This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft File: mAInpdd1oDTad40z-IxcwCDRw5w.mft (raw, json) Hash identifier: lVsa5rTRS0yvUePPcpkJTYbrKZfy7khvud4DwuRShSM= Subject key identifier: 54:FB:FB:C3:CC:DC:61:D2:4C:67:48:D5:E6:5E:D2:85:6D:72:BF:DE Authority key identifier: 98:02:27:A5:D7:75:A0:34:DA:77:8D:33:F8:8C:5C:C0:20:D1:C3:9C Certificate issuer: /CN=A9148E7B/serialNumber=980227A5D775A034DA778D33F88C5CC020D1C39C Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft Manifest number: 0222 Signing time: Wed 15 Oct 2025 04:41:14 +0000 Manifest this update: Wed 15 Oct 2025 04:41:13 +0000 Manifest next update: Wed 22 Oct 2025 04:41:13 +0000 Files and hashes: 1: mAInpdd1oDTad40z-IxcwCDRw5w.crl (hash: NTmST5D/+PtcK0Nhh1GBYII2959i8RBbD4/A3RQ+fkE=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E7B, serialNumber=980227A5D775A034DA778D33F88C5CC020D1C39C Validity Not Before: Oct 15 04:41:13 2025 GMT Not After : Oct 22 04:41:13 2025 GMT Subject: CN=68ef25e9-658b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f7:0f:a5:0c:7a:d1:a8:43:cc:de:5a:e0:27: e4:ee:ab:eb:17:ed:3e:6f:59:75:1c:e9:57:f9:c2: 66:03:cf:eb:b1:e2:3b:19:87:95:8d:be:88:98:be: 27:92:41:93:a8:8c:b7:83:38:43:f5:e1:f1:f4:11: a9:c0:52:12:ea:2e:a7:c0:98:f7:42:18:10:1e:e7: 07:5f:ab:c6:61:a4:a2:f1:d9:ed:95:2d:7f:8c:96: 6d:2f:ea:10:46:e8:df:79:1a:84:89:fd:58:8c:a0: bf:8e:9c:6e:4d:4d:4d:d7:8d:4c:37:50:26:df:f7: 95:ed:d0:35:42:ec:96:73:69:b3:70:57:71:bf:28: 14:39:2e:fd:b6:9a:b1:67:1b:7f:ca:c0:eb:f8:06: 0a:75:35:89:14:42:29:73:88:7f:30:e6:eb:52:a6: 23:ac:fa:2e:e6:69:9c:1a:60:b6:f1:26:68:0d:55: a9:4e:97:b4:7e:2d:13:cd:db:61:69:bb:4f:e2:2b: 8c:df:58:4a:89:2d:35:ff:e4:f5:c3:ad:96:ab:29: 19:a8:6e:85:d5:8e:1d:86:38:af:5f:bb:2d:b1:5e: f0:78:9b:67:f2:c6:74:d9:a6:16:ca:76:2f:1e:23: 9b:83:0b:4f:76:a5:7d:d0:94:20:c5:d5:e1:2e:8a: 08:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FB:FB:C3:CC:DC:61:D2:4C:67:48:D5:E6:5E:D2:85:6D:72:BF:DE X509v3 Authority Key Identifier: keyid:98:02:27:A5:D7:75:A0:34:DA:77:8D:33:F8:8C:5C:C0:20:D1:C3:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b7:2a:05:81:d6:f9:4c:b4:66:a1:c7:f9:5e:7b:f0:a3:cf: 25:50:dc:d3:1a:d8:85:03:3e:2b:f8:cf:a2:d7:4a:83:0a:97: ed:1b:75:7d:e6:a7:15:c0:4e:23:74:46:db:97:91:fd:68:6b: