This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft File: apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json) Hash identifier: EDv2Z0y0hC/WcH6SRmxSXsNg1273B2CiB3LnhAVyVbQ= Subject key identifier: 0A:4A:ED:27:2C:EA:F0:63:3A:F6:0D:F2:BB:26:26:97:0E:AD:EB:B6 Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 Certificate issuer: /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Certificate serial: 0497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft Manifest number: 0492 Signing time: Thu 18 Dec 2025 23:25:37 +0000 Manifest this update: Thu 18 Dec 2025 23:25:36 +0000 Manifest next update: Thu 25 Dec 2025 23:25:36 +0000 Files and hashes: 1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: oHkPdZQPTvNFd0GGECEyHi+eFHbQ8HU4lzieJHJSUdU=) 2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: 5jUnpiK90pdhSrw0aDnaZCFzrrcXvAV1QTg4pIkNsPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1175 (0x497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2BD6, serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Validity Not Before: Dec 18 23:25:36 2025 GMT Not After : Dec 25 23:25:36 2025 GMT Subject: CN=69448d71-ed18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8f:cc:99:5b:0c:f0:30:22:b8:a3:c1:b0:7c: a0:dd:62:8a:67:b8:1e:21:44:67:0a:80:56:de:34: 17:e0:11:bc:84:8c:5f:e4:34:71:54:b6:6e:01:ac: 7a:9c:bb:5a:e2:56:64:26:7c:36:74:9e:ea:d4:f0: b3:6e:da:93:5c:e8:32:85:ff:7b:14:8d:b1:5c:8d: 13:a4:30:83:a3:91:c8:fd:73:69:c4:f3:c1:00:cc: 69:36:e1:2c:81:da:b8:06:d3:d8:b1:f4:fb:cf:fb: da:41:f3:6e:41:11:2f:8d:6a:42:5c:cd:be:67:d6: a6:6d:a1:f8:a1:21:c2:db:8c:3d:c5:ac:71:29:4f: 76:c6:7b:c4:21:26:66:21:cd:44:4a:24:06:d3:84: a0:e0:33:f3:77:47:12:a1:82:a8:ef:0f:40:25:b9: c7:5a:b1:d0:ad:1a:f4:4d:5e:d6:e4:64:6c:db:23: 3b:c9:ef:17:c5:67:7e:39:47:c1:c4:66:8a:7a:5d: 20:08:27:e7:af:da:75:24:11:0d:90:0e:25:8f:fb: 8e:e4:65:f6:e6:62:79:fc:9b:ae:2b:44:7c:aa:4a: c5:0b:2e:de:ec:9b:74:5f:da:cf:4b:01:82:ec:75: f8:a6:90:9a:3c:e1:38:76:02:78:df:3a:62:b3:9e: fa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4A:ED:27:2C:EA:F0:63:3A:F6:0D:F2:BB:26:26:97:0E:AD:EB:B6 X509v3 Authority Key Identifier: keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:08:e2:31:1e:75:69:a9:e9:b0:29:5b:9f:56:b2:15:af:07: c3:6b:50:82:10:fe:52:16:58:82:d8:dc:93:c1:7d:d9:48:0e: 4f:20:46:71:e6:2e:ea:d1:b2:38:dd:ff:90:68:70:a2:52:6b: 44:4a:dd:71:7e:76:e1:bb:1a:b8:ac:a3:aa:52:55:2c:8e:a6: ee:57:e2:68:c2:09:1b:b5:f6:19:14:54:39:eb:21:fc:83:74: 27:3b:06:1a:f0:4a:5b:c7:df:d1:3c:47:48:78:72:fa:9f:17: b3:49:a3:81:35:44:28:61:d9:9f:c0:9a:83:02:3c:17:2b:49: 9c:39:40:e5:9e:bd:61:83:72:24:d0:8b:4c:fc:04:03:25:00: f6:3c:39:7f:b3:3c:58:e5:ac:e5:72:96:c6:d8:12:2e:4e:32: b8:b7:eb:76:9d:b3:86:2a:3a:53:82:40:0a:86:55:cf:c7:4f: 24:7f:41:57:2c:2d:3e:88:a2:c8:1d:a5:bc:1f:30:15:00:89: 09:b0:de:b8:66:36:bd:bc:6a:95:58:56:e1:80:6a:fb:be:a7: b8:ec:ee:ad:5f:ad:91:2e:ff:ae:d2:8f:94:2b:2b:d1:3e:cf: b7:82:82:91:d2:a3:69:54:2a:3f:13:48:a6:30:39:71:04:a4: a0:03:35:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJCRDYxMTAvBgNVBAUTKDZBOThDMEMwOENCRDM0MTlBOTA4MkI4NjBEMjlCRkE5 NzJGREYyQTcwHhcNMjUxMjE4MjMyNTM2WhcNMjUxMjI1MjMyNTM2WjAYMRYwFAYD VQQDDA02OTQ0OGQ3MS1lZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArY/MmVsM8DAiuKPBsHyg3WKKZ7geIURnCoBW3jQX4BG8hIxf5DRxVLZuAax6 nLta4lZkJnw2dJ7q1PCzbtqTXOgyhf97FI2xXI0TpDCDo5HI/XNpxPPBAMxpNuEs gdq4BtPYsfT7z/vaQfNuQREvjWpCXM2+Z9ambaH4oSHC24w9xaxxKU92xnvEISZm Ic1ESiQG04Sg4DPzd0cSoYKo7w9AJbnHWrHQrRr0TV7W5GRs2yM7ye8XxWd+OUfB xGaKel0gCCfnr9p1JBENkA4lj/uO5GX25mJ5/JuuK0R8qkrFCy7e7Jt0X9rPSwGC 7HX4ppCaPOE4dgJ43zpis576MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApK7Scs 6vBjOvYN8rsmJpcOreu2MB8GA1UdIwQYMBaAFGqYwMCMvTQZqQgrhg0pv6ly/fKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkJENi85QzU4NURCMDYz MTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5CbXBDQ3VHRFNtX3FYTDk4 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FwakF3SXk5TkJtcENDdUdEU21fcVhMOThxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkJENi85QzU4NURCMDYzMTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5C bXBDQ3VHRFNtX3FYTDk4cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQCOIxHnVpqemwKVufVrIVrwfDa1CCEP5SFliC2NyTwX3ZSA5PIEZx 5i7q0bI43f+QaHCiUmtESt1xfnbhuxq4rKOqUlUsjqbuV+JowgkbtfYZFFQ56yH8 g3QnOwYa8Epbx9/RPEdIeHL6nxezSaOBNUQoYdmfwJqDAjwXK0mcOUDlnr1hg3Ik 0ItM/AQDJQD2PDl/szxY5azlcpbG2BIuTjK4t+t2nbOGKjpTgkAKhlXPx08kf0FX LC0+iKLIHaW8HzAVAIkJsN64Zja9vGqVWFbhgGr7vqe47O6tX62RLv+u0o+UKyvR Ps+3goKR0qNpVCo/E0imMDlxBKSgAzXz -----END CERTIFICATE-----Generated at Sat Dec 20 11:39:42 2025 by rpki-client