This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft File: RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft (raw, json) Hash identifier: oPZeRptUXgJ9F+we8QWv6ifNdwNlD/aJvsaB8Or4p9o= Subject key identifier: 69:FB:70:7A:83:85:F5:81:60:A9:3A:C6:C9:9D:E4:02:CD:4B:03:E9 Authority key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 Certificate issuer: /CN=A91DEB01/serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft Manifest number: 2B Signing time: Fri 05 Dec 2025 05:14:56 +0000 Manifest this update: Fri 05 Dec 2025 05:14:55 +0000 Manifest next update: Fri 12 Dec 2025 05:14:55 +0000 Files and hashes: 1: RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl (hash: 9A6/b++dTjIQovkApbEtuI4HyiwGtBnaTrWTPVvaDRA=) 2: 8EA99A70B53311F09D886D26C4F9AE02.roa (hash: EvmYF48T0Vnc/1ZgB1IqFG/4zkh2TOgaxoDK/mhEVBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5 Validity Not Before: Dec 5 05:14:55 2025 GMT Not After : Dec 12 05:14:55 2025 GMT Subject: CN=69326a4f-3ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:aa:f8:c0:51:2a:3a:0c:a7:ba:1b:fc:a1: fa:b2:4b:44:b9:ff:b5:bb:74:d8:50:d9:9f:8c:46: 33:63:05:f7:21:5b:ee:4c:76:28:c0:cb:44:ce:e8: 19:e8:dd:97:94:d4:34:db:b1:0e:69:a2:42:fd:03: 08:fa:0a:26:03:b0:f3:bf:0d:1d:32:03:3a:f3:ac: 01:21:50:45:66:0b:f4:c0:9c:8f:9e:97:b3:bc:46: d8:09:24:c2:74:a3:7e:10:55:ef:ce:06:f5:90:5a: 3a:51:26:1a:8d:f9:c3:23:ce:f1:e0:49:2c:44:6f: c9:57:8a:f8:9d:0a:cb:dc:e6:c9:3b:f5:4e:8a:ac: 35:09:60:e6:5b:68:5c:75:ab:c1:2d:b5:9e:97:2e: 73:72:f4:2b:6a:9f:54:69:33:ea:f6:be:66:0d:bf: da:be:a2:f7:07:93:eb:df:39:fd:57:62:92:c8:1e: f9:e2:d3:04:d6:71:2b:26:94:44:62:10:20:6a:7e: ea:e3:b0:2a:90:1b:72:66:2e:df:f4:90:78:63:f9: 43:a7:4d:fd:82:04:8e:88:15:1b:ec:c7:c6:a7:c7: fd:f7:02:65:de:ed:5e:52:92:c4:23:66:21:7e:f3: bd:47:ac:33:75:7a:fd:de:ce:9c:12:40:22:00:f1: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FB:70:7A:83:85:F5:81:60:A9:3A:C6:C9:9D:E4:02:CD:4B:03:E9 X509v3 Authority Key Identifier: keyid:44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:2b:7c:60:8b:7f:c0:51:56:53:ab:e9:ac:87:fb:2a:fb:fc: 49:82:e9:ab:19:65:cc:a5:86:d2:81:b6:95:ef:d6:06:ab:49: e0:e9:b7:2c:0c:6b:eb:e1:d4:56:6d:10:8c:b4:2c:1d:92:87: 2a:8d:18:68:ed:5b:a1:9d:5d:22:9e:19:8e:b6:15:f2:b2:1c: 22:7d:56:1c:80:6d:e1:73:94:fa:04:ef:e2:49:35:fb:f5:02: 6e:12:96:ad:58:58:4a:ff:41:fb:45:8d:2e:27:d1:9c:05:2e: a1:58:7c:9c:42:49:f2:3d:22:f8:29:a8:be:30:25:47:fd:4a: b2:04:a5:41:b6:a9:94:ef:66:22:87:b7:09:5a:0a:57:55:3a: 4e:2d:83:50:35:b6:14:ce:1a:87:85:b0:79:2c:8d:93:20:72: 1c:50:2e:8f:db:54:91:0a:74:e3:3b:29:55:8a:7a:1c:5c:e6: 2b:f4:43:bb:6f:4a:52:a5:ab:9d:f6:d6:bd:fa:83:a1:34:08: e5:97:3a:a0:bb:52:d0:58:ef:bc:4d:75:47:29:ed:6e:2e:df: c3:17:64:ab:c4:30:8d:5b:fb:cb:88:96:6c:1b:94:59:d4:91: ca:a3:2d:dd:5e:82:82:32:6f:a7:9c:8a:4c:11:b7:7e:b3:c8: 26:db:ad:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RUIwMTExMC8GA1UEBRMoNDQ3RDU5ODNCRjBEQjkxMUFEOEZEQ0I2NzQxNDVGNkM1 OEY4M0NENTAeFw0yNTEyMDUwNTE0NTVaFw0yNTEyMTIwNTE0NTVaMBgxFjAUBgNV BAMTDTY5MzI2YTRmLTNhYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCirqr4wFEqOgynuhv8ofqyS0S5/7W7dNhQ2Z+MRjNjBfchW+5MdijAy0TO6Bno 3ZeU1DTbsQ5pokL9Awj6CiYDsPO/DR0yAzrzrAEhUEVmC/TAnI+el7O8RtgJJMJ0 o34QVe/OBvWQWjpRJhqN+cMjzvHgSSxEb8lXividCsvc5sk79U6KrDUJYOZbaFx1 q8EttZ6XLnNy9Ctqn1RpM+r2vmYNv9q+ovcHk+vfOf1XYpLIHvni0wTWcSsmlERi ECBqfurjsCqQG3JmLt/0kHhj+UOnTf2CBI6IFRvsx8anx/33AmXe7V5SksQjZiF+ 871HrDN1ev3ezpwSQCIA8dI9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaftweoOF 9YFgqTrGyZ3kAs1LA+kwHwYDVR0jBBgwFoAURH1Zg78NuRGtj9y2dBRfbFj4PNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxLzMyRUUwQTZFOTlF OTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJHdGo5eTJkQlJmYkZqNFBO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkgxWmc3OE51Ukd0ajl5MmRCUmZiRmo0UE5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF QjAxLzMyRUUwQTZFOTlFOTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJH dGo5eTJkQlJmYkZqNFBOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADcrfGCLf8BRVlOr6ayH+yr7/EmC6asZZcylhtKBtpXv1garSeDptywM a+vh1FZtEIy0LB2ShyqNGGjtW6GdXSKeGY62FfKyHCJ9VhyAbeFzlPoE7+JJNfv1 Am4Slq1YWEr/QftFjS4n0ZwFLqFYfJxCSfI9IvgpqL4wJUf9SrIEpUG2qZTvZiKH twlaCldVOk4tg1A1thTOGoeFsHksjZMgchxQLo/bVJEKdOM7KVWKehxc5iv0Q7tv SlKlq5321r36g6E0COWXOqC7UtBY77xNdUcp7W4u38MXZKvEMI1b+8uIlmwblFnU kcqjLd1egoIyb6ecikwRt36zyCbbrU0= -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:30 2025 by rpki-client