This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json) Hash identifier: WhRWKznfBG6J3ijJ1Xh8rGoWVJVKZLS1ao7dqS7bVu0= Subject key identifier: CE:23:89:C7:17:6C:96:61:2E:3F:3D:27:C1:B3:1E:CB:68:86:9F:4A Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Certificate serial: 2511 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft Manifest number: 24FB Signing time: Thu 04 Dec 2025 15:34:20 +0000 Manifest this update: Thu 04 Dec 2025 15:34:19 +0000 Manifest next update: Thu 11 Dec 2025 15:34:19 +0000 Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: KhiebM1lNlftHmGr6fpSMBpzUsSOA3uNTxxpbFgt3Zs=) 2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: gjGyoU6UehPX0w4evr1O57YIj1TJSqlSY6y93UsHPOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9489 (0x2511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Validity Not Before: Dec 4 15:34:19 2025 GMT Not After : Dec 11 15:34:19 2025 GMT Subject: CN=6931a9fb-ccca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:31:01:1a:b8:3e:7c:76:ac:03:b4:20:90:55: 0c:98:1b:8e:c7:7f:30:e4:4c:82:a9:a4:83:ff:c2: 49:78:98:2c:2d:f1:0d:c2:81:c6:61:6a:64:8d:62: 13:5d:7a:be:6d:57:a7:53:80:21:e4:c8:b8:09:65: 1f:35:17:04:1d:f3:8b:64:39:e5:2c:23:7a:2c:62: ba:ea:2e:f7:0d:92:bb:4e:22:2e:81:91:6e:cd:d1: 42:72:c2:de:19:27:5f:5e:d4:5a:de:ab:13:e4:e7: 09:c9:d1:f7:4e:d8:50:31:78:8c:9c:20:4a:05:f0: eb:b6:e6:53:02:a2:8b:3e:45:3a:8b:7b:c8:d0:04: 5e:06:df:8a:ae:f7:da:07:04:85:1b:d1:fa:dc:c7: c3:d5:e4:26:3e:0b:1d:97:22:be:1c:f9:51:b5:d9: 78:5f:c5:32:1a:18:79:8f:b4:e9:86:cd:5c:7b:ad: 27:a2:6e:b6:1b:a2:89:71:18:69:99:e6:28:c7:33: fb:b8:73:54:d9:ad:86:73:2c:6e:e1:78:9a:5f:c3: 39:8c:b4:9a:dd:32:72:8c:87:76:dc:fe:02:f1:99: 0d:66:01:c0:b3:95:b9:84:02:51:92:b2:5b:59:ce: d2:7e:88:9f:e1:04:fa:ad:14:b4:d3:e4:1a:90:76: 86:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:23:89:C7:17:6C:96:61:2E:3F:3D:27:C1:B3:1E:CB:68:86:9F:4A X509v3 Authority Key Identifier: keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:46:ee:a8:17:bf:09:e2:cb:e5:1a:1c:6d:26:1b:6e:c5:93: 64:b4:8b:46:ea:c0:f9:ec:72:e0:69:96:6a:0f:8b:9b:57:f2: 40:f8:fe:8f:a7:92:03:86:50:84:6f:68:52:2b:01:0d:1b:5c: 3f:f6:83:a0:ae:50:cc:5a:97:c5:96:66:06:63:15:db:01:a1: 93:03:ae:7b:aa:b1:1b:cb:53:68:47:cc:02:d8:81:b6:90:4b: 0e:a7:a8:7e:8b:4a:f6:f3:cc:cf:d9:46:27:b5:5d:cb:8a:72: 0c:88:2b:27:e3:c8:9e:98:c3:b6:23:ba:99:84:06:be:e3:fb: 35:a3:6e:76:28:3e:8a:e0:29:6e:21:5f:aa:41:9f:39:b6:33: d4:ec:8c:17:31:d6:93:76:cd:a9:24:f6:3b:25:77:a2:7f:8a: 6c:53:50:5c:60:6a:d3:13:1f:95:f6:63:7a:89:21:ba:40:cc: a6:1b:b8:9f:36:c3:91:5a:75:f0:2d:0b:ef:b9:65:2b:6c:5d: 34:5f:f7:17:8d:17:39:ea:1c:fa:cc:0c:9c:a6:2a:f0:c5:cd: 17:97:49:ae:78:4c:2b:97:10:71:35:14:f0:0f:e4:42:22:f4: 2f:31:66:d8:4e:30:9b:17:75:2b:53:1c:65:ad:20:7e:5c:9b: 70:65:87:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRjQxMTAvBgNVBAUTKDBCNjNFNjNBNUZBM0IyRTNDQ0I5OTMwRThGNkM4Q0VD QzI0NThCNDUwHhcNMjUxMjA0MTUzNDE5WhcNMjUxMjExMTUzNDE5WjAYMRYwFAYD VQQDEw02OTMxYTlmYi1jY2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TEBGrg+fHasA7QgkFUMmBuOx38w5EyCqaSD/8JJeJgsLfENwoHGYWpkjWIT XXq+bVenU4Ah5Mi4CWUfNRcEHfOLZDnlLCN6LGK66i73DZK7TiIugZFuzdFCcsLe GSdfXtRa3qsT5OcJydH3TthQMXiMnCBKBfDrtuZTAqKLPkU6i3vI0AReBt+Krvfa BwSFG9H63MfD1eQmPgsdlyK+HPlRtdl4X8UyGhh5j7Tphs1ce60nom62G6KJcRhp meYoxzP7uHNU2a2Gcyxu4XiaX8M5jLSa3TJyjId23P4C8ZkNZgHAs5W5hAJRkrJb Wc7Sfoif4QT6rRS00+QakHaGiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4jiccX bJZhLj89J8GzHstohp9KMB8GA1UdIwQYMBaAFAtj5jpfo7LjzLmTDo9sjOzCRYtF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNGNC8xN0FDMkE3MDQx OUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1UE11Wk1PajJ5TTdNSkZp MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyUG1PbC1qc3VQTXVaTU9qMnlNN01KRmkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNGNC8xN0FDMkE3MDQxOUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1 UE11Wk1PajJ5TTdNSkZpMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqRu6oF78J4svlGhxtJhtuxZNktItG6sD57HLgaZZqD4ubV/JA+P6P p5IDhlCEb2hSKwENG1w/9oOgrlDMWpfFlmYGYxXbAaGTA657qrEby1NoR8wC2IG2 kEsOp6h+i0r288zP2UYntV3LinIMiCsn48iemMO2I7qZhAa+4/s1o252KD6K4Clu IV+qQZ85tjPU7IwXMdaTds2pJPY7JXeif4psU1BcYGrTEx+V9mN6iSG6QMymG7if NsORWnXwLQvvuWUrbF00X/cXjRc56hz6zAycpirwxc0Xl0mueEwrlxBxNRTwD+RC IvQvMWbYTjCbF3UrUxxlrSB+XJtwZYfU -----END CERTIFICATE-----Generated at Sat Dec 6 17:21:27 2025 by rpki-client