This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft File: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json) Hash identifier: eSP+QEpRjo//YNeHfgC0kGmLCwGaJ/SZbCykQ8FdqIM= Subject key identifier: D6:C8:30:6E:71:D2:F3:CA:14:02:17:72:8D:E6:14:93:FA:8C:1C:9E Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Certificate serial: 0A69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft Manifest number: 0A53 Signing time: Sat 06 Dec 2025 18:55:23 +0000 Manifest this update: Sat 06 Dec 2025 18:55:22 +0000 Manifest next update: Sat 13 Dec 2025 18:55:22 +0000 Files and hashes: 1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: n4Rgdc6ifJ1LjKlyh+m8aNeXfrSW2pcUfKuAhK848pg=) 2: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: dz0lDVUdbKurIPgLKnTIK+TUvk2MtsrFSHr5aV4oHoA=) 3: E4EFE6905ECB11ECA9B55A3BC4F9AE02.roa (hash: ACLukHzl4iP7lAUKq3zWaW1x17F+UkqOsay4tSs+0D0=) 4: A1C764027A5B11EA98745A0EC4F9AE02.roa (hash: WPHw7kNP0n6c5UltUwmrIvy70bAxnVBFcfWA6in4LsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2665 (0xa69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Validity Not Before: Dec 6 18:55:22 2025 GMT Not After : Dec 13 18:55:22 2025 GMT Subject: CN=69347c1a-1cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:51:58:f8:55:29:2e:a4:39:19:d2:7d:41: da:50:b2:7a:30:8f:f6:b9:ee:97:c3:7f:30:20:c1: 79:cd:8d:59:e9:99:d1:86:1e:48:24:a4:3d:91:8d: ad:b3:12:d7:5e:7e:01:94:4e:5d:1b:39:67:ee:34: 5b:fe:00:d3:7e:53:f6:7e:3e:14:51:cd:18:04:29: af:e9:88:5a:66:5a:91:83:1f:ea:4c:25:74:f7:2f: ec:96:3e:08:c9:47:02:72:81:3c:29:d3:42:a1:70: aa:ad:cd:90:f3:54:b1:1a:e0:d5:0f:13:b4:be:3f: 28:74:f6:4a:4a:c1:f8:a0:98:4e:b9:11:5b:4b:51: 09:1c:ea:d2:47:62:a6:3e:89:85:c4:56:5a:ff:ca: 4f:6b:25:fa:72:ec:64:2c:3b:a9:2a:2f:9b:b5:1d: 7d:1e:30:40:9a:0e:7a:f2:69:90:4d:71:33:aa:3d: dd:0a:55:51:65:d8:8c:2b:8a:48:07:47:4c:33:c5: 04:0d:1c:b5:46:14:36:24:46:85:d1:98:43:8d:7d: 41:85:b6:10:c4:e0:50:f5:88:1a:30:48:12:76:25: 20:cc:22:e2:c3:6c:06:81:ef:73:ee:32:55:ad:cb: 2c:6d:18:ac:ee:4c:1d:76:e2:e2:dc:6c:19:55:9a: eb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C8:30:6E:71:D2:F3:CA:14:02:17:72:8D:E6:14:93:FA:8C:1C:9E X509v3 Authority Key Identifier: keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:db:f8:00:7b:a3:22:b1:d3:21:3c:e8:6a:ef:bf:02:e3:a7: 48:1e:28:d3:ab:04:fb:df:98:2a:d4:1a:4a:8f:bb:b2:f1:d0: 2f:b3:0b:e9:14:69:eb:93:f3:b6:10:d2:e7:dc:ab:b2:b0:03: 03:4f:33:b3:a1:51:b3:34:09:45:20:37:36:0f:57:b9:05:3e: 85:57:16:2a:be:87:3b:bd:43:c0:2f:f5:3e:6e:6c:cc:fb:64: 60:7b:02:6e:a9:9f:fc:27:b8:9c:50:ee:32:3f:3e:7f:1b:61: df:f5:35:af:a9:50:2d:18:f6:24:ac:27:16:8b:76:c9:2a:5a: 94:9e:c9:e5:2b:72:45:17:59:6f:6a:58:2f:32:d4:b4:60:48: bc:f6:e1:da:5f:3b:84:b3:cd:19:d4:66:81:bf:e7:52:d8:6e: 8b:ca:6d:9f:62:2e:78:52:0b:ec:31:d9:86:f6:d6:9d:3e:0d: 53:c9:44:1a:ab:1a:16:0f:cd:20:24:bc:f8:72:19:c0:fa:a7: 07:b4:57:2d:d6:8c:7e:73:08:68:a1:bd:f3:71:6d:06:fd:08: a1:c3:3d:94:61:5b:8d:5e:18:96:a4:c1:bf:d2:a5:f4:53:e7: dd:5c:44:7b:74:d7:d5:c5:2d:7d:04:45:2f:d5:dc:bc:1b:12: 8f:3a:70:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5RDYxMTAvBgNVBAUTKDEzNjc0MUJEOUU4NzBGMDZFQ0U1Q0IzNTVCOEM3NTcx Q0M5NkJBNzQwHhcNMjUxMjA2MTg1NTIyWhcNMjUxMjEzMTg1NTIyWjAYMRYwFAYD VQQDEw02OTM0N2MxYS0xY2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4RRWPhVKS6kORnSfUHaULJ6MI/2ue6Xw38wIMF5zY1Z6ZnRhh5IJKQ9kY2t sxLXXn4BlE5dGzln7jRb/gDTflP2fj4UUc0YBCmv6YhaZlqRgx/qTCV09y/slj4I yUcCcoE8KdNCoXCqrc2Q81SxGuDVDxO0vj8odPZKSsH4oJhOuRFbS1EJHOrSR2Km PomFxFZa/8pPayX6cuxkLDupKi+btR19HjBAmg568mmQTXEzqj3dClVRZdiMK4pI B0dMM8UEDRy1RhQ2JEaF0ZhDjX1BhbYQxOBQ9YgaMEgSdiUgzCLiw2wGge9z7jJV rcssbRis7kwdduLi3GwZVZrryQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbIMG5x 0vPKFAIXco3mFJP6jByeMB8GA1UdIwQYMBaAFBNnQb2ehw8G7OXLNVuMdXHMlrp0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTlENi85RTY2RjUxMjdB NTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3YnM1Y3MxVzR4MWNjeVd1 blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UyZEJ2WjZIRHdiczVjczFXNHgxY2N5V3VuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTlENi85RTY2RjUxMjdBNTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3 YnM1Y3MxVzR4MWNjeVd1blEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC62/gAe6MisdMhPOhq778C46dIHijTqwT735gq1BpKj7uy8dAvswvp FGnrk/O2ENLn3KuysAMDTzOzoVGzNAlFIDc2D1e5BT6FVxYqvoc7vUPAL/U+bmzM +2RgewJuqZ/8J7icUO4yPz5/G2Hf9TWvqVAtGPYkrCcWi3bJKlqUnsnlK3JFF1lv algvMtS0YEi89uHaXzuEs80Z1GaBv+dS2G6Lym2fYi54UgvsMdmG9tadPg1TyUQa qxoWD80gJLz4chnA+qcHtFct1ox+cwhoob3zcW0G/Qihwz2UYVuNXhiWpMG/0qX0 U+fdXER7dNfVxS19BEUv1dy8GxKPOnBI -----END CERTIFICATE-----Generated at Sat Dec 6 20:55:42 2025 by rpki-client