This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft File: bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json) Hash identifier: k1JT1sCG7bA1cryZkkI2f7AZ9hcRE1OawXWMvKTkkQg= Subject key identifier: 40:CA:3B:95:EB:5D:B1:F9:41:54:20:CC:C1:8E:BF:ED:18:9F:FA:90 Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 Certificate issuer: /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Certificate serial: 041D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft Manifest number: 03E9 Signing time: Thu 04 Dec 2025 23:07:56 +0000 Manifest this update: Thu 04 Dec 2025 23:07:55 +0000 Manifest next update: Thu 11 Dec 2025 23:07:55 +0000 Files and hashes: 1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: Yuj/RoYJzHxVdSandARjH3JXqYHIFrGTxCaMo136r5M=) 2: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: uzprXmLZAeVeFEFGMakzKpKMKq1iIlqcTuQSaK0YrGo=) 3: AD17704445F611EE97DF317CC4F9AE02.roa (hash: sdrVSjIs8Qd6YgjT3RuNMeG76kE1PDfBoWYkgwiCgcM=) 4: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: r7+Epywiay/UAmGWjEXTbZ6MxuYjSj6zJi2sl5IN5FE=) 5: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: YgWtLAFjeyb8EUf6jgk5P6z3rHF4ij9vs7WYRKlGxPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1053 (0x41d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Validity Not Before: Dec 4 23:07:55 2025 GMT Not After : Dec 11 23:07:55 2025 GMT Subject: CN=6932144b-53b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1a:95:b7:3d:25:ec:df:7b:9e:c7:13:44:51: 21:ed:1a:66:24:b6:4d:8f:be:dc:af:8e:f1:ee:df: 63:32:cf:d5:8d:84:77:74:18:d5:0d:60:33:e5:dc: 08:21:55:4d:b9:c8:ec:43:3e:a4:2c:e3:22:25:53: 45:38:b1:5c:1b:61:0c:92:ca:f5:99:3c:87:55:54: 3d:3a:83:31:20:5f:af:ec:78:6c:49:fe:5d:8a:5a: 78:34:92:e2:7e:8e:d1:bd:e1:fa:ea:87:12:e8:8d: 88:98:28:83:cf:90:a4:04:4d:fa:7b:19:7a:02:cc: 96:c3:03:fb:a8:59:89:45:0f:e4:0f:a3:0c:a1:9e: 3e:27:21:98:95:e7:f4:e2:7b:cf:50:54:65:75:9e: 61:60:27:fe:b5:4f:18:9e:68:65:72:a3:92:ab:ab: 25:48:e0:02:a7:b3:3b:a3:b7:db:89:fd:da:a2:a4: 09:c9:6a:81:a5:81:da:2b:46:80:e5:8f:4b:0b:d1: dc:0e:77:a3:1c:19:3c:46:04:70:8a:32:0b:c2:27: 1f:ce:65:02:79:1e:e9:b0:bf:7f:50:7c:51:cf:c5: c4:26:7a:d8:d1:d0:2f:2a:a9:d1:1f:69:9b:3c:1b: fc:67:00:5b:68:d1:6d:03:25:1d:56:fa:62:88:d3: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CA:3B:95:EB:5D:B1:F9:41:54:20:CC:C1:8E:BF:ED:18:9F:FA:90 X509v3 Authority Key Identifier: keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:42:17:2c:34:ee:a7:bd:8b:e0:d0:ba:4a:af:47:19:71:35: 0d:8d:0a:33:ac:33:a0:41:e7:ef:3c:53:69:e5:c2:db:e5:06: 51:74:83:16:27:ea:a5:58:9f:ac:e4:5e:f6:10:ff:8e:41:88: 39:1a:f8:b6:73:9c:bc:0f:08:b4:03:3f:bb:98:a1:ec:3b:56: 21:dd:e7:7e:9a:35:89:78:e4:2b:37:b1:8d:d1:3e:52:34:55: 7c:f5:84:7f:4f:5b:bc:ea:a6:4b:d0:9a:9c:35:94:6b:b7:7c: a3:7d:75:37:c5:13:be:81:36:c1:65:f8:a2:6e:de:fd:0b:71: 89:22:84:9f:a9:9e:f2:6e:9b:30:7c:2a:f8:33:d8:01:62:62: d9:3e:d0:5e:be:37:f7:00:41:11:df:c9:05:fa:34:eb:ae:74: 00:d9:76:63:57:63:f1:f2:45:07:7a:2b:ec:45:39:67:f5:2a: de:1f:8e:93:08:b2:26:0e:a6:b9:48:03:7c:ad:3d:f1:b9:c7: 35:00:c1:55:be:4d:84:30:92:fe:dc:e3:46:43:78:92:70:7f: 50:cc:fc:85:d6:c3:d2:d2:8c:13:59:48:e9:4b:60:bd:85:b8: 04:29:1c:01:c4:b0:83:b5:60:8b:6e:cb:2e:c6:89:3e:80:de: f7:74:64:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMTYxMTAvBgNVBAUTKDZEQkQ1QzREMDEyMUZDQjMxOEU3OEM0NTFCNkY1Njcz MjA5ODYwMDIwHhcNMjUxMjA0MjMwNzU1WhcNMjUxMjExMjMwNzU1WjAYMRYwFAYD VQQDEw02OTMyMTQ0Yi01M2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hqVtz0l7N97nscTRFEh7RpmJLZNj77cr47x7t9jMs/VjYR3dBjVDWAz5dwI IVVNucjsQz6kLOMiJVNFOLFcG2EMksr1mTyHVVQ9OoMxIF+v7HhsSf5dilp4NJLi fo7RveH66ocS6I2ImCiDz5CkBE36exl6AsyWwwP7qFmJRQ/kD6MMoZ4+JyGYlef0 4nvPUFRldZ5hYCf+tU8YnmhlcqOSq6slSOACp7M7o7fbif3aoqQJyWqBpYHaK0aA 5Y9LC9HcDnejHBk8RgRwijILwicfzmUCeR7psL9/UHxRz8XEJnrY0dAvKqnRH2mb PBv8ZwBbaNFtAyUdVvpiiNM4ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDKO5Xr XbH5QVQgzMGOv+0Yn/qQMB8GA1UdIwQYMBaAFG29XE0BIfyzGOeMRRtvVnMgmGAC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIxNi9EQzc4MjY4Q0I5 NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9MTVk1NHhGRzI5V2N5Q1lZ QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JiMWNUUUVoX0xNWTU0eEZHMjlXY3lDWVlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIxNi9EQzc4MjY4Q0I5NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9M TVk1NHhGRzI5V2N5Q1lZQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhQhcsNO6nvYvg0LpKr0cZcTUNjQozrDOgQefvPFNp5cLb5QZRdIMW J+qlWJ+s5F72EP+OQYg5Gvi2c5y8Dwi0Az+7mKHsO1Yh3ed+mjWJeOQrN7GN0T5S NFV89YR/T1u86qZL0JqcNZRrt3yjfXU3xRO+gTbBZfiibt79C3GJIoSfqZ7ybpsw fCr4M9gBYmLZPtBevjf3AEER38kF+jTrrnQA2XZjV2Px8kUHeivsRTln9SreH46T CLImDqa5SAN8rT3xucc1AMFVvk2EMJL+3ONGQ3iScH9QzPyF1sPS0owTWUjpS2C9 hbgEKRwBxLCDtWCLbssuxok+gN73dGSd -----END CERTIFICATE-----Generated at Sat Dec 6 15:29:52 2025 by rpki-client