This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json) Hash identifier: NM1meihs7fRI3ljAEh2GRgSY3ZK7stpqVHpFGpG/oz8= Subject key identifier: 5C:3E:6F:40:41:7B:E9:E3:52:18:45:74:B5:76:EB:B6:B5:94:68:C6 Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Certificate serial: 04C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft Manifest number: 04BC Signing time: Thu 18 Dec 2025 23:13:06 +0000 Manifest this update: Thu 18 Dec 2025 23:13:06 +0000 Manifest next update: Thu 25 Dec 2025 23:13:06 +0000 Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: eixBm13WNJr7viUISinx/tTzctazhK3A7lIDTFdFybg=) 2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: LakU53mmAKZxWbtHABnd6u2JIQUwSgIdxv6XnbOWa7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1217 (0x4c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Validity Not Before: Dec 18 23:13:06 2025 GMT Not After : Dec 25 23:13:06 2025 GMT Subject: CN=69448a82-0864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e9:81:92:a9:6a:83:01:51:5d:10:f7:61:5d: f3:f4:6e:e5:4a:85:13:a8:f3:f1:5a:42:eb:ad:c3: f7:d5:ee:10:c1:f3:78:b9:d4:d6:d5:cb:65:7f:96: 54:62:8d:26:55:ce:ec:29:40:d5:25:67:da:96:f2: be:f4:e9:31:5c:e8:38:f0:ca:f5:3b:c2:4b:a8:35: a8:35:5f:d8:f6:c9:d3:37:5f:e5:e4:25:0c:d0:92: 98:c2:b0:1b:78:c6:09:00:14:2c:68:4e:99:fa:f6: b5:bd:5f:47:8f:4d:8a:9f:8a:0a:3d:76:2f:09:5e: 27:2f:c2:bd:c4:27:6c:5e:51:f2:8a:49:bb:05:b0: 3f:e5:7c:b0:57:f4:9c:0a:41:aa:cd:d4:58:e0:a3: dc:6d:0d:af:f6:ad:5d:58:c4:4b:a9:ca:cf:8b:a0: b6:30:a6:6e:a0:57:93:40:b0:f1:3c:47:44:ef:8b: d6:31:a5:28:7f:99:46:c1:56:2a:c3:fa:c8:3b:aa: 62:4a:ef:c3:a5:b7:63:f2:1f:e5:ec:6d:6d:be:86: f6:83:24:0d:2a:d7:77:c0:c6:eb:f8:ee:11:07:32: eb:42:9f:fd:1a:51:3c:2c:64:95:ed:d6:30:d9:4a: a6:32:1c:99:62:50:02:76:c9:7c:95:4f:b0:2e:30: 09:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3E:6F:40:41:7B:E9:E3:52:18:45:74:B5:76:EB:B6:B5:94:68:C6 X509v3 Authority Key Identifier: keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5b:fd:50:96:d8:8d:e2:ce:07:ab:19:6d:a9:ba:23:6e:72: ff:ca:31:11:c8:bd:92:61:6e:f3:10:7a:dd:b7:e3:f7:a2:41: c5:f6:97:13:e0:b2:a4:c3:cd:44:d7:fd:3f:1c:b7:5e:bd:e3: df:0a:3a:03:cc:cb:57:41:51:c2:c8:c1:77:5c:3c:57:1d:e6: bc:73:88:1b:2a:fd:90:24:5a:82:08:ef:7c:24:35:95:4c:64: 97:b2:3b:70:b4:27:7c:6a:3a:ad:0b:6f:43:25:fe:71:bd:d2: f3:c9:f7:77:fd:3d:e5:86:eb:e7:7f:30:aa:92:14:b2:75:5c: ed:66:db:35:f2:2b:45:ad:c2:81:9b:46:04:83:9a:5f:04:65: 32:eb:b5:a8:22:74:3c:58:7c:62:5b:c3:f6:e8:11:a6:60:79: c7:55:65:a3:49:d0:e0:5e:20:f1:00:be:3b:9d:33:da:7e:9c: 79:57:a6:cd:c6:fc:f6:20:67:78:7e:66:1f:77:0c:f5:c8:90: a1:a1:1e:a7:94:8b:76:db:7f:ce:45:5a:77:9b:9a:ef:b9:fc: fa:9b:ec:3d:0a:28:47:cc:ff:4a:1d:64:9d:32:b7:de:f2:17: 7e:3a:1e:4e:f4:e6:cc:49:4b:9c:85:4c:cb:d3:75:18:56:9c: ef:5d:72:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNCNEMzODY5MzVD QjdCRDM0MEUwHhcNMjUxMjE4MjMxMzA2WhcNMjUxMjI1MjMxMzA2WjAYMRYwFAYD VQQDDA02OTQ0OGE4Mi0wODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzemBkqlqgwFRXRD3YV3z9G7lSoUTqPPxWkLrrcP31e4QwfN4udTW1ctlf5ZU Yo0mVc7sKUDVJWfalvK+9OkxXOg48Mr1O8JLqDWoNV/Y9snTN1/l5CUM0JKYwrAb eMYJABQsaE6Z+va1vV9Hj02Kn4oKPXYvCV4nL8K9xCdsXlHyikm7BbA/5XywV/Sc CkGqzdRY4KPcbQ2v9q1dWMRLqcrPi6C2MKZuoFeTQLDxPEdE74vWMaUof5lGwVYq w/rIO6piSu/Dpbdj8h/l7G1tvob2gyQNKtd3wMbr+O4RBzLrQp/9GlE8LGSV7dYw 2UqmMhyZYlACdsl8lU+wLjAJqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFw+b0BB e+njUhhFdLV267a1lGjGMB8GA1UdIwQYMBaAFANnsVSCZRclKmPstMOGk1y3vTQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E5MC8yNUUzQkJCNDUy RUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5VXFZLXkwdzRhVFhMZTlO QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyZXhWSUpsRnlVcVkteTB3NGFUWExlOU5BNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5 VXFZLXkwdzRhVFhMZTlOQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuW/1QltiN4s4HqxltqbojbnL/yjERyL2SYW7zEHrdt+P3okHF9pcT 4LKkw81E1/0/HLdevePfCjoDzMtXQVHCyMF3XDxXHea8c4gbKv2QJFqCCO98JDWV TGSXsjtwtCd8ajqtC29DJf5xvdLzyfd3/T3lhuvnfzCqkhSydVztZts18itFrcKB m0YEg5pfBGUy67WoInQ8WHxiW8P26BGmYHnHVWWjSdDgXiDxAL47nTPafpx5V6bN xvz2IGd4fmYfdwz1yJChoR6nlIt223/ORVp3m5rvufz6m+w9CihHzP9KHWSdMrfe 8hd+Oh5O9ObMSUuchUzL03UYVpzvXXK0 -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:39 2025 by rpki-client