This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft File: P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json) Hash identifier: Rge387ZGQIgQ9FMrh39iF96SjtZSJElXn4aGyDzY8+Q= Subject key identifier: 8C:F5:D8:8A:30:22:F4:88:E3:84:CE:A9:CC:2D:CA:ED:BC:EE:88:F7 Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 Certificate issuer: /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Certificate serial: 0CAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft Manifest number: 0CA3 Signing time: Sat 06 Dec 2025 17:43:40 +0000 Manifest this update: Sat 06 Dec 2025 17:43:40 +0000 Manifest next update: Sat 13 Dec 2025 17:43:40 +0000 Files and hashes: 1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: 19VrMh3afFlkZxxeJg8ChN0jJfo5neMho8jwTrZrD4w=) 2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: 78Vf6/fB7sknA1Wt2VtN9AZj7sBbXgPyMuxI8cL1zlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3244 (0xcac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D8E, serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Validity Not Before: Dec 6 17:43:40 2025 GMT Not After : Dec 13 17:43:40 2025 GMT Subject: CN=69346b4c-7297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:d9:fb:5d:64:7b:b0:0e:94:e0:31:50:1e: f5:63:4b:88:fc:cc:18:03:4d:27:a0:6b:b4:d4:69: 62:83:fa:b2:1d:25:b4:c0:cf:54:2b:dc:18:00:da: c7:d5:c8:c0:0b:e1:43:09:47:61:a6:6a:d3:46:f8: 82:fd:95:27:08:0b:9b:66:5b:26:a3:70:5f:d1:84: 45:b1:8d:ad:7d:b7:a6:6c:cd:53:9a:6b:56:9a:57: 6e:6f:f4:37:4f:c5:56:64:6b:99:48:8a:61:79:ee: 70:ad:16:29:b1:be:6d:c7:7b:82:61:aa:e7:e2:4b: 4a:1e:e7:fb:42:01:ef:61:13:47:77:57:b2:82:d5: 35:63:a0:9c:c0:41:95:02:90:06:ee:9b:43:d4:a8: 38:e8:01:71:ea:aa:ce:3f:d2:c3:5d:fe:d3:2c:da: 3a:1e:35:d3:ea:e5:64:44:03:81:1d:a3:5a:92:64: 99:1a:e5:63:51:81:5c:31:29:6a:cc:ce:1f:6f:bd: f4:0f:03:5d:dc:11:3d:4d:44:40:a8:ee:db:13:21: d0:27:27:5d:5e:3a:cd:8e:1a:8c:df:36:d4:1a:93: 8e:6d:66:1c:33:e3:04:ff:70:9d:78:6c:81:79:22: 2f:1e:16:6f:2d:6e:cc:e9:cd:1a:6a:5d:ee:5b:ac: 6d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F5:D8:8A:30:22:F4:88:E3:84:CE:A9:CC:2D:CA:ED:BC:EE:88:F7 X509v3 Authority Key Identifier: keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ed:fd:dc:e6:21:c5:a4:84:9f:b0:20:e3:4c:87:05:0b:e5: c6:e9:a9:5f:01:99:a2:16:4c:28:c3:f3:09:28:7d:32:af:7a: bc:14:77:75:f9:b7:e1:0c:0b:4f:d8:92:84:a7:f8:0c:e1:f6: 42:d1:62:99:47:4d:d8:8d:a2:69:94:2f:3c:ae:81:60:1c:c0: 79:87:6b:c7:bd:70:62:1f:40:1e:f8:13:fe:89:94:2d:da:47: df:ae:b7:d7:ca:48:58:88:18:98:22:3c:d0:c2:80:a0:f8:5f: 6f:34:c3:4d:51:08:29:15:01:98:c9:a8:01:2e:ca:e1:bf:8d: be:b2:d5:4a:90:ca:c2:72:2f:91:cf:9c:11:4c:de:40:32:23: 6f:ae:0d:a6:9f:f0:8f:cd:f6:ed:7d:b2:16:cb:3b:59:7b:96: 6a:05:14:2c:b6:9b:40:13:12:d0:4a:d0:20:53:11:0a:5c:50: bd:d5:dc:fc:cd:a0:1a:13:db:87:5b:c1:7f:04:e8:06:b6:0a: e1:e2:72:aa:c7:6f:9a:72:f6:4c:3c:1d:03:99:0e:e1:b6:02: 30:e7:f3:62:43:de:9c:6a:ed:66:a7:e4:0f:bb:5a:83:e5:d8: 38:ce:1f:e1:e2:5c:15:e4:89:78:5c:3b:f6:39:9f:c2:01:ca: 51:aa:d3:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREOEUxMTAvBgNVBAUTKDNGN0Q5QkJBRUQ3QzVCRkRCQkEzQTM0OUFCRTk2QjIx QUQyN0RBNjcwHhcNMjUxMjA2MTc0MzQwWhcNMjUxMjEzMTc0MzQwWjAYMRYwFAYD VQQDEw02OTM0NmI0Yy03Mjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApo7Z+11ke7AOlOAxUB71Y0uI/MwYA00noGu01Glig/qyHSW0wM9UK9wYANrH 1cjAC+FDCUdhpmrTRviC/ZUnCAubZlsmo3Bf0YRFsY2tfbembM1TmmtWmldub/Q3 T8VWZGuZSIphee5wrRYpsb5tx3uCYarn4ktKHuf7QgHvYRNHd1eygtU1Y6CcwEGV ApAG7ptD1Kg46AFx6qrOP9LDXf7TLNo6HjXT6uVkRAOBHaNakmSZGuVjUYFcMSlq zM4fb730DwNd3BE9TURAqO7bEyHQJyddXjrNjhqM3zbUGpOObWYcM+ME/3CdeGyB eSIvHhZvLW7M6c0aal3uW6xt2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIz12Iow IvSI44TOqcwtyu287oj3MB8GA1UdIwQYMBaAFD99m7rtfFv9u6OjSavpayGtJ9pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQ4RS81ODlCOTMzQzA2 QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdfMjdvNk5KcS1scklhMG4y bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzMmJ1dTE4V18yN282TkpxLWxySWEwbjJtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQ4RS81ODlCOTMzQzA2QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdf MjdvNk5KcS1scklhMG4ybWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq7f3c5iHFpISfsCDjTIcFC+XG6alfAZmiFkwow/MJKH0yr3q8FHd1 +bfhDAtP2JKEp/gM4fZC0WKZR03YjaJplC88roFgHMB5h2vHvXBiH0Ae+BP+iZQt 2kffrrfXykhYiBiYIjzQwoCg+F9vNMNNUQgpFQGYyagBLsrhv42+stVKkMrCci+R z5wRTN5AMiNvrg2mn/CPzfbtfbIWyztZe5ZqBRQstptAExLQStAgUxEKXFC91dz8 zaAaE9uHW8F/BOgGtgrh4nKqx2+acvZMPB0DmQ7htgIw5/NiQ96cau1mp+QPu1qD 5dg4zh/h4lwV5Il4XDv2OZ/CAcpRqtN3 -----END CERTIFICATE-----Generated at Sun Dec 7 04:43:28 2025 by rpki-client