This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft File: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft (raw, json) Hash identifier: eKHcPJ4MpbZO83ozM8bmZT4JkaRXT0GV76yzP2mty14= Subject key identifier: 29:86:9F:3C:81:7D:F0:A5:68:44:98:5E:BC:DD:AD:B8:AF:93:76:2A Authority key identifier: 75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52 Certificate issuer: /CN=A91C654A/serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152 Certificate serial: 0792 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft Manifest number: 0969 Signing time: Thu 04 Dec 2025 20:30:00 +0000 Manifest this update: Thu 04 Dec 2025 20:29:59 +0000 Manifest next update: Thu 11 Dec 2025 20:29:59 +0000 Files and hashes: 1: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl (hash: /PpfvCSqPhHRZtPqe9M/uuvr/LCNSjiC/PGMlvVj4lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1938 (0x792) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C654A, serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152 Validity Not Before: Dec 4 20:29:59 2025 GMT Not After : Dec 11 20:29:59 2025 GMT Subject: CN=6931ef48-9e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:29:13:f5:17:82:52:c8:ac:df:6a:90:84:fe: 0a:3e:c2:eb:f4:f6:bb:1f:38:a8:ef:e0:ca:b5:c4: 0b:5f:dc:d2:11:2e:39:af:64:62:86:9c:53:b6:30: 31:97:2d:95:81:73:06:a2:ea:20:42:d9:10:99:f1: 5a:94:48:ab:df:10:76:fe:40:72:72:8a:c4:fa:70: 44:7d:b9:dd:3b:c4:24:76:ea:86:9e:4f:e0:14:be: f6:0c:dd:f6:dd:bf:59:66:e5:f2:f1:68:6a:01:ab: b7:98:09:63:ba:91:a0:52:d1:b4:d8:18:72:94:bf: 91:3a:b5:9b:99:cb:d6:40:65:bd:dd:69:d8:f3:c4: 0c:3d:6e:68:75:4b:db:a5:4a:5e:0c:12:69:41:67: 32:06:31:74:61:7e:aa:a0:30:92:16:fe:0f:18:a1: 31:5f:3d:db:e5:a7:95:12:cd:61:69:9d:01:49:48: f5:ee:ca:83:69:16:23:47:ae:ce:98:e8:cd:05:3e: 01:a9:da:e1:94:39:ce:72:c4:11:c0:54:75:fc:42: c6:e7:3c:bb:48:d1:64:c1:f3:8f:41:ec:56:56:23: 1f:46:ac:a9:74:a4:9a:e7:4d:5d:8e:69:0d:14:31: 6b:83:08:ae:91:c6:6f:52:aa:74:69:45:ad:e9:62: 4b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:86:9F:3C:81:7D:F0:A5:68:44:98:5E:BC:DD:AD:B8:AF:93:76:2A X509v3 Authority Key Identifier: keyid:75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:a1:63:f8:a6:38:1b:ef:cd:24:6d:4b:5b:00:43:eb:91:33: 5c:d1:53:82:42:93:c0:eb:04:98:23:a7:8a:9b:92:fb:46:8e: fb:f1:8e:6b:f6:13:41:53:bb:95:f6:fc:7f:f8:9b:2e:7b:b1: 58:fb:fd:61:26:d0:27:05:8a:e9:4a:05:3d:2a:1d:a6:97:a6: 89:91:f5:28:a4:fd:c2:d5:dd:e8:89:78:5f:7a:cf:46:97:aa: e3:e5:ed:05:ad:75:30:0c:db:59:e1:5c:e7:73:0e:52:91:87: 1f:03:e3:1e:e5:de:d2:82:b5:10:54:5a:68:35:18:ab:b7:f8: 57:e6:73:10:7d:06:2b:5e:a1:af:ba:b9:23:7e:72:0a:f2:f4: 8d:76:69:fd:34:69:a8:36:18:96:03:c9:fd:11:2a:2a:ed:7a: b2:bc:9a:83:ee:97:dc:e3:74:b2:4e:7e:68:82:25:fd:f4:41: 54:e4:6f:22:b2:6b:ed:67:09:98:e1:4d:ea:f6:6d:df:99:bd: 22:90:64:c4:d7:66:df:13:d1:37:0a:c7:4b:fa:4a:15:d8:c3: 40:7c:b9:ba:7b:7f:b1:95:7b:d0:b7:59:e5:19:8c:b1:f1:56: 1b:07:a0:65:e9:19:22:39:bb:ab:6f:eb:18:bd:2d:ec:bb:b1: 60:f9:02:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NEExMTAvBgNVBAUTKDc1QkE5MTNEQkFCRkU5NEEzNEM3MDQwREFCNDc1QzM1 QTI1OEExNTIwHhcNMjUxMjA0MjAyOTU5WhcNMjUxMjExMjAyOTU5WjAYMRYwFAYD VQQDEw02OTMxZWY0OC05ZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SkT9ReCUsis32qQhP4KPsLr9Pa7Hzio7+DKtcQLX9zSES45r2RihpxTtjAx ly2VgXMGouogQtkQmfFalEir3xB2/kBycorE+nBEfbndO8QkduqGnk/gFL72DN32 3b9ZZuXy8WhqAau3mAljupGgUtG02BhylL+ROrWbmcvWQGW93WnY88QMPW5odUvb pUpeDBJpQWcyBjF0YX6qoDCSFv4PGKExXz3b5aeVEs1haZ0BSUj17sqDaRYjR67O mOjNBT4BqdrhlDnOcsQRwFR1/ELG5zy7SNFkwfOPQexWViMfRqypdKSa501djmkN FDFrgwiukcZvUqp0aUWt6WJLdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmGnzyB ffClaESYXrzdrbivk3YqMB8GA1UdIwQYMBaAFHW6kT26v+lKNMcEDatHXDWiWKFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1 MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZVbzB4d1FOcTBkY05hSllv VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RicVJQYnFfNlVvMHh3UU5xMGRjTmFKWW9WSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjU0QS83MUZBQjBEODM1MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZV bzB4d1FOcTBkY05hSllvVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCToWP4pjgb780kbUtbAEPrkTNc0VOCQpPA6wSYI6eKm5L7Ro778Y5r 9hNBU7uV9vx/+Jsue7FY+/1hJtAnBYrpSgU9Kh2ml6aJkfUopP3C1d3oiXhfes9G l6rj5e0FrXUwDNtZ4Vzncw5SkYcfA+Me5d7SgrUQVFpoNRirt/hX5nMQfQYrXqGv urkjfnIK8vSNdmn9NGmoNhiWA8n9ESoq7XqyvJqD7pfc43SyTn5ogiX99EFU5G8i smvtZwmY4U3q9m3fmb0ikGTE12bfE9E3CsdL+koV2MNAfLm6e3+xlXvQt1nlGYyx 8VYbB6Bl6RkiOburb+sYvS3su7Fg+QJt -----END CERTIFICATE-----Generated at Sat Dec 6 17:43:43 2025 by rpki-client