This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft File: 2x93mMABF7IMbzvDKZSALPIJSDc.mft (raw, json) Hash identifier: BTuSvYgk6cl02hI5Ll/2QXoHULyguczCTGnGtotD+Ao= Subject key identifier: E4:40:F8:AA:75:10:F0:70:3C:18:22:A9:1F:77:DC:35:C3:7A:B3:65 Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 Certificate issuer: /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Certificate serial: 0766 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft Manifest number: 0752 Signing time: Thu 04 Dec 2025 20:40:09 +0000 Manifest this update: Thu 04 Dec 2025 20:40:09 +0000 Manifest next update: Thu 11 Dec 2025 20:40:09 +0000 Files and hashes: 1: 2x93mMABF7IMbzvDKZSALPIJSDc.crl (hash: UCNXmqDVsF1mIE0NWMOH7GSvlVno/bbW1Klaka4O/wg=) 2: 4DACC668D0CD11F0B1E50143C4F9AE02.roa (hash: MB+r+Os7hTbN09scD5tkwu7u8VbFNM4s1268hWhFhdM=) 3: 4CC8B77AD0CD11F08E0F0143C4F9AE02.roa (hash: iX4sQrcdcnjDqwQaonepmNxC0cUNYw/x7ZNfv1HPYto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1894 (0x766) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA594, serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Validity Not Before: Dec 4 20:40:09 2025 GMT Not After : Dec 11 20:40:09 2025 GMT Subject: CN=6931f1a9-6a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ce:75:12:4d:99:bb:be:45:b9:57:5c:91:1e: f3:cd:3f:11:2c:87:c7:7a:ef:85:38:34:d3:25:e3: b3:33:e1:d6:16:f5:c0:1e:cf:da:ea:4d:9d:23:30: f5:8a:9f:2a:58:a9:c3:b5:85:15:41:11:24:c3:ee: 32:0d:0e:53:a1:b4:bb:09:b1:17:6c:1d:f5:67:17: 94:ec:92:47:36:6a:f8:ee:25:6e:6b:dc:2e:16:d7: 4f:43:2d:78:78:e3:bd:c0:7d:ad:7f:fe:87:3e:e8: 48:f4:2e:45:7d:a8:1c:ee:da:ee:3a:f7:8e:c9:52: 80:d4:33:77:18:26:b5:08:89:9a:80:39:20:8d:1d: 19:68:ac:b8:4e:a0:36:b3:23:1b:b6:1e:85:4e:57: f6:e1:7f:94:0d:2c:1c:37:fa:d9:a1:01:81:0c:e4: c8:d1:22:5f:5f:6b:65:d6:dd:0e:f4:c2:37:82:3f: 85:4c:d2:31:8f:f8:98:3e:b4:ee:05:21:46:47:9b: 61:f0:f8:2a:b4:2c:e3:65:64:3a:9a:96:1f:d8:bf: ce:e8:cf:23:6d:5b:92:b8:13:36:7f:88:a6:0d:9c: 4a:e2:6b:5e:98:e0:1b:44:fd:6f:53:9f:78:a0:1e: 10:5a:00:9b:7d:27:ea:76:d1:63:32:2e:2e:b3:d3: 61:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:40:F8:AA:75:10:F0:70:3C:18:22:A9:1F:77:DC:35:C3:7A:B3:65 X509v3 Authority Key Identifier: keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ae:37:b3:3f:dd:f4:98:5d:2d:17:29:f3:e3:a3:b9:d7:f5: 3f:30:d2:58:df:e8:7e:1a:68:eb:f5:ca:35:ba:a5:6c:1d:1c: 2c:f2:bf:65:41:81:60:1d:d7:b7:3b:29:de:e8:3a:10:cc:44: 2f:a3:db:f9:0c:7f:bd:52:28:a6:6a:c3:cc:b7:c4:db:c5:60: f0:5a:f4:53:32:8e:34:6f:1d:9c:f5:19:ae:ed:7b:cc:6c:20: 8f:84:d3:1c:92:94:04:85:9b:4e:a9:f9:c7:1d:7d:2d:32:0f: d6:2d:da:57:3e:7c:50:c8:26:7d:2b:f1:06:47:1b:49:df:4b: b8:8e:12:46:3c:9c:4a:bb:d8:44:4f:41:7e:4a:3d:62:ce:17: 25:85:f8:a5:21:96:7e:9a:eb:ca:9e:68:84:08:31:b2:38:82: e8:6a:a7:6e:42:6a:f4:34:97:4b:93:6f:0d:4f:f6:54:36:ef: d6:8a:31:a4:02:9b:f7:2d:9f:c5:19:27:be:14:ff:a2:7d:ca: 9d:d6:eb:51:5c:4b:fd:f1:ec:a1:e4:c0:99:6a:89:a9:8a:2b: a1:64:8c:22:05:a6:78:f0:ef:13:97:34:26:98:64:e1:4d:d2: b3:55:c1:71:ef:78:e2:ed:f2:36:c5:34:4d:7f:f9:8e:80:01: 45:3a:b0:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1OTQxMTAvBgNVBAUTKERCMUY3Nzk4QzAwMTE3QjIwQzZGM0JDMzI5OTQ4MDJD RjIwOTQ4MzcwHhcNMjUxMjA0MjA0MDA5WhcNMjUxMjExMjA0MDA5WjAYMRYwFAYD VQQDEw02OTMxZjFhOS02YTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2M51Ek2Zu75FuVdckR7zzT8RLIfHeu+FODTTJeOzM+HWFvXAHs/a6k2dIzD1 ip8qWKnDtYUVQREkw+4yDQ5TobS7CbEXbB31ZxeU7JJHNmr47iVua9wuFtdPQy14 eOO9wH2tf/6HPuhI9C5Ffagc7truOveOyVKA1DN3GCa1CImagDkgjR0ZaKy4TqA2 syMbth6FTlf24X+UDSwcN/rZoQGBDOTI0SJfX2tl1t0O9MI3gj+FTNIxj/iYPrTu BSFGR5th8PgqtCzjZWQ6mpYf2L/O6M8jbVuSuBM2f4imDZxK4mtemOAbRP1vU594 oB4QWgCbfSfqdtFjMi4us9NhOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORA+Kp1 EPBwPBgiqR933DXDerNlMB8GA1UdIwQYMBaAFNsfd5jAAReyDG87wymUgCzyCUg3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTU5NC81MjJCNkQ2RTU1 M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3SU1ienZES1pTQUxQSUpT RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4OTNtTUFCRjdJTWJ6dkRLWlNBTFBJSlNEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTU5NC81MjJCNkQ2RTU1M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3 SU1ienZES1pTQUxQSUpTRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFrjezP930mF0tFynz46O51/U/MNJY3+h+Gmjr9co1uqVsHRws8r9l QYFgHde3Oyne6DoQzEQvo9v5DH+9UiimasPMt8TbxWDwWvRTMo40bx2c9Rmu7XvM bCCPhNMckpQEhZtOqfnHHX0tMg/WLdpXPnxQyCZ9K/EGRxtJ30u4jhJGPJxKu9hE T0F+Sj1izhclhfilIZZ+muvKnmiECDGyOILoaqduQmr0NJdLk28NT/ZUNu/WijGk Apv3LZ/FGSe+FP+ifcqd1utRXEv98eyh5MCZaompiiuhZIwiBaZ48O8TlzQmmGTh TdKzVcFx73ji7fI2xTRNf/mOgAFFOrAZ -----END CERTIFICATE-----Generated at Sat Dec 6 13:17:47 2025 by rpki-client