This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft File: Ad9hVyR3ojDnn48oz91tKDd_Iis.mft (raw, json) Hash identifier: NxBrRRmRwYLpmVDEn/SdX99k0JthBUwzArG7W5DRKn0= Subject key identifier: 91:83:D4:F7:02:55:64:0A:23:B4:C5:59:FF:E9:68:D7:A8:0F:77:DB Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B Certificate issuer: /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B Certificate serial: 057F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft Manifest number: 0578 Signing time: Thu 18 Dec 2025 22:39:52 +0000 Manifest this update: Thu 18 Dec 2025 22:39:52 +0000 Manifest next update: Thu 25 Dec 2025 22:39:52 +0000 Files and hashes: 1: Ad9hVyR3ojDnn48oz91tKDd_Iis.crl (hash: V4219gnYgJz/3h9K0iecUyQlQobO9yQMkJxUi93rI6o=) 2: C847114C07D411ECBF875117C4F9AE02.roa (hash: MMhekj2SFZKQhejre+/ZuSr0R5tKH64F+RFediiHsYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B Validity Not Before: Dec 18 22:39:52 2025 GMT Not After : Dec 25 22:39:52 2025 GMT Subject: CN=694482b8-7071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:47:48:dd:7a:5f:38:2a:d7:22:40:f2:25:c9: a0:bb:fd:52:30:57:54:7f:a6:b0:47:c5:20:e0:1c: 4e:d5:d5:e3:fb:bd:44:1d:fc:5f:3b:04:3b:e7:b2: 3d:83:e7:7a:cc:7f:bc:83:30:1a:fd:e1:41:d0:15: 20:21:bc:9d:db:4c:35:c1:3b:1b:45:60:35:b9:b5: 13:a6:1b:7b:88:bb:06:d9:40:77:70:f5:1c:e6:6a: dc:1d:05:65:68:6d:1c:07:20:99:bc:f6:84:db:f4: 0f:2b:84:ee:4a:5a:24:b8:ec:77:c7:5c:a6:50:29: 9c:2a:5f:05:7b:ed:e4:97:b0:bb:35:4c:36:38:b4: d1:19:d4:0e:d2:03:22:db:a5:13:cd:a8:b7:61:a4: 61:76:dc:d8:16:69:d1:41:25:5f:92:90:0a:03:a6: ea:a6:ed:96:b4:e7:ae:91:de:8b:01:6f:e9:dc:dd: a4:c6:43:1f:b7:48:af:f6:cd:ad:95:6f:0c:40:2a: ef:04:f1:d5:1a:c0:d4:03:35:b5:ef:69:15:ae:90: 95:3f:87:30:ea:9a:33:89:0a:20:47:d5:06:d9:cb: 27:78:05:bd:9c:3b:65:53:d2:1d:98:10:4f:f2:2e: b2:46:4d:4b:df:b5:4c:a7:dd:cf:ad:e4:4d:63:38: 86:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:83:D4:F7:02:55:64:0A:23:B4:C5:59:FF:E9:68:D7:A8:0F:77:DB X509v3 Authority Key Identifier: keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:32:1f:68:39:19:19:20:59:48:33:a7:45:78:f9:d7:8d:ed: df:7f:f3:20:30:46:47:64:20:3a:a5:3a:c5:ba:4c:eb:92:d2: 6b:3a:63:60:eb:70:6a:70:37:08:9f:e4:fa:e3:c4:a2:69:06: dc:bd:25:75:72:f6:08:ef:67:b9:56:3f:1d:a4:be:f1:0c:2b: 36:3a:01:39:fc:f3:d5:86:ab:ee:34:9a:09:42:a3:fe:70:eb: 88:b7:e0:73:f4:c2:43:b7:af:64:58:55:c1:ef:1d:17:1b:3c: 3b:5b:87:17:e1:90:87:4a:02:55:ea:28:54:b0:14:f3:f9:f4: 66:4c:82:69:04:51:1e:09:0e:67:ff:e5:a4:6c:84:a9:66:82: 89:0d:e1:6d:af:6f:f5:6b:c1:aa:ce:ca:95:3d:99:17:3f:f2: b3:69:ce:a9:ed:88:02:84:34:57:c4:70:b2:e6:23:89:9a:ca: fc:98:34:6f:1a:06:12:de:3a:fb:42:6d:26:40:63:eb:0a:43: 9b:f3:f0:d4:10:9b:75:b9:b1:5d:9e:80:13:4c:a5:14:d2:8c: fe:de:2c:39:dc:31:18:ca:55:0f:5f:b0:4b:ed:d9:21:fe:38: a6:b7:99:a8:71:98:44:e6:a8:a3:d2:fa:36:45:91:84:db:de: 93:4d:39:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1QUUxMTAvBgNVBAUTKDAxREY2MTU3MjQ3N0EyMzBFNzlGOEYyOENGREQ2RDI4 Mzc3RjIyMkIwHhcNMjUxMjE4MjIzOTUyWhcNMjUxMjI1MjIzOTUyWjAYMRYwFAYD VQQDDA02OTQ0ODJiOC03MDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kdI3XpfOCrXIkDyJcmgu/1SMFdUf6awR8Ug4BxO1dXj+71EHfxfOwQ757I9 g+d6zH+8gzAa/eFB0BUgIbyd20w1wTsbRWA1ubUTpht7iLsG2UB3cPUc5mrcHQVl aG0cByCZvPaE2/QPK4TuSlokuOx3x1ymUCmcKl8Fe+3kl7C7NUw2OLTRGdQO0gMi 26UTzai3YaRhdtzYFmnRQSVfkpAKA6bqpu2WtOeukd6LAW/p3N2kxkMft0iv9s2t lW8MQCrvBPHVGsDUAzW172kVrpCVP4cw6poziQogR9UG2csneAW9nDtlU9IdmBBP 8i6yRk1L37VMp93PreRNYziGJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGD1PcC VWQKI7TFWf/paNeoD3fbMB8GA1UdIwQYMBaAFAHfYVckd6Iw55+PKM/dbSg3fyIr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVBRS80NkQ0MjJGMDA3 RDIxMUVDQUE4MkI2MTFDNEY5QUUwMi9BZDloVnlSM29qRG5uNDhvejkxdEtEZF9J aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FkOWhWeVIzb2pEbm40OG96OTF0S0RkX0lpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVBRS80NkQ0MjJGMDA3RDIxMUVDQUE4MkI2MTFDNEY5QUUwMi9BZDloVnlSM29q RG5uNDhvejkxdEtEZF9JaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRMh9oORkZIFlIM6dFePnXje3ff/MgMEZHZCA6pTrFukzrktJrOmNg 63BqcDcIn+T648SiaQbcvSV1cvYI72e5Vj8dpL7xDCs2OgE5/PPVhqvuNJoJQqP+ cOuIt+Bz9MJDt69kWFXB7x0XGzw7W4cX4ZCHSgJV6ihUsBTz+fRmTIJpBFEeCQ5n /+WkbISpZoKJDeFtr2/1a8GqzsqVPZkXP/Kzac6p7YgChDRXxHCy5iOJmsr8mDRv GgYS3jr7Qm0mQGPrCkOb8/DUEJt1ubFdnoATTKUU0oz+3iw53DEYylUPX7BL7dkh /jimt5mocZhE5qij0vo2RZGE296TTTlV -----END CERTIFICATE-----Generated at Fri Dec 19 21:58:10 2025 by rpki-client