This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft File: qVBr_Nym0SxcNyUDFHD30eBncFI.mft (raw, json) Hash identifier: Ivf8vsevHyHS3PEzJs5CCsoCgBV9y4JvnK7uKaQvDC0= Subject key identifier: AF:64:6D:D4:49:4A:0D:2B:37:05:E4:64:D7:29:53:41:F4:6F:2F:A6 Authority key identifier: A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52 Certificate issuer: /CN=A91C5ED0/serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052 Certificate serial: 13E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft Manifest number: 2AD5 Signing time: Thu 04 Dec 2025 16:34:17 +0000 Manifest this update: Thu 04 Dec 2025 16:34:17 +0000 Manifest next update: Thu 11 Dec 2025 16:34:17 +0000 Files and hashes: 1: qVBr_Nym0SxcNyUDFHD30eBncFI.crl (hash: J45wWDzcxgXunkzIFulQXa3r325UnxRnPU6PGaiFZ2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5088 (0x13e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052 Validity Not Before: Dec 4 16:34:17 2025 GMT Not After : Dec 11 16:34:17 2025 GMT Subject: CN=6931b809-b23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b7:81:30:4d:d7:0d:71:5f:2d:f3:9b:f1:73: e0:c5:02:b6:0c:f8:33:0d:73:0b:52:a8:69:07:8d: 22:76:6c:85:11:66:ae:cb:52:54:92:4b:ed:e8:06: 70:b6:66:ad:8f:84:8a:aa:e8:b1:96:e2:f5:49:1d: 50:e6:a4:f4:54:b7:8f:7b:d8:37:95:59:82:64:36: 61:05:fa:61:10:2d:c9:91:0b:f0:d2:4e:41:fa:c3: 7c:cf:da:d5:4b:fa:53:83:b5:e8:7a:92:01:a9:55: c2:f1:49:6f:05:0b:8c:ab:94:f1:a5:00:01:d4:1a: ea:b5:c2:ef:3a:19:e5:96:66:e4:30:a6:85:9e:1b: 64:66:ec:99:52:c3:94:2f:55:75:af:49:84:f3:97: b8:01:8c:af:f2:57:d9:af:3c:89:52:a0:d6:7c:69: c2:8e:8c:a4:8c:4a:45:f7:e5:61:21:06:5a:1a:37: a9:1a:e0:cf:b0:bb:b4:06:e1:05:da:df:fd:81:df: 85:d5:76:14:17:f5:53:67:a8:8f:43:6d:63:e8:e4: 32:af:a3:d4:ec:ca:72:c2:d8:a4:20:33:40:83:55: 14:bb:ab:ee:3d:23:2f:58:f1:f8:bf:ad:0b:c2:c6: ef:cb:c3:f0:43:3c:4e:21:00:5e:e9:b8:2d:34:ab: b7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:64:6D:D4:49:4A:0D:2B:37:05:E4:64:D7:29:53:41:F4:6F:2F:A6 X509v3 Authority Key Identifier: keyid:A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:7d:d8:c5:e8:b9:97:fe:61:5b:e6:82:0f:05:13:1f:18:9c: f7:bd:37:42:60:f4:18:12:22:c4:00:47:0c:2f:eb:10:ad:a1: 60:26:8d:6d:21:2d:94:57:66:73:7d:0e:d2:03:3d:ce:26:a8: bf:1d:77:ee:57:cb:ab:2e:24:9e:7f:18:ed:d9:b2:76:fd:09: 6d:b2:3f:55:53:2f:56:e3:57:c2:4f:49:d0:e1:a2:f7:6f:86: b1:5f:7f:38:52:da:36:23:c0:f3:6b:b0:dd:77:49:1b:ab:63: 9f:d3:5d:e2:2f:79:f3:41:97:8a:77:cf:90:ac:04:1b:fa:ff: 85:9c:0c:72:af:40:aa:60:46:1e:ba:49:d2:cc:5b:7f:26:a3: 24:91:55:12:a4:e7:d9:4e:10:fa:32:b4:19:4e:42:31:b2:ef: 58:8f:76:6b:89:2b:7e:c4:a0:db:1c:0d:0d:0e:10:b0:4c:78: d5:79:21:de:44:d3:be:45:ac:69:08:e1:9e:92:da:e9:eb:20: 7b:6c:eb:89:bb:e3:50:e6:56:f2:1b:ca:91:6b:e5:2f:b8:ee: 9d:f5:25:49:81:c9:40:3f:9a:a6:c4:47:f2:28:e2:53:45:95: e0:d2:d0:fe:b1:06:36:e2:d8:eb:a6:f8:a8:28:8b:c8:15:50: a7:04:9a:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKEE5NTA2QkZDRENBNkQxMkM1QzM3MjUwMzE0NzBGN0Qx RTA2NzcwNTIwHhcNMjUxMjA0MTYzNDE3WhcNMjUxMjExMTYzNDE3WjAYMRYwFAYD VQQDEw02OTMxYjgwOS1iMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3reBME3XDXFfLfOb8XPgxQK2DPgzDXMLUqhpB40idmyFEWauy1JUkkvt6AZw tmatj4SKquixluL1SR1Q5qT0VLePe9g3lVmCZDZhBfphEC3JkQvw0k5B+sN8z9rV S/pTg7XoepIBqVXC8UlvBQuMq5TxpQAB1BrqtcLvOhnllmbkMKaFnhtkZuyZUsOU L1V1r0mE85e4AYyv8lfZrzyJUqDWfGnCjoykjEpF9+VhIQZaGjepGuDPsLu0BuEF 2t/9gd+F1XYUF/VTZ6iPQ21j6OQyr6PU7MpywtikIDNAg1UUu6vuPSMvWPH4v60L wsbvy8PwQzxOIQBe6bgtNKu3rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9kbdRJ Sg0rNwXkZNcpU0H0by+mMB8GA1UdIwQYMBaAFKlQa/zcptEsXDclAxRw99HgZ3BS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBTeGNOeVVERkhEMzBlQm5j RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FWQnJfTnltMFN4Y055VURGSEQzMGVCbmNGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBT eGNOeVVERkhEMzBlQm5jRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3fdjF6LmX/mFb5oIPBRMfGJz3vTdCYPQYEiLEAEcML+sQraFgJo1t IS2UV2ZzfQ7SAz3OJqi/HXfuV8urLiSefxjt2bJ2/Qltsj9VUy9W41fCT0nQ4aL3 b4axX384Uto2I8Dza7Ddd0kbq2Of013iL3nzQZeKd8+QrAQb+v+FnAxyr0CqYEYe uknSzFt/JqMkkVUSpOfZThD6MrQZTkIxsu9Yj3ZriSt+xKDbHA0NDhCwTHjVeSHe RNO+RaxpCOGektrp6yB7bOuJu+NQ5lbyG8qRa+UvuO6d9SVJgclAP5qmxEfyKOJT RZXg0tD+sQY24tjrpvioKIvIFVCnBJrC -----END CERTIFICATE-----Generated at Sat Dec 6 13:55:44 2025 by rpki-client