This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft File: Ci5d8bLD15feoVNn-qncOITNGzM.mft (raw, json) Hash identifier: SPQBJXtc+Z/6Arr5vFoVMr642o1ViR5yc0g4sQTE3NM= Subject key identifier: A1:E8:41:4E:58:CE:B9:41:5F:C3:40:7D:DF:92:A4:BF:3C:C6:4F:4E Authority key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 Certificate issuer: /CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Certificate serial: 0DE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft Manifest number: 0DD6 Signing time: Sat 06 Dec 2025 17:18:11 +0000 Manifest this update: Sat 06 Dec 2025 17:18:10 +0000 Manifest next update: Sat 13 Dec 2025 17:18:10 +0000 Files and hashes: 1: Ci5d8bLD15feoVNn-qncOITNGzM.crl (hash: E6mh3wfnmc6+yN8+8ASDLxQZL3wjtHXIHyTndCTuGqM=) 2: 4EEE01FCE15611EF9560323EC4F9AE02.roa (hash: 9Nz/F+iPTsdfTjIzxhDauJBST5Z1hrA/MujlPAQ3LmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3554 (0xde2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD096, serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Validity Not Before: Dec 6 17:18:10 2025 GMT Not After : Dec 13 17:18:10 2025 GMT Subject: CN=69346552-c9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dc:bd:b1:31:ae:8b:b0:ff:fa:85:4a:cd:0c: 0e:b6:ee:b9:85:0b:a6:c0:c7:81:38:45:3f:57:a5: 4a:1f:1c:d4:09:0b:27:5c:57:23:53:b5:82:86:02: 37:e2:86:e7:36:11:a6:38:2d:ff:18:b8:15:4e:61: 06:2c:c7:c1:b1:2a:b8:85:25:87:e4:0e:64:91:27: 2d:98:22:0f:35:64:1c:31:db:5c:ff:7e:fa:a3:76: 50:3f:b6:41:8d:43:8f:25:2e:0d:10:b8:9d:2a:a0: c0:2d:ea:a7:99:c6:95:98:42:bb:66:ec:c0:8c:4a: dc:2b:65:c8:77:f8:75:0c:55:2f:87:6a:ce:00:f6: 97:f2:aa:73:c4:77:ce:63:93:04:f4:ed:92:27:3a: a8:3a:09:63:fc:74:24:2d:de:aa:92:f0:86:c0:81: ea:11:f0:6f:cf:80:cb:5f:d6:e0:24:0a:79:5f:7d: fc:28:0c:ae:ec:0f:f3:cf:b1:0c:59:56:9f:67:1b: 08:04:8c:48:80:48:10:9f:8e:9f:02:85:9a:f3:57: 49:85:c6:b0:77:5e:be:b4:e8:33:05:08:60:fe:c8: 66:8d:05:65:aa:0b:9e:e9:fe:3b:9e:b7:48:6e:3a: 61:6f:17:16:c2:7f:c9:e2:9c:ac:7d:99:57:c2:4f: f4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E8:41:4E:58:CE:B9:41:5F:C3:40:7D:DF:92:A4:BF:3C:C6:4F:4E X509v3 Authority Key Identifier: keyid:0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:a5:ff:3a:3f:4a:5f:58:50:03:d5:3b:b3:88:81:60:aa:76: 6f:59:1f:96:eb:91:86:78:7e:12:7f:8a:4f:f7:41:68:62:0f: fa:3e:0a:ad:70:b2:6e:2f:af:d3:e4:55:5d:d3:8f:f9:c2:ed: 24:ab:55:af:ed:6b:3c:54:ca:c6:b6:f6:ee:e7:90:6d:6a:63: 2d:26:64:28:d4:7e:54:75:a1:68:c3:86:f4:e5:e4:cb:38:65: d3:56:29:7f:90:0f:b4:25:14:55:c9:fc:4c:8e:6f:66:a7:b4: 93:41:f9:b6:96:8c:80:e6:16:7e:de:3c:50:76:4d:56:a1:72: cf:c3:9d:f4:f2:b9:12:51:f6:49:f8:71:73:79:f5:f5:82:7a: 3f:95:9e:be:db:17:09:9c:f9:fc:58:d2:a3:c4:0f:b1:68:16: 7c:f1:84:fb:97:c1:0b:00:26:c8:03:96:d0:64:bd:9a:68:18: 06:76:cf:5d:84:59:cc:8d:41:21:b0:5e:cd:0b:24:59:4f:75: c0:51:8d:0e:f8:ae:f6:8b:1a:e8:25:d3:b6:4b:9c:b4:d7:ca: 40:0a:5e:9e:b7:20:02:fe:a0:73:fd:fb:2a:93:44:01:82:da: 60:e2:f6:33:9d:be:54:f1:bd:19:03:49:c9:d9:de:d4:ec:19: 09:90:d6:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwOTYxMTAvBgNVBAUTKDBBMkU1REYxQjJDM0Q3OTdERUExNTM2N0ZBQTlEQzM4 ODRDRDFCMzMwHhcNMjUxMjA2MTcxODEwWhcNMjUxMjEzMTcxODEwWjAYMRYwFAYD VQQDEw02OTM0NjU1Mi1jOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9y9sTGui7D/+oVKzQwOtu65hQumwMeBOEU/V6VKHxzUCQsnXFcjU7WChgI3 4obnNhGmOC3/GLgVTmEGLMfBsSq4hSWH5A5kkSctmCIPNWQcMdtc/376o3ZQP7ZB jUOPJS4NELidKqDALeqnmcaVmEK7ZuzAjErcK2XId/h1DFUvh2rOAPaX8qpzxHfO Y5ME9O2SJzqoOglj/HQkLd6qkvCGwIHqEfBvz4DLX9bgJAp5X338KAyu7A/zz7EM WVafZxsIBIxIgEgQn46fAoWa81dJhcawd16+tOgzBQhg/shmjQVlqgue6f47nrdI bjphbxcWwn/J4pysfZlXwk/0fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHoQU5Y zrlBX8NAfd+SpL88xk9OMB8GA1UdIwQYMBaAFAouXfGyw9eX3qFTZ/qp3DiEzRsz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA5Ni9FNTA0MkMyQUNB MzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1ZmVvVk5uLXFuY09JVE5H ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpNWQ4YkxEMTVmZW9WTm4tcW5jT0lUTkd6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDA5Ni9FNTA0MkMyQUNBMzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1 ZmVvVk5uLXFuY09JVE5Hek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDpf86P0pfWFAD1TuziIFgqnZvWR+W65GGeH4Sf4pP90FoYg/6Pgqt cLJuL6/T5FVd04/5wu0kq1Wv7Ws8VMrGtvbu55BtamMtJmQo1H5UdaFow4b05eTL OGXTVil/kA+0JRRVyfxMjm9mp7STQfm2loyA5hZ+3jxQdk1WoXLPw5308rkSUfZJ +HFzefX1gno/lZ6+2xcJnPn8WNKjxA+xaBZ88YT7l8ELACbIA5bQZL2aaBgGds9d hFnMjUEhsF7NCyRZT3XAUY0O+K72ixroJdO2S5y018pACl6etyAC/qBz/fsqk0QB gtpg4vYznb5U8b0ZA0nJ2d7U7BkJkNbx -----END CERTIFICATE-----Generated at Sun Dec 7 02:12:39 2025 by rpki-client