This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json) Hash identifier: oMtlupbyXf+Z1Mnd6WZnRSf9qRQMcRB6JJvlgV6u0do= Subject key identifier: 00:E4:42:52:A7:FF:6D:C0:90:BA:63:E1:29:63:EA:03:10:EE:97:AE Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Certificate serial: 055D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft Manifest number: 053A Signing time: Thu 04 Dec 2025 22:11:21 +0000 Manifest this update: Thu 04 Dec 2025 22:11:21 +0000 Manifest next update: Thu 11 Dec 2025 22:11:21 +0000 Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: UrqZeT6VyNqWtSKzpw5RrezmL6OpgCMD7uBEgSvLRGI=) 2: D2D714387F6A11F0932D5109C4F9AE02.roa (hash: Cng37RmGs09g9dbHO+ShWe6tnoOJsgQFmF1ZQB1DAkI=) 3: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: BaDUL34/Gwa3G8jGhtSk9P3jmeq3rCjBk1zIOgJr1cM=) 4: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: AhcbearK6iV6xBjXUDN0qGwO1GubeQ+m8AdvrMUpw0Q=) 5: FBBECF1A694111F08D368069C4F9AE02.roa (hash: Hxo/oVA2HgH6qQ01M6fl9cqj5vSj3O9qRMc68jJm0P4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1373 (0x55d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Validity Not Before: Dec 4 22:11:21 2025 GMT Not After : Dec 11 22:11:21 2025 GMT Subject: CN=69320709-af9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:b9:4e:07:bd:0d:b8:a8:44:96:d0:38:d0: d0:3f:99:96:ec:49:96:70:96:e0:70:2d:b4:9a:86: 89:ba:51:d6:15:3a:bd:5a:3f:2d:24:32:3b:ba:f6: 99:c1:d5:25:0b:14:fd:bc:ef:4a:6c:b3:cb:8c:49: 1f:43:1b:76:2e:a1:e7:9b:69:b2:5a:d6:3f:62:b4: 2b:27:33:1f:ad:72:0f:40:a5:0b:ce:2b:9f:e9:21: 11:58:e0:6a:c7:70:24:9d:95:cc:4c:97:f9:30:69: c5:4c:79:8f:fc:ec:b0:53:78:b3:d0:eb:65:00:37: 87:18:5a:65:7a:01:9d:53:0c:77:13:84:b3:57:d0: 18:36:76:e0:d4:2e:36:e7:d6:6c:d7:6f:2d:63:bb: 47:59:c6:91:45:f0:51:cf:89:cd:cc:a7:30:c6:85: 8a:3c:66:e7:6c:47:52:19:db:86:e0:46:d3:d9:14: 3d:20:6d:ef:a9:23:b1:1d:3b:dc:50:f7:dc:ad:60: 28:86:9a:fd:b0:04:b4:d3:9b:d8:74:46:2f:76:5c: 18:c5:fd:8d:8c:2f:82:a9:37:3f:22:a4:94:31:f7: 4f:17:f9:26:03:99:f6:f7:17:e0:cf:9e:53:c1:db: 88:8e:e8:53:f5:11:a0:3b:53:77:96:a3:48:5a:f2: 76:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E4:42:52:A7:FF:6D:C0:90:BA:63:E1:29:63:EA:03:10:EE:97:AE X509v3 Authority Key Identifier: keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d6:1a:35:34:1a:80:c9:fa:e6:78:f3:32:34:2b:1d:ad:71: 78:9c:69:9a:06:8a:29:5e:db:c4:b2:a6:94:e1:fc:ec:46:d3: 62:cd:7f:f3:8b:e3:84:48:6c:13:5a:51:45:dd:85:ca:53:11: b7:d8:10:22:19:88:3f:df:70:3f:a1:31:22:60:59:95:3c:85: 07:d3:11:be:71:34:b8:9a:8e:df:4e:ff:20:15:2c:a1:b4:4d: 06:71:e2:d7:19:c5:c7:4a:15:53:9e:f0:9c:be:f2:b0:b3:64: 7c:a3:f7:97:17:02:e6:92:3c:5e:1c:e0:ae:2d:ac:12:8b:29: bf:b4:ca:a0:0b:45:85:68:db:8a:9c:32:e3:bb:82:80:a7:b4: 5b:8f:d8:4a:85:32:84:6d:64:72:25:38:6d:11:6d:46:73:0b: 9f:31:b3:82:43:84:50:a1:83:0e:d0:58:af:16:ef:c8:81:42: 65:9f:1c:8f:88:09:d6:58:71:67:b6:8f:d5:83:5f:b1:34:8e: 89:03:b2:ae:ff:72:39:06:73:07:65:f1:90:40:e1:11:63:c7: cf:67:fb:31:0e:08:26:a8:80:6f:cd:a9:d0:4a:84:de:ad:9d: 11:72:76:a1:fb:39:c3:cc:0d:9d:4a:b8:5b:7d:e8:fb:04:35: 82:63:ca:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew OTA2RkVEODIwHhcNMjUxMjA0MjIxMTIxWhcNMjUxMjExMjIxMTIxWjAYMRYwFAYD VQQDEw02OTMyMDcwOS1hZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArz65Tge9DbioRJbQONDQP5mW7EmWcJbgcC20moaJulHWFTq9Wj8tJDI7uvaZ wdUlCxT9vO9KbLPLjEkfQxt2LqHnm2myWtY/YrQrJzMfrXIPQKULziuf6SERWOBq x3AknZXMTJf5MGnFTHmP/OywU3iz0OtlADeHGFplegGdUwx3E4SzV9AYNnbg1C42 59Zs128tY7tHWcaRRfBRz4nNzKcwxoWKPGbnbEdSGduG4EbT2RQ9IG3vqSOxHTvc UPfcrWAohpr9sAS005vYdEYvdlwYxf2NjC+CqTc/IqSUMfdPF/kmA5n29xfgz55T wduIjuhT9RGgO1N3lqNIWvJ2zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADkQlKn /23AkLpj4Slj6gMQ7peuMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0 VTVaNURLY3lQVG9KQnY3WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj1ho1NBqAyfrmePMyNCsdrXF4nGmaBoopXtvEsqaU4fzsRtNizX/z i+OESGwTWlFF3YXKUxG32BAiGYg/33A/oTEiYFmVPIUH0xG+cTS4mo7fTv8gFSyh tE0GceLXGcXHShVTnvCcvvKws2R8o/eXFwLmkjxeHOCuLawSiym/tMqgC0WFaNuK nDLju4KAp7Rbj9hKhTKEbWRyJThtEW1GcwufMbOCQ4RQoYMO0FivFu/IgUJlnxyP iAnWWHFnto/Vg1+xNI6JA7Ku/3I5BnMHZfGQQOERY8fPZ/sxDggmqIBvzanQSoTe rZ0Rcnah+znDzA2dSrhbfej7BDWCY8qF -----END CERTIFICATE-----Generated at Sat Dec 6 12:18:29 2025 by rpki-client