This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: OlsrD0GytqICYrWX+yNqSy+r8+bKDzT9LJaZ5wnm7uI= Subject key identifier: 00:C6:04:FD:FE:C8:03:B6:ED:14:EF:26:20:60:23:9B:61:54:8A:4F Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 022D Signing time: Sun 07 Dec 2025 00:41:18 +0000 Manifest this update: Sun 07 Dec 2025 00:41:17 +0000 Manifest next update: Sun 14 Dec 2025 00:41:17 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: vvh4t+a4jzHwbcVroNYq5n8sjhcuF6RWspAXn30t4OQ=) 2: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: jnHEv+tk9LEmiC9T0eLpIu0ka8tlgw/1HGmQA/hDw9s=) 3: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: Tod+meVH3/YYDYyQo78I9vVyyLfaumC1ya5cnKT+hFM=) 4: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: 3zWqR+4/bbh/62pxX54wkuJs0uKg6zeZhN4dCLWwFho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Dec 7 00:41:17 2025 GMT Not After : Dec 14 00:41:17 2025 GMT Subject: CN=6934cd2d-972b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d4:9f:32:66:72:23:75:76:07:28:25:32:31: 3b:10:5c:d2:f9:27:d9:c2:73:f6:7d:dc:14:34:7f: d0:0b:19:e4:03:15:d5:c1:18:4b:6a:0d:90:b3:b0: e0:90:31:21:9f:cf:5f:c5:a1:a3:92:97:4c:cd:a1: b3:8d:d8:7e:a4:8b:7a:5b:03:74:4d:78:20:25:93: dd:a1:bc:62:62:a2:d9:c9:90:e6:31:b3:57:d6:82: f7:1d:76:5e:75:4d:17:e2:02:f7:8d:c9:25:7b:27: a1:4c:20:6e:64:90:fc:03:50:af:fc:00:76:89:8f: 6a:58:7a:1d:51:8c:a4:bb:58:31:3f:a8:3d:62:c3: 08:6e:8a:31:5c:8c:db:54:3a:71:1c:1c:ad:74:eb: e1:05:01:25:74:99:8e:e8:62:92:b2:9e:43:db:5d: 8d:ab:bc:c2:9c:d3:07:e2:ec:13:d9:96:e4:c5:49: 8f:20:31:18:62:90:d6:df:b6:27:06:27:92:76:db: 9e:a0:81:cd:e3:85:b1:cf:62:8b:be:2a:3d:52:d8: 30:1b:70:9a:30:0c:45:92:82:55:23:1a:36:dc:67: c8:9b:4e:a6:63:5a:d0:94:3f:4a:0d:34:c7:0f:11: ed:b3:a0:eb:dc:21:5b:24:e7:1f:1f:e5:ed:28:fc: 19:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C6:04:FD:FE:C8:03:B6:ED:14:EF:26:20:60:23:9B:61:54:8A:4F X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:d6:f5:33:5e:14:ff:04:55:9a:ce:f1:83:35:ef:27:b5:35: ea:b2:e7:21:c5:31:b1:84:9a:9b:11:72:fb:f6:ee:96:b2:08: 84:53:74:7e:14:34:42:ff:d6:8e:06:80:e3:35:74:73:07:94: 83:1d:96:da:c2:57:ee:fa:70:a7:9c:c3:01:af:79:a5:fd:f6: 4e:c4:67:db:61:0b:0a:58:1c:ef:0b:58:11:8a:ba:10:d8:05: 69:c3:5c:8c:d8:31:78:e8:db:28:27:d4:98:59:bd:71:7b:75: 08:19:46:ca:43:dc:ad:92:3c:e4:5a:e8:dd:66:b8:a2:7b:69: 99:95:58:be:7c:0e:c2:23:a6:23:84:70:e6:8d:5c:0b:78:42: 45:0b:de:cc:05:10:7e:eb:e7:76:e4:29:7d:0b:16:c4:b5:86: db:f6:f3:96:1f:1c:de:4e:49:f2:11:e7:5c:16:63:6b:5c:f3: 27:03:a1:a9:78:cb:ab:e1:57:23:d7:94:38:fd:10:0d:31:57: bc:60:5a:92:bd:c3:a5:71:17:97:66:59:17:16:eb:70:c3:01: 0f:c7:47:65:00:d7:15:9a:f7:f1:10:c6:ed:22:53:9c:d6:85: fd:ef:22:a7:2a:bb:a1:36:8e:6d:cf:07:c5:91:59:8c:9c:07: b8:b9:21:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjUxMjA3MDA0MTE3WhcNMjUxMjE0MDA0MTE3WjAYMRYwFAYD VQQDEw02OTM0Y2QyZC05NzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9SfMmZyI3V2ByglMjE7EFzS+SfZwnP2fdwUNH/QCxnkAxXVwRhLag2Qs7Dg kDEhn89fxaGjkpdMzaGzjdh+pIt6WwN0TXggJZPdobxiYqLZyZDmMbNX1oL3HXZe dU0X4gL3jckleyehTCBuZJD8A1Cv/AB2iY9qWHodUYyku1gxP6g9YsMIbooxXIzb VDpxHBytdOvhBQEldJmO6GKSsp5D212Nq7zCnNMH4uwT2ZbkxUmPIDEYYpDW37Yn BieSdtueoIHN44Wxz2KLvio9UtgwG3CaMAxFkoJVIxo23GfIm06mY1rQlD9KDTTH DxHts6Dr3CFbJOcfH+XtKPwZhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADGBP3+ yAO27RTvJiBgI5thVIpPMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDs1vUzXhT/BFWazvGDNe8ntTXqsuchxTGxhJqbEXL79u6WsgiEU3R+ FDRC/9aOBoDjNXRzB5SDHZbawlfu+nCnnMMBr3ml/fZOxGfbYQsKWBzvC1gRiroQ 2AVpw1yM2DF46NsoJ9SYWb1xe3UIGUbKQ9ytkjzkWujdZriie2mZlVi+fA7CI6Yj hHDmjVwLeEJFC97MBRB+6+d25Cl9CxbEtYbb9vOWHxzeTknyEedcFmNrXPMnA6Gp eMur4Vcj15Q4/RANMVe8YFqSvcOlcReXZlkXFutwwwEPx0dlANcVmvfxEMbtIlOc 1oX97yKnKruhNo5tzwfFkVmMnAe4uSG0 -----END CERTIFICATE-----Generated at Sun Dec 7 02:56:04 2025 by rpki-client