This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json) Hash identifier: UiWrwDIuhHOl2N6UQhEE+K3WrT/ciGrXlTHIuc7J39c= Subject key identifier: 92:A7:E6:91:11:43:7E:91:EE:77:55:34:D8:83:7C:D4:A6:18:51:E0 Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Certificate serial: 0585 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft Manifest number: 0573 Signing time: Thu 04 Dec 2025 21:58:20 +0000 Manifest this update: Thu 04 Dec 2025 21:58:19 +0000 Manifest next update: Thu 11 Dec 2025 21:58:19 +0000 Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: N9RzVY7K3hbV+OKrKzL2NHBUz9eD2mKWha6sSdDV1ss=) 2: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: oVtoN+E5ZyRj5IanIEy9OruScApwiNCgt2Cj41NAG60=) 3: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: 0vZEihrEiMOTrqZx3qCnY1CqP36ZOjzC0GFn4Q1L7IY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1413 (0x585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Validity Not Before: Dec 4 21:58:19 2025 GMT Not After : Dec 11 21:58:19 2025 GMT Subject: CN=693203fc-4c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:43:12:46:a6:cc:64:8d:63:b8:59:c2:cc:42: 61:12:d7:4a:ee:2a:e4:30:a3:f5:ff:7b:fb:b3:51: 57:7f:57:22:06:28:8e:60:3b:8e:b6:a0:e0:b7:7d: 7f:10:21:41:9c:50:16:f6:79:12:9f:46:5f:40:66: 85:20:21:2d:82:9c:6d:22:94:7b:2b:47:52:45:14: 97:4e:29:53:e2:62:d3:05:a3:7f:8f:c1:e8:f4:8f: c5:84:54:29:61:2a:23:a4:dd:5e:79:bc:84:f2:17: 89:03:f0:f3:ec:60:11:53:c6:f1:43:77:1c:f3:a6: 20:b8:54:1c:3b:37:8b:d1:e8:6c:52:e7:ab:4a:36: 43:a0:5f:f0:33:65:2c:24:56:33:d1:70:03:3b:15: 5f:3b:74:4e:7a:57:ca:ae:fe:b4:75:ba:27:9d:92: 3e:ed:f9:44:00:0d:43:51:8c:fe:a7:ce:71:07:52: a1:50:95:1d:ea:4b:c1:e0:77:4d:1f:f3:50:84:f6: 29:40:0f:c9:57:42:0a:30:3d:c4:3a:ff:e6:2c:ca: 25:1a:ea:8a:ce:84:49:e3:b9:a0:70:4b:e2:b1:4c: 4d:93:d1:1c:7c:05:c9:32:ea:90:e2:3f:f2:6a:63: 91:68:5e:4e:85:8f:53:d7:60:16:5e:67:ff:6e:fa: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A7:E6:91:11:43:7E:91:EE:77:55:34:D8:83:7C:D4:A6:18:51:E0 X509v3 Authority Key Identifier: keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:be:d4:04:c1:a8:96:89:1e:83:cb:92:27:14:a3:ec:1f:3b: d4:5f:7c:70:13:23:09:12:0f:63:b2:f9:eb:d3:01:a3:f3:c6: 6a:60:82:5d:15:88:68:2a:43:6e:6a:fb:0c:f8:29:4b:bd:c5: 94:e8:92:01:24:f3:db:bd:72:ab:5a:48:1a:a4:b2:aa:86:5f: e1:ae:35:ea:dd:55:5b:b3:da:33:b9:63:a9:ec:36:31:d0:04: 4d:d3:28:52:cc:77:63:2a:09:46:15:12:f4:c3:0e:d8:64:63: cf:61:c9:eb:3e:f6:c9:23:cc:c6:e4:6c:6b:b9:df:cc:19:48: da:33:79:fe:df:80:b3:f6:39:a0:93:63:81:b1:0a:7f:ab:05: a9:d9:c1:ea:07:b8:20:13:f3:6e:23:35:e0:5d:9f:6b:e8:61: d4:d8:bd:fd:2b:7a:a5:9c:74:b3:1e:2a:68:1f:ea:69:18:d6: 3a:96:41:81:ad:88:ab:c6:80:d3:df:fc:95:a9:76:df:e9:0d: 9a:a9:c6:51:ed:cd:fd:d1:9b:8f:a0:00:86:85:a9:63:e0:be: 9f:a7:27:1b:9e:24:92:88:5e:76:27:19:ce:b0:4d:02:65:0e: b0:4f:a1:13:ec:46:cb:a4:79:db:9e:ac:14:d6:f0:c5:ce:78: 8b:a7:30:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1 ODE1MjMxRkYwHhcNMjUxMjA0MjE1ODE5WhcNMjUxMjExMjE1ODE5WjAYMRYwFAYD VQQDEw02OTMyMDNmYy00YzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UMSRqbMZI1juFnCzEJhEtdK7irkMKP1/3v7s1FXf1ciBiiOYDuOtqDgt31/ ECFBnFAW9nkSn0ZfQGaFICEtgpxtIpR7K0dSRRSXTilT4mLTBaN/j8Ho9I/FhFQp YSojpN1eebyE8heJA/Dz7GARU8bxQ3cc86YguFQcOzeL0ehsUuerSjZDoF/wM2Us JFYz0XADOxVfO3ROelfKrv60dbonnZI+7flEAA1DUYz+p85xB1KhUJUd6kvB4HdN H/NQhPYpQA/JV0IKMD3EOv/mLMolGuqKzoRJ47mgcEvisUxNk9EcfAXJMuqQ4j/y amORaF5OhY9T12AWXmf/bvp5YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKn5pER Q36R7ndVNNiDfNSmGFHgMB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjc4Qi8wNkIwQjYyQTBBNDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0 X1ZqbVBCRlNoRWhZRlNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCevtQEwaiWiR6Dy5InFKPsHzvUX3xwEyMJEg9jsvnr0wGj88ZqYIJd FYhoKkNuavsM+ClLvcWU6JIBJPPbvXKrWkgapLKqhl/hrjXq3VVbs9ozuWOp7DYx 0ARN0yhSzHdjKglGFRL0ww7YZGPPYcnrPvbJI8zG5Gxrud/MGUjaM3n+34Cz9jmg k2OBsQp/qwWp2cHqB7ggE/NuIzXgXZ9r6GHU2L39K3qlnHSzHipoH+ppGNY6lkGB rYirxoDT3/yVqXbf6Q2aqcZR7c390ZuPoACGhalj4L6fpycbniSSiF52JxnOsE0C ZQ6wT6ET7EbLpHnbnqwU1vDFzniLpzAV -----END CERTIFICATE-----Generated at Sat Dec 6 16:06:19 2025 by rpki-client