This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft File: qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json) Hash identifier: dtEDOMrqq71fXgfoSxXbYtkyppzteEyJ6szTrfAkGTk= Subject key identifier: 3A:0D:FB:67:31:EF:55:17:83:0C:65:38:16:7D:8D:93:E4:8E:3B:F4 Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft Manifest number: 0151 Signing time: Fri 05 Dec 2025 02:20:24 +0000 Manifest this update: Fri 05 Dec 2025 02:20:23 +0000 Manifest next update: Fri 12 Dec 2025 02:20:23 +0000 Files and hashes: 1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: PmanNtEC8zZUl5hOyv7tVaOwos+WOFhK7DTb2Tlnboc=) 2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: 5Igi5uwLEP9LNSo1jtb9EAzRP4JXP+61tZCh/iJ8p+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Validity Not Before: Dec 5 02:20:23 2025 GMT Not After : Dec 12 02:20:23 2025 GMT Subject: CN=69324167-2014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:81:37:1b:25:7b:06:40:b8:45:48:b6:b1:45: f0:83:23:5e:18:6b:25:67:81:84:39:35:d0:46:11: 16:e0:34:b1:cc:bb:bb:58:db:4e:6f:14:5c:b6:dc: dd:7c:db:c1:6c:b2:a2:79:3d:87:91:7e:ea:2c:69: 32:11:ac:97:4f:3d:0e:62:80:52:13:f0:2c:d8:c6: 53:13:fd:78:94:98:2b:1e:29:cc:69:fb:7f:c0:7a: a2:76:17:02:90:d1:58:c3:f4:1f:4b:8a:1a:55:e7: d3:27:dc:ab:b2:61:95:65:a2:0b:60:bd:37:77:b1: de:b7:71:28:d6:92:2c:eb:89:09:55:cf:be:f3:57: 37:2f:f8:73:27:28:d4:1a:7a:44:70:b4:97:c9:10: 17:c4:8b:0d:0e:1d:78:36:ae:f6:7f:11:f5:77:9b: 18:e0:ad:6d:0d:c8:cb:1f:ee:b5:94:af:b1:6f:a6: af:ba:67:55:0d:59:54:2f:0d:a5:2e:69:70:e4:03: c0:2d:71:ff:d9:ea:8e:14:e4:5d:61:4a:35:30:a9: af:04:e0:ca:14:62:7b:91:8e:73:7e:1a:59:a1:02: 7b:d5:17:6b:a8:60:bb:68:05:bd:73:93:db:7a:9b: 8f:a1:41:dd:a9:5e:35:c9:e1:fd:a8:66:fb:4e:c0: 9c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0D:FB:67:31:EF:55:17:83:0C:65:38:16:7D:8D:93:E4:8E:3B:F4 X509v3 Authority Key Identifier: keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:52:ea:ab:c9:90:da:8e:56:ce:3a:7c:ec:90:04:23:cd:84: bd:88:d1:5c:72:1b:c8:40:d8:99:2f:ed:de:ca:6c:16:cb:60: a8:d7:71:af:8c:b8:ff:d1:81:45:bb:49:c6:b2:5d:67:5d:29: da:5e:9e:1a:26:be:ff:8a:b9:5c:43:17:a2:76:19:97:25:ee: a2:89:c8:02:7b:5b:09:5c:2e:20:8d:a2:fd:c0:01:7c:a7:3a: 2b:01:89:b5:70:b1:c5:fc:11:98:c4:90:ba:25:35:2e:e3:10: 21:36:f4:30:a4:60:71:8e:3a:94:5b:67:6c:17:d3:03:35:1a: eb:3f:43:a0:d0:ce:b0:5a:44:63:5c:72:e0:b4:22:b7:66:13: 84:f0:47:33:8e:1f:da:2a:87:13:be:25:74:55:fd:8c:1e:14: 9f:9d:89:f6:62:c4:59:43:78:84:f0:c0:29:56:c6:8d:7d:32: a6:8f:d4:7f:4e:5d:50:51:12:cf:2e:e4:01:39:e3:f5:99:57: 39:1a:91:37:e7:c3:93:76:cf:68:c9:a9:48:5b:2d:59:3f:26: 19:38:9c:3d:5e:61:1e:17:66:69:1d:93:0a:eb:8f:5a:fa:2b: 88:bb:13:66:73:b5:f4:a3:25:fb:85:33:51:2f:3b:de:fb:5d: 51:4c:b3:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzQUYxMTAvBgNVBAUTKEE4MjRCNjYzRjNGNUEzNEY4MkVFMjI3MkE4QUVGREU0 M0I3OUJEOTMwHhcNMjUxMjA1MDIyMDIzWhcNMjUxMjEyMDIyMDIzWjAYMRYwFAYD VQQDEw02OTMyNDE2Ny0yMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIE3GyV7BkC4RUi2sUXwgyNeGGslZ4GEOTXQRhEW4DSxzLu7WNtObxRcttzd fNvBbLKieT2HkX7qLGkyEayXTz0OYoBSE/As2MZTE/14lJgrHinMaft/wHqidhcC kNFYw/QfS4oaVefTJ9yrsmGVZaILYL03d7Het3Eo1pIs64kJVc++81c3L/hzJyjU GnpEcLSXyRAXxIsNDh14Nq72fxH1d5sY4K1tDcjLH+61lK+xb6avumdVDVlULw2l Lmlw5APALXH/2eqOFORdYUo1MKmvBODKFGJ7kY5zfhpZoQJ71RdrqGC7aAW9c5Pb epuPoUHdqV41yeH9qGb7TsCcaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoN+2cx 71UXgwxlOBZ9jZPkjjv0MB8GA1UdIwQYMBaAFKgktmPz9aNPgu4icqiu/eQ7eb2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTNBRi8wNDMxNjBCMENB MDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8wLUM3aUp5cUs3OTVEdDV2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDUzJZX1AxbzAtQzdpSnlxSzc5NUR0NXZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTNBRi8wNDMxNjBCMENBMDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8w LUM3aUp5cUs3OTVEdDV2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdUuqryZDajlbOOnzskAQjzYS9iNFcchvIQNiZL+3eymwWy2Co13Gv jLj/0YFFu0nGsl1nXSnaXp4aJr7/irlcQxeidhmXJe6iicgCe1sJXC4gjaL9wAF8 pzorAYm1cLHF/BGYxJC6JTUu4xAhNvQwpGBxjjqUW2dsF9MDNRrrP0Og0M6wWkRj XHLgtCK3ZhOE8Eczjh/aKocTviV0Vf2MHhSfnYn2YsRZQ3iE8MApVsaNfTKmj9R/ Tl1QURLPLuQBOeP1mVc5GpE358OTds9oyalIWy1ZPyYZOJw9XmEeF2ZpHZMK649a +iuIuxNmc7X0oyX7hTNRLzve+11RTLMo -----END CERTIFICATE-----Generated at Sat Dec 6 19:13:54 2025 by rpki-client