This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft File: ibqQy31EKoOHxquTBzjKIA4Te60.mft (raw, json) Hash identifier: c9frWnO29u1x2PO2ZIcmHaxu0NEmaXtBQFfJ/CPD/ng= Subject key identifier: FB:A9:78:A0:F9:AA:83:8D:D2:18:DB:ED:AA:16:A1:D1:50:E4:DD:D3 Authority key identifier: 89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD Certificate issuer: /CN=A91DD25E/serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft Manifest number: 20 Signing time: Fri 05 Dec 2025 05:35:23 +0000 Manifest this update: Fri 05 Dec 2025 05:35:22 +0000 Manifest next update: Fri 12 Dec 2025 05:35:22 +0000 Files and hashes: 1: ibqQy31EKoOHxquTBzjKIA4Te60.crl (hash: fd4WjB0pOzMISTdr27DgelVkLeO2CatWsr6Ypr/vbDY=) 2: 9CF6A89AA27B11F09D816A4BC4F9AE02.roa (hash: 0eBxKaOD/grMOoAgLIRsVrl+pKw/EreQcuXwa4ak1TU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD Validity Not Before: Dec 5 05:35:22 2025 GMT Not After : Dec 12 05:35:22 2025 GMT Subject: CN=69326f1a-412c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:e8:de:12:af:15:e8:06:ba:70:5a:b9:e0: 16:0b:b7:2d:34:7b:58:ac:93:8e:e7:a5:ff:d2:cf: 7c:ae:47:03:ad:47:49:3d:80:5e:36:31:c7:de:7d: de:ca:b4:44:8d:6b:eb:76:bc:ac:3f:f6:f1:ba:ed: 25:a3:86:d5:c6:b0:b3:c9:e3:97:e5:e9:7f:de:05: 6f:31:97:37:8b:14:ed:60:1f:1b:18:a6:7e:45:64: b5:02:6a:92:17:12:6e:df:ba:38:27:41:e8:19:08: 5e:22:4f:b8:64:30:98:a4:28:cf:a0:04:05:a1:27: a6:91:79:b4:d4:76:93:11:fb:bf:c7:04:89:77:a1: 02:62:19:ab:22:f2:f4:24:d8:48:a5:d1:a9:8e:6c: 19:7f:22:5e:57:bd:0f:7f:20:21:ac:49:e3:fc:c4: 83:04:f9:4c:9a:1c:f8:8f:73:90:d7:2c:98:09:23: db:87:08:11:9d:48:47:78:fe:b1:3b:46:90:75:4b: 43:7b:d4:f5:ec:8c:ca:55:cf:0c:11:3b:93:b3:d2: 38:dc:f2:97:90:e9:3d:e0:5a:32:c4:5c:2f:d5:21: d1:8e:97:c3:59:7d:ff:f5:ab:8f:bd:91:2d:a2:7a: bb:87:8d:52:69:26:02:f5:90:8d:cd:db:b3:7d:ab: 4a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A9:78:A0:F9:AA:83:8D:D2:18:DB:ED:AA:16:A1:D1:50:E4:DD:D3 X509v3 Authority Key Identifier: keyid:89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:f4:98:7f:35:0f:5c:42:81:0a:ad:77:d1:1f:bf:eb:17:89: 8e:8e:e3:85:80:0b:ff:7f:8c:67:9e:eb:cf:3d:d7:f7:25:0b: c8:80:6a:1d:a5:16:51:19:2f:4a:a2:ae:49:28:61:c5:7d:b4: 73:0e:33:ad:3c:78:b1:56:35:c4:a2:d1:a0:bb:2e:10:6e:b2: ff:fa:3d:54:45:c7:d7:ad:96:e1:ea:fb:7b:93:eb:02:4c:81: 92:af:e3:54:76:38:82:53:02:46:e3:03:27:de:93:16:43:c3: 45:c5:66:7b:c7:99:92:68:16:d7:1c:c1:7d:b1:59:f1:a4:f7: c0:24:c2:51:12:d5:07:b9:cd:57:02:6a:7b:93:11:09:07:ef: 18:fc:cd:3d:54:4d:7a:d6:ce:1a:f8:da:83:78:6d:1a:00:6f: 4f:74:42:59:ed:e8:f4:36:04:97:a4:d5:a5:9f:37:b4:87:5e: 62:82:7c:d0:58:64:7b:0f:c4:61:61:6f:84:a7:43:7a:3d:6a: c5:98:6b:fc:7f:ad:15:8d:11:80:84:91:92:05:19:65:ca:3a: f4:b5:b5:a5:ae:b0:ab:f4:71:c8:89:20:c6:53:60:20:24:7d: 31:10:cb:2b:fa:bd:c5:e0:30:97:1b:86:4d:80:5c:68:70:d8: 23:c3:87:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI1RTExMC8GA1UEBRMoODlCQTkwQ0I3RDQ0MkE4Mzg3QzZBQjkzMDczOENBMjAw RTEzN0JBRDAeFw0yNTEyMDUwNTM1MjJaFw0yNTEyMTIwNTM1MjJaMBgxFjAUBgNV BAMTDTY5MzI2ZjFhLTQxMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2DOjeEq8V6Aa6cFq54BYLty00e1isk47npf/Sz3yuRwOtR0k9gF42Mcfefd7K tESNa+t2vKw/9vG67SWjhtXGsLPJ45fl6X/eBW8xlzeLFO1gHxsYpn5FZLUCapIX Em7fujgnQegZCF4iT7hkMJikKM+gBAWhJ6aRebTUdpMR+7/HBIl3oQJiGasi8vQk 2Eil0amObBl/Il5XvQ9/ICGsSeP8xIME+UyaHPiPc5DXLJgJI9uHCBGdSEd4/rE7 RpB1S0N71PXsjMpVzwwRO5Oz0jjc8peQ6T3gWjLEXC/VIdGOl8NZff/1q4+9kS2i eruHjVJpJgL1kI3N27N9q0rfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+6l4oPmq g43SGNvtqhah0VDk3dMwHwYDVR0jBBgwFoAUibqQy31EKoOHxquTBzjKIA4Te60w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjVFLzM1NUJFQzg2QTI3 QjExRjA5ODBGRDA0QUM0RjlBRTAyL2licVF5MzFFS29PSHhxdVRCempLSUE0VGU2 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWJxUXkzMUVLb09IeHF1VEJ6aktJQTRUZTYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MjVFLzM1NUJFQzg2QTI3QjExRjA5ODBGRDA0QUM0RjlBRTAyL2licVF5MzFFS29P SHhxdVRCempLSUE0VGU2MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEP0mH81D1xCgQqtd9Efv+sXiY6O44WAC/9/jGee68891/clC8iAah2l FlEZL0qirkkoYcV9tHMOM608eLFWNcSi0aC7LhBusv/6PVRFx9etluHq+3uT6wJM gZKv41R2OIJTAkbjAyfekxZDw0XFZnvHmZJoFtccwX2xWfGk98AkwlES1Qe5zVcC anuTEQkH7xj8zT1UTXrWzhr42oN4bRoAb090Qlnt6PQ2BJek1aWfN7SHXmKCfNBY ZHsPxGFhb4SnQ3o9asWYa/x/rRWNEYCEkZIFGWXKOvS1taWusKv0cciJIMZTYCAk fTEQyyv6vcXgMJcbhk2AXGhw2CPDhxo= -----END CERTIFICATE-----Generated at Sun Dec 7 02:41:24 2025 by rpki-client