This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft File: 10XhyGsYGPfQVj-Q6LoSvosa43g.mft (raw, json) Hash identifier: 3V6FZeC+rklXja1L54K2B23/phjPIt726Kwtx1rGz1M= Subject key identifier: 6E:6D:16:00:51:0C:9A:1F:E9:5B:6E:09:75:39:FF:18:8D:B7:42:97 Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 Certificate issuer: /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft Manifest number: 01B4 Signing time: Fri 05 Dec 2025 01:24:24 +0000 Manifest this update: Fri 05 Dec 2025 01:24:23 +0000 Manifest next update: Fri 12 Dec 2025 01:24:23 +0000 Files and hashes: 1: 10XhyGsYGPfQVj-Q6LoSvosa43g.crl (hash: kRdumZCncw562Gt7thHm6hEgvIOeIWgTZeDuth/WOYQ=) 2: 12DD779467A211EEA8239268C4F9AE02.roa (hash: tXyHZWiyLccCa4dm7RkGGfRei0ZIky7sg5whsG/aUrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D97C4, serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Validity Not Before: Dec 5 01:24:23 2025 GMT Not After : Dec 12 01:24:23 2025 GMT Subject: CN=69323448-28ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:7c:f6:c7:4c:f3:17:db:d3:74:08:98:7e: 69:2d:19:ee:fb:eb:0f:db:43:a7:13:dc:ad:54:8a: 10:20:7d:99:17:dd:b9:c2:5d:6a:10:63:1d:2f:f5: 1c:46:29:73:07:7d:5c:a9:83:ce:65:c6:54:cf:b6: e5:86:cf:01:6e:5c:ec:dd:5b:8f:7f:85:30:87:70: 94:be:d6:59:30:ea:0d:63:89:72:cb:5e:1f:cb:5c: a6:b8:77:2c:08:98:be:35:9e:ee:12:a5:72:fc:38: 66:2e:a4:65:35:86:61:b7:7e:51:c2:f1:bd:fd:63: ff:62:af:19:7c:5f:0a:b2:ba:45:2e:73:83:de:19: f2:1e:88:03:e6:6c:19:21:21:5e:0e:e7:d2:9d:12: bb:85:a3:80:2d:f4:99:7b:1a:a3:32:c4:e3:f3:40: 07:6b:3e:bb:92:ea:15:21:93:8a:0f:e9:18:86:16: 9b:76:7d:e9:3b:11:34:a8:ae:c9:dd:b7:ee:70:17: eb:27:8b:fb:28:05:e9:e2:fd:6c:cb:23:be:5c:11: fc:74:11:bc:04:4c:a7:25:8a:6c:c2:73:cc:6c:9f: 6e:ed:86:47:30:06:36:ff:31:70:8a:7d:93:f2:a9: c5:d6:0a:cc:16:23:58:34:a6:08:6e:54:21:68:bb: c1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6D:16:00:51:0C:9A:1F:E9:5B:6E:09:75:39:FF:18:8D:B7:42:97 X509v3 Authority Key Identifier: keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:13:b6:89:b4:57:87:67:20:74:00:c4:9f:b8:10:f0:1d:5f: 2a:be:60:67:74:7c:5f:ab:db:ea:0e:64:68:42:f5:4b:5e:3d: 01:f3:7d:8d:b0:27:b1:0f:0c:39:d6:2f:47:b1:df:4a:cb:6a: 55:59:fc:b4:fc:3c:7a:46:49:7b:6e:0a:e9:2d:89:af:77:2a: 96:91:a8:a2:ac:6d:c7:60:a0:a7:1a:42:82:9b:a2:9c:85:34: e3:de:3f:c6:fa:fc:e9:84:4f:ac:22:87:f8:9f:7a:13:ee:39: 72:dd:37:58:96:15:b0:b8:fd:6e:c6:e4:11:a1:ae:16:fc:56: ff:8f:23:43:9c:90:a0:57:a2:89:2b:2c:13:26:65:2f:44:de: ef:8d:06:f1:9a:bb:05:c8:ad:5c:33:b4:2b:62:cf:c5:cc:ea: d7:4c:3b:ba:58:44:86:48:7f:66:8f:63:b2:1f:58:17:78:3f: b2:73:ed:2b:81:08:a2:61:ed:c1:53:a5:07:33:09:82:ff:c7: 8a:a1:14:f4:39:c0:94:18:6e:d5:4c:dd:6d:d1:4d:fc:02:7b: 8d:fb:c9:49:fe:c3:fb:88:74:7c:e0:79:52:87:05:d4:ca:68: 1e:1d:cf:6b:f7:72:15:7b:4e:c7:68:f5:32:6b:ba:bc:72:d4: 66:c3:77:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3QzQxMTAvBgNVBAUTKEQ3NDVFMUM4NkIxODE4RjdEMDU2M0Y5MEU4QkExMkJF OEIxQUUzNzgwHhcNMjUxMjA1MDEyNDIzWhcNMjUxMjEyMDEyNDIzWjAYMRYwFAYD VQQDEw02OTMyMzQ0OC0yOGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqT989sdM8xfb03QImH5pLRnu++sP20OnE9ytVIoQIH2ZF925wl1qEGMdL/Uc RilzB31cqYPOZcZUz7blhs8Bblzs3VuPf4Uwh3CUvtZZMOoNY4lyy14fy1ymuHcs CJi+NZ7uEqVy/DhmLqRlNYZht35RwvG9/WP/Yq8ZfF8KsrpFLnOD3hnyHogD5mwZ ISFeDufSnRK7haOALfSZexqjMsTj80AHaz67kuoVIZOKD+kYhhabdn3pOxE0qK7J 3bfucBfrJ4v7KAXp4v1syyO+XBH8dBG8BEynJYpswnPMbJ9u7YZHMAY2/zFwin2T 8qnF1grMFiNYNKYIblQhaLvBLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5tFgBR DJof6VtuCXU5/xiNt0KXMB8GA1UdIwQYMBaAFNdF4chrGBj30FY/kOi6Er6LGuN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTdDNC9DNjNERjIwMDND NjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQZlFWai1RNkxvU3Zvc2E0 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwWGh5R3NZR1BmUVZqLVE2TG9Tdm9zYTQzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTdDNC9DNjNERjIwMDNDNjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQ ZlFWai1RNkxvU3Zvc2E0M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoE7aJtFeHZyB0AMSfuBDwHV8qvmBndHxfq9vqDmRoQvVLXj0B832N sCexDww51i9Hsd9Ky2pVWfy0/Dx6Rkl7bgrpLYmvdyqWkaiirG3HYKCnGkKCm6Kc hTTj3j/G+vzphE+sIof4n3oT7jly3TdYlhWwuP1uxuQRoa4W/Fb/jyNDnJCgV6KJ KywTJmUvRN7vjQbxmrsFyK1cM7QrYs/FzOrXTDu6WESGSH9mj2OyH1gXeD+yc+0r gQiiYe3BU6UHMwmC/8eKoRT0OcCUGG7VTN1t0U38AnuN+8lJ/sP7iHR84HlShwXU ymgeHc9r93IVe07HaPUya7q8ctRmw3cE -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:51 2025 by rpki-client