d8:9e:d6:64:ea:7a:3f:b8:3a:69:6f:97:35:68:25:76:ac:e3: 31:2d:4b:2b:c3:18:0e:bf:60:e9:b0:e9:a6:67:86:a7:d3:dc: 5a:b9:24:c2:ba:fa:a1:a3:d6:16:c5:e0:4a:21:cc:20:09:68: ba:80:9c:49:f4:48:7f:e4:63:3b:b7:c7:32:05:de:89:3e:d1: ac:1f:33:f8:c5:31:e9:ec:69:24:c4:cc:50:9c:08:ef:8d:e7: 39:02:6e:19:98:5d:bd:4b:5d:88:52:fa:62:49:87:7f:df:fa: ea:37:12:11:a5:d5:e3:95:e3:7d:e7:ca:01:63:be:12:c4:4a: 9a:98:9c:7d:64:d3:69:3c:e8:e8:35:00:f3:23:46:7d:15:2d: a9:fe:a5:67:68:36:92:96:ff:a6:d8:e8:b7:29:a0:2a:2a:a5: 6f:e4:4d:05:2c:8a:28:af:a1:2a:af:71:38:e0:ff:44:c4:8a: ea:66:76:12:99:1d:7f:66:c8:e9:75:e8:6b:27:b5:da:47:eb: 01:69:f1:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFN0IxMTAvBgNVBAUTKDk4MDIyN0E1RDc3NUEwMzREQTc3OEQzM0Y4OEM1Q0Mw MjBEMUMzOUMwHhcNMjUxMDE1MDQ0MTEzWhcNMjUxMDIyMDQ0MTEzWjAYMRYwFAYD VQQDEw02OGVmMjVlOS02NThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPcPpQx60ahDzN5a4Cfk7qvrF+0+b1l1HOlX+cJmA8/rseI7GYeVjb6ImL4n kkGTqIy3gzhD9eHx9BGpwFIS6i6nwJj3QhgQHucHX6vGYaSi8dntlS1/jJZtL+oQ RujfeRqEif1YjKC/jpxuTU1N141MN1Am3/eV7dA1QuyWc2mzcFdxvygUOS79tpqx Zxt/ysDr+AYKdTWJFEIpc4h/MObrUqYjrPou5mmcGmC28SZoDVWpTpe0fi0Tzdth abtP4iuM31hKiS01/+T1w62WqykZqG6F1Y4dhjivX7stsV7weJtn8sZ02aYWynYv HiObgwtPdqV90JQgxdXhLooIcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFT7+8PM 3GHSTGdI1eZe0oVtcr/eMB8GA1UdIwQYMBaAFJgCJ6XXdaA02neNM/iMXMAg0cOc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU3Qi80NzhGQTZENjcw OEQxMUVEOTRFMzJEMjJDNEY5QUUwMi9tQUlucGRkMW9EVGFkNDB6LUl4Y3dDRFJ3 NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21BSW5wZGQxb0RUYWQ0MHotSXhjd0NEUnc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU3Qi80NzhGQTZENjcwOEQxMUVEOTRFMzJEMjJDNEY5QUUwMi9tQUlucGRkMW9E VGFkNDB6LUl4Y3dDRFJ3NXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQActyoFgdb5TLRmocf5Xnvwo88lUNzTGtiFAz4r+M+i10qDCpftG3V9 5qcVwE4jdEbbl5H9aGvYntZk6no/uDppb5c1aCV2rOMxLUsrwxgOv2DpsOmmZ4an 09xauSTCuvqho9YWxeBKIcwgCWi6gJxJ9Eh/5GM7t8cyBd6JPtGsHzP4xTHp7Gkk xMxQnAjvjec5Am4ZmF29S12IUvpiSYd/3/rqNxIRpdXjleN958oBY74SxEqamJx9 ZNNpPOjoNQDzI0Z9FS2p/qVnaDaSlv+m2Oi3KaAqKqVv5E0FLIoor6Eqr3E44P9E xIrqZnYSmR1/ZsjpdehrJ7XaR+sBafEB -----END CERTIFICATE-----Generated at Sun Dec 21 23:16:35 2025 by rpki-client