This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft File: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json) Hash identifier: YrFkCXLWCjhZOKFmhGxRKsRzQAY9LCeQ2YL00Q4Qky0= Subject key identifier: 36:D1:6E:FA:41:F0:B2:A4:B2:2F:D8:26:E8:EA:F7:6A:60:17:86:D8 Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Certificate serial: 0837 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft Manifest number: 081C Signing time: Thu 18 Dec 2025 20:31:17 +0000 Manifest this update: Thu 18 Dec 2025 20:31:17 +0000 Manifest next update: Thu 25 Dec 2025 20:31:17 +0000 Files and hashes: 1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: HLfWvsn0sxbo7nRHoJICDfhcreAqtHwpK2WEM76D5JU=) 2: B0425744D7E211ECBD1D447FC4F9AE02.roa (hash: FmrrPxT3AQS1QsODrOl0Mag5fJkdo8yw7npJe5EvI48=) 3: 4314DB4C8EAF11F091C0B421C4F9AE02.roa (hash: soxPBotfeGZJQtYFANg/AIsqymj558YBgTRf2OttWoQ=) 4: 1DB0529C7CA711F0A52C5966C4F9AE02.roa (hash: XaSGJdVmQFwnCd+b3KdpqRusxazGj+qlh/KndRTEPfA=) 5: 1069D50EB54B11F092E79246C4F9AE02.roa (hash: oPyKzL4O0xlhZZ92P0pzMtzovY+UYDC46Jkmm8P2idY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Validity Not Before: Dec 18 20:31:17 2025 GMT Not After : Dec 25 20:31:17 2025 GMT Subject: CN=69446495-c3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f5:83:c9:ea:5f:17:d9:0a:e7:b5:6b:20:d5: 72:16:ed:f5:88:a1:78:15:8b:75:6b:ee:9c:74:c0: 63:87:c0:79:51:53:b2:3d:c9:9a:da:d3:02:80:e0: f2:c4:74:10:86:24:9d:5a:5f:80:41:e9:f0:9f:64: a5:37:9e:a6:53:32:6e:df:b0:9c:a2:0c:13:7f:a0: dd:33:8f:c0:92:7b:f9:10:4b:9f:89:4e:87:d3:47: 76:6d:ec:f2:00:3d:32:a4:35:7f:a9:d7:9b:7e:e2: ae:19:47:a9:d9:d4:da:b0:e7:8d:57:be:c5:83:a0: 95:f5:01:a7:1b:28:2a:e3:bb:0a:c5:30:6b:9e:21: e2:8d:be:1c:91:48:7c:58:3c:53:56:33:6f:05:ca: c1:b2:66:2b:0e:42:fc:fa:bc:e1:30:23:1f:d3:10: d1:ba:03:fd:0c:12:89:2b:c1:11:4d:82:ee:ce:8a: 5d:8c:df:e9:d5:43:33:92:fc:fb:04:23:ec:18:a4: aa:7f:2e:c9:73:97:06:df:05:f7:01:59:de:51:1f: 3c:98:6f:46:0d:71:ab:c3:4e:be:5a:23:cf:69:93: 08:35:ad:29:84:d4:bd:ad:4a:0e:5b:47:c2:57:85: d4:2c:1a:cb:ba:09:f2:88:6b:be:b1:63:d7:29:f5: 2e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D1:6E:FA:41:F0:B2:A4:B2:2F:D8:26:E8:EA:F7:6A:60:17:86:D8 X509v3 Authority Key Identifier: keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:dc:ea:46:d9:74:9b:3f:10:63:30:25:f8:c9:62:c6:fa:a1: 81:30:bb:06:03:1c:aa:4c:5e:83:69:c4:05:87:39:df:27:96: 9f:3f:e2:4d:8c:73:b4:37:99:ed:89:02:f8:a0:dc:80:37:d8: 69:2e:64:1a:db:b2:87:6e:2b:dc:a4:a9:3d:6b:9d:16:88:f3: 60:2c:98:5a:b8:8d:87:7d:a6:be:66:e5:63:71:a0:f1:79:a9: b5:e6:87:b0:8a:ca:b4:16:5d:5d:c2:25:5b:14:5e:8c:81:48: 7e:0c:bf:0b:5b:68:0a:2d:c0:89:e3:ca:fe:a2:24:09:56:be: a1:fd:86:03:af:e1:fb:28:b1:ce:31:d2:b0:97:ec:93:de:99: bd:4e:09:67:3b:49:dd:04:71:15:22:ff:10:f0:49:0c:eb:1d: da:e3:4b:aa:79:09:a7:00:87:98:66:9d:8a:c0:c9:19:1a:33: d8:de:19:f6:cd:4d:36:02:cb:86:be:25:11:a3:de:38:fc:1e: 9e:df:43:62:f6:1d:85:25:e7:85:c5:65:e3:40:bb:7e:e4:4a: a9:d6:e5:d9:0b:04:39:38:20:3a:06:38:96:0d:d1:6e:d9:00: b8:2e:64:a2:b2:34:c5:a3:d4:c9:82:57:7b:03:49:3f:f2:51: d5:ea:41:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD RDI2QkQ2QkMwHhcNMjUxMjE4MjAzMTE3WhcNMjUxMjI1MjAzMTE3WjAYMRYwFAYD VQQDDA02OTQ0NjQ5NS1jM2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/WDyepfF9kK57VrINVyFu31iKF4FYt1a+6cdMBjh8B5UVOyPcma2tMCgODy xHQQhiSdWl+AQenwn2SlN56mUzJu37CcogwTf6DdM4/Aknv5EEufiU6H00d2bezy AD0ypDV/qdebfuKuGUep2dTasOeNV77Fg6CV9QGnGygq47sKxTBrniHijb4ckUh8 WDxTVjNvBcrBsmYrDkL8+rzhMCMf0xDRugP9DBKJK8ERTYLuzopdjN/p1UMzkvz7 BCPsGKSqfy7Jc5cG3wX3AVneUR88mG9GDXGrw06+WiPPaZMINa0phNS9rUoOW0fC V4XULBrLugnyiGu+sWPXKfUurQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbRbvpB 8LKksi/YJujq92pgF4bYMB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3 OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDFFOS9EQUQ4RkI4MDA3OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2 ZnN2Z0tUVnlYQ1hOSnIxcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW3OpG2XSbPxBjMCX4yWLG+qGBMLsGAxyqTF6DacQFhznfJ5afP+JN jHO0N5ntiQL4oNyAN9hpLmQa27KHbivcpKk9a50WiPNgLJhauI2Hfaa+ZuVjcaDx eam15oewisq0Fl1dwiVbFF6MgUh+DL8LW2gKLcCJ48r+oiQJVr6h/YYDr+H7KLHO MdKwl+yT3pm9TglnO0ndBHEVIv8Q8EkM6x3a40uqeQmnAIeYZp2KwMkZGjPY3hn2 zU02AsuGviURo944/B6e30Ni9h2FJeeFxWXjQLt+5Eqp1uXZCwQ5OCA6BjiWDdFu 2QC4LmSisjTFo9TJgld7A0k/8lHV6kE7 -----END CERTIFICATE-----Generated at Sat Dec 20 19:51:45 2025 by rpki-client