This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json) Hash identifier: Z3FWZ0crCsCLJsAwUHrUL7iWu+nCQtcWTfIlC7wXwBg= Subject key identifier: 0C:32:AD:3F:83:E4:A8:0D:F3:33:36:D6:67:5E:F7:29:34:E0:84:F8 Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Certificate serial: 078F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft Manifest number: 0789 Signing time: Thu 04 Dec 2025 20:29:47 +0000 Manifest this update: Thu 04 Dec 2025 20:29:47 +0000 Manifest next update: Thu 11 Dec 2025 20:29:47 +0000 Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: WG7aBkh0hR4sBLIrwvwwz94fzTiOaRJtdZxXl3+yrkc=) 2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: 1oTkQQCTVWfVOHdZtNZH2BhFNuE/kcLMf9xIB/q3J40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1935 (0x78f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Validity Not Before: Dec 4 20:29:47 2025 GMT Not After : Dec 11 20:29:47 2025 GMT Subject: CN=6931ef3b-bb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:74:5d:27:f9:7d:c6:97:3d:95:65:dd:f0: d7:8e:32:eb:8e:86:ef:6d:7d:c6:fe:db:a7:9a:8c: 16:94:de:43:1c:1c:ad:fc:23:7f:6a:b5:29:14:28: 40:37:68:20:08:77:d1:6e:81:f4:1e:5f:d1:d3:3d: 36:47:96:8c:47:58:08:45:7a:d6:04:f4:08:93:48: ea:34:46:ec:c7:45:93:74:55:90:7d:c4:65:f0:ae: 76:ea:74:2c:ed:f8:96:fc:86:b1:f9:74:2c:aa:31: bb:2f:8f:8e:5c:a6:4b:60:2a:41:d0:49:58:ef:3a: a9:48:2b:2f:70:33:d9:f2:9e:e4:5f:01:3a:ce:e9: c9:24:45:d4:b5:5a:c2:40:dd:a2:35:c2:de:dd:d0: 56:08:f9:87:fa:72:33:9c:af:d9:2f:10:6e:a7:6f: 27:ad:e3:70:c8:89:75:bf:ab:b5:63:b9:a8:2f:83: a6:af:41:69:a6:7b:65:c8:fb:c7:1a:c3:f4:fb:4c: 41:8d:41:bf:5f:b2:6b:61:c4:8c:86:96:1f:af:d7: 80:39:91:c4:ad:8e:de:59:c6:12:ba:25:5e:61:ed: 76:e1:af:43:9c:d6:aa:22:c9:46:85:69:e6:af:3c: 51:79:b2:90:b5:aa:2d:9b:fb:ec:ed:6d:68:e8:91: d2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:32:AD:3F:83:E4:A8:0D:F3:33:36:D6:67:5E:F7:29:34:E0:84:F8 X509v3 Authority Key Identifier: keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:23:f1:bc:98:ab:0a:dd:21:dc:25:76:1f:2e:b2:da:1b:dd: cb:a6:59:eb:14:f7:12:68:c1:f3:06:ed:98:bc:de:83:22:1b: 68:07:99:80:da:0d:98:03:21:03:7a:62:35:04:3c:cd:25:24: 96:9b:eb:13:40:d4:de:05:71:fe:05:15:a7:32:24:81:e2:20: 72:ad:95:10:1b:8b:99:17:14:0f:e8:ef:50:e9:ad:a6:98:9f: d3:ec:b4:18:d3:9b:97:ad:a4:98:23:ff:2c:7b:c5:02:f1:88: 9b:53:20:bc:d8:53:e3:72:c9:c5:82:2e:7a:7f:d1:3b:f8:c9: 2c:55:70:76:88:99:cb:29:48:59:e0:56:d0:58:e4:2e:fe:e2: dd:c6:3c:50:32:ee:8a:08:b6:be:72:b6:d1:09:d8:97:af:c5: de:fa:11:b3:bb:14:23:93:61:5a:58:93:68:de:c9:b0:ac:d1: 94:8b:07:68:46:e8:c5:ff:44:79:74:3c:60:f2:c0:42:1c:7b: 77:cc:1c:6d:11:a8:b1:35:14:bf:04:f2:d5:91:60:60:13:8f: 60:4f:f6:98:5d:ae:a0:68:76:99:d0:b2:91:16:8e:45:fc:b6: 13:3f:bf:10:25:94:14:ed:72:5b:a3:19:ef:5c:90:73:bf:b8: 08:e4:05:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0REIxMTAvBgNVBAUTKEQ5Q0I4QTZFNTRFMjRCNTBGNEFGRkJGQUEwNTk1QkZE ODEwMjQzRUUwHhcNMjUxMjA0MjAyOTQ3WhcNMjUxMjExMjAyOTQ3WjAYMRYwFAYD VQQDEw02OTMxZWYzYi1iYjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwJ0XSf5fcaXPZVl3fDXjjLrjobvbX3G/tunmowWlN5DHByt/CN/arUpFChA N2ggCHfRboH0Hl/R0z02R5aMR1gIRXrWBPQIk0jqNEbsx0WTdFWQfcRl8K526nQs 7fiW/Iax+XQsqjG7L4+OXKZLYCpB0ElY7zqpSCsvcDPZ8p7kXwE6zunJJEXUtVrC QN2iNcLe3dBWCPmH+nIznK/ZLxBup28nreNwyIl1v6u1Y7moL4Omr0FppntlyPvH GsP0+0xBjUG/X7JrYcSMhpYfr9eAOZHErY7eWcYSuiVeYe124a9DnNaqIslGhWnm rzxRebKQtaotm/vs7W1o6JHSbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwyrT+D 5KgN8zM21mde9yk04IT4MB8GA1UdIwQYMBaAFNnLim5U4ktQ9K/7+qBZW/2BAkPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzREQi8zQzA3RTJENjM0 NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMxRDByX3Y2b0ZsYl9ZRUNR LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjdUtibFRpUzFEMHJfdjZvRmxiX1lFQ1EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzREQi8zQzA3RTJENjM0NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMx RDByX3Y2b0ZsYl9ZRUNRLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzI/G8mKsK3SHcJXYfLrLaG93LplnrFPcSaMHzBu2YvN6DIhtoB5mA 2g2YAyEDemI1BDzNJSSWm+sTQNTeBXH+BRWnMiSB4iByrZUQG4uZFxQP6O9Q6a2m mJ/T7LQY05uXraSYI/8se8UC8YibUyC82FPjcsnFgi56f9E7+MksVXB2iJnLKUhZ 4FbQWOQu/uLdxjxQMu6KCLa+crbRCdiXr8Xe+hGzuxQjk2FaWJNo3smwrNGUiwdo RujF/0R5dDxg8sBCHHt3zBxtEaixNRS/BPLVkWBgE49gT/aYXa6gaHaZ0LKRFo5F /LYTP78QJZQU7XJboxnvXJBzv7gI5AXX -----END CERTIFICATE-----Generated at Sat Dec 6 16:43:21 2025 by rpki-client