:4c:0e:b2:5a:59:80:f0:ae:11:48: 9c:46:85:a3:22:e4:59:2c:cc:60:1a:2b:a6:49:dc:d1:fd:9c: a7:e8:a7:7e:fb:1e:6f:9d:85:04:dd:85:35:d3:c8:f4:46:c8: dd:23:ed:6d:8e:40:4a:ab:54:0b:42:f8:d0:85:ae:30:b3:aa: 08:ed:31:84:9a:60:90:35:bb:c1:59:39:14:ac:ee:69:21:69: ac:33:e1:e1:9a:d9:be:74:e6:98:31:0b:6e:83:d1:d2:05:3c: 8d:03:2d:44:37:52:3d:1d:ca:4d:b3:5e:51:20:81:4e:16:a9: 2f:9f:73:b8:c2:a7:ec:f0:d7:39:56:0f:82:25:bc:de:a9:f4: 59:c5:5e:d0:c0:fb:bd:8f:fe:3b:7c:39:40:18:16:c1:8f:be: 87:61:40:f6:4c:04:5a:0c:e2:e9:ec:44:f9:7f:67:8d:69:06: b7:6c:1d:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5 OTFDQzQwRkIwHhcNMjUxMjA2MjEwNjA3WhcNMjUxMjEzMjEwNjA3WjAYMRYwFAYD VQQDEw02OTM0OWFiZi0wYmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3dMFfoJ6B6VP5WoRal2xOKVPJ8sfKER7S/tlwNb6RcdH2LdagHVDj33FdA0 HrEtC9DETq3Mk7cqPs1E1EdOeijP8w3d9S12Y8lOb/czgmMTuUnOhnMu68QKxN5I +eEWYWjoY4ViHJ1Eq1H3p3RqdDOJInczGZo8G0stl3iLHh/Rt3/dGEHV+uTw3SfQ DDVgwLKG4gss+L44JVKEs4q9dJbORIYIqk7Z/gNEpRCok4/Z0LTwJ6rVpiQYNt65 aEjLUufmXUj8MDft8bVXP09eYpnd4V9BZi4bsQsNlhHV2YwTw3Xff/Pzx+0zlFYN PFUtTUJJjmuAlfZMoKOnyMPz5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqehkWw BXgcOAbDqcfT+pYNUBlJMB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0 NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYgRl2v8OgE3/9/9gObVgJP/Qj7xIS8qIcHiAGiEfAFQH+51IZt0yz fX5A/SVtrGiMZB0IVvZ2jnz6DUySvX9Q80kKtSTPm18t+wSlIR/H3EwOslpZgPCu EUicRoWjIuRZLMxgGiumSdzR/Zyn6Kd++x5vnYUE3YU108j0RsjdI+1tjkBKq1QL QvjQha4ws6oI7TGEmmCQNbvBWTkUrO5pIWmsM+Hhmtm+dOaYMQtug9HSBTyNAy1E N1I9HcpNs15RIIFOFqkvn3O4wqfs8Nc5Vg+CJbzeqfRZxV7QwPu9j/47fDlAGBbB j76HYUD2TARaDOLp7ET5f2eNaQa3bB04 -----END CERTIFICATE-----Generated at Sun Dec 7 03:58:49 2025 by rpki-client