This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft File: Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json) Hash identifier: uTl2Shprgc76/jQgYyRt0ObIC4jZK4ZTTBZ88iBICxw= Subject key identifier: 1C:EF:66:F3:FE:F9:45:E2:D4:30:0A:98:74:DE:21:48:05:FB:CF:5A Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Certificate serial: 108E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft Manifest number: 1076 Signing time: Sat 06 Dec 2025 16:52:40 +0000 Manifest this update: Sat 06 Dec 2025 16:52:39 +0000 Manifest next update: Sat 13 Dec 2025 16:52:39 +0000 Files and hashes: 1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: pt9uxskgZvJUU2EtPOIGEDWVgUVwcVPoDRXV+D1SkK8=) 2: 23E61408678A11F08A94B35AC4F9AE02.roa (hash: 5Yz7qxk1jdgn6P7lka9rnOmBSo28tqIS5zv1OkL6X7A=) 3: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: ZNHHRF85+z4Is0+eLKcAwqdcHd29O7GXMUqQBRk0J/w=) 4: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: N1sk6XLj5xgH93qOL/I5QuR42p2aQ914FnE3hKMRCac=) 5: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 9+Gtcwt1HizyRVjiJLATuFRgohbLeetX6+Rnfri/zZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4238 (0x108e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Validity Not Before: Dec 6 16:52:39 2025 GMT Not After : Dec 13 16:52:39 2025 GMT Subject: CN=69345f57-56aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:bf:c9:3c:1c:ea:ac:af:a5:28:06:92:e5: cb:c6:a6:a3:4f:51:c7:84:24:87:75:e4:97:61:a7: c5:11:be:1d:8b:16:ac:42:8a:3a:56:ca:7d:57:95: da:e5:32:59:a4:9f:9b:b1:2f:7c:85:d9:41:72:66: ad:58:c4:66:5f:b7:0c:a6:19:e8:73:9e:a7:40:09: c7:b3:0d:1f:77:50:4f:0c:15:da:95:1a:38:3b:da: 69:87:9e:57:ff:e4:7d:ca:1f:9f:56:22:90:34:2a: 72:c9:c8:50:27:5b:6f:9c:1e:e5:0d:fe:83:a3:d0: 59:54:3c:41:58:34:30:cf:29:77:7d:bc:10:d2:37: bc:38:dd:95:40:e2:f0:2b:04:c2:53:e1:db:9b:7f: ed:3c:bb:9c:37:26:b9:61:17:a6:4d:b6:08:27:d6: 16:7e:eb:78:02:8b:5d:67:10:21:ca:9e:8d:98:a9: 3c:fd:6f:55:d3:e0:10:9b:4a:49:7e:35:c0:72:eb: 47:da:a3:ee:47:24:45:de:c0:4f:d6:ea:d1:1f:65: 64:e2:f5:79:af:bb:85:eb:83:3a:a4:e7:42:23:0e: b9:e4:4b:e1:22:af:48:78:d6:cf:a4:71:43:ac:bf: 48:44:3e:5a:38:8a:19:d5:3a:b6:b3:52:3d:d7:86: 34:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EF:66:F3:FE:F9:45:E2:D4:30:0A:98:74:DE:21:48:05:FB:CF:5A X509v3 Authority Key Identifier: keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:4c:dc:1c:52:97:d4:b0:c8:4a:10:ef:58:0b:70:ab:a4:60: 06:ec:7d:57:3d:13:79:dd:c8:11:23:f5:b9:ee:3b:f7:ec:c9: be:dd:13:85:85:c9:c6:1d:c9:3c:98:82:02:16:f4:c3:5b:b0: 86:ef:12:be:5e:c2:16:3f:55:ed:09:f5:8a:21:2e:77:e4:da: 35:6f:4f:3d:20:fa:b7:f9:1e:ab:94:33:3f:9c:35:ce:9b:8b: 2f:41:e1:05:da:4c:ca:57:58:d0:d8:9b:18:ed:b5:8d:b0:e4: 91:e7:d0:d8:86:65:a3:40:d1:0f:c2:a4:10:58:72:53:42:a3: b5:f1:5e:3b:bb:93:48:68:79:67:2c:30:68:f8:5e:3c:c3:fd: db:b4:8b:fb:e2:f2:bd:ff:af:01:59:00:ac:b0:cf:f1:04:a6: 43:3c:0b:b8:e5:20:f3:5a:96:05:30:c6:5c:99:e0:57:99:68: 8b:8e:a7:35:cb:79:23:62:67:40:40:95:31:bc:66:f7:2d:33: ee:a1:37:04:d9:db:91:35:a0:16:ba:8f:37:7f:1b:2c:ee:aa: 1e:f9:aa:7a:85:59:a0:71:b3:6c:3d:cf:9c:f2:f2:6f:26:03: 0f:43:a3:24:b7:58:4f:f9:f3:14:c4:df:11:5e:37:a1:94:86: 87:a5:e7:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxQkMxMTAvBgNVBAUTKDQyOUU5QkREQTI5NjYyMDAwM0NFQzVFRkFCQjgyM0Qz MDNGRTRGNzEwHhcNMjUxMjA2MTY1MjM5WhcNMjUxMjEzMTY1MjM5WjAYMRYwFAYD VQQDEw02OTM0NWY1Ny01NmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwu/yTwc6qyvpSgGkuXLxqajT1HHhCSHdeSXYafFEb4dixasQoo6Vsp9V5Xa 5TJZpJ+bsS98hdlBcmatWMRmX7cMphnoc56nQAnHsw0fd1BPDBXalRo4O9pph55X /+R9yh+fViKQNCpyychQJ1tvnB7lDf6Do9BZVDxBWDQwzyl3fbwQ0je8ON2VQOLw KwTCU+Hbm3/tPLucNya5YRemTbYIJ9YWfut4AotdZxAhyp6NmKk8/W9V0+AQm0pJ fjXAcutH2qPuRyRF3sBP1urRH2Vk4vV5r7uF64M6pOdCIw655EvhIq9IeNbPpHFD rL9IRD5aOIoZ1Tq2s1I914Y0TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzvZvP+ +UXi1DAKmHTeIUgF+89aMB8GA1UdIwQYMBaAFEKem92ilmIAA87F76u4I9MD/k9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTFCQy84OTZDNkM0ODQ2 Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1lnQUR6c1h2cTdnajB3UC1U M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwNmIzYUtXWWdBRHpzWHZxN2dqMHdQLVQzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTFCQy84OTZDNkM0ODQ2Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1ln QUR6c1h2cTdnajB3UC1UM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgTNwcUpfUsMhKEO9YC3CrpGAG7H1XPRN53cgRI/W57jv37Mm+3ROF hcnGHck8mIICFvTDW7CG7xK+XsIWP1XtCfWKIS535No1b089IPq3+R6rlDM/nDXO m4svQeEF2kzKV1jQ2JsY7bWNsOSR59DYhmWjQNEPwqQQWHJTQqO18V47u5NIaHln LDBo+F48w/3btIv74vK9/68BWQCssM/xBKZDPAu45SDzWpYFMMZcmeBXmWiLjqc1 y3kjYmdAQJUxvGb3LTPuoTcE2duRNaAWuo83fxss7qoe+ap6hVmgcbNsPc+c8vJv JgMPQ6Mkt1hP+fMUxN8RXjehlIaHpec0 -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:43 2025 by rpki-client