This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json) Hash identifier: HQbF3NnzjM/zTTs6fBlDNTi/q2P6cpenJL9/Yho/uN8= Subject key identifier: 50:9B:3F:63:80:20:0D:88:4D:9F:43:F0:0A:EB:D6:D6:70:21:7D:CB Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft Manifest number: BA Signing time: Fri 05 Dec 2025 04:06:15 +0000 Manifest this update: Fri 05 Dec 2025 04:06:15 +0000 Manifest next update: Fri 12 Dec 2025 04:06:15 +0000 Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: SV5xkpSMhM+fv/4yqH8yEauekr+e2XxWQVKrFHmDtgI=) 2: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: hu1JiBFiyTnMySrt80yNdScgCjSfSkHINTEYjzYfdUg=) 3: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: PlQx8+H4QWwRWOJyC7w29KW+ohdqt59u/vmKToMRgGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Validity Not Before: Dec 5 04:06:15 2025 GMT Not After : Dec 12 04:06:15 2025 GMT Subject: CN=69325a37-ded7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e3:f4:14:3d:eb:a9:0f:f7:97:5e:9a:d4:15: 6a:0f:7d:9d:14:44:59:67:fa:19:3d:d7:13:6a:48: ad:21:a0:ad:0f:f4:1e:80:a2:df:07:48:d9:5c:44: 02:a5:b3:f8:9a:24:da:9f:2f:bf:cd:64:42:35:9a: d6:75:90:14:f7:ce:d7:6c:98:a3:97:9f:39:8e:59: e6:a6:99:e1:4e:1f:29:a5:ad:7d:f1:15:a7:7a:38: 3a:21:c8:52:99:0b:55:cc:18:13:f7:a5:eb:e0:9b: 16:de:cf:f4:cf:5b:03:29:ba:90:8c:80:35:ef:46: 3f:e9:6d:58:38:52:8e:ef:38:af:a5:2c:00:c1:4b: 66:56:18:4c:60:c5:6b:18:57:17:07:d6:d0:7d:d8: b5:c7:2c:4f:3d:22:77:a0:c9:22:6e:ec:7e:ff:b2: 18:35:40:c7:6c:ab:ff:c9:c9:3d:43:f2:8f:e2:40: 4a:cf:e5:be:8d:9f:e1:14:10:93:b7:69:d7:6a:9a: f2:2e:6d:61:be:fb:e4:c4:13:62:8d:67:da:b7:ca: d9:8f:75:3c:6a:fb:4e:a5:3a:16:c0:e5:06:3e:07: e2:7e:d5:6a:74:13:bd:6b:fc:39:3d:5c:3e:1f:08: b6:1f:af:dc:30:e5:3a:c4:3d:41:d6:c5:30:06:d4: 8e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9B:3F:63:80:20:0D:88:4D:9F:43:F0:0A:EB:D6:D6:70:21:7D:CB X509v3 Authority Key Identifier: keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f0:aa:16:3a:2f:1e:0b:78:a4:3f:33:1d:f9:eb:b6:ac:70: 1f:e2:c1:61:40:89:3b:23:db:91:f5:a8:31:b8:ae:61:7c:bd: 0a:05:93:ce:a6:49:22:12:14:c1:a1:df:00:ba:15:bf:99:1e: 7d:c2:94:b6:77:9d:19:e4:bd:5e:8f:08:6c:bc:c4:49:1e:0c: 07:d0:5c:97:b8:1e:86:39:3c:2c:b4:e7:6f:b3:ca:45:35:15: bc:94:97:0e:58:24:16:81:75:1c:98:a2:d7:07:fe:d6:be:da: 2b:23:42:c3:7e:bf:e5:16:ba:32:0b:64:22:1f:5b:0f:9f:4e: 98:e6:68:bd:f2:b0:88:26:1f:d5:be:7a:6c:cc:3a:51:8d:08: 91:d4:0f:a7:3b:59:00:b5:64:75:b5:49:9f:b0:f4:a8:dc:47: c7:6b:9d:3d:5b:7b:85:16:27:27:d7:59:cb:5b:7b:ac:f3:dd: c7:1b:4c:68:dc:e5:7e:91:b6:91:3f:ad:20:5b:f3:8c:22:44: 3f:61:54:f9:72:25:e6:31:c8:ca:23:e9:59:b4:93:7f:20:2a: f6:43:a1:4a:4c:6a:ca:50:29:0d:01:4c:b3:53:69:36:81:5d: 81:3e:50:57:09:68:5b:d7:6e:15:54:b4:96:e9:60:cc:fd:95: 40:06:79:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCNjcxMTAvBgNVBAUTKEQ0NTlEMjY3NTI1MjM0QTA1MzVFQzM4RDhDQ0M4OTkw MTk0REUxODkwHhcNMjUxMjA1MDQwNjE1WhcNMjUxMjEyMDQwNjE1WjAYMRYwFAYD VQQDEw02OTMyNWEzNy1kZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+P0FD3rqQ/3l16a1BVqD32dFERZZ/oZPdcTakitIaCtD/QegKLfB0jZXEQC pbP4miTany+/zWRCNZrWdZAU987XbJijl585jlnmppnhTh8ppa198RWnejg6IchS mQtVzBgT96Xr4JsW3s/0z1sDKbqQjIA170Y/6W1YOFKO7zivpSwAwUtmVhhMYMVr GFcXB9bQfdi1xyxPPSJ3oMkibux+/7IYNUDHbKv/yck9Q/KP4kBKz+W+jZ/hFBCT t2nXapryLm1hvvvkxBNijWfat8rZj3U8avtOpToWwOUGPgfiftVqdBO9a/w5PVw+ Hwi2H6/cMOU6xD1B1sUwBtSOaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCbP2OA IA2ITZ9D8Arr1tZwIX3LMB8GA1UdIwQYMBaAFNRZ0mdSUjSgU17DjYzMiZAZTeGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEI2Ny8yRkEwMEQzRUM2 QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05LQlRYc09Oak15SmtCbE40 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEI2Ny8yRkEwMEQzRUM2QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05L QlRYc09Oak15SmtCbE40WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/8KoWOi8eC3ikPzMd+eu2rHAf4sFhQIk7I9uR9agxuK5hfL0KBZPO pkkiEhTBod8AuhW/mR59wpS2d50Z5L1ejwhsvMRJHgwH0FyXuB6GOTwstOdvs8pF NRW8lJcOWCQWgXUcmKLXB/7WvtorI0LDfr/lFroyC2QiH1sPn06Y5mi98rCIJh/V vnpszDpRjQiR1A+nO1kAtWR1tUmfsPSo3EfHa509W3uFFicn11nLW3us893HG0xo 3OV+kbaRP60gW/OMIkQ/YVT5ciXmMcjKI+lZtJN/ICr2Q6FKTGrKUCkNAUyzU2k2 gV2BPlBXCWhb124VVLSW6WDM/ZVABnk0 -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:11 2025 by rpki-client