This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft File: elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json) Hash identifier: iTUbEerJ9YAZVkVAvfZCyGSjo62aQty9XYpjvwX0f9Y= Subject key identifier: B5:04:65:EA:49:CD:F9:D9:3A:C6:2F:4A:83:35:0A:C1:D7:57:E7:05 Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Certificate serial: 0D07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft Manifest number: 0CFE Signing time: Thu 04 Dec 2025 17:34:39 +0000 Manifest this update: Thu 04 Dec 2025 17:34:38 +0000 Manifest next update: Thu 11 Dec 2025 17:34:38 +0000 Files and hashes: 1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: wd5V4irPxdqqllmmMtCK+wJN38fsd7ElJXnGrYXN4I0=) 2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: qm9jDcnTJhuOKIEMpVyp7iPMTXqtw87t7pPJBICpZrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3335 (0xd07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E Validity Not Before: Dec 4 17:34:38 2025 GMT Not After : Dec 11 17:34:38 2025 GMT Subject: CN=6931c62f-5489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:55:4a:f7:07:92:c1:7e:56:2a:5a:11:63:29: e2:05:32:75:05:0c:6c:68:a4:b6:c9:62:65:b6:1f: 73:74:4c:f6:de:f3:99:3a:b1:cf:3b:f6:5b:1b:fb: 31:55:9a:c6:7f:12:ad:58:05:af:62:90:99:9b:f8: a1:94:6f:85:a4:f3:c6:a0:66:0f:42:6a:7f:da:2d: c0:16:d1:05:7b:bb:fa:68:fc:52:41:40:c5:0c:3b: 84:f3:bf:49:2e:88:83:e7:c3:67:31:e0:5c:c8:c5: c3:79:1a:39:dd:52:b2:7c:67:80:13:da:7f:0b:d3: a2:77:e4:f3:90:dd:b9:47:a0:0b:8a:07:f9:37:2e: be:fc:95:6b:9e:5b:9c:47:2d:70:6d:98:55:28:e2: 06:0f:bd:ce:51:f3:71:3b:e6:2d:a9:b4:09:ce:2a: 68:3e:d0:7a:78:d9:11:cd:82:3c:0c:d8:24:c8:1f: fd:55:ee:6e:b6:73:55:50:63:7e:36:33:8a:bc:f6: cf:49:ca:ee:cc:d0:27:0a:a2:8f:f7:ad:48:81:da: 07:58:06:ee:d5:29:71:ef:87:33:d4:0a:44:e2:67: 0b:94:7c:46:23:e1:76:49:1d:ab:0d:d8:0f:f8:5b: 54:bc:8c:d2:c0:d0:c6:7f:a7:34:66:6c:7b:01:47: 5f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:04:65:EA:49:CD:F9:D9:3A:C6:2F:4A:83:35:0A:C1:D7:57:E7:05 X509v3 Authority Key Identifier: keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:35:40:78:e1:eb:e6:71:62:81:f8:0d:14:f8:1c:e8:3e:5e: 26:15:28:57:75:e6:47:72:5e:08:02:86:77:43:fa:97:25:13: a5:3e:48:64:b5:2b:4f:e2:5e:18:3a:03:7c:95:15:fb:e5:ac: b0:a3:e0:b6:11:21:2a:33:44:ca:61:a4:65:1c:b6:d8:38:0f: 38:82:5c:3f:0c:06:0b:23:24:61:f5:2a:c3:4a:88:50:89:67: 7f:6e:6d:49:46:49:82:33:b2:d0:01:4b:b3:c7:80:7b:b7:9f: 62:d0:17:e1:37:49:45:d5:dd:fe:ff:53:1d:40:6e:bc:a2:b9: 6a:f3:92:10:82:76:c2:bb:78:37:a1:de:d0:a9:97:58:fe:5f: 0b:df:4f:8b:fe:1e:38:f0:bb:c3:9c:b8:24:22:25:a2:05:2f: 9c:d5:1d:ac:38:a5:2e:d1:c1:53:1d:7f:42:b4:10:30:4c:50: 8b:aa:a5:31:fe:58:b2:70:cf:e0:29:5c:41:01:c5:75:b3:db: c3:7a:46:b9:66:6a:12:32:0a:bc:19:24:50:4a:c8:8e:ae:2b: c4:c7:9c:79:68:6a:ec:2a:01:40:fa:d8:54:01:cd:82:b5:30: b5:5a:67:e4:c5:ba:fa:a1:2f:c9:11:20:4f:9c:d2:f9:71:d6: 8e:03:c4:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZERjgxMTAvBgNVBAUTKDdBNTA2QzIxN0EzMTA3OEU0MjE3ODE2MDM4MEREMkM4 MzkyOEQ5MkUwHhcNMjUxMjA0MTczNDM4WhcNMjUxMjExMTczNDM4WjAYMRYwFAYD VQQDEw02OTMxYzYyZi01NDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51VK9weSwX5WKloRYyniBTJ1BQxsaKS2yWJlth9zdEz23vOZOrHPO/ZbG/sx VZrGfxKtWAWvYpCZm/ihlG+FpPPGoGYPQmp/2i3AFtEFe7v6aPxSQUDFDDuE879J LoiD58NnMeBcyMXDeRo53VKyfGeAE9p/C9Oid+TzkN25R6ALigf5Ny6+/JVrnluc Ry1wbZhVKOIGD73OUfNxO+YtqbQJzipoPtB6eNkRzYI8DNgkyB/9Ve5utnNVUGN+ NjOKvPbPScruzNAnCqKP961IgdoHWAbu1Slx74cz1ApE4mcLlHxGI+F2SR2rDdgP +FtUvIzSwNDGf6c0Zmx7AUdf7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUEZepJ zfnZOsYvSoM1CsHXV+cFMB8GA1UdIwQYMBaAFHpQbCF6MQeOQheBYDgN0sg5KNku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkRGOC83Njc2RjVEQ0Yz Q0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0NUNGNEZnT0EzU3lEa28y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsQnNJWG94QjQ1Q0Y0RmdPQTNTeURrbzJTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkRGOC83Njc2RjVEQ0YzQ0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0 NUNGNEZnT0EzU3lEa28yUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLNUB44evmcWKB+A0U+BzoPl4mFShXdeZHcl4IAoZ3Q/qXJROlPkhk tStP4l4YOgN8lRX75aywo+C2ESEqM0TKYaRlHLbYOA84glw/DAYLIyRh9SrDSohQ iWd/bm1JRkmCM7LQAUuzx4B7t59i0BfhN0lF1d3+/1MdQG68orlq85IQgnbCu3g3 od7QqZdY/l8L30+L/h448LvDnLgkIiWiBS+c1R2sOKUu0cFTHX9CtBAwTFCLqqUx /liycM/gKVxBAcV1s9vDeka5ZmoSMgq8GSRQSsiOrivEx5x5aGrsKgFA+thUAc2C tTC1Wmfkxbr6oS/JESBPnNL5cdaOA8Rr -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:08 2025 by rpki-client