This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft File: SzudkwWID_Zrfx5MkP-YdSiGOBE.mft (raw, json) Hash identifier: Z0m4Mv8i+csgKqsMrUKJkk6z7hSJAus4qDUxa2BQqvQ= Subject key identifier: 52:86:15:DC:93:34:6E:33:22:33:03:85:CF:E2:35:19:0C:78:27:A2 Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 Certificate issuer: /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft Manifest number: 012C Signing time: Fri 05 Dec 2025 02:44:31 +0000 Manifest this update: Fri 05 Dec 2025 02:44:29 +0000 Manifest next update: Fri 12 Dec 2025 02:44:29 +0000 Files and hashes: 1: SzudkwWID_Zrfx5MkP-YdSiGOBE.crl (hash: xQO6EW4gHlRxF8eoeMWN9i7F2suMHZfCmMtB/3bE+Ik=) 2: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (hash: eodiFGpIfsgXUXxslrRHT6wLB6egOaD+ezHH/eHicB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Validity Not Before: Dec 5 02:44:29 2025 GMT Not After : Dec 12 02:44:29 2025 GMT Subject: CN=6932470e-cdeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:66:98:44:f4:2c:da:c5:5a:50:f8:47:3e:90: 4e:47:c4:33:1f:7f:82:be:7d:25:6c:f1:57:9a:2c: d9:7c:b4:5b:0e:70:cd:aa:18:5a:fb:4b:2e:bf:2b: 05:67:6c:21:cc:f5:2a:df:87:19:9d:dd:c1:3d:13: 47:a0:76:4e:03:5f:92:ee:95:8c:ce:74:bb:aa:34: a9:a9:1b:7d:21:89:a5:07:0e:3d:9e:e2:e2:fc:42: ae:25:d4:e3:2b:a5:3c:e3:22:18:9e:66:4a:d7:35: 5b:9d:40:2c:4d:3b:33:91:e9:6b:b6:24:57:1c:01: 4c:ac:79:f1:e2:e3:51:50:6d:bb:38:62:21:85:27: 4d:4c:09:6a:d9:28:2e:22:96:f0:e6:9b:04:dc:7a: 47:3f:89:39:16:e5:70:c8:0c:8d:f3:c2:0e:c0:ac: 6d:1f:a9:e9:a1:6f:ef:12:f1:70:63:b8:fe:18:39: e0:fc:eb:d5:7d:2f:5b:b4:64:18:92:25:bd:9d:cd: 90:7a:15:48:f6:1c:28:b3:a5:ae:e0:78:1b:04:5a: 5a:fa:2d:68:88:82:a2:08:82:d0:14:6f:69:66:55: 21:48:5d:66:5d:f7:cf:a7:57:d5:45:9c:79:75:5a: 2f:e0:22:ef:b2:58:26:78:14:d6:e7:85:dc:bd:dd: ee:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:86:15:DC:93:34:6E:33:22:33:03:85:CF:E2:35:19:0C:78:27:A2 X509v3 Authority Key Identifier: keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:a1:99:7d:10:7d:8b:2d:e0:6d:b2:84:6b:ba:de:0c:b6:8e: c1:c0:1d:18:fa:b2:aa:7c:c7:87:77:5d:f1:83:a2:ad:65:05: 50:76:37:53:a5:cb:a8:ff:ab:e9:67:ac:69:9a:49:ab:38:8e: 01:50:df:64:6f:c4:0f:3a:41:30:b6:e2:a9:b2:ef:9d:d1:2e: 82:92:12:3a:eb:9d:4b:40:ab:64:65:fd:4f:e9:0f:83:b7:1f: c4:e9:82:e0:47:75:41:94:8c:a1:16:eb:77:c2:a3:16:74:d7: 0e:73:64:da:d1:51:cf:13:8e:ec:dd:9c:df:90:17:34:6c:ee: ff:81:0f:08:87:57:52:fd:f1:b4:d7:d2:26:4d:18:eb:39:85: b3:2a:c3:00:50:32:93:07:9f:5a:32:38:57:cf:30:2b:4f:7f: 5b:35:15:63:b7:e8:10:f2:66:9d:be:ac:72:2b:a0:a0:a2:b8: 9d:d2:12:18:27:50:9d:44:89:05:0e:95:8d:80:24:4f:fc:1d: be:6e:80:8d:58:03:0d:e9:7d:6a:f1:97:47:8b:fd:c1:58:34: 28:1f:2a:4b:22:9f:89:7f:ed:9d:bb:85:f9:72:99:f2:b4:bc: 78:d5:79:a1:7c:c2:ee:bc:77:7f:a2:50:e1:15:2f:61:07:5d: 1f:2e:6b:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRFMkIxMTAvBgNVBAUTKDRCM0I5RDkzMDU4ODBGRjY2QjdGMUU0QzkwRkY5ODc1 Mjg4NjM4MTEwHhcNMjUxMjA1MDI0NDI5WhcNMjUxMjEyMDI0NDI5WjAYMRYwFAYD VQQDEw02OTMyNDcwZS1jZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGaYRPQs2sVaUPhHPpBOR8QzH3+Cvn0lbPFXmizZfLRbDnDNqhha+0suvysF Z2whzPUq34cZnd3BPRNHoHZOA1+S7pWMznS7qjSpqRt9IYmlBw49nuLi/EKuJdTj K6U84yIYnmZK1zVbnUAsTTszkelrtiRXHAFMrHnx4uNRUG27OGIhhSdNTAlq2Sgu Ipbw5psE3HpHP4k5FuVwyAyN88IOwKxtH6npoW/vEvFwY7j+GDng/OvVfS9btGQY kiW9nc2QehVI9hwos6Wu4HgbBFpa+i1oiIKiCILQFG9pZlUhSF1mXffPp1fVRZx5 dVov4CLvslgmeBTW54Xcvd3umwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKGFdyT NG4zIjMDhc/iNRkMeCeiMB8GA1UdIwQYMBaAFEs7nZMFiA/2a38eTJD/mHUohjgR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUyQi9GODM2QkRFQzBD RUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURfWnJmeDVNa1AtWWRTaUdP QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6dWRrd1dJRF9acmZ4NU1rUC1ZZFNpR09CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEUyQi9GODM2QkRFQzBDRUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURf WnJmeDVNa1AtWWRTaUdPQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjoZl9EH2LLeBtsoRrut4Mto7BwB0Y+rKqfMeHd13xg6KtZQVQdjdT pcuo/6vpZ6xpmkmrOI4BUN9kb8QPOkEwtuKpsu+d0S6CkhI6651LQKtkZf1P6Q+D tx/E6YLgR3VBlIyhFut3wqMWdNcOc2Ta0VHPE47s3ZzfkBc0bO7/gQ8Ih1dS/fG0 19ImTRjrOYWzKsMAUDKTB59aMjhXzzArT39bNRVjt+gQ8madvqxyK6Cgorid0hIY J1CdRIkFDpWNgCRP/B2+boCNWAMN6X1q8ZdHi/3BWDQoHypLIp+Jf+2du4X5cpny tLx41XmhfMLuvHd/olDhFS9hB10fLmuu -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:46 2025 by rpki-client