This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json) Hash identifier: y+AGn8c6sT7x6Bb9kUsxulogiI5bTzYbeFUAV8Hq7mw= Subject key identifier: 98:D5:B9:B8:ED:31:B6:AE:C2:12:9A:F4:7B:90:E0:8D:10:E0:92:1D Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Certificate serial: 0477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft Manifest number: 0470 Signing time: Sat 06 Dec 2025 22:49:28 +0000 Manifest this update: Sat 06 Dec 2025 22:49:28 +0000 Manifest next update: Sat 13 Dec 2025 22:49:28 +0000 Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: x2ak0qxXZO0D8h938gUX7MzZsV5ysK6oiMEpIk8f5z8=) 2: 4F12B4886EEB11EC8699607FC4F9AE02.roa (hash: oZqrtJQlT3Kbcps4JCliN7dRzvuckdjDLLEfBNjz0jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1143 (0x477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Validity Not Before: Dec 6 22:49:28 2025 GMT Not After : Dec 13 22:49:28 2025 GMT Subject: CN=6934b2f8-5383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:96:e0:9d:ab:db:30:a6:ab:5b:a6:42:b7:dc: 4d:7d:2c:ad:54:3d:36:c0:58:56:5c:e8:d0:c6:1f: 9b:7c:cb:44:d3:26:b8:ff:9f:80:b3:21:c3:b5:3b: 06:97:22:2e:b2:75:1b:89:3c:20:2e:1c:03:70:18: 5d:c5:e0:c8:a9:c2:84:3d:14:ad:a7:8b:85:9c:ee: fc:e2:36:7f:9a:86:00:ae:da:2b:d1:d6:aa:4c:84: 22:f4:67:77:13:4c:de:f3:4a:2c:ae:41:3d:9f:85: 50:77:b7:7b:98:c2:ec:04:ce:5b:52:7f:24:ae:92: 20:37:30:3e:1a:d8:50:f5:94:3d:3a:6c:61:4b:15: e1:82:07:aa:5e:e8:e4:63:8b:85:67:31:c0:cc:05: 76:8c:16:9a:9d:22:2c:cd:2b:9f:e4:55:6b:28:fc: 98:cc:6e:91:e4:85:b3:2a:8e:1d:78:81:b3:8c:74: 70:6a:00:d3:79:0a:f5:72:28:80:f9:17:ed:35:25: 22:65:ad:6f:7b:39:12:89:98:0d:ed:5c:c1:ed:38: 64:28:3f:c3:0f:60:3d:80:92:79:89:fa:a1:ff:10: 00:0c:3d:4f:cb:b7:5d:9f:37:06:a0:58:47:1f:1f: b1:db:2d:77:ae:08:00:a2:36:cf:2c:82:d5:01:1e: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D5:B9:B8:ED:31:B6:AE:C2:12:9A:F4:7B:90:E0:8D:10:E0:92:1D X509v3 Authority Key Identifier: keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f3:99:3a:0c:7f:cc:5e:70:2a:13:20:0c:cf:7a:93:25:c2: 8d:af:a4:9f:83:2c:0a:ed:cc:ff:40:35:63:18:4f:95:5b:9e: 79:70:6a:54:99:3e:98:75:16:06:93:d8:de:69:ee:1f:ee:61: 3b:a3:74:8c:07:65:b6:81:4e:21:87:f9:93:32:da:86:08:8c: 31:76:93:05:35:bf:ab:27:e8:6f:ad:21:5b:34:5b:bd:5b:c9: 11:55:8e:cb:a0:89:e2:e6:ae:81:d9:b0:f2:cf:fb:e7:04:dc: 5b:17:e5:cf:62:ac:24:e2:dd:2f:5b:3d:46:73:47:8d:9a:70: 0c:7e:f0:b2:04:03:49:9f:2e:5d:1e:be:ca:79:95:09:84:e1: bf:7a:e9:f8:37:6e:8f:68:ce:a7:5b:5e:4f:7e:e5:3e:0a:d5: b0:ae:3f:db:be:9b:42:c9:42:98:34:13:69:5b:f3:b8:89:9b: 9c:14:fe:fd:15:f2:43:e3:8c:9a:a2:0a:b1:5a:1d:0f:d4:da: 0d:0c:da:47:fc:94:10:0e:6c:44:7b:97:bf:76:98:63:60:c4: c2:00:2f:4b:3a:4e:7a:f9:84:a7:79:7e:69:d7:1e:30:73:0d: 19:8d:63:41:d7:07:70:bc:70:d6:9d:ed:03:8a:fd:20:2b:2b: eb:57:da:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCNzMxMTAvBgNVBAUTKERBQUFCMTJFOTJGQTBFRTA0M0MyMEVFQUYyQkU0Njk2 QTJDMzc4NzcwHhcNMjUxMjA2MjI0OTI4WhcNMjUxMjEzMjI0OTI4WjAYMRYwFAYD VQQDEw02OTM0YjJmOC01MzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZbgnavbMKarW6ZCt9xNfSytVD02wFhWXOjQxh+bfMtE0ya4/5+AsyHDtTsG lyIusnUbiTwgLhwDcBhdxeDIqcKEPRStp4uFnO784jZ/moYArtor0daqTIQi9Gd3 E0ze80osrkE9n4VQd7d7mMLsBM5bUn8krpIgNzA+GthQ9ZQ9OmxhSxXhggeqXujk Y4uFZzHAzAV2jBaanSIszSuf5FVrKPyYzG6R5IWzKo4deIGzjHRwagDTeQr1ciiA +RftNSUiZa1vezkSiZgN7VzB7ThkKD/DD2A9gJJ5ifqh/xAADD1Py7ddnzcGoFhH Hx+x2y13rggAojbPLILVAR5nNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjVubjt MbauwhKa9HuQ4I0Q4JIdMB8GA1UdIwQYMBaAFNqqsS6S+g7gQ8IO6vK+Rpaiw3h3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI3My9FQTgwOUZGMjZF RDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1QkR3ZzdxOHI1R2xxTERl SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxcXhMcEw2RHVCRHdnN3E4cjVHbHFMRGVIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI3My9FQTgwOUZGMjZFRDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1 QkR3ZzdxOHI1R2xxTERlSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU85k6DH/MXnAqEyAMz3qTJcKNr6SfgywK7cz/QDVjGE+VW555cGpU mT6YdRYGk9jeae4f7mE7o3SMB2W2gU4hh/mTMtqGCIwxdpMFNb+rJ+hvrSFbNFu9 W8kRVY7LoIni5q6B2bDyz/vnBNxbF+XPYqwk4t0vWz1Gc0eNmnAMfvCyBANJny5d Hr7KeZUJhOG/eun4N26PaM6nW15PfuU+CtWwrj/bvptCyUKYNBNpW/O4iZucFP79 FfJD44yaogqxWh0P1NoNDNpH/JQQDmxEe5e/dphjYMTCAC9LOk56+YSneX5p1x4w cw0ZjWNB1wdwvHDWne0Div0gKyvrV9of -----END CERTIFICATE-----Generated at Sun Dec 7 03:38:38 2025 by rpki-client