This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json) Hash identifier: OeWAtL9IoGh/ZkUG/XXQJf2BN0ckvKhHeHPoRjwdxHs= Subject key identifier: DD:BB:AC:F5:C8:C9:07:52:B2:F7:67:B1:F4:E2:EF:79:ED:FA:34:C1 Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft Manifest number: 0191 Signing time: Fri 05 Dec 2025 02:05:00 +0000 Manifest this update: Fri 05 Dec 2025 02:04:59 +0000 Manifest next update: Fri 12 Dec 2025 02:04:59 +0000 Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: S1Y5KZSonC9d21wOZzgsX/jdRS5IzA9Gtgag0Zvbsy0=) 2: C352565AC6E011EF87D90241C4F9AE02.roa (hash: mUqqXY0c6pz96Csa4vpgVVN0TcEzh2ALUeu6fy0AUoM=) 3: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: uACmpnSBSy2IF2u/5ZZ5RmpW3FYah3J395Q52mX87Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Validity Not Before: Dec 5 02:04:59 2025 GMT Not After : Dec 12 02:04:59 2025 GMT Subject: CN=69323dcc-5d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:81:23:d7:1f:8d:9c:11:65:cf:bc:5a:c5: 28:ed:95:31:93:ab:17:43:a4:cc:21:23:f0:15:0c: 97:2c:25:22:f2:b7:a6:73:b5:53:74:bc:b5:30:16: cc:e1:7b:54:7f:b2:88:32:24:94:25:6b:b9:24:fd: 2b:37:e4:bd:19:71:64:de:05:ce:55:1c:3c:e7:81: 37:c9:9e:5f:4b:ff:06:b9:62:92:dc:7b:e6:02:09: 42:36:89:39:40:65:be:5a:42:fd:51:95:67:a5:20: 71:f0:c9:e8:90:61:74:a3:e0:6a:05:15:bc:41:f4: e8:16:a1:8b:ef:5b:e8:88:cf:f2:2f:89:07:48:c5: 71:58:e6:15:b9:70:5a:b7:8f:ff:df:9a:da:6e:7c: 3b:f6:01:14:2e:e6:40:c0:5f:ab:4f:45:61:ac:64: e0:5a:3e:e2:fc:20:a2:10:e4:20:65:58:47:07:bd: 67:2c:49:55:72:ee:3c:63:82:2a:99:77:5d:b0:ca: 51:4a:71:8c:cf:4e:02:46:a7:1e:53:1e:4b:54:0d: 6b:76:65:f2:09:9e:6e:9a:e2:6d:44:a4:bd:99:01: 87:23:1a:e5:61:ff:1d:e9:fb:07:9d:1b:61:dd:24: b7:b4:75:d2:de:21:93:23:af:3d:d6:f6:58:d5:e3: 26:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BB:AC:F5:C8:C9:07:52:B2:F7:67:B1:F4:E2:EF:79:ED:FA:34:C1 X509v3 Authority Key Identifier: keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:00:8e:6b:07:1c:ad:db:6d:ec:16:e6:a6:6f:68:d2:b7:8b: af:17:a5:b3:8d:af:91:30:ef:ed:a1:ac:61:fe:8e:9b:0c:0f: c7:37:f0:6d:47:6e:09:47:c4:f3:65:ae:65:63:1d:80:15:55: 54:30:e5:e5:5f:c2:91:a3:0f:24:41:a9:85:3f:4e:43:ae:8a: af:02:eb:ea:88:8e:cd:13:1c:2f:9f:74:b2:fb:0c:8c:d0:7a: 1e:60:ed:30:95:09:ee:26:0e:f1:1f:e1:61:03:ae:36:3b:e8: 16:04:a3:9d:76:2b:f2:47:f7:da:2a:a9:53:c8:9b:86:1e:06: 89:78:3c:26:35:77:9a:e9:de:08:b9:d5:ed:f0:d7:47:b2:67: c4:c4:26:a9:c0:a2:6b:cc:58:cc:ae:44:53:50:e8:40:7f:49: ba:ed:4b:64:e5:7a:18:07:7d:c6:d3:4a:9b:42:1d:0a:d2:2e: 23:2a:94:a8:22:92:a9:db:5e:c0:fc:0d:88:47:41:d5:e9:ef: ac:8c:96:f8:10:14:68:b1:17:39:b0:01:e8:ff:68:b3:b5:c6: fd:26:86:a3:05:00:1c:3e:72:14:f6:ee:b9:38:b8:57:b8:ab: 53:ca:0c:50:d6:0e:b3:43:f5:15:d7:b1:5b:e4:15:b0:d5:f0: 0c:04:dd:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MkQxMTAvBgNVBAUTKEE4MUQwRDYxRjdCNzMwRERCNzQyQ0M0OEFERDg4QTA0 RDQ2RkQwMjQwHhcNMjUxMjA1MDIwNDU5WhcNMjUxMjEyMDIwNDU5WjAYMRYwFAYD VQQDEw02OTMyM2RjYy01ZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhSBI9cfjZwRZc+8WsUo7ZUxk6sXQ6TMISPwFQyXLCUi8remc7VTdLy1MBbM 4XtUf7KIMiSUJWu5JP0rN+S9GXFk3gXOVRw854E3yZ5fS/8GuWKS3HvmAglCNok5 QGW+WkL9UZVnpSBx8MnokGF0o+BqBRW8QfToFqGL71voiM/yL4kHSMVxWOYVuXBa t4//35rabnw79gEULuZAwF+rT0VhrGTgWj7i/CCiEOQgZVhHB71nLElVcu48Y4Iq mXddsMpRSnGMz04CRqceUx5LVA1rdmXyCZ5umuJtRKS9mQGHIxrlYf8d6fsHnRth 3SS3tHXS3iGTI6891vZY1eMmDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN27rPXI yQdSsvdnsfTi73nt+jTBMB8GA1UdIwQYMBaAFKgdDWH3tzDdt0LMSK3YigTUb9Ak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkyRC9DQzY3RDI1MkE0 QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01OMjNRc3hJcmRpS0JOUnYw Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTkyRC9DQzY3RDI1MkE0QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01O MjNRc3hJcmRpS0JOUnYwQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8AI5rBxyt223sFuamb2jSt4uvF6Wzja+RMO/toaxh/o6bDA/HN/Bt R24JR8TzZa5lYx2AFVVUMOXlX8KRow8kQamFP05DroqvAuvqiI7NExwvn3Sy+wyM 0HoeYO0wlQnuJg7xH+FhA642O+gWBKOddivyR/faKqlTyJuGHgaJeDwmNXea6d4I udXt8NdHsmfExCapwKJrzFjMrkRTUOhAf0m67Utk5XoYB33G00qbQh0K0i4jKpSo IpKp217A/A2IR0HV6e+sjJb4EBRosRc5sAHo/2iztcb9JoajBQAcPnIU9u65OLhX uKtTygxQ1g6zQ/UV17Fb5BWw1fAMBN3K -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:05 2025 by rpki-client