This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft File: PQqIwMyj7oZ3zRffPuht5x38ESk.mft (raw, json) Hash identifier: 7xeE7o2cmZ04vEHzweh+kgRXLhpY5dsLOHKQC4jjr5w= Subject key identifier: D1:78:54:5E:26:33:AF:B5:5F:A8:80:4A:19:33:DD:5A:02:00:82:20 Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Certificate serial: 03AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft Manifest number: 03A9 Signing time: Thu 04 Dec 2025 23:09:00 +0000 Manifest this update: Thu 04 Dec 2025 23:09:00 +0000 Manifest next update: Thu 11 Dec 2025 23:08:59 +0000 Files and hashes: 1: PQqIwMyj7oZ3zRffPuht5x38ESk.crl (hash: VUGHM2ELjwIZ2rZbCd/bzx8JkWPlwePzR1NNZiznE9c=) 2: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (hash: OZN4xQkAGlo2J7xAsq7WK/TKxkfRBmTruJ0GM4QH81c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91607DE, serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Validity Not Before: Dec 4 23:09:00 2025 GMT Not After : Dec 11 23:08:59 2025 GMT Subject: CN=6932148c-210a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:02:e7:7a:75:6b:44:cd:2f:16:de:8f:b9:ec: 8c:5d:7a:fd:0e:10:a6:18:47:8d:62:79:7c:06:ab: 12:db:55:6d:7f:d2:97:40:d5:0e:1a:c5:c2:b4:86: a7:62:7b:9b:56:9b:a4:02:82:69:b1:bc:9f:dc:74: a2:2b:4d:a5:83:5f:ff:b9:35:33:bc:67:f6:f7:17: 74:b4:b0:2c:81:7b:4b:f7:84:d0:ca:cb:97:0c:67: 3c:2e:53:9f:a6:54:c8:86:2e:3e:a9:ef:10:fe:4b: 92:20:7e:47:8b:fa:88:20:0f:46:f2:28:b2:8a:6f: a8:09:03:48:70:e2:3d:80:ec:95:08:0c:e7:93:8f: a3:48:b2:48:2e:73:71:50:96:82:33:fa:68:c7:2d: 32:9e:96:8c:d9:8a:1b:8e:b1:84:b3:92:7c:09:16: 69:9a:28:d5:76:8a:4d:6f:a3:de:f0:90:e3:a5:94: cb:bb:98:fc:e2:2f:04:1f:32:d3:20:4d:66:67:f7: 6f:71:ce:78:7e:ed:18:16:95:ed:62:28:26:dc:48: 6a:54:75:0a:f5:9d:60:df:19:a0:fd:c4:a9:07:1c: c7:03:1d:7b:16:e2:d9:99:ef:84:97:8f:96:78:69: 9e:69:e6:3f:4d:d9:f7:f3:61:76:ae:a7:ab:70:db: 50:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:78:54:5E:26:33:AF:B5:5F:A8:80:4A:19:33:DD:5A:02:00:82:20 X509v3 Authority Key Identifier: keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:20:b2:75:db:9e:c6:ee:c5:d1:fe:70:9c:e1:6b:b6:c4:08: e4:ca:56:12:63:4b:b2:13:da:c7:02:15:38:1d:6c:43:3c:66: 2e:30:31:4d:0e:0e:f9:23:af:be:b8:7e:de:e1:1d:6e:64:6e: db:6f:de:41:b3:df:8a:c9:70:b7:40:29:46:b3:12:a2:cb:88: 06:cf:55:47:8a:4a:f5:f1:54:c6:d6:b9:23:e5:70:d0:c0:3d: 9f:bb:ae:d3:ed:3e:7a:ad:04:aa:a9:db:3c:ab:9e:e0:fe:bb: bc:15:e5:75:e4:ce:80:19:82:e3:66:28:8b:db:fe:16:b6:20: 71:10:2a:31:54:fa:b3:42:4d:42:30:40:eb:6f:8b:6a:98:bf: 8c:d7:13:77:3a:bc:1a:bf:50:cc:d9:31:13:cc:93:d2:89:bb: 65:17:ae:11:4f:c1:c0:cf:93:24:2b:a4:42:c3:fb:1e:61:df: e5:3c:67:aa:3b:ea:40:46:c2:df:c4:de:df:ea:71:af:c0:a3: 62:5a:60:02:6c:63:67:21:42:ad:67:24:d1:af:60:a9:06:ff: 11:fa:6e:cb:72:70:f3:57:0e:83:97:0a:a3:26:a8:46:ac:1b: b4:08:a2:1e:21:61:b2:b9:e4:79:8b:4a:50:79:ca:a1:d3:01: 81:73:8e:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3REUxMTAvBgNVBAUTKDNEMEE4OEMwQ0NBM0VFODY3N0NEMTdERjNFRTg2REU3 MURGQzExMjkwHhcNMjUxMjA0MjMwOTAwWhcNMjUxMjExMjMwODU5WjAYMRYwFAYD VQQDEw02OTMyMTQ4Yy0yMTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQLnenVrRM0vFt6PueyMXXr9DhCmGEeNYnl8BqsS21Vtf9KXQNUOGsXCtIan YnubVpukAoJpsbyf3HSiK02lg1//uTUzvGf29xd0tLAsgXtL94TQysuXDGc8LlOf plTIhi4+qe8Q/kuSIH5Hi/qIIA9G8iiyim+oCQNIcOI9gOyVCAznk4+jSLJILnNx UJaCM/poxy0ynpaM2YobjrGEs5J8CRZpmijVdopNb6Pe8JDjpZTLu5j84i8EHzLT IE1mZ/dvcc54fu0YFpXtYigm3EhqVHUK9Z1g3xmg/cSpBxzHAx17FuLZme+El4+W eGmeaeY/Tdn382F2rqercNtQwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNF4VF4m M6+1X6iAShkz3VoCAIIgMB8GA1UdIwQYMBaAFD0KiMDMo+6Gd80X3z7obecd/BEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDdERS9DNzY4MTRDNkJC NUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdvWjN6UmZmUHVodDV4MzhF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRcUl3TXlqN29aM3pSZmZQdWh0NXgzOEVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDdERS9DNzY4MTRDNkJCNUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdv WjN6UmZmUHVodDV4MzhFU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIILJ1257G7sXR/nCc4Wu2xAjkylYSY0uyE9rHAhU4HWxDPGYuMDFN Dg75I6++uH7e4R1uZG7bb95Bs9+KyXC3QClGsxKiy4gGz1VHikr18VTG1rkj5XDQ wD2fu67T7T56rQSqqds8q57g/ru8FeV15M6AGYLjZiiL2/4WtiBxECoxVPqzQk1C MEDrb4tqmL+M1xN3Orwav1DM2TETzJPSibtlF64RT8HAz5MkK6RCw/seYd/lPGeq O+pARsLfxN7f6nGvwKNiWmACbGNnIUKtZyTRr2CpBv8R+m7LcnDzVw6DlwqjJqhG rBu0CKIeIWGyueR5i0pQecqh0wGBc458 -----END CERTIFICATE-----Generated at Sat Dec 6 19:13:24 2025 by rpki-client