This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft File: RxkmQvqTOGbRd55eOPq_Vscx-6c.mft (raw, json) Hash identifier: UTJ8kzjidrmZohsXAHPS1K4YfneHfj+/kiRCUTAz+hQ= Subject key identifier: FA:BA:49:33:AD:84:48:E6:C2:4A:AA:F5:73:3F:CA:1B:49:CC:B8:5B Authority key identifier: 47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 Certificate issuer: /CN=A91284F0/serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Certificate serial: 0A7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft Manifest number: 0A79 Signing time: Sat 06 Dec 2025 18:50:36 +0000 Manifest this update: Sat 06 Dec 2025 18:50:36 +0000 Manifest next update: Sat 13 Dec 2025 18:50:35 +0000 Files and hashes: 1: RxkmQvqTOGbRd55eOPq_Vscx-6c.crl (hash: x9xaHMiyB0+b5/dMCxWIr8bXm7GzfN401BaVlXwsMVg=) 2: 426DB414718E11EA9F6FA85CC4F9AE02.roa (hash: L7du7ZJlcmB2nN0ANGTgn5PQ8EaqXu+Bk+I6VvNhSKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2687 (0xa7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284F0, serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Validity Not Before: Dec 6 18:50:36 2025 GMT Not After : Dec 13 18:50:35 2025 GMT Subject: CN=69347afc-2b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:92:b7:98:99:e0:c5:24:7c:34:83:c6:22: 5c:e7:48:ce:0a:43:28:ae:07:14:43:d0:d4:33:00: 9a:b3:d4:70:e1:e0:87:65:e3:97:e5:99:56:98:62: bc:69:07:44:fc:aa:54:30:97:69:9e:51:28:5e:95: 2d:47:26:bd:d1:e5:f2:5f:d6:a8:b7:bc:a1:6c:f2: de:d3:8c:fb:f5:71:5f:f3:c6:44:6f:fb:04:6a:1f: 1d:bd:32:ed:e6:a1:64:7f:73:a4:72:f7:d8:de:0a: 21:7d:39:fa:cd:64:21:6e:e6:b9:91:b0:34:21:ed: 63:7e:b0:d7:7e:d5:9a:70:9a:d6:db:3b:7f:37:36: 1d:f5:e1:c6:a5:bd:b6:c8:91:0a:07:a9:59:bc:a7: ac:99:7d:52:7c:e9:5f:ba:42:ed:56:35:36:53:7a: 87:64:fc:7a:eb:1c:84:dd:7c:a3:ba:bf:10:a3:c6: c9:57:36:64:73:46:60:af:2e:5c:6d:c8:b0:3c:5f: 41:a8:95:77:c4:57:f5:01:ac:44:6a:d3:7b:c1:63: 4d:6e:3e:dc:7b:27:26:16:a5:af:77:62:72:b8:f0: e8:d4:37:a3:bd:21:4c:f2:a7:a3:f4:c8:a3:77:85: ad:13:74:d8:66:ed:b0:a9:cd:0a:62:4e:fe:ff:18: 47:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BA:49:33:AD:84:48:E6:C2:4A:AA:F5:73:3F:CA:1B:49:CC:B8:5B X509v3 Authority Key Identifier: keyid:47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:ed:2d:9a:e5:31:57:f5:1c:0b:ac:9b:c8:d6:8a:22:4f:cb: ba:86:2f:ae:2f:51:a3:8e:22:18:45:be:e0:7a:8d:a1:23:5b: 7d:7a:96:66:b9:93:ed:6b:f8:be:86:9c:33:f5:bd:b2:8d:02: 9d:0d:48:98:f8:4b:bb:4e:9e:9d:54:10:e2:a0:aa:c6:c3:b6: 1e:64:d8:99:34:2a:d3:61:1d:2e:fe:34:ed:76:eb:c1:db:5a: 97:e2:73:2e:de:f2:92:6e:90:47:d7:39:52:37:ad:4d:f9:81: eb:f4:93:e3:38:9e:a1:c7:e9:95:32:4b:98:8e:06:b4:7a:c1: ef:91:0b:c2:55:36:cc:fc:ab:f3:5e:39:a6:91:8c:5a:e2:33: f3:f5:55:6b:09:32:f6:ac:ad:bd:ee:d8:40:79:be:29:30:6b: f8:1a:b8:5d:97:08:d9:e6:ac:46:2a:08:47:a3:8b:b3:2d:47: 74:f4:6f:15:5b:16:18:f1:57:eb:91:90:8c:a0:4b:57:e5:ef: 16:9c:b4:e9:dd:9a:f2:01:39:23:eb:92:97:b8:58:7a:dc:27: f3:f8:95:f6:be:9d:bf:c2:6c:20:ba:81:e6:5e:ab:5f:8b:4c: 36:eb:eb:1e:96:5e:37:69:43:bf:46:c7:82:f3:86:94:f2:53: eb:7e:ad:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RjAxMTAvBgNVBAUTKDQ3MTkyNjQyRkE5MzM4NjZEMTc3OUU1RTM4RkFCRjU2 QzczMUZCQTcwHhcNMjUxMjA2MTg1MDM2WhcNMjUxMjEzMTg1MDM1WjAYMRYwFAYD VQQDEw02OTM0N2FmYy0yYjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPGSt5iZ4MUkfDSDxiJc50jOCkMorgcUQ9DUMwCas9Rw4eCHZeOX5ZlWmGK8 aQdE/KpUMJdpnlEoXpUtRya90eXyX9aot7yhbPLe04z79XFf88ZEb/sEah8dvTLt 5qFkf3OkcvfY3gohfTn6zWQhbua5kbA0Ie1jfrDXftWacJrW2zt/NzYd9eHGpb22 yJEKB6lZvKesmX1SfOlfukLtVjU2U3qHZPx66xyE3Xyjur8Qo8bJVzZkc0Zgry5c bciwPF9BqJV3xFf1AaxEatN7wWNNbj7ceycmFqWvd2JyuPDo1DejvSFM8qej9Mij d4WtE3TYZu2wqc0KYk7+/xhH3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPq6STOt hEjmwkqq9XM/yhtJzLhbMB8GA1UdIwQYMBaAFEcZJkL6kzhm0XeeXjj6v1bHMfun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRGMC80NkU2N0IzMDcx OEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9HYlJkNTVlT1BxX1ZzY3gt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4a21RdnFUT0diUmQ1NWVPUHFfVnNjeC02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRGMC80NkU2N0IzMDcxOEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9H YlJkNTVlT1BxX1ZzY3gtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR7S2a5TFX9RwLrJvI1ooiT8u6hi+uL1GjjiIYRb7geo2hI1t9epZm uZPta/i+hpwz9b2yjQKdDUiY+Eu7Tp6dVBDioKrGw7YeZNiZNCrTYR0u/jTtduvB 21qX4nMu3vKSbpBH1zlSN61N+YHr9JPjOJ6hx+mVMkuYjga0esHvkQvCVTbM/Kvz XjmmkYxa4jPz9VVrCTL2rK297thAeb4pMGv4GrhdlwjZ5qxGKghHo4uzLUd09G8V WxYY8VfrkZCMoEtX5e8WnLTp3ZryATkj65KXuFh63Cfz+JX2vp2/wmwguoHmXqtf i0w26+sell43aUO/RseC84aU8lPrfq1i -----END CERTIFICATE-----Generated at Sat Dec 6 21:00:14 2025 by rpki-client