This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json) Hash identifier: O0UoFW0A0ajR+J+JOfp0UI5/OlMpaL/lVAf6N5jCdYI= Subject key identifier: 5A:A7:C3:88:BF:A3:60:A5:9C:B2:C2:AA:44:7E:28:0C:4F:36:17:B6 Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Certificate serial: 1B8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft Manifest number: 1B81 Signing time: Thu 18 Dec 2025 16:09:37 +0000 Manifest this update: Thu 18 Dec 2025 16:09:37 +0000 Manifest next update: Thu 25 Dec 2025 16:09:37 +0000 Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: FXgSEiSGgFybPDkndr7/DNnmxdzjl7kL8xl228DHbhw=) 2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: PfaBGPnkUgsWEXBDryvUqr89XZWDUPWxeZUL3rzB4xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7053 (0x1b8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Validity Not Before: Dec 18 16:09:37 2025 GMT Not After : Dec 25 16:09:37 2025 GMT Subject: CN=69442741-7956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:cf:81:4b:20:54:24:26:cf:2d:c8:5a:93: 2e:c6:30:07:f7:cb:ce:5d:7d:b1:dc:c2:54:1f:87: 27:3b:3b:1c:5d:cf:e8:74:a3:e1:90:3e:df:6b:25: 6f:f9:a6:fd:39:d6:67:7c:9c:f8:56:29:1b:ca:78: f2:27:b1:43:29:d9:e2:c6:02:0f:cc:8f:12:7f:81: 22:7e:53:01:66:65:aa:a3:29:ca:8c:72:d3:a1:dc: 0f:0e:ee:4f:e2:f9:10:0e:6c:6b:79:08:33:8f:fa: fa:e4:46:30:af:0d:51:bb:ed:87:83:3a:22:5b:e8: 74:26:8d:bb:58:a6:4b:39:86:51:a5:4c:f7:0f:24: 3c:b5:a5:b5:c8:b1:a3:e1:3e:00:b0:bd:bb:4e:5e: d9:de:41:19:e0:70:1a:8a:5d:fe:2f:43:71:04:6a: 9a:7e:44:c7:8d:74:02:c1:2f:c1:a6:96:a3:ca:19: 43:e7:89:b9:b5:8b:d9:1b:1a:60:f4:b3:50:d4:31: 99:bf:79:4b:33:2d:34:46:6c:0b:da:f7:30:81:30: 7d:33:cd:4c:7f:d4:78:6b:fc:19:19:d0:db:fd:84: c1:7b:22:58:e8:67:fe:90:77:68:78:97:9e:76:fa: 16:7a:13:30:10:0a:9e:52:14:7d:4c:3c:91:41:64: ca:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A7:C3:88:BF:A3:60:A5:9C:B2:C2:AA:44:7E:28:0C:4F:36:17:B6 X509v3 Authority Key Identifier: keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d4:48:ca:68:96:d0:e9:06:4f:a5:00:79:3b:3c:a9:fa:0f: ca:71:77:21:43:4c:5f:3d:d9:25:35:ae:31:f7:88:30:b6:cb: f9:84:25:0d:1b:a8:5b:5f:19:32:31:86:cd:98:08:68:e6:67: 4a:13:8e:39:a5:36:37:62:b2:08:eb:7c:86:23:56:5b:94:ae: f6:8f:12:a8:2b:aa:1a:04:cb:5b:6b:40:94:06:df:aa:88:7a: 9d:dd:30:5d:27:39:32:4b:aa:6f:52:f6:95:ad:ec:e6:13:8e: bd:33:f9:e5:77:35:4d:5b:e0:f9:15:35:0f:60:89:bf:0a:d9: 3c:a0:b7:31:e1:29:64:46:7a:43:f3:be:9a:da:5f:67:5d:66: e5:e1:74:1d:5e:72:70:74:cd:56:a2:52:61:7b:84:72:ae:62: aa:25:fa:4d:e0:8e:c3:ca:97:93:51:b6:bb:e0:5c:f0:eb:1e: 78:31:af:f1:45:e0:5d:27:5f:dd:b6:54:5b:52:9e:13:3a:8f: f7:01:02:68:56:6d:28:8e:bc:d5:83:44:f0:58:bd:0e:96:c3: 51:03:82:5a:2e:bd:c9:d5:b1:b2:eb:d6:dc:5a:be:41:c0:22: 52:50:7a:9a:5c:86:7f:09:ff:9a:68:ac:c7:e7:77:c8:92:63: 09:30:29:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjcxMTAvBgNVBAUTKEFBQjUyNEU1OTVBNTMwRTEyQzEzQUEyMTFDMkVGMjZC NjlERDlDOUIwHhcNMjUxMjE4MTYwOTM3WhcNMjUxMjI1MTYwOTM3WjAYMRYwFAYD VQQDDA02OTQ0Mjc0MS03OTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp77PgUsgVCQmzy3IWpMuxjAH98vOXX2x3MJUH4cnOzscXc/odKPhkD7fayVv +ab9OdZnfJz4VikbynjyJ7FDKdnixgIPzI8Sf4EiflMBZmWqoynKjHLTodwPDu5P 4vkQDmxreQgzj/r65EYwrw1Ru+2HgzoiW+h0Jo27WKZLOYZRpUz3DyQ8taW1yLGj 4T4AsL27Tl7Z3kEZ4HAail3+L0NxBGqafkTHjXQCwS/BppajyhlD54m5tYvZGxpg 9LNQ1DGZv3lLMy00RmwL2vcwgTB9M81Mf9R4a/wZGdDb/YTBeyJY6Gf+kHdoeJee dvoWehMwEAqeUhR9TDyRQWTKhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqnw4i/ o2ClnLLCqkR+KAxPNhe2MB8GA1UdIwQYMBaAFKq1JOWVpTDhLBOqIRwu8mtp3Zyb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNy9DNDZGRDc3NDFC OEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1PRXNFNm9oSEM3eWEybmRu SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyVWs1WldsTU9Fc0U2b2hIQzd5YTJuZG5Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNy9DNDZGRDc3NDFCOEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1P RXNFNm9oSEM3eWEybmRuSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM1EjKaJbQ6QZPpQB5Ozyp+g/KcXchQ0xfPdklNa4x94gwtsv5hCUN G6hbXxkyMYbNmAho5mdKE445pTY3YrII63yGI1ZblK72jxKoK6oaBMtba0CUBt+q iHqd3TBdJzkyS6pvUvaVrezmE469M/nldzVNW+D5FTUPYIm/Ctk8oLcx4SlkRnpD 876a2l9nXWbl4XQdXnJwdM1WolJhe4RyrmKqJfpN4I7DypeTUba74Fzw6x54Ma/x ReBdJ1/dtlRbUp4TOo/3AQJoVm0ojrzVg0TwWL0OlsNRA4JaLr3J1bGy69bcWr5B wCJSUHqaXIZ/Cf+aaKzH53fIkmMJMCkx -----END CERTIFICATE-----Generated at Thu Dec 18 23:43:14 2025 by rpki-client