This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json) Hash identifier: 2KZzOYquiHgneScOCVD6JZcQr8BFiDkKGjs7S8JFyfE= Subject key identifier: 63:AF:A2:38:B2:04:DC:00:0B:64:C5:37:11:27:14:9F:DB:96:DF:4D Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft Manifest number: 063E Signing time: Sat 06 Dec 2025 21:37:55 +0000 Manifest this update: Sat 06 Dec 2025 21:37:55 +0000 Manifest next update: Sat 13 Dec 2025 21:37:55 +0000 Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: cxD8meP+FbW36GwsMaREFVa9K+5QLEb/Bacs9274pDU=) 2: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: FrN9o1lFg/xEbU5z0+woTSKpRYhEXE4ng2cT+urUy+w=) 3: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: p2SDVbwBZwxr3yJ4yGh7aCxA4CeficP3aVklyI/yKDc=) 4: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: LIJfkhB+FEnFSom6qGXtkQF2GYNSzLyM4CrNqHpDKAI=) 5: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: WL1wjvavlZNBJVifGm25dsfKzlKEpfNQuM2fEKaPYkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Validity Not Before: Dec 6 21:37:55 2025 GMT Not After : Dec 13 21:37:55 2025 GMT Subject: CN=6934a233-9f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:9e:43:82:c7:df:12:c4:80:a8:21:b6:87: 35:b9:72:24:c3:fa:1d:2e:10:69:4d:b2:7d:55:bc: fa:27:41:7f:12:54:97:a8:7b:8b:82:96:44:d6:92: 0f:31:d2:6e:d7:d1:9a:70:01:40:98:1e:e7:75:f7: a9:84:1c:93:65:2e:ed:70:02:db:3c:8d:d1:54:a9: 28:5b:bd:9d:d6:94:ca:37:72:46:24:cb:2c:e8:e9: 52:e7:05:97:01:92:3a:3c:7a:bd:f4:87:cf:60:75: 2a:9a:0d:e4:0e:ea:56:30:92:9f:e0:43:62:ee:20: 8d:d8:c6:ed:f8:dc:83:6b:81:7e:71:b4:11:34:b8: 9a:92:22:7b:44:d8:db:d2:61:0c:13:52:d1:b9:52: 98:d7:30:b8:24:f1:08:9c:fa:5c:0f:ae:74:ad:ab: 6f:92:f5:07:dc:5f:0d:8b:9f:18:e8:a4:32:34:48: 36:c7:b0:97:ee:0c:f3:3e:af:c3:93:6a:8a:4c:e0: 3e:2c:f2:eb:74:8c:02:90:00:d6:f2:c7:85:fb:b0: 7d:35:61:21:c0:fd:68:07:93:69:2b:5a:95:d9:a8: f4:49:c5:c4:6c:27:40:42:01:02:dd:a2:39:af:06: f5:15:cd:a3:dd:6c:76:fd:82:09:36:41:38:30:d2: 85:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AF:A2:38:B2:04:DC:00:0B:64:C5:37:11:27:14:9F:DB:96:DF:4D X509v3 Authority Key Identifier: keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:75:1c:4e:02:ce:32:8c:48:06:ba:a4:ca:9d:d4:1b:6a:d6: bd:65:68:9d:ea:4f:ea:c8:3f:7c:9f:c1:b1:5a:3f:be:3e:83: af:06:50:4e:ca:55:e3:55:27:b1:c3:50:66:9d:0e:19:ca:2e: 70:d4:ce:ab:7e:a6:90:df:0d:20:52:30:f2:b6:bd:eb:1c:9d: 8b:25:40:e6:e2:f9:e3:cd:34:80:30:fd:db:e0:84:16:aa:c1: 9e:7d:43:3a:01:4a:31:5b:c1:5c:5e:a4:41:3b:d8:87:1c:79: 5c:1c:5c:e7:29:cd:52:77:73:14:33:6b:51:1f:23:83:8b:70: e7:18:7d:c2:cc:2e:89:d8:e5:96:95:3f:cf:bc:79:f5:11:0d: 9c:56:9d:c6:dd:a1:fe:09:cd:c1:22:80:65:f5:cf:14:25:28: 96:35:63:8d:57:b3:14:ec:9d:55:33:00:1b:10:9e:92:01:eb: 06:89:17:e1:28:45:9b:10:14:41:1f:98:32:8e:42:95:c3:05: 6c:fe:13:d6:d2:5b:86:31:2b:29:6c:da:9a:4c:66:dc:35:37: 3e:56:03:80:89:1d:9a:b8:0c:c5:bc:36:98:e6:7c:b8:72:e3: d9:85:3f:d8:11:ef:fc:da:95:fa:18:f3:72:36:8c:a2:3d:c9: 28:f1:1f:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw NzZFODhDMDgwHhcNMjUxMjA2MjEzNzU1WhcNMjUxMjEzMjEzNzU1WjAYMRYwFAYD VQQDEw02OTM0YTIzMy05Zjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2GeQ4LH3xLEgKghtoc1uXIkw/odLhBpTbJ9Vbz6J0F/ElSXqHuLgpZE1pIP MdJu19GacAFAmB7ndfephByTZS7tcALbPI3RVKkoW72d1pTKN3JGJMss6OlS5wWX AZI6PHq99IfPYHUqmg3kDupWMJKf4ENi7iCN2Mbt+NyDa4F+cbQRNLiakiJ7RNjb 0mEME1LRuVKY1zC4JPEInPpcD650ratvkvUH3F8Ni58Y6KQyNEg2x7CX7gzzPq/D k2qKTOA+LPLrdIwCkADW8seF+7B9NWEhwP1oB5NpK1qV2aj0ScXEbCdAQgEC3aI5 rwb1Fc2j3Wx2/YIJNkE4MNKFuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOvojiy BNwAC2TFNxEnFJ/blt9NMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTE0Ni9FNDFBQjQyQUJEMzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVho OHMxb1FSWkVvRndIYm9qQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDldRxOAs4yjEgGuqTKndQbata9ZWid6k/qyD98n8GxWj++PoOvBlBO ylXjVSexw1BmnQ4Zyi5w1M6rfqaQ3w0gUjDytr3rHJ2LJUDm4vnjzTSAMP3b4IQW qsGefUM6AUoxW8FcXqRBO9iHHHlcHFznKc1Sd3MUM2tRHyODi3DnGH3CzC6J2OWW lT/PvHn1EQ2cVp3G3aH+Cc3BIoBl9c8UJSiWNWONV7MU7J1VMwAbEJ6SAesGiRfh KEWbEBRBH5gyjkKVwwVs/hPW0luGMSspbNqaTGbcNTc+VgOAiR2auAzFvDaY5ny4 cuPZhT/YEe/82pX6GPNyNoyiPcko8R8h -----END CERTIFICATE-----Generated at Sun Dec 7 02:36:27 2025 by rpki-client