This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft File: s40rj01btqU-m0GSYQSBpdiBZUY.mft (raw, json) Hash identifier: ZOA6lD2x+dqgiph6o1pzxuqq0kGvW2HTznILKqate4M= Subject key identifier: F6:F1:76:09:D6:7C:D2:88:2D:97:FF:7A:C3:F3:87:6E:42:11:7F:22 Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46 Certificate issuer: /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546 Certificate serial: 0B43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft Manifest number: 0B3B Signing time: Sat 06 Dec 2025 18:31:13 +0000 Manifest this update: Sat 06 Dec 2025 18:31:12 +0000 Manifest next update: Sat 13 Dec 2025 18:31:12 +0000 Files and hashes: 1: s40rj01btqU-m0GSYQSBpdiBZUY.crl (hash: DxGf6nNbqSn6rHHxtRMD+yqjCj0roN7cSLlAYBcYDOk=) 2: 1E1E9122565411EBA14ED510C4F9AE02.roa (hash: 7dou7EZJS0k+10u39gMW4DiImFVNtTINLLrPstsJeHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2883 (0xb43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E12AD, serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546 Validity Not Before: Dec 6 18:31:12 2025 GMT Not After : Dec 13 18:31:12 2025 GMT Subject: CN=69347671-87b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:a0:00:6d:c6:3a:e7:df:a1:9e:67:c1:c1: 20:78:c9:d7:28:ab:16:7a:29:e4:e5:1f:2c:b8:11: 05:4f:ec:85:00:c3:3f:d4:ca:48:9f:f0:0a:2a:a5: 06:e9:8e:39:00:2f:5c:b1:68:b7:d0:54:dc:e2:30: 0e:4b:b5:55:f7:68:48:af:35:98:b5:5d:fc:59:53: f6:92:ad:d6:57:d3:f7:b3:95:5f:f5:ca:f7:f3:6a: 80:ea:b0:37:24:d1:2b:94:44:27:7f:39:7b:2c:1e: 7f:c6:cb:7e:47:ab:8d:ff:84:53:06:35:e9:2b:67: 27:01:66:ac:16:9a:b2:c6:b2:76:a4:ed:3a:42:46: 17:31:82:f6:1d:f8:13:17:19:fa:77:1f:3c:7a:0d: 9f:52:b5:2d:24:ba:37:5a:68:86:f5:be:90:39:a8: 4d:92:97:98:37:64:97:17:a9:64:54:b6:b1:f1:ea: 6a:96:cf:fa:7a:9c:43:22:e0:38:bb:63:2a:a1:ff: 49:82:9f:00:60:50:df:3d:b4:4a:fb:41:36:8d:fe: 50:40:fc:41:33:1a:32:dd:41:a8:2c:b6:f5:c4:25: e2:7e:2a:3c:de:c6:75:ed:7a:6a:13:93:4d:93:ea: e0:a3:2c:e6:fd:af:7d:8c:fd:30:5b:65:8a:8b:a5: 38:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F1:76:09:D6:7C:D2:88:2D:97:FF:7A:C3:F3:87:6E:42:11:7F:22 X509v3 Authority Key Identifier: keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:46:90:45:cc:6c:8b:11:1b:49:68:c6:33:c3:81:7d:1d:bf: 17:a7:51:3d:0e:de:fe:8a:08:34:9e:0e:0d:67:f8:77:e4:93: 42:63:4f:68:72:31:18:56:62:cf:fe:36:a5:23:1f:22:3c:d4: 53:d6:72:0a:d3:56:8a:dc:6f:3c:dd:9b:a0:1f:86:c4:73:e2: 7f:8d:7f:e0:fd:af:79:56:5d:17:20:90:9b:09:eb:0f:7f:14: 92:d3:2b:68:74:8c:dc:60:db:07:99:ff:e2:f9:f6:90:53:5d: 3b:3c:e4:4c:cc:ee:9a:24:f2:b4:6a:89:96:da:10:50:29:b2: 57:e3:76:e6:5d:94:3a:e3:5e:f9:19:55:f0:6c:2f:3b:74:00: 84:8b:e3:fd:65:d8:8e:15:e2:6b:4f:51:2b:35:23:d4:95:e8: cc:4f:d4:dd:bd:6f:e6:db:74:0f:aa:96:c1:30:d6:8c:a5:55: 26:43:34:15:36:dd:78:62:ac:93:1a:e4:63:91:fb:f4:dc:b5: 47:76:24:17:fd:b9:4a:dd:1a:20:84:92:c5:9c:35:7b:93:35: 36:40:66:af:b7:44:6a:45:71:e5:9c:da:3e:25:5e:90:c9:fb: 14:94:85:17:2e:88:f4:9f:12:6d:cc:43:99:74:92:db:40:c8: 8c:7a:2a:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEyQUQxMTAvBgNVBAUTKEIzOEQyQjhGNEQ1QkI2QTUzRTlCNDE5MjYxMDQ4MUE1 RDg4MTY1NDYwHhcNMjUxMjA2MTgzMTEyWhcNMjUxMjEzMTgzMTEyWjAYMRYwFAYD VQQDEw02OTM0NzY3MS04N2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMegAG3GOuffoZ5nwcEgeMnXKKsWeink5R8suBEFT+yFAMM/1MpIn/AKKqUG 6Y45AC9csWi30FTc4jAOS7VV92hIrzWYtV38WVP2kq3WV9P3s5Vf9cr382qA6rA3 JNErlEQnfzl7LB5/xst+R6uN/4RTBjXpK2cnAWasFpqyxrJ2pO06QkYXMYL2HfgT Fxn6dx88eg2fUrUtJLo3WmiG9b6QOahNkpeYN2SXF6lkVLax8epqls/6epxDIuA4 u2Mqof9Jgp8AYFDfPbRK+0E2jf5QQPxBMxoy3UGoLLb1xCXifio83sZ17XpqE5NN k+rgoyzm/a99jP0wW2WKi6U4wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbxdgnW fNKILZf/esPzh25CEX8iMB8GA1UdIwQYMBaAFLONK49NW7alPptBkmEEgaXYgWVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTJBRC8zOERBQTA2QzRC MjExMUVBQjdBMDA1NThDNEY5QUUwMi9zNDByajAxYnRxVS1tMEdTWVFTQnBkaUJa VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M0MHJqMDFidHFVLW0wR1NZUVNCcGRpQlpVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTJBRC8zOERBQTA2QzRCMjExMUVBQjdBMDA1NThDNEY5QUUwMi9zNDByajAxYnRx VS1tMEdTWVFTQnBkaUJaVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2RpBFzGyLERtJaMYzw4F9Hb8Xp1E9Dt7+igg0ng4NZ/h35JNCY09o cjEYVmLP/jalIx8iPNRT1nIK01aK3G883ZugH4bEc+J/jX/g/a95Vl0XIJCbCesP fxSS0ytodIzcYNsHmf/i+faQU107PORMzO6aJPK0aomW2hBQKbJX43bmXZQ64175 GVXwbC87dACEi+P9ZdiOFeJrT1ErNSPUlejMT9TdvW/m23QPqpbBMNaMpVUmQzQV Nt14YqyTGuRjkfv03LVHdiQX/blK3RoghJLFnDV7kzU2QGavt0RqRXHlnNo+JV6Q yfsUlIUXLoj0nxJtzEOZdJLbQMiMeipS -----END CERTIFICATE-----Generated at Sun Dec 7 03:49:08 2025 by rpki-client