This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft File: AShwXWnFHg4rB4rtuZiR5_GbTR8.mft (raw, json) Hash identifier: mV/Fvq5tRau3oAcZ20+NmisGooackznkZnelDFn9cmY= Subject key identifier: BA:B4:C9:EC:FC:F6:9B:EF:9A:49:A8:00:5D:11:78:DB:83:50:58:53 Authority key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F Certificate issuer: /CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Certificate serial: 0BEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft Manifest number: 0BDC Signing time: Thu 04 Dec 2025 18:16:34 +0000 Manifest this update: Thu 04 Dec 2025 18:16:34 +0000 Manifest next update: Thu 11 Dec 2025 18:16:34 +0000 Files and hashes: 1: AShwXWnFHg4rB4rtuZiR5_GbTR8.crl (hash: mXd/KLmUr3PRwTJIkZrCvTFD4j+yFI8+V2u15a1ngLw=) 2: E85B23282DF211EAA63F5D60C4F9AE02.roa (hash: mo/NLmT3qTw906fWZIYD+HCMnaLWUZhtdPeHn3oqJ6A=) 3: 71E30CDCC4ED11EAA1C5766AC4F9AE02.roa (hash: vucacXYSTLw3pjicQM0MXD2U1//BsbEO3gpX4wVcXB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3050 (0xbea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C0B, serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Validity Not Before: Dec 4 18:16:34 2025 GMT Not After : Dec 11 18:16:34 2025 GMT Subject: CN=6931d002-0a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:48:dc:41:fe:8d:b9:90:e2:9c:5e:20:e1:28: dd:59:bf:ce:e3:2a:e4:0a:66:d0:fd:6f:a2:b6:08: 01:07:85:20:19:f4:81:6f:04:73:ba:1c:bf:6c:2e: c9:e0:4e:23:90:fa:fe:25:ec:20:eb:96:53:e9:8b: 7e:72:3d:a7:e1:e5:c5:85:91:36:45:e3:74:f3:c8: da:d2:67:ae:08:fb:40:23:7a:f8:2a:ac:17:f7:35: 9a:f4:84:15:e7:09:67:16:fb:b0:ba:c2:fa:06:3e: 71:0e:1b:e7:ca:a6:89:19:66:d5:92:c9:d5:66:5b: eb:36:e1:cb:ea:ed:16:23:00:e8:2f:ff:92:61:24: 06:ee:d1:e2:50:e7:e0:39:f0:4f:04:a9:e6:da:d8: 90:5f:be:4e:89:a4:36:ea:bf:f6:6d:17:47:09:d9: 25:47:2b:6c:dd:3e:9a:47:6e:76:77:0f:07:19:62: e6:7d:22:47:50:95:a3:1c:be:3e:dd:53:aa:f8:e8: f4:7d:50:3b:e8:5c:17:f2:61:bb:b1:4b:e7:64:9f: ee:f8:47:be:bf:8c:1a:97:5e:a7:02:7c:ca:f4:00: dc:b9:4f:f5:2b:4f:3c:e6:39:ab:70:a2:1f:6f:9a: 2a:06:18:37:98:9f:1a:91:99:dc:32:13:b6:02:1d: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B4:C9:EC:FC:F6:9B:EF:9A:49:A8:00:5D:11:78:DB:83:50:58:53 X509v3 Authority Key Identifier: keyid:01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:07:7d:ab:9d:20:fa:94:93:45:43:98:6f:c0:9f:06:d1:ad: 09:42:61:75:c4:00:1e:8f:b1:15:86:6a:99:47:a0:81:de:fb: 60:a7:b3:4c:15:e7:b9:fc:d6:be:9a:ec:b3:69:08:32:19:16: f5:a8:b8:c4:56:a6:d2:82:d9:a4:46:cd:bd:98:33:2e:34:a1: 9c:9a:fe:ea:28:33:77:66:61:77:23:a8:a6:e0:3a:ad:77:75: e4:e0:7a:53:83:ee:4a:6a:c4:83:ac:35:3c:e4:06:78:40:f1: be:7b:40:09:0c:f4:b5:e5:cc:c7:6f:b7:13:c2:5c:11:57:ef: 44:1a:d8:e9:20:f1:c0:0f:50:55:6e:b5:12:c0:e2:5f:67:58: 1d:1d:8e:ec:2c:26:58:b3:00:91:3f:f3:2e:ba:e1:87:23:0f: 4b:fa:b9:2e:a7:e3:de:e8:bd:a3:ed:81:70:8f:b0:63:8a:5c: fa:83:e6:c0:58:cb:e1:58:7b:44:6c:57:7c:d3:eb:63:bf:d7: 58:4d:4c:22:d7:75:b6:be:13:1c:e9:36:1a:5c:b6:b6:3b:9f: 40:84:ed:54:0a:59:66:ba:33:1c:f5:ab:8e:08:88:01:02:be: 2d:dc:3c:07:e3:16:51:83:32:6d:73:ca:05:bf:d7:e8:d4:24: 08:4a:ed:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDMEIxMTAvBgNVBAUTKDAxMjg3MDVENjlDNTFFMEUyQjA3OEFFREI5OTg5MUU3 RjE5QjREMUYwHhcNMjUxMjA0MTgxNjM0WhcNMjUxMjExMTgxNjM0WjAYMRYwFAYD VQQDEw02OTMxZDAwMi0wYTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UjcQf6NuZDinF4g4SjdWb/O4yrkCmbQ/W+itggBB4UgGfSBbwRzuhy/bC7J 4E4jkPr+Jewg65ZT6Yt+cj2n4eXFhZE2ReN088ja0meuCPtAI3r4KqwX9zWa9IQV 5wlnFvuwusL6Bj5xDhvnyqaJGWbVksnVZlvrNuHL6u0WIwDoL/+SYSQG7tHiUOfg OfBPBKnm2tiQX75OiaQ26r/2bRdHCdklRyts3T6aR252dw8HGWLmfSJHUJWjHL4+ 3VOq+Oj0fVA76FwX8mG7sUvnZJ/u+Ee+v4wal16nAnzK9ADcuU/1K0885jmrcKIf b5oqBhg3mJ8akZncMhO2Ah3IzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLq0yez8 9pvvmkmoAF0ReNuDUFhTMB8GA1UdIwQYMBaAFAEocF1pxR4OKweK7bmYkefxm00f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEMwQi80NDU5NDQ4QzJD NkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhnNHJCNHJ0dVppUjVfR2JU UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FTaHdYV25GSGc0ckI0cnR1WmlSNV9HYlRSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEMwQi80NDU5NDQ4QzJDNkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhn NHJCNHJ0dVppUjVfR2JUUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1B32rnSD6lJNFQ5hvwJ8G0a0JQmF1xAAej7EVhmqZR6CB3vtgp7NM Fee5/Na+muyzaQgyGRb1qLjEVqbSgtmkRs29mDMuNKGcmv7qKDN3ZmF3I6im4Dqt d3Xk4HpTg+5KasSDrDU85AZ4QPG+e0AJDPS15czHb7cTwlwRV+9EGtjpIPHAD1BV brUSwOJfZ1gdHY7sLCZYswCRP/MuuuGHIw9L+rkup+Pe6L2j7YFwj7Bjilz6g+bA WMvhWHtEbFd80+tjv9dYTUwi13W2vhMc6TYaXLa2O59AhO1UCllmujMc9auOCIgB Ar4t3DwH4xZRgzJtc8oFv9fo1CQISu36 -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:36 2025 by rpki-client