This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: lkaSLKnoKutcFXowAHvWj+V67SEYec4t+AhwoImCRa4= Subject key identifier: B5:24:4B:07:BE:E6:6E:36:33:BE:FA:66:95:F3:90:20:EC:75:ED:E7 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 03A9E9E34159DFC6A92CE1706B11DC40F212861C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 07AE Signing time: Sat 06 Dec 2025 12:00:01 +0000 Manifest this update: Sat 06 Dec 2025 11:55:01 +0000 Manifest next update: Sun 07 Dec 2025 13:38:01 +0000 Files and hashes: 1: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 2: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: 2WVNrRy1wS+EvkcSz7jW973InGGfgX7F23QKm3YfnwE=) 3: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: jVcOrp1Iy42pZaDS6p+KVYqdrmg7VQyHwsaOeViUh90=) 4: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=) 5: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=) 6: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=) 7: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 13:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a9:e9:e3:41:59:df:c6:a9:2c:e1:70:6b:11:dc:40:f2:12:86:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Dec 6 11:55:01 2025 GMT Not After : Dec 7 13:38:01 2025 GMT Subject: CN=B5244B07BEE66E3633BEFA6695F39020EC75EDE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:24:dd:bf:2c:eb:b7:ea:ca:7b:62:8b:ff:4a: 50:b5:f8:4e:05:0b:55:ca:c6:7d:1f:bb:9f:4f:29: d0:10:d5:c5:08:a0:c2:ff:43:09:1c:3d:cf:48:0e: 75:d1:bf:b2:19:be:48:7e:c6:94:a4:96:dc:cf:f3: d8:70:fc:3b:d1:87:98:a2:00:87:f8:2f:dc:5c:78: a4:ea:14:32:57:ae:31:aa:8b:87:48:7f:46:b6:c3: 2c:3d:1f:45:49:b8:e2:21:16:ff:ab:e1:3c:8a:c1: b9:9f:22:34:77:c5:2d:9a:ac:d6:b1:98:52:8b:b2: 9b:ea:c1:7c:3c:ba:5a:2b:75:65:94:d7:77:0a:e4: f2:1f:ed:c5:be:b2:18:18:19:3a:1a:d0:2e:a2:1b: 18:56:5b:f8:fe:b9:53:6f:b5:35:37:43:e4:86:29: 6d:06:72:03:cb:2b:c1:36:5e:9b:b8:cf:6d:3c:b0: fb:c7:50:37:7b:25:b4:72:89:27:86:01:ba:21:fa: 07:83:9d:2e:c2:17:23:8f:09:c6:37:a8:a5:e5:82: 90:9a:22:72:7b:19:47:c5:e1:83:cb:09:a2:fc:71: cb:ab:82:9e:f5:95:8a:3d:85:29:15:c6:24:9d:1a: 62:0a:b4:cb:aa:1b:02:9f:bd:00:7a:09:d5:8e:85: ea:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:24:4B:07:BE:E6:6E:36:33:BE:FA:66:95:F3:90:20:EC:75:ED:E7 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:67:ec:aa:d4:f0:8a:33:79:d8:74:e8:68:f7:b4:7b:bd:a4: 2c:d7:45:d5:71:40:5a:9f:25:b4:26:eb:0a:f2:8a:80:e9:68: d5:ff:70:3b:96:2f:c5:b4:e5:19:80:71:fe:96:2d:99:bc:41: 31:b9:d8:2d:ee:fc:61:5e:5b:1f:18:1e:9e:64:66:26:1c:aa: 40:c2:cd:47:1f:dd:df:d7:32:f0:1e:72:cb:26:94:f5:54:21: 1b:c1:d6:8d:1f:3e:61:e6:41:0f:65:43:75:50:01:9e:9a:16: b5:92:cb:81:26:0a:51:e3:e9:03:fa:ea:0f:cd:ec:00:ee:86: ed:d4:3d:5a:e8:44:26:77:08:1b:a6:64:46:3a:5b:87:0f:ba: f6:d4:b3:2f:00:e2:a6:56:85:44:4c:e9:c5:18:41:7d:97:a2: e6:9f:00:53:bc:14:4a:91:85:6a:17:e8:fd:b5:f3:25:ca:ff: 70:64:85:78:87:d1:34:08:45:b4:40:00:56:db:30:8d:3b:21: f2:7a:37:99:7b:ce:0e:d2:1a:11:93:ef:f3:fa:ef:87:37:e9: c6:53:23:97:23:13:98:39:ff:81:3f:f7:99:56:64:25:b8:96: 70:dd:1e:d9:a0:d7:74:d2:8a:02:c3:d7:c8:88:4c:93:d9:d4: 6e:9f:8e:cc -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUA6np40FZ38apLOFwaxHcQPIShhwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MTIwNjExNTUwMVoX DTI1MTIwNzEzMzgwMVowMzExMC8GA1UEAxMoQjUyNDRCMDdCRUU2NkUzNjMzQkVG QTY2OTVGMzkwMjBFQzc1RURFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0k3b8s67fqyntii/9KULX4TgULVcrGfR+7n08p0BDVxQigwv9DCRw9z0gO ddG/shm+SH7GlKSW3M/z2HD8O9GHmKIAh/gv3Fx4pOoUMleuMaqLh0h/RrbDLD0f RUm44iEW/6vhPIrBuZ8iNHfFLZqs1rGYUouym+rBfDy6Wit1ZZTXdwrk8h/txb6y GBgZOhrQLqIbGFZb+P65U2+1NTdD5IYpbQZyA8srwTZem7jPbTyw+8dQN3sltHKJ J4YBuiH6B4OdLsIXI48JxjeopeWCkJoicnsZR8Xhg8sJovxxy6uCnvWVij2FKRXG JJ0aYgq0y6obAp+9AHoJ1Y6F6qECAwEAAaOCAhEwggINMB0GA1UdDgQWBBS1JEsH vuZuNjO++maV85Ag7HXt5zAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCBZ+yq1PCKM3nYdOho97R7vaQs10XVcUBanyW0JusK8oqA6WjV/3A7li/FtOUZ gHH+li2ZvEExudgt7vxhXlsfGB6eZGYmHKpAws1HH93f1zLwHnLLJpT1VCEbwdaN Hz5h5kEPZUN1UAGemha1ksuBJgpR4+kD+uoPzewA7obt1D1a6EQmdwgbpmRGOluH D7r21LMvAOKmVoVETOnFGEF9l6LmnwBTvBRKkYVqF+j9tfMlyv9wZIV4h9E0CEW0 QABW2zCNOyHyejeZe84O0hoRk+/z+u+HN+nGUyOXIxOYOf+BP/eZVmQluJZw3R7Z oNd00ooCw9fIiEyT2dRun47M -----END CERTIFICATE-----Generated at Sat Dec 6 16:49:30 2025 by rpki-client