This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: EBs1bFuoYE8pZc3B9jcIL94NurbqMTEg5qH4G6Yv900= Subject key identifier: FD:2D:DD:7D:E4:9A:D7:BF:86:CE:FD:7E:34:37:D5:7C:DA:16:4F:96 Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: 7B Signing time: Fri 05 Dec 2025 04:41:56 +0000 Manifest this update: Fri 05 Dec 2025 04:41:55 +0000 Manifest next update: Fri 12 Dec 2025 04:41:55 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: WppjHInTckwtWp17sQNlklnJ/vjEMA99ik1w4FzoNDk=) 2: 947AB09E459C11F0BF881335C4F9AE02.roa (hash: ZL0Aa2llI8aydVHlIy2x+gVqsBcKLbop2xFjrlC+Qtw=) 3: 2A8C8F02198E11F09D302145C4F9AE02.roa (hash: pkFF5f+Vaat+aJOayMibpTMU9Wp7Q864DQvUc24s624=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Dec 5 04:41:55 2025 GMT Not After : Dec 12 04:41:55 2025 GMT Subject: CN=69326293-7758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:a8:f4:2b:aa:99:b5:b5:22:d3:c1:d3:b1: 12:7a:40:08:98:ba:a3:45:d3:c7:14:e2:95:5a:37: d2:da:57:27:fb:33:76:2f:7d:c7:c0:39:9f:d0:01: de:79:8c:c1:cc:38:81:d2:35:5b:49:8f:98:af:4e: 52:26:d7:cc:a4:6b:f9:d7:d8:e9:80:1f:1e:6d:ee: 79:7b:74:55:f1:d9:b7:91:91:19:b2:ab:68:03:e5: 49:12:ea:40:30:60:93:c6:9d:76:00:3d:37:dd:1f: 27:24:6d:c9:82:9b:70:e1:9b:f1:4b:25:b9:a3:1b: 3d:d4:fb:1e:a3:88:eb:0c:68:bb:99:1c:97:4a:d3: 19:bd:4c:2f:0b:15:75:54:0a:98:69:1c:12:a3:db: 25:7e:96:67:91:e3:d7:ad:04:61:75:19:5b:e8:40: 8e:a0:7f:34:f4:f2:4f:15:27:7a:c6:ce:c5:0f:47: 2b:ef:14:36:69:3e:a4:26:66:58:87:0e:73:94:15: e1:b2:09:d5:de:45:de:82:f8:ba:21:5a:19:2f:e5: 1a:c8:e3:1e:e7:d6:ca:58:4a:bd:2a:c9:b4:f3:82: 10:80:c2:bf:24:5c:bf:67:43:ae:71:fc:42:2f:e3: 2a:77:6c:0e:9d:e0:31:bc:1d:06:70:f4:2a:a4:5d: 8d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2D:DD:7D:E4:9A:D7:BF:86:CE:FD:7E:34:37:D5:7C:DA:16:4F:96 X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:9f:ea:71:da:9d:b1:b5:d7:1c:50:f9:ec:ff:37:26:b1:95: 75:02:bc:0a:71:82:59:96:53:e8:f9:96:64:7e:33:0c:a1:e4: 5f:78:e5:dc:00:99:1e:2e:63:e2:a4:61:44:50:1b:61:80:92: 2f:e8:c2:d2:d3:5f:36:e1:91:b1:1b:f1:87:15:bb:03:ae:43: 29:dc:ab:d7:ce:e2:f8:cb:ac:19:d5:76:be:ef:59:d5:81:8e: 23:3c:b9:00:70:7a:6d:59:06:d5:09:6f:d9:b2:07:b1:b4:6b: ba:1b:48:75:86:2f:c9:3f:12:1c:55:0b:b8:a5:47:27:5b:91: a6:2e:36:80:39:1d:00:e6:1c:bb:8a:ef:74:98:b5:83:4d:a6: f6:e0:dd:18:d0:fc:25:c6:34:af:1c:3b:40:a7:3f:6c:ad:73: a9:cc:98:fa:d0:0c:2d:49:23:84:03:93:43:92:24:dd:45:4b: f3:26:e2:18:4b:06:35:e8:18:79:d1:49:2b:df:4b:ee:74:81: 92:1f:b2:83:65:b2:c1:74:93:50:4f:18:b6:2d:e1:a9:4d:34: 21:2a:28:e4:ca:b0:d3:21:a2:4d:49:e1:56:3c:7e:92:66:8c: 2c:0c:aa:81:43:29:eb:36:7c:b0:2f:0e:35:3b:8c:45:ba:eb: f5:11:cb:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNCQjExMC8GA1UEBRMoRkMyNEY1MzkwNzQ3ODdFQ0VBQjAwQzI0MjYwNkMyQkQ2 ODgxOUEwRDAeFw0yNTEyMDUwNDQxNTVaFw0yNTEyMTIwNDQxNTVaMBgxFjAUBgNV BAMTDTY5MzI2MjkzLTc3NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvaaj0K6qZtbUi08HTsRJ6QAiYuqNF08cU4pVaN9LaVyf7M3YvfcfAOZ/QAd55 jMHMOIHSNVtJj5ivTlIm18yka/nX2OmAHx5t7nl7dFXx2beRkRmyq2gD5UkS6kAw YJPGnXYAPTfdHyckbcmCm3Dhm/FLJbmjGz3U+x6jiOsMaLuZHJdK0xm9TC8LFXVU CphpHBKj2yV+lmeR49etBGF1GVvoQI6gfzT08k8VJ3rGzsUPRyvvFDZpPqQmZliH DnOUFeGyCdXeRd6C+LohWhkv5RrI4x7n1spYSr0qybTzghCAwr8kXL9nQ65x/EIv 4yp3bA6d4DG8HQZw9CqkXY0VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/S3dfeSa 17+Gzv1+NDfVfNoWT5YwHwYDVR0jBBgwFoAU/CT1OQdHh+zqsAwkJgbCvWiBmg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0JCL0Q1M0JEMTQ2MTVC MTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1n MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0NUMU9RZEhoLXpxc0F3a0pnYkN2V2lCbWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0JCL0Q1M0JEMTQ2MTVCMTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16 cXNBd2tKZ2JDdldpQm1nMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIWf6nHanbG11xxQ+ez/NyaxlXUCvApxglmWU+j5lmR+Mwyh5F945dwA mR4uY+KkYURQG2GAki/owtLTXzbhkbEb8YcVuwOuQyncq9fO4vjLrBnVdr7vWdWB jiM8uQBwem1ZBtUJb9myB7G0a7obSHWGL8k/EhxVC7ilRydbkaYuNoA5HQDmHLuK 73SYtYNNpvbg3RjQ/CXGNK8cO0CnP2ytc6nMmPrQDC1JI4QDk0OSJN1FS/Mm4hhL BjXoGHnRSSvfS+50gZIfsoNlssF0k1BPGLYt4alNNCEqKOTKsNMhok1J4VY8fpJm jCwMqoFDKes2fLAvDjU7jEW66/URy1s= -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:44 2025 by rpki-client