This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json) Hash identifier: oALM5Sa7jdSE+3iiNav/SvVjjeAlwqqJaxFKuHycCYw= Subject key identifier: BD:96:41:78:89:06:7A:4E:DA:5A:9D:11:97:CA:2E:29:8C:AB:57:D5 Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Certificate serial: 0291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft Manifest number: 0285 Signing time: Thu 04 Dec 2025 23:56:18 +0000 Manifest this update: Thu 04 Dec 2025 23:56:17 +0000 Manifest next update: Thu 11 Dec 2025 23:56:17 +0000 Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: +qzA2jKNpdaGWr+3sLjF54ex4CfViOmx60DAFqT8qQs=) 2: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: uhIrsP1ipJFX3Ct1IhnIwZmCjEIkpTywt0iwOfj/NzQ=) 3: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: 7cBmRSUB3GK5yJL7yaxAGg0XDgWGErxNw0g36JGOJzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Validity Not Before: Dec 4 23:56:17 2025 GMT Not After : Dec 11 23:56:17 2025 GMT Subject: CN=69321fa2-7b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c6:7d:2a:68:54:d1:ca:86:7d:78:14:bc:9e: 29:7c:04:24:c3:3d:66:8b:ad:89:cd:f7:8f:42:74: 59:25:84:3f:6a:81:42:91:0a:8f:3e:1b:e8:20:16: db:b2:6a:23:68:93:fd:5f:b7:ea:a6:cd:1b:f0:e6: de:32:e9:5b:b6:02:d1:5d:3a:04:cb:45:54:4e:9c: 80:01:4a:78:e3:c3:2d:d5:39:60:62:34:91:95:09: f5:77:2d:40:7c:03:73:ee:0c:bc:21:05:a4:7e:6e: 3e:27:3a:4f:ff:aa:6e:dd:d2:3e:44:eb:48:fb:7b: 98:2d:7e:77:b2:14:67:ec:17:68:ce:7a:21:96:05: d0:0f:0a:a9:e9:70:8b:ad:e1:87:be:16:6e:1f:92: 97:50:c1:56:49:4a:7a:74:93:ce:72:1f:74:80:65: a2:3a:e0:77:3b:ff:7f:55:ef:87:0f:90:58:c1:53: 80:90:81:6f:15:06:6a:53:fe:37:cc:df:d6:2f:f8: 60:4a:06:87:04:47:db:5b:25:46:b6:a6:fe:e4:6e: 61:5c:77:87:72:f2:d9:6e:c3:11:58:a8:36:a9:a2: 11:1e:61:45:a3:22:9e:6a:9c:67:32:f6:16:fa:34: 5d:0d:3b:79:12:91:da:5e:b3:01:e3:9c:20:f2:c6: 0f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:96:41:78:89:06:7A:4E:DA:5A:9D:11:97:CA:2E:29:8C:AB:57:D5 X509v3 Authority Key Identifier: keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:5f:da:3b:e0:08:20:e1:ab:7c:d2:ee:00:04:27:d4:f7:47: 6d:fc:29:74:ac:29:2e:bf:10:61:8c:a4:af:11:d5:c6:07:11: f4:53:0b:4a:08:37:a6:e3:93:be:a2:a9:ee:89:c9:ad:21:22: 1d:29:fd:0f:46:19:3c:63:46:d5:30:77:43:34:1a:54:2a:2d: 2a:f1:d0:68:c8:1c:9e:f5:15:ff:14:1e:d4:10:04:a6:1c:aa: 4f:39:7e:db:bf:41:4e:40:2a:67:2d:16:ea:69:a8:1a:d5:22: 12:b6:80:0f:69:40:ea:a1:21:0f:9c:19:42:b6:47:48:4a:af: 08:e6:7b:2f:20:be:4d:ff:11:f6:41:78:db:06:e9:57:ca:a9: 08:94:9f:6b:41:77:37:3e:cc:1d:0c:7e:f9:2c:2a:d9:e4:28: 9c:0b:e2:a5:5b:1c:55:42:5a:83:aa:5b:cd:e5:18:81:2d:d7: 69:37:36:cd:89:35:e6:c5:f8:a9:c7:f0:14:27:d4:f6:ad:b0: 76:e5:a4:30:f1:9a:f6:58:11:76:3b:cf:00:cb:f7:98:74:1a: 08:5b:2b:f4:52:8e:9e:d0:67:9d:f3:ae:b6:91:8e:6d:af:dc: 07:a6:ef:aa:e7:5c:4e:01:ae:7f:3d:64:b3:d2:f1:60:e1:c4: 0a:a9:9e:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RDAxMTAvBgNVBAUTKEFFQTZERkIzNjRBMkIzQjU5MjdGMDA3QTRFODI0RjMy QzQwOEU1QzgwHhcNMjUxMjA0MjM1NjE3WhcNMjUxMjExMjM1NjE3WjAYMRYwFAYD VQQDEw02OTMyMWZhMi03Yjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusZ9KmhU0cqGfXgUvJ4pfAQkwz1mi62JzfePQnRZJYQ/aoFCkQqPPhvoIBbb smojaJP9X7fqps0b8ObeMulbtgLRXToEy0VUTpyAAUp448Mt1TlgYjSRlQn1dy1A fANz7gy8IQWkfm4+JzpP/6pu3dI+ROtI+3uYLX53shRn7BdoznohlgXQDwqp6XCL reGHvhZuH5KXUMFWSUp6dJPOch90gGWiOuB3O/9/Ve+HD5BYwVOAkIFvFQZqU/43 zN/WL/hgSgaHBEfbWyVGtqb+5G5hXHeHcvLZbsMRWKg2qaIRHmFFoyKeapxnMvYW +jRdDTt5EpHaXrMB45wg8sYP5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2WQXiJ BnpO2lqdEZfKLimMq1fVMB8GA1UdIwQYMBaAFK6m37NkorO1kn8Aek6CTzLECOXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdEMC9CODlGQTNDNjMw MzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3V1Nmd0I2VG9KUE1zUUk1 Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JxYmZzMlNpczdXU2Z3QjZUb0pQTXNRSTVjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdEMC9CODlGQTNDNjMwMzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3 V1Nmd0I2VG9KUE1zUUk1Y2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiX9o74Agg4at80u4ABCfU90dt/Cl0rCkuvxBhjKSvEdXGBxH0UwtK CDem45O+oqnuicmtISIdKf0PRhk8Y0bVMHdDNBpUKi0q8dBoyBye9RX/FB7UEASm HKpPOX7bv0FOQCpnLRbqaaga1SIStoAPaUDqoSEPnBlCtkdISq8I5nsvIL5N/xH2 QXjbBulXyqkIlJ9rQXc3PswdDH75LCrZ5CicC+KlWxxVQlqDqlvN5RiBLddpNzbN iTXmxfipx/AUJ9T2rbB25aQw8Zr2WBF2O88Ay/eYdBoIWyv0Uo6e0Ged8662kY5t r9wHpu+q51xOAa5/PWSz0vFg4cQKqZ40 -----END CERTIFICATE-----Generated at Sat Dec 6 19:53:59 2025 by rpki-client