This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json) Hash identifier: Q5s+u0MZN3KKwYemuDSmd0v+NWJHO4rZFii9U74UL14= Subject key identifier: B7:EA:15:AC:41:02:12:DB:62:CF:5E:97:07:7C:0A:F5:5A:97:B6:1D Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft Manifest number: 01A3 Signing time: Mon 29 Dec 2025 02:27:54 +0000 Manifest this update: Mon 29 Dec 2025 02:27:54 +0000 Manifest next update: Mon 05 Jan 2026 02:27:54 +0000 Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: 3v+0mWRFSnM3gkFRX6Tyk7uSSzM5v6vJATELftUuim4=) 2: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: sUPjSnVrnjmDdoMwCFJp2zuEZdscR4LvuhmHJ1v7ZYI=) 3: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: zgC2BukFvqF6vF8m1zT1OqU7vAyEsCa9SdkeX8vwSl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 02:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Validity Not Before: Dec 29 02:27:54 2025 GMT Not After : Jan 5 02:27:54 2026 GMT Subject: CN=6951e72a-ac6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:8f:cd:36:19:2a:ab:b3:90:63:89:69:e6: f3:91:00:41:6b:80:c0:2e:d2:a7:59:e9:f3:47:99: 73:f6:0b:9b:1c:eb:82:42:42:66:d4:9e:64:ab:e5: 21:1b:bb:1c:6a:b2:c2:70:d7:d2:ce:05:82:96:fb: 40:9f:89:f7:f7:9f:b9:02:60:b0:3d:49:ef:4a:14: 7e:47:31:19:3c:55:e5:a6:f4:e4:a4:c4:b8:b0:f7: 52:a7:0a:6a:60:cc:44:3c:eb:c8:ff:78:60:92:d6: af:87:ff:ee:fa:e9:14:db:5e:d1:06:ad:6d:52:e4: 2c:cb:06:29:c1:d7:91:d2:02:c8:e7:4d:25:b8:a1: 40:c5:cd:e6:3c:7a:e5:0b:60:67:93:14:1a:b6:5c: fc:fd:e2:6c:85:57:72:b9:12:f4:37:13:96:4d:fa: 4e:e8:52:a9:21:71:0b:2f:71:8c:89:c8:a9:b4:db: 37:91:6f:ca:25:9f:14:73:5b:dd:dd:3c:db:e9:4e: 4c:f8:28:c3:8f:e0:0a:5f:55:3a:c9:fb:31:66:86: 66:da:10:cc:2b:1d:a8:69:c2:2b:81:62:ae:15:54: 1c:64:5d:d4:13:d0:ae:59:88:47:1c:9c:8a:b3:f9: bd:d8:f2:25:0b:57:e9:2c:7b:b4:5f:b6:23:d3:4e: f6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EA:15:AC:41:02:12:DB:62:CF:5E:97:07:7C:0A:F5:5A:97:B6:1D X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:91:15:81:24:e6:ed:c4:33:5d:51:04:59:29:49:d4:da:20: 09:db:12:c4:cd:2c:72:14:43:04:03:5c:e4:99:98:a9:aa:f2: 3e:be:9f:21:ef:98:c2:4a:98:a8:f3:05:6d:86:8f:42:eb:07: 9a:80:e6:99:32:a0:c5:b5:21:39:98:bf:01:f7:bd:88:82:1a: 6e:4b:ee:17:41:2f:23:0f:77:5e:5b:42:de:97:c5:32:4f:b7: c0:1b:28:67:52:dd:aa:c0:a7:5b:eb:df:3d:34:82:62:76:3e: c8:8c:4c:0d:fe:36:6a:4a:1f:b2:07:58:41:d4:cd:77:87:be: 3d:36:b2:99:9c:66:63:18:ab:a1:03:e9:ca:a6:21:38:2d:b5: bb:4d:e8:50:89:5b:92:60:55:2b:9d:b1:d2:2f:66:ac:b1:d0: f8:c2:ac:bd:e5:90:1b:4b:d2:10:74:90:e5:72:93:a1:e8:6f: 44:1f:d0:3d:ff:72:48:7c:55:e9:d9:53:17:b5:be:f5:d3:88: 11:1b:4b:16:6c:7e:d5:73:12:4c:27:ba:68:eb:2b:6b:c2:a7: 8a:68:ab:e7:f2:23:10:c8:99:95:e0:72:63:58:e4:84:6e:f7: 69:85:1b:92:bf:b5:3e:82:c9:32:dd:5c:ca:c6:b6:f4:5f:a2: 3b:2f:1c:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1 QTc0NDA5OUQwHhcNMjUxMjI5MDIyNzU0WhcNMjYwMTA1MDIyNzU0WjAYMRYwFAYD VQQDDA02OTUxZTcyYS1hYzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArr6PzTYZKquzkGOJaebzkQBBa4DALtKnWenzR5lz9gubHOuCQkJm1J5kq+Uh G7scarLCcNfSzgWClvtAn4n395+5AmCwPUnvShR+RzEZPFXlpvTkpMS4sPdSpwpq YMxEPOvI/3hgktavh//u+ukU217RBq1tUuQsywYpwdeR0gLI500luKFAxc3mPHrl C2BnkxQatlz8/eJshVdyuRL0NxOWTfpO6FKpIXELL3GMiciptNs3kW/KJZ8Uc1vd 3Tzb6U5M+CjDj+AKX1U6yfsxZoZm2hDMKx2oacIrgWKuFVQcZF3UE9CuWYhHHJyK s/m92PIlC1fpLHu0X7Yj0072OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfqFaxB AhLbYs9elwd8CvVal7YdMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3 MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu NUVWVWswbGJScnBhZEVDWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJkRWBJObtxDNdUQRZKUnU2iAJ2xLEzSxyFEMEA1zkmZipqvI+vp8h 75jCSpio8wVtho9C6weagOaZMqDFtSE5mL8B972IghpuS+4XQS8jD3deW0Lel8Uy T7fAGyhnUt2qwKdb6989NIJidj7IjEwN/jZqSh+yB1hB1M13h749NrKZnGZjGKuh A+nKpiE4LbW7TehQiVuSYFUrnbHSL2assdD4wqy95ZAbS9IQdJDlcpOh6G9EH9A9 /3JIfFXp2VMXtb7104gRG0sWbH7VcxJMJ7po6ytrwqeKaKvn8iMQyJmV4HJjWOSE bvdphRuSv7U+gsky3VzKxrb0X6I7Lxwa -----END CERTIFICATE-----Generated at Mon Dec 29 08:27:02 2025 by rpki-client