This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: RZULeVePFCCJkGZHWXoWLreUmvGxOn8wyTEQdVpFu5k= Subject key identifier: DC:2D:26:FC:5D:DE:15:56:BF:DF:D2:01:BE:B7:77:F5:A3:BF:36:09 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 03D0 Signing time: Sat 06 Dec 2025 23:15:27 +0000 Manifest this update: Sat 06 Dec 2025 23:15:27 +0000 Manifest next update: Sat 13 Dec 2025 23:15:27 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: wB0H2WUf0AkWauDn7vr2WgNB+/DdNHA8IHforFRNXVs=) 2: FA3E8D68BA2911F0A4AFE171C4F9AE02.roa (hash: H4c2167/k5Ul/Jd2rdZpeNc0eDfRXqGo52dTMlrcW1k=) 3: ADDCA5F4BA2911F0B6E66A71C4F9AE02.roa (hash: H+STQ1E/JUpy5S0r72n/zNh28glR7Zy7UzRfBCi1atI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: Dec 6 23:15:27 2025 GMT Not After : Dec 13 23:15:27 2025 GMT Subject: CN=6934b90f-1840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b4:80:e0:40:0d:9d:dd:26:7d:55:2a:0c:d3: 5c:39:77:92:49:36:bd:03:16:a6:b4:13:45:f3:70: de:26:eb:75:cc:01:d1:1f:8c:f2:57:26:c9:ee:92: ad:f1:2e:2b:b9:3d:63:c2:80:62:a6:ca:54:ce:e6: 3b:4c:6d:b2:cf:1a:c9:ae:68:d7:39:85:98:df:0e: 33:6f:61:b4:0d:53:e7:81:14:75:e5:3b:cc:b7:15: 67:a9:a1:86:47:e5:3c:3c:ec:c3:c5:b5:b0:9d:b3: f9:46:cf:9e:cb:d8:c1:b9:0c:5c:81:46:59:c6:55: 6c:06:97:2b:8c:b8:e5:23:8b:18:4e:d0:5d:71:c1: 31:15:1a:ce:1a:05:97:12:24:85:13:43:bb:15:7a: f1:06:73:5b:67:38:ae:41:a9:70:d7:8e:85:19:b8: ed:3d:4d:24:53:ad:b7:48:9c:8b:cc:bf:d2:f1:c4: b2:80:66:60:2b:c6:8c:4c:7b:0a:bc:59:9d:03:65: 77:36:a7:0f:d8:a9:98:32:c7:29:92:be:9b:ec:23: 27:00:f3:a3:95:4d:ee:a8:43:3b:8e:a0:de:d4:41: 9a:0f:61:08:35:bf:85:b2:17:da:28:4c:a9:e2:51: 58:c7:51:ef:98:4a:d6:ce:f3:8c:1d:79:af:b0:1b: 9f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2D:26:FC:5D:DE:15:56:BF:DF:D2:01:BE:B7:77:F5:A3:BF:36:09 X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b8:4f:51:b1:65:84:10:81:f8:e0:a6:d6:6c:87:43:65:0e: f2:22:09:86:d2:08:7e:0c:57:f8:71:68:e9:7e:f9:ef:a6:d3: f4:6e:6c:77:ea:38:a6:31:32:f3:91:e0:aa:2c:64:fd:3e:ca: fd:b2:88:2a:57:d0:c3:01:37:95:32:16:4b:c7:f0:f6:93:d8: 8c:99:c2:17:7d:f7:a6:20:d9:e9:52:e9:9d:1f:67:83:b9:0d: 31:d6:ec:49:81:34:0d:f6:de:84:49:67:e9:61:1d:0d:7b:44: 14:a2:6d:9f:3a:7b:37:1f:bd:2d:65:f1:b5:b1:6c:cf:ba:a1: 95:95:49:64:ce:f3:ab:d1:ae:47:56:04:f7:69:e3:92:3d:b3: 5a:98:f4:9b:6d:2a:97:6f:4e:14:59:78:ab:c3:10:3a:88:f4: f5:63:11:74:59:1c:f2:73:22:c6:bb:4a:a0:11:2c:70:7f:f4: 8a:fb:35:69:45:b8:24:b8:02:d7:94:37:2e:fc:94:52:28:2f: 8c:fe:1b:ae:e7:06:36:17:f8:b0:f1:7d:a5:2e:37:9a:c3:53: cf:99:6c:52:47:07:8f:81:23:04:f1:80:1b:0d:e9:c3:5f:1f: 7a:ac:9f:48:39:5d:ec:6b:a0:7e:59:47:56:f4:8c:b8:b5:ef: 80:0a:08:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjUxMjA2MjMxNTI3WhcNMjUxMjEzMjMxNTI3WjAYMRYwFAYD VQQDEw02OTM0YjkwZi0xODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rSA4EANnd0mfVUqDNNcOXeSSTa9AxamtBNF83DeJut1zAHRH4zyVybJ7pKt 8S4ruT1jwoBipspUzuY7TG2yzxrJrmjXOYWY3w4zb2G0DVPngRR15TvMtxVnqaGG R+U8POzDxbWwnbP5Rs+ey9jBuQxcgUZZxlVsBpcrjLjlI4sYTtBdccExFRrOGgWX EiSFE0O7FXrxBnNbZziuQalw146FGbjtPU0kU623SJyLzL/S8cSygGZgK8aMTHsK vFmdA2V3NqcP2KmYMscpkr6b7CMnAPOjlU3uqEM7jqDe1EGaD2EINb+FshfaKEyp 4lFYx1HvmErWzvOMHXmvsBuf0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwtJvxd 3hVWv9/SAb63d/WjvzYJMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDuE9RsWWEEIH44KbWbIdDZQ7yIgmG0gh+DFf4cWjpfvnvptP0bmx3 6jimMTLzkeCqLGT9Psr9sogqV9DDATeVMhZLx/D2k9iMmcIXffemINnpUumdH2eD uQ0x1uxJgTQN9t6ESWfpYR0Ne0QUom2fOns3H70tZfG1sWzPuqGVlUlkzvOr0a5H VgT3aeOSPbNamPSbbSqXb04UWXirwxA6iPT1YxF0WRzycyLGu0qgESxwf/SK+zVp RbgkuALXlDcu/JRSKC+M/huu5wY2F/iw8X2lLjeaw1PPmWxSRwePgSME8YAbDenD Xx96rJ9IOV3sa6B+WUdW9Iy4te+ACggY -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:40 2025 by rpki-client