This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json) Hash identifier: XogcIDga662UWD8fJ6aCZAEioYNo5lyNCkre4fan4EE= Subject key identifier: 19:C9:22:1E:74:8F:55:2B:38:7C:7A:19:36:56:ED:F4:F6:A8:A7:A3 Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 053F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft Manifest number: 051D Signing time: Thu 04 Dec 2025 22:14:06 +0000 Manifest this update: Thu 04 Dec 2025 22:14:06 +0000 Manifest next update: Thu 11 Dec 2025 22:14:06 +0000 Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: WLwTD0LAVDGMIQCxMe4Lqw3Vb9cC2xJy/NCFz5D3wvk=) 2: 1BEFBED451B911F097C15C49C4F9AE02.roa (hash: au2wuZlStRAiQIz6GHb6zEgbdpYBgkZrv7Xcs6eeF3c=) 3: A042865C3DB211EE9EB40D3DC4F9AE02.roa (hash: ZqfsDoVxPPlDBErW76OplgU+s6rrOgPc04UOswio6BA=) 4: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: uvWCOvomLN/7hlVYLp/jcmXt9zO2kyVBg9I1lGQNm1w=) 5: 1CC78D4651B911F097C15C49C4F9AE02.roa (hash: eTkkjeUWF+laUxu3hlPAVMSxjb/tJZE5KKWsck/tHH4=) 6: 1D854DF451B911F097C15C49C4F9AE02.roa (hash: nW399cZU57cUehuWqrSPp5Ss8HGWsGUyXyuMRoZuVYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1343 (0x53f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Validity Not Before: Dec 4 22:14:06 2025 GMT Not After : Dec 11 22:14:06 2025 GMT Subject: CN=693207ae-ec02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9d:5d:d3:af:99:bc:52:55:7c:23:3e:6c:0d: d0:80:58:6f:9d:44:68:1f:46:86:21:cc:3b:56:e9: df:8c:cf:f8:9b:8f:1a:fe:5e:36:4a:3d:5f:7b:e2: 77:5b:80:79:89:8c:ca:ed:31:6e:ee:be:d2:55:8c: bc:67:94:e2:77:97:53:f7:2d:42:2d:01:e6:46:80: 89:1d:14:12:73:e5:b0:31:a0:72:77:e9:15:d0:9c: f4:29:29:4f:94:44:e6:a9:d8:d5:a8:3e:f3:47:94: 93:bf:e9:81:30:43:9f:b4:00:e4:f8:86:ef:2c:50: 56:8e:ba:b3:10:5b:6b:b4:fc:17:4f:29:99:bb:4d: 15:00:b2:fb:dc:4a:63:24:3a:97:49:ea:6a:54:06: 32:93:92:05:bb:95:b4:96:f9:61:5f:e6:a8:3a:26: 64:18:93:65:f5:17:11:ba:a3:7a:c0:75:2f:c3:7b: 64:af:47:d2:fe:4e:ea:79:ad:bc:df:1c:10:47:b1: 0c:61:14:b1:b0:25:1c:69:80:ef:18:b7:9e:51:54: e0:e1:29:97:95:a2:1c:a5:88:da:1d:d4:a8:da:fa: 25:6f:ec:da:34:9d:55:d2:78:6b:2d:3e:dc:80:c0: 6f:49:ea:7c:4d:d4:e2:cf:03:2a:3f:6c:aa:58:94: 7c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C9:22:1E:74:8F:55:2B:38:7C:7A:19:36:56:ED:F4:F6:A8:A7:A3 X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:72:59:26:26:ed:2f:40:36:10:10:86:bb:80:64:91:12:31: de:91:c8:6b:f6:17:1f:a1:ad:80:65:8e:e4:38:8d:18:1b:ad: 1e:05:79:a8:0d:30:ab:3f:23:6e:0b:59:7f:8a:84:fc:58:92: 56:ff:a3:7b:08:3d:7d:3a:d3:a9:8c:2c:6c:56:88:ad:e7:cc: d0:69:a4:d6:49:b0:9f:2e:5c:20:5f:bd:7f:3e:6c:78:d2:67: d5:fb:0e:74:6e:2b:a0:6d:9e:6b:12:08:c5:ce:3f:3b:6b:38: da:5b:cb:c6:e2:f1:bc:9f:a8:99:65:78:16:3a:15:62:e4:1c: 2f:73:70:01:94:c8:2a:a9:69:5d:7a:63:69:e3:80:f3:77:5a: c2:b1:5c:a8:d6:30:99:d8:d0:ba:5c:e5:61:16:dd:b7:e6:09: 21:c4:c0:f5:fb:85:b1:d3:f5:05:0c:aa:90:ae:2b:e6:ab:97: 80:47:87:64:36:99:07:b4:0a:23:bb:3f:4d:08:a9:0a:ff:6a: 20:2a:d9:40:20:61:36:b1:64:42:bb:01:dd:ea:1b:55:59:a1: 3f:5a:36:49:b1:7a:fa:53:51:28:91:05:30:25:7b:c0:cc:fa: ce:85:62:a1:15:76:ed:d9:6b:6d:f1:74:56:86:c8:84:e2:68: 48:09:86:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjUxMjA0MjIxNDA2WhcNMjUxMjExMjIxNDA2WjAYMRYwFAYD VQQDEw02OTMyMDdhZS1lYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1p1d06+ZvFJVfCM+bA3QgFhvnURoH0aGIcw7VunfjM/4m48a/l42Sj1fe+J3 W4B5iYzK7TFu7r7SVYy8Z5Tid5dT9y1CLQHmRoCJHRQSc+WwMaByd+kV0Jz0KSlP lETmqdjVqD7zR5STv+mBMEOftADk+IbvLFBWjrqzEFtrtPwXTymZu00VALL73Epj JDqXSepqVAYyk5IFu5W0lvlhX+aoOiZkGJNl9RcRuqN6wHUvw3tkr0fS/k7qea28 3xwQR7EMYRSxsCUcaYDvGLeeUVTg4SmXlaIcpYjaHdSo2volb+zaNJ1V0nhrLT7c gMBvSep8TdTizwMqP2yqWJR8WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnJIh50 j1UrOHx6GTZW7fT2qKejMB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM5Qi9BNDZFOTg5QTMyMkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlD ZGtNVmVnYnZxa3dIREg4LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLclkmJu0vQDYQEIa7gGSREjHekchr9hcfoa2AZY7kOI0YG60eBXmo DTCrPyNuC1l/ioT8WJJW/6N7CD19OtOpjCxsVoit58zQaaTWSbCfLlwgX71/Pmx4 0mfV+w50biugbZ5rEgjFzj87azjaW8vG4vG8n6iZZXgWOhVi5Bwvc3ABlMgqqWld emNp44Dzd1rCsVyo1jCZ2NC6XOVhFt235gkhxMD1+4Wx0/UFDKqQrivmq5eAR4dk NpkHtAojuz9NCKkK/2ogKtlAIGE2sWRCuwHd6htVWaE/WjZJsXr6U1EokQUwJXvA zPrOhWKhFXbt2Wtt8XRWhsiE4mhICYbz -----END CERTIFICATE-----Generated at Sat Dec 6 12:18:59 2025 by rpki-client