This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft File: p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json) Hash identifier: ZfbPtZ9X3Y6iaxX+dE4i275cE8auntDCt0ADwVYrsuY= Subject key identifier: 6C:CE:28:DC:5D:8E:22:60:9D:24:D3:9A:7C:CD:66:CC:6F:0A:31:33 Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Certificate serial: 0DB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft Manifest number: 0DA9 Signing time: Thu 04 Dec 2025 17:26:25 +0000 Manifest this update: Thu 04 Dec 2025 17:26:25 +0000 Manifest next update: Thu 11 Dec 2025 17:26:25 +0000 Files and hashes: 1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: OMJAOuOQH5dH1C34aFLRohVK7BE68N7cIseFAGh60SE=) 2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: SkBXJ2Cg15YTINlEK8cWxPkVEnzJM9DWZ0n7aJtqwN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3510 (0xdb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF9A1, serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Validity Not Before: Dec 4 17:26:25 2025 GMT Not After : Dec 11 17:26:25 2025 GMT Subject: CN=6931c441-a20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:31:6c:1e:b8:5b:82:b4:7b:b9:88:2c:4c:b7: 37:50:34:2f:f9:df:a0:e9:83:5b:3b:76:37:86:06: 9c:68:4b:57:ec:a3:cd:dc:8c:e7:48:a4:ac:19:b7: cd:e5:cb:33:bf:f4:23:a7:27:bd:15:33:25:63:3a: 63:2a:6e:2e:ef:5a:5c:a0:45:05:dc:01:5a:25:b2: c1:8d:3b:cb:71:c0:65:ac:13:f4:bd:99:45:60:5e: c6:aa:83:3c:3f:04:24:d8:e0:40:ac:c3:9d:4e:12: 60:30:7f:93:6d:dc:ae:73:66:05:3b:b8:44:c6:d7: 67:bb:ec:66:48:9c:f2:e9:ef:5f:a4:c5:45:ad:ca: 9b:7a:59:49:7e:10:6f:d9:0c:7b:3b:47:61:45:72: ca:2b:d3:69:ee:0e:0f:31:41:18:90:e2:4a:ae:a9: 0e:aa:0a:64:70:6d:b6:db:4d:7f:01:fe:95:0a:d2: 4f:5c:d1:d5:14:3c:24:b7:d9:2d:4a:f9:83:ae:c2: 01:de:a5:62:c4:39:68:82:97:49:12:d3:5e:09:99: 42:67:8c:c6:3a:66:5c:d8:bf:78:0e:4c:b1:4d:1c: 7b:db:72:cf:b5:8d:83:f3:99:03:46:f7:9f:78:9f: 9c:4b:b8:0b:3c:78:c5:3b:d0:35:2f:f2:af:9d:25: 69:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CE:28:DC:5D:8E:22:60:9D:24:D3:9A:7C:CD:66:CC:6F:0A:31:33 X509v3 Authority Key Identifier: keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:f8:f6:6c:6b:13:64:a2:83:3a:88:5a:66:a0:65:16:d7:58: b6:77:f7:31:65:8d:47:4a:8d:5d:1e:e3:62:76:96:84:14:29: 28:1b:72:53:b4:96:8b:9a:5c:58:4b:79:e9:d6:21:37:36:ad: 5d:ce:f2:95:c4:52:31:05:4d:4e:7e:e5:2b:b1:5c:66:66:9d: d9:cf:b5:87:25:47:99:81:3b:cb:dd:2c:da:c5:1f:6d:1b:7a: a5:95:ca:ae:8d:fc:68:9c:27:5d:90:13:16:91:26:99:88:87: 8c:6c:31:b4:8e:e6:e7:ef:a1:3f:43:51:d5:4d:57:c3:15:05: c5:0b:f8:87:1f:99:d4:ee:8d:bc:1f:e8:ca:89:cd:32:9b:24: 10:ab:3d:56:50:7e:77:90:de:3e:a8:08:48:ed:3f:10:cf:ae: c5:20:27:e0:78:5c:13:2b:ad:3c:3b:28:c6:53:5b:4b:95:e1: 26:80:68:69:89:28:a0:f2:90:76:6c:79:bf:2b:d8:0c:85:4d: e8:12:e6:64:37:45:67:d3:e3:78:e9:f5:bf:a3:71:e6:fc:fb: ca:66:c6:48:de:a7:f2:67:10:48:00:2c:3d:5f:b0:c2:d2:ee: b6:6e:11:b5:be:66:19:50:76:44:41:cb:0d:b6:6c:a0:74:d5: 2c:f2:44:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY5QTExMTAvBgNVBAUTKEE3RjlBRjI4RDI0QTQzMjQ5M0I0QjJCQTlCNTU3MjlC QzA5NzdDQzgwHhcNMjUxMjA0MTcyNjI1WhcNMjUxMjExMTcyNjI1WjAYMRYwFAYD VQQDEw02OTMxYzQ0MS1hMjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDFsHrhbgrR7uYgsTLc3UDQv+d+g6YNbO3Y3hgacaEtX7KPN3IznSKSsGbfN 5cszv/Qjpye9FTMlYzpjKm4u71pcoEUF3AFaJbLBjTvLccBlrBP0vZlFYF7GqoM8 PwQk2OBArMOdThJgMH+Tbdyuc2YFO7hExtdnu+xmSJzy6e9fpMVFrcqbellJfhBv 2Qx7O0dhRXLKK9Np7g4PMUEYkOJKrqkOqgpkcG22201/Af6VCtJPXNHVFDwkt9kt SvmDrsIB3qVixDlogpdJEtNeCZlCZ4zGOmZc2L94DkyxTRx723LPtY2D85kDRvef eJ+cS7gLPHjFO9A1L/KvnSVp8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzOKNxd jiJgnSTTmnzNZsxvCjEzMB8GA1UdIwQYMBaAFKf5ryjSSkMkk7SyuptVcpvAl3zI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjlBMS9EMjYwMTVDQUQz N0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5U1R0TEs2bTFWeW04Q1hm TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfbXZLTkpLUXlTVHRMSzZtMVZ5bThDWGZNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjlBMS9EMjYwMTVDQUQzN0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5 U1R0TEs2bTFWeW04Q1hmTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi+PZsaxNkooM6iFpmoGUW11i2d/cxZY1HSo1dHuNidpaEFCkoG3JT tJaLmlxYS3np1iE3Nq1dzvKVxFIxBU1OfuUrsVxmZp3Zz7WHJUeZgTvL3SzaxR9t G3qllcqujfxonCddkBMWkSaZiIeMbDG0jubn76E/Q1HVTVfDFQXFC/iHH5nU7o28 H+jKic0ymyQQqz1WUH53kN4+qAhI7T8Qz67FICfgeFwTK608OyjGU1tLleEmgGhp iSig8pB2bHm/K9gMhU3oEuZkN0Vn0+N46fW/o3Hm/PvKZsZI3qfyZxBIACw9X7DC 0u62bhG1vmYZUHZEQcsNtmygdNUs8kTS -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:30 2025 by rpki-client