This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft File: qg08vlkeG_ZBGL9vA2QSX6abipA.mft (raw, json) Hash identifier: JXgG+O8vWgO3+7fGNngEvM17flw+jRAJLSl9dB/UWxc= Subject key identifier: 6B:53:68:7D:7D:CA:DB:F0:2F:74:19:70:99:BB:F0:79:AE:B2:EE:66 Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 Certificate issuer: /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Certificate serial: 06EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft Manifest number: 06E1 Signing time: Sat 06 Dec 2025 20:57:55 +0000 Manifest this update: Sat 06 Dec 2025 20:57:55 +0000 Manifest next update: Sat 13 Dec 2025 20:57:55 +0000 Files and hashes: 1: qg08vlkeG_ZBGL9vA2QSX6abipA.crl (hash: J2hBzjaedQb4gzMHjF+23FbvA/6SPZnd3CgXlgNDz9E=) 2: EE188D209F2B11EDBB1C587AC4F9AE02.roa (hash: xunDUR+vk1rAB3LOb72QA9qMR5Y4O+s76u7aM9CtIVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6E35, serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Validity Not Before: Dec 6 20:57:55 2025 GMT Not After : Dec 13 20:57:55 2025 GMT Subject: CN=693498d3-6e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:5e:33:15:5c:c6:26:bb:66:ae:24:0d:33: 86:c2:d4:b4:fd:c9:da:46:01:df:fa:ae:a4:06:e7: 2a:78:b4:98:ae:b0:44:c5:cf:b6:11:5a:38:d6:25: 93:2e:38:d4:bf:71:01:64:0a:78:ed:da:de:26:c6: 86:f1:ac:7c:f0:07:88:55:9c:bc:67:80:0a:52:a3: 52:6b:a0:b7:e0:b7:63:ee:95:4d:e8:d9:e4:48:56: 97:06:c3:30:44:41:d0:19:74:23:98:88:94:cd:d8: 7f:f7:b7:7e:a0:e0:19:c4:a3:b5:06:ca:e7:3a:c2: 95:c5:45:61:ef:f9:e0:43:23:28:49:e3:53:f9:7c: 64:8b:6a:d6:7d:42:b8:ac:f3:59:0e:32:1f:49:a1: 55:99:e9:04:d8:6d:6a:c5:a6:1c:de:84:d1:e1:31: a3:4b:39:e3:43:a0:15:2d:26:2c:25:c4:68:60:97: 73:7b:79:92:9d:8f:bd:db:4e:ad:3e:9c:ea:4d:d1: c2:da:1e:ff:66:a8:33:e7:3c:2f:80:06:6e:16:be: fe:a8:4c:d9:fe:cb:91:8e:b0:37:ed:bf:49:99:31: 94:bc:9a:20:58:69:5a:c7:1f:09:a2:03:96:e5:e2: f1:6b:0d:02:15:83:ca:0e:57:4d:6d:a3:20:2b:2f: ca:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:53:68:7D:7D:CA:DB:F0:2F:74:19:70:99:BB:F0:79:AE:B2:EE:66 X509v3 Authority Key Identifier: keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:dc:46:b5:9d:da:bf:b4:3f:59:e6:aa:37:ad:f1:8f:e6:96: 3b:b4:7f:1e:12:d5:aa:f1:84:fc:5d:85:a3:b0:50:ee:3e:44: 94:3c:f3:e8:ba:e0:1b:cd:94:e6:1f:cc:79:4f:28:07:b5:dd: f9:21:70:92:eb:95:9f:e8:6e:e9:59:03:36:c5:dd:f6:7b:6f: 68:2a:f1:95:e2:76:4a:3e:79:0e:92:f0:eb:25:d0:54:79:eb: 25:77:36:a2:26:fd:c2:cb:08:e7:fd:91:de:a5:35:04:12:ec: a3:24:2b:26:c1:21:ad:f5:a8:08:2e:fc:ea:75:26:03:7f:fa: b2:cf:49:51:00:74:65:4e:db:b3:ed:f3:25:7f:80:e2:e9:d2: 81:f7:dd:85:16:75:f9:bd:2c:dd:8f:ac:21:fe:a5:8d:b9:36: d3:0b:49:23:00:97:fa:09:b3:68:13:96:66:92:e7:8e:41:ff: dd:13:73:d3:6a:d5:0a:2b:64:dd:95:75:d2:ec:9f:1e:76:73: 69:5c:fa:f6:59:e7:2b:ba:30:2b:02:55:5f:e3:70:00:a3:a5: 4f:b0:7a:f9:dd:90:63:3b:f7:bc:46:36:ad:6f:50:48:8e:a6: 5c:5c:93:67:5c:85:6b:5a:be:bf:92:3d:62:2b:25:29:27:65: a8:72:97:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZFMzUxMTAvBgNVBAUTKEFBMEQzQ0JFNTkxRTFCRjY0MTE4QkY2RjAzNjQxMjVG QTY5QjhBOTAwHhcNMjUxMjA2MjA1NzU1WhcNMjUxMjEzMjA1NzU1WjAYMRYwFAYD VQQDEw02OTM0OThkMy02ZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8VeMxVcxia7Zq4kDTOGwtS0/cnaRgHf+q6kBucqeLSYrrBExc+2EVo41iWT LjjUv3EBZAp47dreJsaG8ax88AeIVZy8Z4AKUqNSa6C34Ldj7pVN6NnkSFaXBsMw REHQGXQjmIiUzdh/97d+oOAZxKO1BsrnOsKVxUVh7/ngQyMoSeNT+Xxki2rWfUK4 rPNZDjIfSaFVmekE2G1qxaYc3oTR4TGjSznjQ6AVLSYsJcRoYJdze3mSnY+9206t PpzqTdHC2h7/Zqgz5zwvgAZuFr7+qEzZ/suRjrA37b9JmTGUvJogWGlaxx8JogOW 5eLxaw0CFYPKDldNbaMgKy/KYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtTaH19 ytvwL3QZcJm78Hmusu5mMB8GA1UdIwQYMBaAFKoNPL5ZHhv2QRi/bwNkEl+mm4qQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkUzNS83MjlDQjIzMDc2 RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdfWkJHTDl2QTJRU1g2YWJp cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FnMDh2bGtlR19aQkdMOXZBMlFTWDZhYmlwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkUzNS83MjlDQjIzMDc2RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdf WkJHTDl2QTJRU1g2YWJpcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB23Ea1ndq/tD9Z5qo3rfGP5pY7tH8eEtWq8YT8XYWjsFDuPkSUPPPo uuAbzZTmH8x5TygHtd35IXCS65Wf6G7pWQM2xd32e29oKvGV4nZKPnkOkvDrJdBU eesldzaiJv3Cywjn/ZHepTUEEuyjJCsmwSGt9agILvzqdSYDf/qyz0lRAHRlTtuz 7fMlf4Di6dKB992FFnX5vSzdj6wh/qWNuTbTC0kjAJf6CbNoE5ZmkueOQf/dE3PT atUKK2TdlXXS7J8ednNpXPr2WecrujArAlVf43AAo6VPsHr53ZBjO/e8Rjatb1BI jqZcXJNnXIVrWr6/kj1iKyUpJ2Wocpdz -----END CERTIFICATE-----Generated at Sun Dec 7 06:21:32 2025 by rpki-client