This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft File: lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft (raw, json) Hash identifier: KqKeu2fQrJWcYKji+DZPnXpI5yvFauRSULy9Tmnn45U= Subject key identifier: A1:08:03:DB:79:EB:F0:31:10:B5:1D:F4:FC:CA:12:A6:31:BC:FD:6C Authority key identifier: 95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72 Certificate issuer: /CN=A91E9DF8/serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472 Certificate serial: 064E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft Manifest number: 0647 Signing time: Sat 20 Dec 2025 21:59:09 +0000 Manifest this update: Sat 20 Dec 2025 21:59:09 +0000 Manifest next update: Sat 27 Dec 2025 21:59:09 +0000 Files and hashes: 1: lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl (hash: EpVYkmalpw86LZIptnFMFAZQY960I3t3eIK1dmO1JaE=) 2: A8086732B6DA11EBB7B67954C4F9AE02.roa (hash: Hu3KJZGMFU1oSrjsFOXx/j+TH9Vy+Garohr2Zg0l2Z0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1614 (0x64e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9DF8, serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472 Validity Not Before: Dec 20 21:59:09 2025 GMT Not After : Dec 27 21:59:09 2025 GMT Subject: CN=69471c2d-04cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:2b:68:ce:0e:a1:b4:62:e3:78:57:fb:3c: f6:3f:10:50:3b:be:88:ab:d3:07:59:56:7d:11:1c: 76:4e:c7:3b:7d:51:fb:ad:18:ba:86:08:17:d4:4e: 2d:ea:b8:f7:a8:86:51:ec:2f:c9:b5:91:71:20:e7: 69:d4:ec:02:41:81:cd:d2:80:08:ca:1d:20:7f:8d: 99:86:bd:66:1f:41:8c:3b:4a:77:1d:5f:db:bd:2b: 6d:28:9b:fd:b7:6b:17:74:b9:15:26:4e:d7:9a:a2: c0:7f:f5:f1:49:97:91:13:c2:87:b4:59:e5:3c:a8: af:08:13:83:42:87:6e:9e:d7:a3:e2:e6:7a:61:a3: 40:a7:ef:75:f0:27:1c:d6:ad:79:8b:25:8c:a7:b5: 3c:1a:22:51:44:9f:d6:50:4a:02:dc:b4:e9:2a:47: 7d:71:b9:0d:4f:06:2a:25:f2:bb:8f:f4:07:4b:11: ec:2f:30:6c:2c:75:0d:0f:f5:34:3b:c8:1a:43:9f: 36:05:26:42:d9:aa:e3:91:0c:2f:d9:cd:3a:2b:4d: 91:f2:d9:29:e3:a0:90:24:0f:29:d0:63:68:a4:9f: 7d:5c:a6:66:42:46:a6:90:87:23:07:4b:0b:83:99: c0:a2:57:8f:92:89:6e:29:8e:93:24:84:ae:d0:a8: 38:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:08:03:DB:79:EB:F0:31:10:B5:1D:F4:FC:CA:12:A6:31:BC:FD:6C X509v3 Authority Key Identifier: keyid:95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:99:77:8f:5d:14:9d:80:9c:e0:6b:3a:53:2a:ae:e5:ce:1f: da:81:bb:bb:cd:ee:ce:1b:a1:f4:16:b3:e5:11:b8:8b:6f:32: 98:79:f6:55:b7:60:af:b8:09:3b:d9:19:9d:5f:2b:e0:f2:6c: d2:5c:7f:2c:f6:20:df:18:fd:b7:80:74:b7:b0:03:ea:5d:e8: bb:50:84:6d:c3:b6:51:44:ef:fa:57:14:90:7b:38:88:3f:43: f0:f7:77:5e:de:29:a6:6a:ab:20:27:2c:65:11:ff:e3:a0:8e: 4c:aa:c7:43:ef:20:15:62:96:ea:a5:11:a0:2c:f3:43:cd:57: df:8c:fd:32:59:30:79:1c:10:e3:cf:ca:cf:6b:66:9e:b1:30: 5f:32:b1:79:bd:a1:86:de:e8:6e:21:d2:42:26:87:4a:d0:9d: 7f:cb:0d:74:87:c3:a2:85:4b:e9:31:9f:62:53:b6:06:1c:51: 10:54:bb:f6:e3:67:eb:01:a4:f9:45:84:c0:33:c2:86:75:49: 4e:f1:bb:25:9d:84:0d:d0:b9:f5:1e:31:c6:e6:61:31:7c:af: b2:e3:8d:dd:19:2c:47:eb:82:86:7a:cc:57:7d:e4:37:b5:40: 7b:16:2c:fa:07:21:2d:1a:4f:90:7c:bf:61:0d:e5:75:62:91: 60:c0:36:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlERjgxMTAvBgNVBAUTKDk1MDY4QkIzMEFCQzdFMDA3RkQ4Mzg3RTRERTBBODNF RkFBREQ0NzIwHhcNMjUxMjIwMjE1OTA5WhcNMjUxMjI3MjE1OTA5WjAYMRYwFAYD VQQDDA02OTQ3MWMyZC0wNGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqq8raM4OobRi43hX+zz2PxBQO76Iq9MHWVZ9ERx2Tsc7fVH7rRi6hggX1E4t 6rj3qIZR7C/JtZFxIOdp1OwCQYHN0oAIyh0gf42Zhr1mH0GMO0p3HV/bvSttKJv9 t2sXdLkVJk7XmqLAf/XxSZeRE8KHtFnlPKivCBODQoduntej4uZ6YaNAp+918Ccc 1q15iyWMp7U8GiJRRJ/WUEoC3LTpKkd9cbkNTwYqJfK7j/QHSxHsLzBsLHUND/U0 O8gaQ582BSZC2arjkQwv2c06K02R8tkp46CQJA8p0GNopJ99XKZmQkamkIcjB0sL g5nAolePkoluKY6TJISu0Kg4mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEIA9t5 6/AxELUd9PzKEqYxvP1sMB8GA1UdIwQYMBaAFJUGi7MKvH4Af9g4fk3gqD76rdRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOURGOC80QjNCODgxRUI2 RDkxMUVCOEY4NjU1NTRDNEY5QUUwMi9sUWFMc3dxOGZnQl8yRGgtVGVDb1B2cXQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRYUxzd3E4ZmdCXzJEaC1UZUNvUHZxdDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OURGOC80QjNCODgxRUI2RDkxMUVCOEY4NjU1NTRDNEY5QUUwMi9sUWFMc3dxOGZn Ql8yRGgtVGVDb1B2cXQxSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNmXePXRSdgJzgazpTKq7lzh/agbu7ze7OG6H0FrPlEbiLbzKYefZV t2CvuAk72RmdXyvg8mzSXH8s9iDfGP23gHS3sAPqXei7UIRtw7ZRRO/6VxSQeziI P0Pw93de3immaqsgJyxlEf/joI5MqsdD7yAVYpbqpRGgLPNDzVffjP0yWTB5HBDj z8rPa2aesTBfMrF5vaGG3uhuIdJCJodK0J1/yw10h8OihUvpMZ9iU7YGHFEQVLv2 42frAaT5RYTAM8KGdUlO8bslnYQN0Ln1HjHG5mExfK+y443dGSxH64KGesxXfeQ3 tUB7Fiz6ByEtGk+QfL9hDeV1YpFgwDbt -----END CERTIFICATE-----Generated at Sun Dec 21 05:26:36 2025 by rpki-client