This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json) Hash identifier: EAkoL1P+MoJeWDxCq9TOtrfaDhM89WKxHaQ+PBU2ZrI= Subject key identifier: CE:F2:2A:11:BA:CA:EC:52:E7:E5:8B:BE:7A:DC:51:87:D9:AD:2C:B0 Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 034D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft Manifest number: 02FF Signing time: Thu 04 Dec 2025 23:56:05 +0000 Manifest this update: Thu 04 Dec 2025 23:56:04 +0000 Manifest next update: Thu 11 Dec 2025 23:56:04 +0000 Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: fmUTR++tN8lUL9BDmsGwc7Ehp8WRRWgfc1Ae6xOopq8=) 2: 20978DD270E411F08F40242AC4F9AE02.roa (hash: rp5tQD3pcDbI9l15qOU1afTnOgav384eohmTn6gxcTs=) 3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=) 4: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=) 5: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: BDQ/cIT9onHOd5JfvUTITTE8/WzzYdypmVwFJRuUaNk=) 6: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 845 (0x34d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Dec 4 23:56:04 2025 GMT Not After : Dec 11 23:56:04 2025 GMT Subject: CN=69321f95-7da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:7d:12:f4:7c:a0:5c:34:57:bf:b6:13:17: f4:69:8c:5f:bb:e1:ee:b0:d0:97:10:74:1f:b9:11: 08:86:fa:2b:29:c9:49:9c:a9:9c:0e:4f:f4:ec:8c: f8:a9:9b:0f:a6:9e:ec:a3:0a:0e:e6:1c:06:1e:ff: d2:d1:b9:39:c9:e1:50:9d:91:d3:6c:db:83:c8:ed: 9c:6f:ff:f2:07:f5:b0:8f:75:f9:98:13:71:5c:23: 8f:3c:a3:37:87:53:b8:24:27:36:12:dd:a1:5b:10: 23:5a:3d:72:f5:32:b4:9d:06:3c:9c:86:da:ce:5c: 90:d4:3e:2b:a7:9a:5a:f6:72:7f:84:27:53:52:b1: 56:e0:3f:47:6a:e5:0c:e6:38:c9:d1:a1:f1:9e:a6: 95:a1:d3:6d:66:52:ef:64:b6:f8:4e:78:d6:00:f3: a9:95:a3:24:9a:c0:a9:64:8c:c0:4e:dc:f0:7a:ec: af:df:73:a9:d3:ca:d4:76:22:e4:8f:1f:83:51:23: b8:0f:0d:bd:9c:84:52:24:dd:83:dc:ce:3c:34:fd: 09:b0:72:84:bb:91:9f:36:55:85:10:38:5e:6b:35: 5d:84:75:18:d1:53:45:2f:05:e2:c0:a4:37:3c:7a: 3a:c0:1f:0d:f8:e3:33:0f:44:ef:5a:57:44:cf:1e: 77:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F2:2A:11:BA:CA:EC:52:E7:E5:8B:BE:7A:DC:51:87:D9:AD:2C:B0 X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:4c:f7:99:41:d9:05:9f:ba:e6:dd:9f:01:16:44:f4:f5:25: d5:b5:61:46:d4:2e:c8:46:67:cb:9b:cf:bf:99:d9:6a:d9:db: 0a:7f:eb:7c:09:50:5c:c2:db:c8:5a:4b:79:2a:9e:5c:16:a6: 41:60:d8:a8:b5:43:72:90:08:7e:54:de:87:8e:47:a3:68:eb: 33:58:d6:b2:56:94:d8:16:21:33:16:bc:53:c5:3f:c5:9d:92: ab:7e:e8:18:13:c6:ae:06:1a:ae:97:1c:24:3f:61:9e:fc:25: cf:03:00:8a:77:48:34:23:4e:26:96:fc:b1:d2:43:5b:5e:f6: 05:ab:42:07:32:8f:27:d5:a7:4e:2c:a2:89:30:f0:c9:02:1c: 31:4a:60:92:1e:84:ab:65:c2:4b:f6:0a:1f:31:9f:30:6f:d2: 13:ca:58:dc:9c:20:6b:7e:e3:14:4f:ca:b6:9a:b8:8d:57:f3: b4:49:ad:1c:9b:64:74:eb:5a:1b:7d:ee:87:7b:99:0e:f6:e4: db:a4:35:c1:29:8c:49:29:9c:75:51:c2:3b:97:8b:f5:e8:67: 8c:f3:b9:70:ec:1b:f6:a3:b0:74:2a:9c:f5:34:0e:47:23:ff: 0c:59:23:74:de:d6:78:bc:09:00:9f:a5:68:56:b7:0d:47:06: f5:df:9d:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUxMjA0MjM1NjA0WhcNMjUxMjExMjM1NjA0WjAYMRYwFAYD VQQDEw02OTMyMWY5NS03ZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNd9EvR8oFw0V7+2Exf0aYxfu+HusNCXEHQfuREIhvorKclJnKmcDk/07Iz4 qZsPpp7sowoO5hwGHv/S0bk5yeFQnZHTbNuDyO2cb//yB/Wwj3X5mBNxXCOPPKM3 h1O4JCc2Et2hWxAjWj1y9TK0nQY8nIbazlyQ1D4rp5pa9nJ/hCdTUrFW4D9HauUM 5jjJ0aHxnqaVodNtZlLvZLb4TnjWAPOplaMkmsCpZIzATtzweuyv33Op08rUdiLk jx+DUSO4Dw29nIRSJN2D3M48NP0JsHKEu5GfNlWFEDheazVdhHUY0VNFLwXiwKQ3 PHo6wB8N+OMzD0TvWldEzx535QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7yKhG6 yuxS5+WLvnrcUYfZrSywMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT clM0c0VVeUN4bFdnck5SSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgTPeZQdkFn7rm3Z8BFkT09SXVtWFG1C7IRmfLm8+/mdlq2dsKf+t8 CVBcwtvIWkt5Kp5cFqZBYNiotUNykAh+VN6HjkejaOszWNayVpTYFiEzFrxTxT/F nZKrfugYE8auBhqulxwkP2Ge/CXPAwCKd0g0I04mlvyx0kNbXvYFq0IHMo8n1adO LKKJMPDJAhwxSmCSHoSrZcJL9gofMZ8wb9ITyljcnCBrfuMUT8q2mriNV/O0Sa0c m2R061obfe6He5kO9uTbpDXBKYxJKZx1UcI7l4v16GeM87lw7Bv2o7B0Kpz1NA5H I/8MWSN03tZ4vAkAn6VoVrcNRwb1351c -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:10 2025 by rpki-client