This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft File: RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft (raw, json) Hash identifier: /7gOIL8tMaYFtswiH7GuHD2gsDDomT5n6iwNQc1ppSA= Subject key identifier: 6A:DF:2E:B5:8A:19:D2:CF:40:80:60:AA:9F:B4:0E:36:A3:71:9B:10 Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 Certificate issuer: /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573 Certificate serial: 0576 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft Manifest number: 0544 Signing time: Thu 04 Dec 2025 22:09:11 +0000 Manifest this update: Thu 04 Dec 2025 22:09:11 +0000 Manifest next update: Thu 11 Dec 2025 22:09:11 +0000 Files and hashes: 1: RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl (hash: a1y9OM6IKu22x1qPz9o7dDL9EizoDFUqS5GFhMqZYGI=) 2: 7AD7390CD15111EE98EBEC1EC4F9AE02.roa (hash: xYTAg38yoW7vEoZGmEJB6isoNNBjQGepwhuw97pD1/8=) 3: 20C2C8980D4111EEB385BA83C4F9AE02.roa (hash: pqx2bVF6KFi6pAp+san9BeaofosCjXIfjaAQRpbI48w=) 4: 5A306016D15111EE98E6801EC4F9AE02.roa (hash: 0iX8GWVZfHTiPTTq9om3cBPBNC8DR5QF75DufZZXDYg=) 5: D26FE5F62BC511EEA4569A67C4F9AE02.roa (hash: nfvl8LItHRnHU7cOFArXS6hV97B38VNc9C2Ezi3lr6U=) 6: C6E67CEACB0911ECA16E4A19C4F9AE02.roa (hash: smZT0oXuvwsnfsI3CoSJhx+rXSo9yTN0/TLArPnl3aY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1398 (0x576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B2EC, serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573 Validity Not Before: Dec 4 22:09:11 2025 GMT Not After : Dec 11 22:09:11 2025 GMT Subject: CN=69320687-af0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a6:c6:3a:72:90:3d:3d:20:a9:8a:a6:c8:ec: 4a:e4:90:80:de:0c:58:17:2f:78:f7:c8:f0:6e:04: dd:aa:86:18:fb:32:a0:d8:5e:23:99:b3:bd:10:c9: 1f:7b:8a:9a:12:ca:7f:94:e2:fd:66:d0:c2:fe:ea: 09:52:11:ea:80:df:ce:1e:59:61:7d:cb:ce:35:1a: 9a:9c:00:f4:9a:e0:21:8e:40:3b:85:95:b6:b4:93: 1b:97:49:8b:09:69:89:e6:96:19:f4:6a:96:53:7f: 97:b3:84:23:a5:60:40:df:1d:ad:5f:72:ef:d2:f7: 18:b9:bf:3f:68:f0:c5:ed:ae:c0:19:49:a9:3e:e9: a8:19:20:1d:70:51:6f:38:d0:f5:fe:e7:6d:01:2b: 05:98:ed:1e:4b:b3:0b:b6:62:50:ea:5e:46:11:b2: dd:0f:16:44:f5:c8:de:2a:d6:7c:2e:bc:25:ed:ae: 44:29:f4:8b:e8:51:d8:75:56:e2:b5:5f:30:78:53: 37:23:07:17:0f:66:07:c1:f1:21:c1:76:00:42:a7: b8:e1:c3:bc:9b:5b:37:b3:53:4c:fa:7b:bd:66:8f: 24:41:ba:67:36:7d:47:80:12:be:bc:c4:a5:14:1b: 35:d9:aa:79:de:8c:7e:ed:c1:b7:9b:31:df:d3:1f: be:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DF:2E:B5:8A:19:D2:CF:40:80:60:AA:9F:B4:0E:36:A3:71:9B:10 