This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft File: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft (raw, json) Hash identifier: h8qL/pa2HSw4xvwVWBRMP76zB1Hd06W3Dx6RchCghLI= Subject key identifier: 3E:7D:64:F9:60:6B:3B:4E:E6:38:9C:38:82:29:84:75:6F:86:65:D7 Authority key identifier: D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 Certificate issuer: /CN=A91EEA4D/serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft Manifest number: 1431 Signing time: Thu 04 Dec 2025 18:33:18 +0000 Manifest this update: Thu 04 Dec 2025 18:33:18 +0000 Manifest next update: Thu 11 Dec 2025 18:33:18 +0000 Files and hashes: 1: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl (hash: 91oxZqZ72fP/DxPtU1g7MX7zwJPj1yH/g80mVVdsNHI=) 2: 6B6060E445A311F093AEF324C4F9AE02.roa (hash: KkaxMY/paqE0NvJV6adlijQxx/J7VWmCwLLLInlyw1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Validity Not Before: Dec 4 18:33:18 2025 GMT Not After : Dec 11 18:33:18 2025 GMT Subject: CN=6931d3ee-dde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bb:5b:76:1b:14:99:4b:5f:81:cf:7d:18:ac: 63:15:c8:b1:49:35:26:63:bf:d1:e3:b7:ed:c5:43: fc:43:fc:56:4d:c5:4b:c3:eb:17:4d:bc:d4:ec:91: 1c:8d:be:0b:45:24:3c:90:94:63:3f:24:e4:76:c1: 5b:f1:7b:f8:d0:0c:a0:4e:eb:d0:0b:e1:1e:21:3f: cb:cd:20:71:c5:88:5b:1e:be:01:0e:93:fb:ab:b1: f3:00:bd:f1:15:8a:53:a8:4f:78:84:3d:21:03:2f: 18:9c:2d:96:3c:3d:d7:2d:1e:73:16:c2:2d:61:16: 0f:a2:db:35:26:cf:89:e9:74:f4:da:60:dd:34:02: 92:e1:4e:b9:66:32:c3:ab:ec:cb:2e:18:7e:99:80: f6:77:d5:20:47:72:d1:23:57:b9:d2:e4:43:82:95: 80:07:2a:e1:ef:af:ab:44:7a:af:eb:96:63:c5:2e: a8:77:0c:52:21:a7:c7:46:25:46:de:92:a7:0d:01: 56:46:bc:43:82:66:2b:8f:78:b8:8a:81:76:8e:dd: b3:51:dc:d9:ff:39:56:94:3d:43:bb:51:49:1e:27: d4:ab:ff:a7:af:2a:84:6c:46:48:21:97:b3:c6:26: 0f:fc:9a:41:e3:b7:15:2e:44:44:fd:e4:bd:b9:56: 3d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7D:64:F9:60:6B:3B:4E:E6:38:9C:38:82:29:84:75:6F:86:65:D7 X509v3 Authority Key Identifier: keyid:D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:79:95:1f:10:fc:2e:96:97:f2:2e:71:a6:dd:a4:f3:be:4a: 34:b5:36:53:c3:0e:11:13:a1:c9:b7:f4:27:c1:ef:9e:4d:a5: b6:39:81:04:2c:d5:da:40:3a:4a:2b:91:87:c6:1f:b8:c4:65: 6d:fd:c8:16:bb:51:f1:5d:54:ff:5d:22:59:5f:24:09:07:e7: 29:39:7c:19:64:99:9f:e4:a8:48:56:bd:10:63:51:85:4c:07: 25:4d:76:82:df:d3:44:18:8d:77:7c:28:e3:f0:28:a0:83:0c: 79:b2:b1:70:3b:dc:8b:c1:dc:15:94:d2:8e:c5:47:e2:9c:4a: cd:10:69:be:af:17:f0:e5:2a:0f:34:69:da:65:ba:3c:3e:51: 6e:54:dd:51:fa:cc:3e:98:03:4d:ac:8b:bf:fd:f9:18:3c:5d: 5c:2f:43:45:98:40:cf:29:f5:89:ce:78:1f:23:db:d1:f4:a3: f9:47:1b:82:aa:b0:e9:e9:47:4c:4c:90:90:52:5e:49:f0:0e: c4:81:ad:b7:a9:3b:bc:59:f0:54:a2:24:16:d7:ba:e0:11:ac: c4:10:a0:c5:fa:77:fd:b3:a4:f6:5b:84:74:7e:69:05:ac:2f: 14:ba:33:1b:1c:6f:2c:cf:5c:1e:04:15:b3:ac:8f:3e:99:87: 62:e1:d8:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUE0RDExMC8GA1UEBRMoRDEwNkZCOTcyQTcxRkVCNzQwOTJFMDYzNzhENTRDRDU5 RTU5RTNBMzAeFw0yNTEyMDQxODMzMThaFw0yNTEyMTExODMzMThaMBgxFjAUBgNV BAMTDTY5MzFkM2VlLWRkZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNu1t2GxSZS1+Bz30YrGMVyLFJNSZjv9Hjt+3FQ/xD/FZNxUvD6xdNvNTskRyN vgtFJDyQlGM/JOR2wVvxe/jQDKBO69AL4R4hP8vNIHHFiFsevgEOk/ursfMAvfEV ilOoT3iEPSEDLxicLZY8PdctHnMWwi1hFg+i2zUmz4npdPTaYN00ApLhTrlmMsOr 7MsuGH6ZgPZ31SBHctEjV7nS5EOClYAHKuHvr6tEeq/rlmPFLqh3DFIhp8dGJUbe kqcNAVZGvEOCZiuPeLiKgXaO3bNR3Nn/OVaUPUO7UUkeJ9Sr/6evKoRsRkghl7PG Jg/8mkHjtxUuRET95L25Vj3tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPn1k+WBr O07mOJw4gimEdW+GZdcwHwYDVR0jBBgwFoAU0Qb7lypx/rdAkuBjeNVM1Z5Z46Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFQTRELzY2MUY3M0VDNDcz NzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3JkQWt1QmplTlZNMVo1WjQ2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFFiN2x5cHhfcmRBa3VCamVOVk0xWjVaNDZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF QTRELzY2MUY3M0VDNDczNzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3Jk QWt1QmplTlZNMVo1WjQ2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADt5lR8Q/C6Wl/IucabdpPO+SjS1NlPDDhETocm39CfB755NpbY5gQQs 1dpAOkorkYfGH7jEZW39yBa7UfFdVP9dIllfJAkH5yk5fBlkmZ/kqEhWvRBjUYVM ByVNdoLf00QYjXd8KOPwKKCDDHmysXA73IvB3BWU0o7FR+KcSs0Qab6vF/DlKg80 adplujw+UW5U3VH6zD6YA02si7/9+Rg8XVwvQ0WYQM8p9YnOeB8j29H0o/lHG4Kq sOnpR0xMkJBSXknwDsSBrbepO7xZ8FSiJBbXuuARrMQQoMX6d/2zpPZbhHR+aQWs LxS6MxscbyzPXB4EFbOsjz6Zh2Lh2AU= -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:48 2025 by rpki-client