This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft File: elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json) Hash identifier: Wzgmvx31U5RaOOYHxs6YEjDMw032CN1HgXJMhZC/cF4= Subject key identifier: C0:4C:C7:25:55:2A:BC:19:58:3E:88:EA:E5:E8:6F:80:B5:F2:C4:4C Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Certificate serial: 0D11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft Manifest number: 0D08 Signing time: Wed 24 Dec 2025 17:44:00 +0000 Manifest this update: Wed 24 Dec 2025 17:44:00 +0000 Manifest next update: Wed 31 Dec 2025 17:44:00 +0000 Files and hashes: 1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: JQXOlHCWWwXVYCvGSb71R0vuOo8uCkxBYLD8g0ElKxY=) 2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: qm9jDcnTJhuOKIEMpVyp7iPMTXqtw87t7pPJBICpZrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3345 (0xd11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E Validity Not Before: Dec 24 17:44:00 2025 GMT Not After : Dec 31 17:44:00 2025 GMT Subject: CN=694c2660-dffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3c:bd:1c:9a:b8:9b:91:c3:33:0f:8e:6f:12: a9:45:80:51:33:d2:23:63:d2:4d:c1:76:78:2b:25: 5c:90:25:d5:71:38:53:41:5b:eb:bc:62:0d:66:08: dc:c4:92:0f:27:79:e9:7e:33:7a:6a:72:41:e7:92: 53:6a:c9:0d:00:48:f2:dd:7b:ce:70:b8:30:ed:f2: 0d:32:a7:3a:ab:8e:a1:3a:01:69:81:27:c3:07:29: 14:eb:7b:fd:e1:ef:1e:3d:27:49:e1:be:19:38:dc: 25:56:87:e3:27:9f:65:b4:f0:0f:11:38:d7:dd:fb: 73:53:03:85:a2:b7:66:f7:9b:13:96:6e:bf:08:5a: d6:f1:13:89:01:ee:3f:6c:49:5c:94:dc:ff:6e:23: 3f:3e:65:8e:53:94:86:e9:ea:e5:0c:c8:4e:49:85: ff:a8:42:da:df:68:10:aa:ef:72:b8:57:28:32:b9: df:cb:c6:28:6b:a8:6d:cf:13:ca:61:8c:a2:a1:84: e8:9d:76:c2:20:cb:9d:a7:4b:1a:c0:91:60:43:9b: 86:e3:d1:a6:de:61:ec:19:00:95:e1:7c:dd:65:30: 84:ae:fc:82:55:6e:7f:40:7f:8f:e2:96:20:0b:c7: e4:8d:74:d3:fa:af:95:83:b4:3e:09:6d:de:c8:85: a1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4C:C7:25:55:2A:BC:19:58:3E:88:EA:E5:E8:6F:80:B5:F2:C4:4C X509v3 Authority Key Identifier: keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:0e:02:f8:5e:43:3e:b9:a0:c1:d7:2b:fb:b0:f4:53:1c:2c: 38:65:84:0a:7a:b6:91:67:08:2f:35:3f:a9:0a:8a:05:54:b6: cc:52:be:cc:77:6a:21:63:49:4c:34:fe:83:ad:f1:ed:ea:b4: 4b:65:6b:88:fe:b5:b7:36:c3:b5:37:e2:b6:8b:79:3b:a3:97: c9:de:8c:f2:3c:72:f7:d2:25:38:5a:a1:9c:49:67:d2:99:0a: 52:30:3c:8c:cf:bc:ca:17:4d:63:d4:a5:71:00:c7:92:4b:22: 19:ac:80:8d:c5:83:8e:07:6a:72:31:fd:b9:cd:09:9e:31:96: 8e:54:b8:72:a2:f0:6d:38:de:95:9b:b5:2c:7c:96:ed:9c:89: 13:d3:d2:a1:bf:a7:a8:b1:9f:f7:b5:4c:e6:66:1b:72:f9:9e: e1:da:14:84:5f:f7:a0:db:df:16:08:58:04:1d:f5:cb:60:c1: c9:c6:c9:a0:12:f3:eb:87:72:07:6b:08:2d:88:18:c3:81:c6: 5f:07:eb:c5:91:47:bc:93:8f:1d:5e:3e:2e:85:b9:e9:0a:9d: 03:01:3e:95:b8:90:1d:b2:b8:e3:57:1b:eb:17:63:9f:de:3e: 31:55:07:c9:1c:6e:3f:4a:85:ef:ad:ec:83:a9:c1:19:28:b8: 3b:27:58:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZERjgxMTAvBgNVBAUTKDdBNTA2QzIxN0EzMTA3OEU0MjE3ODE2MDM4MEREMkM4 MzkyOEQ5MkUwHhcNMjUxMjI0MTc0NDAwWhcNMjUxMjMxMTc0NDAwWjAYMRYwFAYD VQQDDA02OTRjMjY2MC1kZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzy9HJq4m5HDMw+ObxKpRYBRM9IjY9JNwXZ4KyVckCXVcThTQVvrvGINZgjc xJIPJ3npfjN6anJB55JTaskNAEjy3XvOcLgw7fINMqc6q46hOgFpgSfDBykU63v9 4e8ePSdJ4b4ZONwlVofjJ59ltPAPETjX3ftzUwOFordm95sTlm6/CFrW8ROJAe4/ bElclNz/biM/PmWOU5SG6erlDMhOSYX/qELa32gQqu9yuFcoMrnfy8Yoa6htzxPK YYyioYTonXbCIMudp0sawJFgQ5uG49Gm3mHsGQCV4XzdZTCErvyCVW5/QH+P4pYg C8fkjXTT+q+Vg7Q+CW3eyIWhYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBMxyVV KrwZWD6I6uXob4C18sRMMB8GA1UdIwQYMBaAFHpQbCF6MQeOQheBYDgN0sg5KNku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkRGOC83Njc2RjVEQ0Yz Q0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0NUNGNEZnT0EzU3lEa28y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsQnNJWG94QjQ1Q0Y0RmdPQTNTeURrbzJTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkRGOC83Njc2RjVEQ0YzQ0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0 NUNGNEZnT0EzU3lEa28yUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFDgL4XkM+uaDB1yv7sPRTHCw4ZYQKeraRZwgvNT+pCooFVLbMUr7M d2ohY0lMNP6DrfHt6rRLZWuI/rW3NsO1N+K2i3k7o5fJ3ozyPHL30iU4WqGcSWfS mQpSMDyMz7zKF01j1KVxAMeSSyIZrICNxYOOB2pyMf25zQmeMZaOVLhyovBtON6V m7UsfJbtnIkT09Khv6eosZ/3tUzmZhty+Z7h2hSEX/eg298WCFgEHfXLYMHJxsmg EvPrh3IHawgtiBjDgcZfB+vFkUe8k48dXj4uhbnpCp0DAT6VuJAdsrjjVxvrF2Of 3j4xVQfJHG4/SoXvreyDqcEZKLg7J1jo -----END CERTIFICATE-----Generated at Thu Dec 25 00:38:04 2025 by rpki-client