This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft File: iQoeXMwexsfOHqcfSRKRH1mShrI.mft (raw, json) Hash identifier: reaNBsc/7wY6UMn8bFMqMJNnBFLwsE0Bw8TN+q+l4gs= Subject key identifier: AB:2A:23:DC:5E:2C:53:BD:6D:28:F4:1D:8A:DA:6E:F9:51:C2:CC:2C Authority key identifier: 89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 Certificate issuer: /CN=A91E2234/serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Certificate serial: 34E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft Manifest number: 34E2 Signing time: Sat 06 Dec 2025 14:44:37 +0000 Manifest this update: Sat 06 Dec 2025 14:44:36 +0000 Manifest next update: Sat 13 Dec 2025 14:44:36 +0000 Files and hashes: 1: iQoeXMwexsfOHqcfSRKRH1mShrI.crl (hash: HbFcERFzYahcXqXs2+2T/m1Ppw4E8WLZUU+XKRMmEno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13538 (0x34e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2234, serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Validity Not Before: Dec 6 14:44:36 2025 GMT Not After : Dec 13 14:44:36 2025 GMT Subject: CN=69344155-a1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:55:5e:cd:54:2a:bc:6c:c5:d2:4f:d9:b2:e3: 50:75:2b:f9:69:24:4e:dc:3c:2c:c5:97:25:4a:6f: 51:fb:df:e6:98:80:3d:af:0d:b9:14:f5:28:8a:27: 95:4c:bd:9f:11:ca:39:eb:9d:1a:12:84:da:03:f3: da:e2:61:a7:a0:d7:1c:d8:48:5b:1e:54:fd:08:78: 06:fc:33:74:3a:17:9f:66:3e:b4:58:a4:7e:06:e1: dc:23:3e:c8:1d:fb:7b:15:3f:5b:77:a0:57:16:1d: 96:4e:02:cf:cd:48:10:1b:5f:13:04:7c:e6:27:14: 8f:74:df:56:f3:60:27:f4:0a:28:e5:86:da:0e:e5: e6:b1:e2:f3:d7:0a:e7:c3:f9:1c:2b:bb:60:ca:89: 91:6f:08:6f:39:f5:00:f5:98:d8:49:6f:95:64:e1: 89:41:8d:b9:36:ad:a5:72:ba:62:56:5a:42:bc:61: 96:ea:e6:01:76:63:8c:ad:f4:cb:53:16:41:d5:99: 56:49:60:a0:1e:98:79:a4:cb:ea:2e:5b:c7:6d:34: e2:90:fe:6b:0e:f4:6d:b7:f2:a2:95:de:96:92:58: cc:2d:10:eb:39:8b:04:08:1a:6f:c1:c7:88:05:a2: 64:63:fb:c5:fd:bc:34:97:55:a9:b8:25:62:d6:fd: 6a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2A:23:DC:5E:2C:53:BD:6D:28:F4:1D:8A:DA:6E:F9:51:C2:CC:2C X509v3 Authority Key Identifier: keyid:89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:73:0c:bf:b6:eb:e4:d8:9a:87:dc:26:28:fe:36:36:40:1e: 60:0d:e1:d0:48:98:4d:65:95:0d:94:48:51:a9:01:49:ad:ed: d1:b8:0c:c5:ce:56:24:07:55:a1:51:af:fa:cf:fd:57:3e:4f: a4:fd:f0:2e:f5:4e:be:3f:74:54:11:c8:47:c1:95:95:3f:3e: cb:3d:37:91:b3:64:74:84:c2:7a:43:3a:df:7c:62:5c:3e:ce: fc:37:41:11:59:58:bf:36:05:19:d2:52:f1:3c:16:fc:b6:4c: 6e:9d:46:31:8a:8b:42:3a:a6:16:af:e7:dd:b5:75:03:00:99: b7:2f:cd:bd:ed:8e:64:e5:0d:b6:9c:d0:31:51:db:c0:b2:36: b5:1c:88:00:12:5f:45:a5:4d:bb:2a:60:8e:ee:cc:67:43:ae: ce:7a:6b:f3:46:1d:9a:75:e3:7b:4d:86:15:7a:a7:6b:af:c6: 14:16:86:50:e9:29:3e:89:9b:a1:87:2b:fa:9f:2b:7d:b9:75: 90:d7:0c:19:b1:17:7c:00:13:6a:24:33:e7:cc:01:63:e3:09: d0:c2:76:74:ef:bc:fe:79:5c:4d:20:86:08:18:05:64:c6:2f: 6f:4d:1e:f0:4f:8d:d6:98:ff:70:77:b1:78:af:37:8e:61:b4: 86:46:81:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyMzQxMTAvBgNVBAUTKDg5MEExRTVDQ0MxRUM2QzdDRTFFQTcxRjQ5MTI5MTFG NTk5Mjg2QjIwHhcNMjUxMjA2MTQ0NDM2WhcNMjUxMjEzMTQ0NDM2WjAYMRYwFAYD VQQDEw02OTM0NDE1NS1hMWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1VezVQqvGzF0k/ZsuNQdSv5aSRO3DwsxZclSm9R+9/mmIA9rw25FPUoiieV TL2fEco5650aEoTaA/Pa4mGnoNcc2EhbHlT9CHgG/DN0OhefZj60WKR+BuHcIz7I Hft7FT9bd6BXFh2WTgLPzUgQG18TBHzmJxSPdN9W82An9Aoo5YbaDuXmseLz1wrn w/kcK7tgyomRbwhvOfUA9ZjYSW+VZOGJQY25Nq2lcrpiVlpCvGGW6uYBdmOMrfTL UxZB1ZlWSWCgHph5pMvqLlvHbTTikP5rDvRtt/Kild6WkljMLRDrOYsECBpvwceI BaJkY/vF/bw0l1WpuCVi1v1qrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsqI9xe LFO9bSj0HYrabvlRwswsMB8GA1UdIwQYMBaAFIkKHlzMHsbHzh6nH0kSkR9Zkoay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjIzNC81MjI1NjkxNDFE OTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhzZk9IcWNmU1JLUkgxbVNo ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRb2VYTXdleHNmT0hxY2ZTUktSSDFtU2hySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjIzNC81MjI1NjkxNDFEOTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhz Zk9IcWNmU1JLUkgxbVNockkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACcwy/tuvk2JqH3CYo/jY2QB5gDeHQSJhNZZUNlEhRqQFJre3RuAzF zlYkB1WhUa/6z/1XPk+k/fAu9U6+P3RUEchHwZWVPz7LPTeRs2R0hMJ6QzrffGJc Ps78N0ERWVi/NgUZ0lLxPBb8tkxunUYxiotCOqYWr+fdtXUDAJm3L8297Y5k5Q22 nNAxUdvAsja1HIgAEl9FpU27KmCO7sxnQ67OemvzRh2adeN7TYYVeqdrr8YUFoZQ 6Sk+iZuhhyv6nyt9uXWQ1wwZsRd8ABNqJDPnzAFj4wnQwnZ077z+eVxNIIYIGAVk xi9vTR7wT43WmP9wd7F4rzeOYbSGRoHs -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:47 2025 by rpki-client