This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: TDoQyZuwghAYoJKme/C4oSI30mqBnZDzvQ/dguNdeog= Subject key identifier: 50:9D:0E:5F:04:0F:F8:72:79:A5:38:97:DB:F0:4B:EA:EB:3F:C6:DE Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0C7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0C53 Signing time: Thu 04 Dec 2025 18:07:10 +0000 Manifest this update: Thu 04 Dec 2025 18:07:09 +0000 Manifest next update: Thu 11 Dec 2025 18:07:09 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: 7uljEbk320keOAwd5aNZZuxvIfX4R3bvwhb3hUp1ud0=) 2: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: TPKfdTfxUUuIA7sEFu9uyoS27pbd1XEvcyM1zWvu3+I=) 3: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: 9WFKUJqUOgDB07wt9CN3L8jHFMm+Bp2TRv/IY0cRCLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: Dec 4 18:07:09 2025 GMT Not After : Dec 11 18:07:09 2025 GMT Subject: CN=6931cdce-df54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:d2:d5:3e:24:c5:15:b6:ac:06:85:1e:25: 23:09:d4:11:a6:ab:81:0f:e1:73:81:36:ed:f7:0a: e7:a9:64:fc:59:9d:60:31:6a:00:06:d2:71:9c:41: fe:16:19:d9:17:ea:9e:7d:8e:5b:eb:01:7f:12:ba: ed:98:89:29:6b:9d:d8:a1:ba:a0:89:a4:f7:37:0d: ad:fe:59:93:ce:73:ff:72:dc:c2:f4:25:0a:5c:a9: c2:2b:63:39:9b:4d:3d:a3:61:2b:e9:89:1a:2c:ba: dc:37:59:d7:f2:c5:e0:a4:25:00:9c:95:7d:b3:44: 08:45:23:87:b0:6d:ad:11:d7:d3:63:46:aa:5d:80: 28:e1:65:ad:4e:5f:21:59:43:75:1d:30:28:bf:c1: 8b:89:f5:4b:da:17:6a:d6:3c:3b:a4:3d:35:23:34: cc:47:49:77:3d:b7:8f:cf:9b:f9:95:8c:d1:0e:63: 87:47:eb:f5:ee:e8:50:59:54:e7:fc:f2:37:d7:ba: 92:5e:62:9b:56:c5:96:f6:7b:12:e6:53:72:dd:91: 66:08:05:54:be:df:c2:34:27:7d:d4:04:0b:2e:a9: 30:28:02:52:91:39:f5:1b:23:3d:20:c4:a9:a9:35: e2:f9:b3:4f:1b:08:99:9a:55:bc:2e:b0:e4:bd:95: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9D:0E:5F:04:0F:F8:72:79:A5:38:97:DB:F0:4B:EA:EB:3F:C6:DE X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:9f:d3:30:5a:59:d9:44:2d:f5:41:ab:69:b5:2a:32:98:74: 8c:cb:10:ec:89:ef:18:09:06:e0:25:74:e2:5b:39:16:7d:2b: 12:6e:75:50:5c:de:99:38:82:79:22:ac:cb:dd:c5:25:49:04: 3a:02:98:b7:e5:5f:6f:8e:d6:0a:d3:6f:bd:8a:38:06:fa:c6: d8:d7:44:b1:56:d6:1c:e7:36:f6:8e:e9:1e:67:0c:33:13:2f: 9a:78:b2:05:03:0a:ef:85:d5:7d:d5:cc:bf:86:87:63:37:b8: f4:14:36:36:12:e3:8b:cc:f3:09:9c:14:80:28:61:36:50:65: 1b:d0:34:46:52:d1:71:cd:47:a0:db:67:05:6d:d5:f2:6b:2e: b3:0c:b4:a1:1e:88:88:b4:a5:f3:ec:d1:2f:d2:cb:28:ce:b1: 2b:52:e9:3b:ff:fa:a0:1b:c9:1c:25:b1:11:99:2a:5f:66:60: be:26:bd:29:ee:6c:6a:df:9a:27:c7:07:c1:3f:26:9f:8d:ba: 2b:d8:a6:a7:4b:b6:29:3f:fc:47:18:24:ee:c6:a4:dd:f2:8a: 7e:50:16:75:89:78:df:bf:d6:c9:85:88:75:de:c8:4d:04:82: 16:22:cc:e5:c5:0e:fa:8b:cf:ae:e2:06:45:bd:18:99:0d:21: 60:5c:ff:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjUxMjA0MTgwNzA5WhcNMjUxMjExMTgwNzA5WjAYMRYwFAYD VQQDEw02OTMxY2RjZS1kZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjjS1T4kxRW2rAaFHiUjCdQRpquBD+FzgTbt9wrnqWT8WZ1gMWoABtJxnEH+ FhnZF+qefY5b6wF/ErrtmIkpa53YobqgiaT3Nw2t/lmTznP/ctzC9CUKXKnCK2M5 m009o2Er6YkaLLrcN1nX8sXgpCUAnJV9s0QIRSOHsG2tEdfTY0aqXYAo4WWtTl8h WUN1HTAov8GLifVL2hdq1jw7pD01IzTMR0l3PbePz5v5lYzRDmOHR+v17uhQWVTn /PI317qSXmKbVsWW9nsS5lNy3ZFmCAVUvt/CNCd91AQLLqkwKAJSkTn1GyM9IMSp qTXi+bNPGwiZmlW8LrDkvZUTOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCdDl8E D/hyeaU4l9vwS+rrP8beMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBon9MwWlnZRC31QatptSoymHSMyxDsie8YCQbgJXTiWzkWfSsSbnVQ XN6ZOIJ5IqzL3cUlSQQ6Api35V9vjtYK02+9ijgG+sbY10SxVtYc5zb2jukeZwwz Ey+aeLIFAwrvhdV91cy/hodjN7j0FDY2EuOLzPMJnBSAKGE2UGUb0DRGUtFxzUeg 22cFbdXyay6zDLShHoiItKXz7NEv0ssozrErUuk7//qgG8kcJbERmSpfZmC+Jr0p 7mxq35onxwfBPyafjbor2KanS7YpP/xHGCTuxqTd8op+UBZ1iXjfv9bJhYh13shN BIIWIszlxQ76i8+u4gZFvRiZDSFgXP/+ -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:55 2025 by rpki-client