X509v3 Authority Key Identifier: keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:cb:d7:14:7c:43:c8:d1:83:54:5d:69:da:6d:41:63:9c:8c: cc:7d:3f:8d:e2:b3:4c:73:cd:1e:48:1d:c7:bd:96:e5:b1:35: 7f:9f:a6:9f:55:b8:d5:48:6d:a4:87:0a:32:31:76:23:f0:39: 06:4a:72:7e:4a:4d:30:51:a3:ea:a9:ac:7d:24:60:9e:cb:48: 4a:20:08:45:65:94:4e:be:6c:10:df:c7:01:2e:ee:0c:23:b6: 8c:03:1e:1e:94:69:90:91:51:94:41:e5:4d:98:26:3c:8b:63: ab:d1:ea:48:f8:db:71:c1:0a:39:39:1d:d4:4f:f5:0e:d4:de: d7:09:8e:87:ec:97:68:1d:4f:86:c9:8b:1e:34:88:28:4c:81: d3:c0:77:9d:4a:0c:bd:50:19:e9:b8:7e:1e:bf:4e:d3:1f:b5: 64:6e:47:82:b9:ba:33:6c:ac:ee:28:9f:98:d5:d6:00:25:d1: df:8c:3c:2d:90:99:38:89:84:70:34:89:be:fc:60:8b:7e:e7: 21:c0:de:22:9c:59:06:5c:00:d7:72:d6:b9:e6:a4:f9:94:82: 49:03:ca:26:1a:64:00:42:5e:bd:f6:12:b2:20:e0:0f:40:fa: 1a:10:07:b3:9b:bd:9c:9a:a2:eb:e1:fa:2b:d1:67:15:12:8d: 5f:fb:28:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyRUMxMTAvBgNVBAUTKDQ2OTIyQzU2NTQ0MDA0MEJEOTlBRkQ0RTMyOUVEOURF QjZGOTI1NzMwHhcNMjUxMjA0MjIwOTExWhcNMjUxMjExMjIwOTExWjAYMRYwFAYD VQQDEw02OTMyMDY4Ny1hZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKbGOnKQPT0gqYqmyOxK5JCA3gxYFy9498jwbgTdqoYY+zKg2F4jmbO9EMkf e4qaEsp/lOL9ZtDC/uoJUhHqgN/OHllhfcvONRqanAD0muAhjkA7hZW2tJMbl0mL CWmJ5pYZ9GqWU3+Xs4QjpWBA3x2tX3Lv0vcYub8/aPDF7a7AGUmpPumoGSAdcFFv OND1/udtASsFmO0eS7MLtmJQ6l5GEbLdDxZE9cjeKtZ8Lrwl7a5EKfSL6FHYdVbi tV8weFM3IwcXD2YHwfEhwXYAQqe44cO8m1s3s1NM+nu9Zo8kQbpnNn1HgBK+vMSl FBs12ap53ox+7cG3mzHf0x++NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrfLrWK GdLPQIBgqp+0DjajcZsQMB8GA1UdIwQYMBaAFEaSLFZUQAQL2Zr9TjKe2d62+SVz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJFQy84NDI3NTk1NjJC MDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJBdlptdjFPTXA3WjNyYjVK WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JwSXNWbFJBQkF2Wm12MU9NcDdaM3JiNUpYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjJFQy84NDI3NTk1NjJCMDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJB dlptdjFPTXA3WjNyYjVKWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmy9cUfEPI0YNUXWnabUFjnIzMfT+N4rNMc80eSB3HvZblsTV/n6af VbjVSG2khwoyMXYj8DkGSnJ+Sk0wUaPqqax9JGCey0hKIAhFZZROvmwQ38cBLu4M I7aMAx4elGmQkVGUQeVNmCY8i2Or0epI+NtxwQo5OR3UT/UO1N7XCY6H7JdoHU+G yYseNIgoTIHTwHedSgy9UBnpuH4ev07TH7VkbkeCubozbKzuKJ+Y1dYAJdHfjDwt kJk4iYRwNIm+/GCLfuchwN4inFkGXADXcta55qT5lIJJA8omGmQAQl699hKyIOAP QPoaEAezm72cmqLr4for0WcVEo1f+yhO -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:05 2025 by rpki-client