This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft File: _i41K0L3TxDVdoNTA6LpeOHEN7Y.mft (raw, json) Hash identifier: e8GXbIyNamHzI3QNdcxipNHKwLHQoFlVrGVKQlHmkL4= Subject key identifier: A2:AE:5F:4A:1C:00:1F:26:9B:0C:9B:99:AA:31:23:A9:24:07:02:F0 Authority key identifier: FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6 Certificate issuer: /CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6 Certificate serial: 024E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft Manifest number: 024A Signing time: Fri 05 Dec 2025 00:06:16 +0000 Manifest this update: Fri 05 Dec 2025 00:06:16 +0000 Manifest next update: Fri 12 Dec 2025 00:06:16 +0000 Files and hashes: 1: _i41K0L3TxDVdoNTA6LpeOHEN7Y.crl (hash: kvaaM/0+xwWlBXLP6OcbuSzwCBmQcq0VyJH5tgSQ/NY=) 2: FA13BAAC504611ED9AE40711C4F9AE02.roa (hash: ih5APdD+Nurby0NtdsRTrQ51xACa7dPtth9SlQyC+ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CC0, serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6 Validity Not Before: Dec 5 00:06:16 2025 GMT Not After : Dec 12 00:06:16 2025 GMT Subject: CN=693221f8-2ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:89:81:84:25:37:46:f8:9f:21:9f:d5:8a:0a: 76:80:d8:3f:c9:4e:dc:82:82:00:a6:03:4a:cc:e7: 85:2d:62:13:71:e9:90:2d:af:0c:a4:f3:a1:2b:59: 11:2f:bb:74:1a:34:bd:80:0c:c2:9d:b8:7b:d8:86: 5f:0f:03:f3:f8:26:7a:e0:0f:4a:51:f7:46:e3:62: 12:ba:76:9f:0b:6c:e9:b2:e6:c3:31:8d:88:89:a9: 32:09:c8:7d:e6:97:f4:a4:1e:a5:19:1b:45:6c:31: bc:9f:dd:6c:10:50:22:80:02:29:d4:92:e2:8f:9c: 16:f7:c8:ca:02:49:8b:48:49:e4:9b:ff:9d:ac:20: 6b:57:8c:e0:33:b5:4d:8d:79:61:13:70:ab:46:b2: 6a:64:02:52:60:f4:4f:5c:22:c3:d2:99:3b:18:f0: 84:c2:0e:bb:b5:b1:27:57:3a:a4:55:dc:7e:32:65: a7:9f:2e:55:f7:31:77:9e:7f:ab:24:59:d7:cd:93: 7e:5a:d1:ce:5f:e3:5a:8c:55:7d:87:21:30:7e:0f: fa:c1:b6:7d:a0:54:11:28:3b:ef:94:d1:f9:44:cf: 3e:0b:05:b7:8a:5d:bc:d6:83:64:9e:e8:17:21:7f: 6b:40:50:5d:e1:42:a0:66:56:fb:65:aa:8a:05:8e: 9a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AE:5F:4A:1C:00:1F:26:9B:0C:9B:99:AA:31:23:A9:24:07:02:F0 X509v3 Authority Key Identifier: keyid:FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:4a:b7:49:8e:34:fc:b3:30:ef:90:f3:bb:55:f7:3a:a3:c7: c5:fd:2c:39:3c:54:73:2d:0a:23:7b:0d:b8:1f:e1:7b:83:48: 9d:7f:37:37:9c:3a:fd:d0:b6:f9:c7:34:b6:07:67:12:f0:b7: bb:84:e3:6c:c8:c7:22:49:ab:50:76:99:c8:4b:55:80:05:0d: 2b:6f:82:30:49:33:56:29:1b:93:a5:22:9f:52:b2:73:0d:b4: 79:63:14:8f:d5:ac:15:2c:7f:ed:aa:ce:f8:01:55:d7:7d:33: ad:3d:c7:ee:b1:7b:c5:7d:ca:c9:b6:a4:bd:84:ac:43:d2:69: d5:a7:2d:49:cd:73:73:9a:72:27:6f:a8:47:d3:f2:58:b3:f2: ce:39:7e:e2:1f:58:ad:59:2e:bf:08:43:61:fc:19:f0:ec:f9: ba:69:89:a9:ed:ef:2e:9a:25:c6:15:d3:8f:ac:16:d7:97:32: a9:fd:3e:09:9b:d7:02:13:8d:c6:4c:b9:32:48:1b:46:ac:95: e6:b7:fc:fb:d1:ef:a4:f1:81:72:17:bb:1c:3a:62:d1:c6:21: a4:85:10:17:fc:88:1b:05:0f:17:e5:6f:6f:48:e8:b0:0f:46: 2e:db:cc:5f:99:a8:41:74:69:20:71:9f:83:b1:3f:2d:86:d3: 31:c8:c3:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDQzAxMTAvBgNVBAUTKEZFMkUzNTJCNDJGNzRGMTBENTc2ODM1MzAzQTJFOTc4 RTFDNDM3QjYwHhcNMjUxMjA1MDAwNjE2WhcNMjUxMjEyMDAwNjE2WjAYMRYwFAYD VQQDEw02OTMyMjFmOC0yZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmYmBhCU3RvifIZ/Vigp2gNg/yU7cgoIApgNKzOeFLWITcemQLa8MpPOhK1kR L7t0GjS9gAzCnbh72IZfDwPz+CZ64A9KUfdG42ISunafC2zpsubDMY2IiakyCch9 5pf0pB6lGRtFbDG8n91sEFAigAIp1JLij5wW98jKAkmLSEnkm/+drCBrV4zgM7VN jXlhE3CrRrJqZAJSYPRPXCLD0pk7GPCEwg67tbEnVzqkVdx+MmWnny5V9zF3nn+r JFnXzZN+WtHOX+NajFV9hyEwfg/6wbZ9oFQRKDvvlNH5RM8+CwW3il281oNknugX IX9rQFBd4UKgZlb7ZaqKBY6apQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKuX0oc AB8mmwybmaoxI6kkBwLwMB8GA1UdIwQYMBaAFP4uNStC908Q1XaDUwOi6XjhxDe2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNDMC9DRkE3OUYxQTUw M0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4RFZkb05UQTZMcGVPSEVO N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19pNDFLMEwzVHhEVmRvTlRBNkxwZU9IRU43WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNDMC9DRkE3OUYxQTUwM0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4 RFZkb05UQTZMcGVPSEVON1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQSrdJjjT8szDvkPO7Vfc6o8fF/Sw5PFRzLQojew24H+F7g0idfzc3 nDr90Lb5xzS2B2cS8Le7hONsyMciSatQdpnIS1WABQ0rb4IwSTNWKRuTpSKfUrJz DbR5YxSP1awVLH/tqs74AVXXfTOtPcfusXvFfcrJtqS9hKxD0mnVpy1JzXNzmnIn b6hH0/JYs/LOOX7iH1itWS6/CENh/Bnw7Pm6aYmp7e8umiXGFdOPrBbXlzKp/T4J m9cCE43GTLkySBtGrJXmt/z70e+k8YFyF7scOmLRxiGkhRAX/IgbBQ8X5W9vSOiw D0Yu28xfmahBdGkgcZ+DsT8thtMxyMMH -----END CERTIFICATE-----Generated at Sat Dec 6 17:24:32 2025 by rpki-client