This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft File: Q7wDqZcxeefuI0ayjnTeET9jNWw.mft (raw, json) Hash identifier: BXmYE0ReY/gCtdD7y7wTsaZr6xD7XGzgzafatHDURrk= Subject key identifier: 72:03:7F:5B:00:34:08:B1:F3:A8:4C:19:98:F8:22:87:1B:89:D4:5A Authority key identifier: 43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C Certificate issuer: /CN=A91A15B3/serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft Manifest number: 32 Signing time: Fri 05 Dec 2025 05:23:41 +0000 Manifest this update: Fri 05 Dec 2025 05:23:41 +0000 Manifest next update: Fri 12 Dec 2025 05:23:41 +0000 Files and hashes: 1: Q7wDqZcxeefuI0ayjnTeET9jNWw.crl (hash: zlYD7EKDsjncwv36xIzEkR0WEteGj+M4hGUcBBnvpdI=) 2: A95853C684AE11F0BC9BFE85C4F9AE02.roa (hash: Crg6eEA+ImfPHspcxe55nFPiMJ47NKQMZB7ytChE440=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A15B3, serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C Validity Not Before: Dec 5 05:23:41 2025 GMT Not After : Dec 12 05:23:41 2025 GMT Subject: CN=69326c5d-23a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d4:e9:ad:3d:46:cf:58:9c:63:f2:ef:78:2a: 71:35:a5:95:70:f1:0e:ee:ea:c3:f2:27:e4:12:36: f6:6a:fa:9d:f2:66:20:69:0a:1a:ef:71:6c:9c:19: 19:28:7c:eb:56:a4:e5:5d:9d:78:b6:52:a6:a9:90: c9:39:af:c3:87:67:8b:87:88:48:06:ba:70:b3:32: f8:07:e0:26:d7:db:ed:ff:1f:58:fb:f2:71:b4:ab: e0:ba:d2:c2:b8:2d:74:d2:3e:89:be:8b:38:54:d4: c5:4a:f6:0b:8f:83:d8:5c:2f:2f:57:a3:77:28:04: 1c:be:02:73:26:2b:a7:17:3b:a6:c2:98:0d:24:cf: b8:b9:bf:1d:34:f2:cd:16:6c:e8:69:fb:4a:3d:1f: 47:88:21:cb:3c:8b:1d:78:6b:02:4c:4f:5c:3f:e0: 22:d2:0d:28:f6:4d:af:5a:21:13:c4:44:17:f6:01: 16:e0:9c:e0:9e:bc:e0:f2:c5:96:47:39:87:cc:e7: 84:7a:53:b0:00:15:4a:d4:82:86:b7:f4:ee:fa:7f: 3d:de:86:49:49:b8:f3:c8:4d:39:88:cb:55:b9:60: c7:26:67:57:66:4c:39:26:c0:95:f7:8a:d8:bc:08: 14:d4:4d:38:42:02:dc:60:96:3f:22:0f:aa:2b:6e: d4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:03:7F:5B:00:34:08:B1:F3:A8:4C:19:98:F8:22:87:1B:89:D4:5A X509v3 Authority Key Identifier: keyid:43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ea:87:79:2c:02:f6:24:ad:be:25:60:46:d1:52:60:65:8b: 2a:86:4e:be:86:ee:91:a8:09:ac:b1:ec:b5:ee:d9:dc:9a:1c: 06:20:05:2f:74:cd:a5:03:24:bb:b1:9b:aa:81:a7:9f:56:67: 77:1b:4f:4e:ba:8f:d7:3e:de:3d:17:24:0e:88:28:27:ad:88: c1:7c:c2:0a:3b:36:f4:c6:66:b3:c6:15:e6:43:1d:57:72:6b: bb:c6:04:8a:28:72:3e:8b:52:5d:19:41:b2:0a:0d:5f:93:50: ec:7f:f4:de:f0:58:e8:38:c7:14:06:d6:9a:f2:dd:54:94:8e: b8:67:59:24:f1:a8:6b:34:8c:9c:a3:ee:33:ec:a4:ce:40:0a: 84:9e:52:3e:d6:29:86:c0:ed:21:ab:e4:b2:de:c1:da:33:09: 4f:83:6a:6a:19:84:ae:1f:c0:38:c1:50:92:78:db:43:6f:53: 56:e9:a5:bc:ff:2d:c4:d5:1b:fa:bf:db:19:4d:1e:a2:e4:51: af:5a:89:b4:55:d0:1e:d1:0b:ce:00:75:ce:76:62:84:de:9b: 86:65:3c:d1:17:d9:0e:c6:e7:b9:d9:c0:58:e1:3e:6e:14:d4: 32:95:05:7a:00:ac:46:26:98:82:8b:04:d3:1b:5a:c0:55:38: f3:5c:2e:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTVCMzExMC8GA1UEBRMoNDNCQzAzQTk5NzMxNzlFN0VFMjM0NkIyOEU3NERFMTEz RjYzMzU2QzAeFw0yNTEyMDUwNTIzNDFaFw0yNTEyMTIwNTIzNDFaMBgxFjAUBgNV BAMTDTY5MzI2YzVkLTIzYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs1OmtPUbPWJxj8u94KnE1pZVw8Q7u6sPyJ+QSNvZq+p3yZiBpChrvcWycGRko fOtWpOVdnXi2UqapkMk5r8OHZ4uHiEgGunCzMvgH4CbX2+3/H1j78nG0q+C60sK4 LXTSPom+izhU1MVK9guPg9hcLy9Xo3coBBy+AnMmK6cXO6bCmA0kz7i5vx008s0W bOhp+0o9H0eIIcs8ix14awJMT1w/4CLSDSj2Ta9aIRPERBf2ARbgnOCevODyxZZH OYfM54R6U7AAFUrUgoa39O76fz3ehklJuPPITTmIy1W5YMcmZ1dmTDkmwJX3iti8 CBTUTThCAtxglj8iD6orbtTJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcgN/WwA0 CLHzqEwZmPgihxuJ1FowHwYDVR0jBBgwFoAUQ7wDqZcxeefuI0ayjnTeET9jNWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExNUIzL0Y3QjI0ODhFODRB RDExRjBBRkU4OTc4MEM0RjlBRTAyL1E3d0RxWmN4ZWVmdUkwYXlqblRlRVQ5ak5X dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUTd3RHFaY3hlZWZ1STBheWpuVGVFVDlqTld3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx NUIzL0Y3QjI0ODhFODRBRDExRjBBRkU4OTc4MEM0RjlBRTAyL1E3d0RxWmN4ZWVm dUkwYXlqblRlRVQ5ak5Xdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK3qh3ksAvYkrb4lYEbRUmBliyqGTr6G7pGoCayx7LXu2dyaHAYgBS90 zaUDJLuxm6qBp59WZ3cbT066j9c+3j0XJA6IKCetiMF8wgo7NvTGZrPGFeZDHVdy a7vGBIoocj6LUl0ZQbIKDV+TUOx/9N7wWOg4xxQG1pry3VSUjrhnWSTxqGs0jJyj 7jPspM5ACoSeUj7WKYbA7SGr5LLewdozCU+DamoZhK4fwDjBUJJ420NvU1bppbz/ LcTVG/q/2xlNHqLkUa9aibRV0B7RC84Adc52YoTem4ZlPNEX2Q7G57nZwFjhPm4U 1DKVBXoArEYmmIKLBNMbWsBVOPNcLvE= -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:47 2025 by rpki-client