This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft File: ABc0faPzW3U5Ub30sbB_dh49nr8.mft (raw, json) Hash identifier: tmXso+kg4TyHIZ4opLm12l/IgWpQnd/nMGisYfIyAOY= Subject key identifier: 57:0E:FB:BC:E9:36:F4:89:58:A1:C6:6B:FE:46:EA:92:3F:D8:95:5A Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF Certificate issuer: /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF Certificate serial: 0470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft Manifest number: 0463 Signing time: Sat 06 Dec 2025 22:52:34 +0000 Manifest this update: Sat 06 Dec 2025 22:52:33 +0000 Manifest next update: Sat 13 Dec 2025 22:52:33 +0000 Files and hashes: 1: ABc0faPzW3U5Ub30sbB_dh49nr8.crl (hash: BZ6asEIJT4gLt85QRqk/V6DmYSk/GZTZ5548CHtl8Es=) 2: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (hash: DlL3SJChckNOqua785W26axk8/KnPljvxeRS/X/r6xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1136 (0x470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0AAD, serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF Validity Not Before: Dec 6 22:52:33 2025 GMT Not After : Dec 13 22:52:33 2025 GMT Subject: CN=6934b3b1-8d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:de:4b:f5:1a:3b:34:ea:7b:86:08:85:10: 2b:47:78:58:c2:35:fc:b1:dd:38:94:eb:e0:5d:e0: f1:37:52:bc:ac:41:e4:10:eb:29:33:28:58:85:c6: 54:47:a7:ed:e0:5e:b7:c7:f9:d9:a1:ed:25:a6:e8: 45:81:ad:3a:4d:b9:e6:43:52:b3:85:98:15:17:83: 66:e2:62:09:b9:2a:53:ec:63:79:a1:56:c2:63:97: 20:54:aa:8f:10:72:d8:2d:2d:40:01:0b:d1:17:19: b5:e8:fe:0c:0f:ea:69:31:ed:70:0a:96:d9:6b:e1: fa:21:42:b7:4d:6f:c1:5f:f6:1f:f7:fe:c9:66:64: 24:34:ae:4e:db:a7:cf:a1:b0:a7:17:71:50:c3:4b: be:53:93:c3:c3:77:2c:5b:e0:5c:d0:3a:48:23:c1: 72:10:a4:f7:e2:b4:3f:b1:6c:bf:a4:8e:c1:d1:35: d1:24:de:df:5b:3e:96:57:10:71:dd:5f:65:7d:b0: ac:51:11:69:d0:ff:15:22:0f:5b:14:48:31:0e:ed: 60:30:82:9b:59:a6:bd:fa:52:90:98:44:0e:0b:2c: 7c:da:48:b7:2e:fe:68:e2:34:47:ca:1c:02:34:f1: 64:1c:49:b5:db:5c:2a:32:c5:27:3f:1d:91:77:a0: 96:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0E:FB:BC:E9:36:F4:89:58:A1:C6:6B:FE:46:EA:92:3F:D8:95:5A X509v3 Authority Key Identifier: keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:74:a4:d0:98:2c:4a:55:2f:bc:0a:b8:ca:80:e7:f5:e3:6c: 66:02:6c:98:d6:22:bb:61:8c:36:49:75:a0:cc:6a:1d:96:a8: ed:fb:4f:10:21:70:4d:74:46:13:5d:ca:5c:fc:7b:1a:bb:67: 1a:92:29:92:14:16:58:bb:a2:de:02:a3:83:0a:a0:46:a0:03: 11:ba:40:b3:e5:eb:bd:e8:4c:b2:bc:0c:2a:0e:dc:53:dd:18: 12:f4:57:74:84:ae:f2:e6:94:64:44:c6:f0:64:9a:36:4f:37: 97:97:b4:0b:ba:e6:01:40:48:71:c0:d1:80:d0:a4:11:80:d3: de:6a:1c:4a:0a:79:7c:a6:f9:15:8c:d5:07:8a:3d:b9:24:81: 3c:ad:8c:8d:fd:33:7a:05:a1:79:87:04:4f:3f:97:1e:48:91: ec:ec:e8:0d:b4:fa:3b:66:23:33:e0:1e:88:81:99:07:62:69: 5b:13:2a:ab:9c:57:d4:16:f5:42:25:27:a9:2a:53:ca:3a:4c: 0a:ef:8b:dc:44:eb:dd:56:c3:80:75:87:b1:67:5f:92:cf:d3: 6d:6c:5b:c0:cf:cf:71:16:b2:e5:3e:8d:ae:46:f9:d1:ff:b2: 39:de:0e:27:68:39:79:d3:11:b2:83:ef:bf:da:3c:ef:c9:58: 5f:4e:eb:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBBQUQxMTAvBgNVBAUTKDAwMTczNDdEQTNGMzVCNzUzOTUxQkRGNEIxQjA3Rjc2 MUUzRDlFQkYwHhcNMjUxMjA2MjI1MjMzWhcNMjUxMjEzMjI1MjMzWjAYMRYwFAYD VQQDEw02OTM0YjNiMS04ZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveHeS/UaOzTqe4YIhRArR3hYwjX8sd04lOvgXeDxN1K8rEHkEOspMyhYhcZU R6ft4F63x/nZoe0lpuhFga06TbnmQ1KzhZgVF4Nm4mIJuSpT7GN5oVbCY5cgVKqP EHLYLS1AAQvRFxm16P4MD+ppMe1wCpbZa+H6IUK3TW/BX/Yf9/7JZmQkNK5O26fP obCnF3FQw0u+U5PDw3csW+Bc0DpII8FyEKT34rQ/sWy/pI7B0TXRJN7fWz6WVxBx 3V9lfbCsURFp0P8VIg9bFEgxDu1gMIKbWaa9+lKQmEQOCyx82ki3Lv5o4jRHyhwC NPFkHEm121wqMsUnPx2Rd6CWlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcO+7zp NvSJWKHGa/5G6pI/2JVaMB8GA1UdIwQYMBaAFAAXNH2j81t1OVG99LGwf3YePZ6/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEFBRC8wREU1QjQwRTc5 RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelczVTVVYjMwc2JCX2RoNDlu cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCYzBmYVB6VzNVNVViMzBzYkJfZGg0OW5yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEFBRC8wREU1QjQwRTc5RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelcz VTVVYjMwc2JCX2RoNDlucjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkdKTQmCxKVS+8CrjKgOf142xmAmyY1iK7YYw2SXWgzGodlqjt+08Q IXBNdEYTXcpc/Hsau2cakimSFBZYu6LeAqODCqBGoAMRukCz5eu96EyyvAwqDtxT 3RgS9Fd0hK7y5pRkRMbwZJo2TzeXl7QLuuYBQEhxwNGA0KQRgNPeahxKCnl8pvkV jNUHij25JIE8rYyN/TN6BaF5hwRPP5ceSJHs7OgNtPo7ZiMz4B6IgZkHYmlbEyqr nFfUFvVCJSepKlPKOkwK74vcROvdVsOAdYexZ1+Sz9NtbFvAz89xFrLlPo2uRvnR /7I53g4naDl50xGyg++/2jzvyVhfTutJ -----END CERTIFICATE-----Generated at Sun Dec 7 02:04:16 2025 by rpki-client