This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft File: IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json) Hash identifier: 2rUjlxBWFgZHqZH5NcIwqsISWZKwQDE72OIGDHwnKmw= Subject key identifier: 75:EC:0C:E0:5A:90:34:32:B3:39:34:DB:A3:37:C8:C1:DF:18:E3:DD Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 Certificate issuer: /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft Manifest number: C5 Signing time: Fri 05 Dec 2025 03:50:57 +0000 Manifest this update: Fri 05 Dec 2025 03:50:57 +0000 Manifest next update: Fri 12 Dec 2025 03:50:57 +0000 Files and hashes: 1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: 6d0DvkCFPWJEzsX/50nEp7YG9aJM4Yg/CZrEOPp/QjA=) 2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: S974N0P9f8Bg6Jc7BIscRXeUqpVDlIBE/NP1Bo0j0PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Validity Not Before: Dec 5 03:50:57 2025 GMT Not After : Dec 12 03:50:57 2025 GMT Subject: CN=693256a1-40da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:dd:20:d0:4f:00:f0:f7:d6:47:3f:67:ad: 0d:1f:3b:a6:9b:31:41:ea:c9:28:d8:c6:43:fb:bd: 4f:c1:c7:8e:18:7f:cd:cb:e9:b9:c1:f7:c9:db:47: 09:58:c1:54:c0:91:99:7e:b1:1e:2d:8d:c3:2b:5e: 66:f3:82:b1:2f:b0:a4:2c:42:7c:c4:c0:cf:46:e0: c7:f3:a9:65:57:f9:d9:2b:16:62:89:c7:0a:d8:1f: 35:ab:fe:9e:0b:ac:5d:6b:b9:96:37:68:bf:51:6b: f1:69:4a:00:a9:94:ff:14:13:c0:f9:0d:a3:3b:bd: 8a:1f:1f:79:2f:d9:71:6d:f8:b1:94:e2:f2:cc:60: bd:aa:64:d4:4c:8a:c4:f7:88:70:00:36:e1:8a:ff: 28:43:52:5a:b7:50:c5:a9:d5:f2:c8:2e:82:85:94: 77:f4:84:dc:bd:2f:e0:99:ad:c5:2b:21:1f:e6:f0: 0a:52:09:3a:86:b5:e4:99:59:9e:f2:96:66:1d:de: 90:0e:83:8b:e4:56:1f:5e:fb:32:ac:5e:8c:28:96: a4:e7:a7:1b:7c:3b:7d:bd:26:43:86:4f:0e:eb:ce: 4d:ab:f1:09:ea:bf:e2:2d:33:9f:f5:8b:d8:b4:27: 3d:db:21:85:cc:13:47:80:4f:e1:fe:e4:06:5b:bf: da:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EC:0C:E0:5A:90:34:32:B3:39:34:DB:A3:37:C8:C1:DF:18:E3:DD X509v3 Authority Key Identifier: keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:99:51:f9:b0:08:3a:71:18:c5:f5:e4:87:81:fa:7e:a2:cd: 72:8f:60:1d:2e:3d:e9:d9:7c:dd:dd:ae:bf:26:9d:1a:15:da: c5:56:4e:e0:0f:c7:98:71:96:e9:80:58:34:21:cb:8e:89:fb: e8:c9:ec:50:27:5b:ea:89:f6:85:7d:8f:0b:b3:1a:54:bb:dd: f7:98:1b:ec:25:23:04:49:4a:a1:4f:25:f4:bc:cb:d3:9c:be: 4a:25:64:24:3a:3c:44:a4:fd:3a:c4:08:13:c6:51:36:2b:75: 29:8b:62:a8:cc:aa:7b:9e:03:f7:4f:bf:d5:47:4b:5a:4e:a2: d7:7f:3e:9a:71:e9:c9:14:1c:fd:da:17:dc:6b:0d:e0:2f:df: 44:6b:af:e6:74:64:dc:57:ed:61:6c:3b:1d:fc:28:ca:36:cf: 9f:b8:f8:9e:36:e1:24:96:55:b8:d3:31:93:ff:f6:eb:e7:0c: ef:5e:53:c8:dc:50:1f:f7:49:0f:be:41:24:7a:cb:4a:2b:f0: 0f:c0:12:fe:af:03:5e:72:2a:df:61:c3:82:c3:a5:43:4c:b7: 84:82:72:89:0f:f9:56:81:8c:48:ba:5b:54:e8:2c:01:9b:ed: 9a:3e:3b:57:b9:26:e3:b5:21:a2:31:ec:e9:69:11:87:16:c0: 2d:36:24:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MzcxMTAvBgNVBAUTKDIxMDk0NkNEQTlERTc1REVGOTYwOTg5NUZCRjIxRUQ4 NEM3MkY0RTcwHhcNMjUxMjA1MDM1MDU3WhcNMjUxMjEyMDM1MDU3WjAYMRYwFAYD VQQDEw02OTMyNTZhMS00MGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSPdINBPAPD31kc/Z60NHzummzFB6sko2MZD+71PwceOGH/Ny+m5wffJ20cJ WMFUwJGZfrEeLY3DK15m84KxL7CkLEJ8xMDPRuDH86llV/nZKxZiiccK2B81q/6e C6xda7mWN2i/UWvxaUoAqZT/FBPA+Q2jO72KHx95L9lxbfixlOLyzGC9qmTUTIrE 94hwADbhiv8oQ1Jat1DFqdXyyC6ChZR39ITcvS/gma3FKyEf5vAKUgk6hrXkmVme 8pZmHd6QDoOL5FYfXvsyrF6MKJak56cbfDt9vSZDhk8O685Nq/EJ6r/iLTOf9YvY tCc92yGFzBNHgE/h/uQGW7/ahQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXsDOBa kDQyszk026M3yMHfGOPdMB8GA1UdIwQYMBaAFCEJRs2p3nXe+WCYlfvyHthMcvTn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84N0RENTQ4Q0Ey NzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRkNzVZSmlWLV9JZTJFeHk5 T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRbEd6YW5lZGQ3NVlKaVYtX0llMkV4eTlPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84N0RENTQ4Q0EyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRk NzVZSmlWLV9JZTJFeHk5T2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBymVH5sAg6cRjF9eSHgfp+os1yj2AdLj3p2Xzd3a6/Jp0aFdrFVk7g D8eYcZbpgFg0IcuOifvoyexQJ1vqifaFfY8LsxpUu933mBvsJSMESUqhTyX0vMvT nL5KJWQkOjxEpP06xAgTxlE2K3Upi2KozKp7ngP3T7/VR0taTqLXfz6acenJFBz9 2hfcaw3gL99Ea6/mdGTcV+1hbDsd/CjKNs+fuPieNuEkllW40zGT//br5wzvXlPI 3FAf90kPvkEkestKK/APwBL+rwNecirfYcOCw6VDTLeEgnKJD/lWgYxIultU6CwB m+2aPjtXuSbjtSGiMezpaRGHFsAtNiSb -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:36 2025 by rpki-client