This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft File: b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json) Hash identifier: dh6bMzKEuP669v5L3F2FQpyZZtgUgXeGphU2H4ijhjo= Subject key identifier: 1C:1C:75:FE:A1:A3:AE:D4:91:1C:CF:8B:90:1A:4C:C6:57:81:1F:89 Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Certificate serial: 0B9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft Manifest number: 0B92 Signing time: Sat 06 Dec 2025 18:18:24 +0000 Manifest this update: Sat 06 Dec 2025 18:18:23 +0000 Manifest next update: Sat 13 Dec 2025 18:18:23 +0000 Files and hashes: 1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: k6oWtxtslO7WxG7aIR03jRl47x8HXHW1NvjPE/k0nqw=) 2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: aPhIlaax2BlOuwZfkwHVyHDwMsLRzjqBCMCDNEm2/F8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2972 (0xb9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Validity Not Before: Dec 6 18:18:23 2025 GMT Not After : Dec 13 18:18:23 2025 GMT Subject: CN=6934736f-d7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3f:28:61:d3:a3:ab:d5:04:df:e4:fa:e0:29: 3f:3e:36:fa:d8:0f:f0:05:88:d5:20:68:34:6e:c7: ae:24:8d:a6:f4:29:cd:c2:95:88:b1:92:0b:79:ec: 78:23:fc:ed:35:c8:0c:9a:1d:d0:04:4b:a1:27:df: e0:7d:86:77:0c:09:28:21:fb:41:06:69:81:2d:e0: 7a:c9:5c:c6:0d:59:72:08:b8:17:b8:3c:91:9b:b4: bb:b8:4e:70:a5:2a:13:8b:65:e1:be:4b:c0:d2:a2: 5a:eb:b2:d9:c7:ed:a3:de:1c:77:83:20:eb:e4:e9: ec:cb:7d:56:94:3e:8c:37:e8:2f:77:1f:44:96:b7: 0c:73:2c:14:44:3d:4c:37:dc:b9:f1:98:4e:b1:99: d7:de:d5:2f:d3:f7:ae:32:ba:c6:6b:06:fa:f0:86: 62:db:61:de:65:f4:d4:e5:78:36:43:db:b0:3b:f6: 0b:e2:91:47:e6:98:b4:64:1b:5d:c1:75:5c:d9:45: e5:c7:c6:bd:5a:10:37:7c:83:cf:df:d6:be:59:fa: 49:ee:6b:56:21:59:fb:74:63:7f:b2:40:01:03:f4: 24:d4:b5:c9:8d:e0:d3:42:ac:b8:e2:a0:ac:9e:19: f7:d5:1b:1c:d8:ba:69:39:99:d9:78:79:2e:f6:98: 0b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1C:75:FE:A1:A3:AE:D4:91:1C:CF:8B:90:1A:4C:C6:57:81:1F:89 X509v3 Authority Key Identifier: keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0f:84:2d:ce:2f:a4:f8:70:83:b2:25:16:0c:55:93:a7:a0: da:ec:31:9c:1c:38:8f:a2:7b:f5:64:56:1a:ca:4b:d1:b0:d9: 70:f2:be:9a:ee:8d:28:6d:a0:10:56:31:f6:16:1d:a1:6c:76: 5d:e8:ab:62:0f:21:97:f8:f0:3d:bf:88:24:cc:bd:7f:d9:7d: 46:0c:d2:e9:fe:8c:99:07:3c:bc:c0:c6:91:45:16:4e:37:ad: a8:62:f1:8a:4a:88:a7:57:59:0a:af:6a:71:d1:f9:f5:ba:42: ee:54:a7:e7:6e:77:88:97:02:a5:13:75:49:e5:90:a0:61:16: 3a:6a:f5:ca:d8:6d:1b:80:92:f9:9e:e2:fe:b3:06:b1:63:0b: 5c:5d:35:90:b0:73:77:b1:65:ef:04:91:ab:2b:b5:e0:89:7d: 5d:c4:5e:ee:52:d1:00:41:d3:0f:79:2f:ed:46:b3:19:02:57: b7:08:d4:7e:81:59:b5:d7:83:4c:d5:0d:5e:3b:25:16:6e:91: 84:ee:3d:b3:ad:1a:9a:66:7a:1a:53:00:d5:68:7b:fb:3d:e2: ec:55:0d:b7:49:ef:80:5c:1b:6a:bf:9b:9e:2b:36:5e:c6:cf: de:f2:4e:80:d0:39:5e:a1:ff:92:e9:db:0c:75:86:64:d9:e5: 74:98:81:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QzIxMTAvBgNVBAUTKDZGOUFDMDRDRTVBQzcxQTdDMkI3QUZCMUE1NTcyN0Ex MEU1QjA2RUUwHhcNMjUxMjA2MTgxODIzWhcNMjUxMjEzMTgxODIzWjAYMRYwFAYD VQQDEw02OTM0NzM2Zi1kN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsj8oYdOjq9UE3+T64Ck/Pjb62A/wBYjVIGg0bseuJI2m9CnNwpWIsZILeex4 I/ztNcgMmh3QBEuhJ9/gfYZ3DAkoIftBBmmBLeB6yVzGDVlyCLgXuDyRm7S7uE5w pSoTi2XhvkvA0qJa67LZx+2j3hx3gyDr5Onsy31WlD6MN+gvdx9ElrcMcywURD1M N9y58ZhOsZnX3tUv0/euMrrGawb68IZi22HeZfTU5Xg2Q9uwO/YL4pFH5pi0ZBtd wXVc2UXlx8a9WhA3fIPP39a+WfpJ7mtWIVn7dGN/skABA/Qk1LXJjeDTQqy44qCs nhn31Rsc2LppOZnZeHku9pgLvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwcdf6h o67UkRzPi5AaTMZXgR+JMB8GA1UdIwQYMBaAFG+awEzlrHGnwrevsaVXJ6EOWwbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlDMi9BQjBERjRGMjNB QTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2NhZkN0Ni14cFZjbm9RNWJC dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1ckFUT1dzY2FmQ3Q2LXhwVmNub1E1YkJ1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlDMi9BQjBERjRGMjNBQTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2Nh ZkN0Ni14cFZjbm9RNWJCdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPD4Qtzi+k+HCDsiUWDFWTp6Da7DGcHDiPonv1ZFYaykvRsNlw8r6a 7o0obaAQVjH2Fh2hbHZd6KtiDyGX+PA9v4gkzL1/2X1GDNLp/oyZBzy8wMaRRRZO N62oYvGKSoinV1kKr2px0fn1ukLuVKfnbneIlwKlE3VJ5ZCgYRY6avXK2G0bgJL5 nuL+swaxYwtcXTWQsHN3sWXvBJGrK7XgiX1dxF7uUtEAQdMPeS/tRrMZAle3CNR+ gVm114NM1Q1eOyUWbpGE7j2zrRqaZnoaUwDVaHv7PeLsVQ23Se+AXBtqv5ueKzZe xs/e8k6A0Dleof+S6dsMdYZk2eV0mIF9 -----END CERTIFICATE-----Generated at Sat Dec 6 22:20:24 2025 by rpki-client