This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft File: 0fGDjm-uASwUWNKgeiJNnhEBJdw.mft (raw, json) Hash identifier: CVx7+M6xM/fZyHLVfdGA78VW8brEDUuGeOScQmaDezA= Subject key identifier: C1:43:0D:45:50:AF:18:88:37:CB:D2:B9:EE:EB:45:93:D5:7A:4F:2C Authority key identifier: D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC Certificate issuer: /CN=A91D3603/serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC Certificate serial: 053D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft Manifest number: 0536 Signing time: Thu 04 Dec 2025 22:05:11 +0000 Manifest this update: Thu 04 Dec 2025 22:05:10 +0000 Manifest next update: Thu 11 Dec 2025 22:05:10 +0000 Files and hashes: 1: 0fGDjm-uASwUWNKgeiJNnhEBJdw.crl (hash: 29KwwenC2Vt0YgHuDDOJVFRO2Rdfx9a0Vy8NuvLG4vE=) 2: 11F818F81F7311EC9027050AC4F9AE02.roa (hash: b/ItM9VGVv0zUWnweJ6+Pz3YcBgADXF1u82bmhYCBN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.crl rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1341 (0x53d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3603, serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC Validity Not Before: Dec 4 22:05:10 2025 GMT Not After : Dec 11 22:05:10 2025 GMT Subject: CN=69320597-3d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:e2:c7:69:7e:c3:91:20:df:bd:22:22:e5:ef: 59:27:52:29:74:2e:37:e7:84:53:db:80:47:9a:7f: af:d9:76:2f:7b:34:f1:78:6f:68:53:f6:42:32:a5: 4f:f9:f3:22:2d:d6:43:cb:d2:17:c1:6e:18:a4:11: 1b:38:5b:98:63:2b:21:2d:c5:ff:b8:7f:58:ab:cd: 70:19:5b:56:7e:82:2c:60:c8:5e:e5:b2:ba:b7:02: 09:70:69:26:35:d8:f2:38:3e:99:8b:f5:fc:d0:9f: d3:23:39:af:b2:3e:72:3c:7e:5f:1b:f4:7f:b0:b1: aa:63:44:3f:4c:51:cc:c6:5a:80:7f:80:1d:ad:51: 74:36:86:78:52:a2:a7:91:d3:38:ca:55:b9:46:9e: 18:2e:d7:64:9e:16:3a:6b:2f:b1:26:5c:84:ee:99: f7:4b:5d:3e:74:24:d2:16:0c:27:26:4c:b9:d3:32: 7f:7e:c7:23:da:cd:bd:a0:b3:f0:5e:47:55:32:6b: b8:b4:66:6c:a9:13:3d:e8:ab:32:9a:81:e1:b4:df: 98:2b:b4:58:35:af:d6:02:41:25:2d:4b:b0:02:aa: 80:ea:c0:d3:35:32:a9:1c:f6:1c:68:87:f5:63:3b: 28:9b:a0:3a:83:e0:fe:99:7c:d3:ea:cf:b2:d3:3d: 50:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:43:0D:45:50:AF:18:88:37:CB:D2:B9:EE:EB:45:93:D5:7A:4F:2C X509v3 Authority Key Identifier: keyid:D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:ef:a9:76:5a:98:82:42:e5:94:54:cb:9c:14:b7:14:4b:dd: 47:81:af:fc:26:d5:3c:36:e4:cc:2c:ea:db:25:d3:00:8a:db: a3:26:be:4f:14:42:0f:e6:35:7e:20:50:7e:6d:30:7a:01:43: 2e:8b:c7:83:3f:a8:97:47:11:9b:68:6f:97:88:68:e9:41:d9: c3:27:ea:2b:78:49:d5:6e:47:b2:1e:f4:35:0a:e4:bf:a3:af: c6:1d:a8:ad:1e:f7:ff:df:ba:63:4e:e9:8b:05:f2:3f:2e:26: d5:d3:70:89:b6:9c:68:a8:be:64:ab:01:e0:f3:16:63:96:19: db:45:59:93:a7:f1:ef:f0:dd:63:48:91:19:f6:a6:5c:b6:4d: 5b:61:2f:65:6c:07:9c:00:73:d5:a6:df:21:16:20:99:29:a1: fc:82:7f:35:37:42:3e:3f:4a:a4:7b:bf:04:29:18:12:83:79: 47:83:91:95:96:ee:96:21:fb:c4:8e:ba:1e:37:3b:ed:67:50: f7:37:16:63:79:6b:8d:b3:fa:7e:fd:06:29:2b:e0:91:dc:87: 21:b6:84:46:af:1f:f1:da:c2:11:f5:ef:01:7c:ab:0c:7e:2d: c7:2a:57:d5:2b:7f:c4:bb:60:c9:08:89:d4:6e:b9:c3:18:cd: 64:16:72:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2MDMxMTAvBgNVBAUTKEQxRjE4MzhFNkZBRTAxMkMxNDU4RDJBMDdBMjI0RDlF MTEwMTI1REMwHhcNMjUxMjA0MjIwNTEwWhcNMjUxMjExMjIwNTEwWjAYMRYwFAYD VQQDEw02OTMyMDU5Ny0zZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/eLHaX7DkSDfvSIi5e9ZJ1IpdC4354RT24BHmn+v2XYvezTxeG9oU/ZCMqVP +fMiLdZDy9IXwW4YpBEbOFuYYyshLcX/uH9Yq81wGVtWfoIsYMhe5bK6twIJcGkm NdjyOD6Zi/X80J/TIzmvsj5yPH5fG/R/sLGqY0Q/TFHMxlqAf4AdrVF0NoZ4UqKn kdM4ylW5Rp4YLtdknhY6ay+xJlyE7pn3S10+dCTSFgwnJky50zJ/fscj2s29oLPw XkdVMmu4tGZsqRM96KsymoHhtN+YK7RYNa/WAkElLUuwAqqA6sDTNTKpHPYcaIf1 Yzsom6A6g+D+mXzT6s+y0z1QEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFDDUVQ rxiIN8vSue7rRZPVek8sMB8GA1UdIwQYMBaAFNHxg45vrgEsFFjSoHoiTZ4RASXc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzYwMy84QzgyQUMzNDFG NkMxMUVDODc1ODA2NzJDNEY5QUUwMi8wZkdEam0tdUFTd1VXTktnZWlKTm5oRUJK ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmR0RqbS11QVN3VVdOS2dlaUpObmhFQkpkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzYwMy84QzgyQUMzNDFGNkMxMUVDODc1ODA2NzJDNEY5QUUwMi8wZkdEam0tdUFT d1VXTktnZWlKTm5oRUJKZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ76l2WpiCQuWUVMucFLcUS91Hga/8JtU8NuTMLOrbJdMAitujJr5P FEIP5jV+IFB+bTB6AUMui8eDP6iXRxGbaG+XiGjpQdnDJ+oreEnVbkeyHvQ1CuS/ o6/GHaitHvf/37pjTumLBfI/LibV03CJtpxoqL5kqwHg8xZjlhnbRVmTp/Hv8N1j SJEZ9qZctk1bYS9lbAecAHPVpt8hFiCZKaH8gn81N0I+P0qke78EKRgSg3lHg5GV lu6WIfvEjroeNzvtZ1D3NxZjeWuNs/p+/QYpK+CR3IchtoRGrx/x2sIR9e8BfKsM fi3HKlfVK3/Eu2DJCInUbrnDGM1kFnJs -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:57 2025 by rpki-client