This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json) Hash identifier: rRBXG88PmNAqdyba82DaGpYQ2C/8CgdtlAbvSqwwFLU= Subject key identifier: CD:A8:6D:A9:02:14:05:C2:40:69:0E:03:8E:A2:92:8B:4D:FA:09:35 Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft Manifest number: C2 Signing time: Sun 21 Dec 2025 05:07:52 +0000 Manifest this update: Sun 21 Dec 2025 05:07:51 +0000 Manifest next update: Sun 28 Dec 2025 05:07:51 +0000 Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: QO7IdmwjjCGx50CaHGBZYF5+kRq6Z+fhlseXdnpJ/Lw=) 2: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: PlQx8+H4QWwRWOJyC7w29KW+ohdqt59u/vmKToMRgGo=) 3: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: hu1JiBFiyTnMySrt80yNdScgCjSfSkHINTEYjzYfdUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Validity Not Before: Dec 21 05:07:51 2025 GMT Not After : Dec 28 05:07:51 2025 GMT Subject: CN=694780a7-f414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:51:d1:f6:19:1c:b7:32:55:c3:fd:35:a8:c7: 59:80:ae:7c:6b:4b:71:91:a7:a5:99:95:ea:2f:4c: 06:de:59:6c:69:bc:8c:3d:0e:66:a4:42:2c:c5:66: 23:96:2e:b1:49:f3:ad:e8:cb:06:4b:88:32:13:ea: 2b:5c:80:2b:58:8c:19:65:1e:d1:03:15:f8:8b:19: b6:a2:e1:11:cf:a9:a8:2d:94:73:36:5f:2d:01:40: 80:f7:49:8c:45:8c:7e:c3:e5:06:e1:7d:57:84:41: d1:57:2b:e5:b3:2d:c0:01:e5:6e:45:70:df:1c:33: 48:aa:09:79:f1:9d:a0:55:1f:79:6d:58:da:3e:70: 74:86:79:25:8e:a3:54:7c:6d:e7:e7:47:ee:58:05: ea:10:25:90:9f:04:b5:15:ae:c4:94:23:e2:23:af: f1:13:62:17:14:53:0b:fa:df:56:7b:a7:9e:37:8b: c4:0b:5d:db:b1:06:4f:82:d5:1c:9d:a7:85:e1:f4: 57:93:c9:d9:b0:c9:3b:f8:37:0d:ad:0d:6d:48:f3: c9:a1:a5:5d:44:ab:88:3e:46:86:e9:2b:e4:28:e2: 92:49:fb:bc:76:7f:1e:36:da:f5:ba:a3:03:59:bc: 56:36:8d:21:81:ce:bb:37:30:79:68:a5:52:84:35: 7d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A8:6D:A9:02:14:05:C2:40:69:0E:03:8E:A2:92:8B:4D:FA:09:35 X509v3 Authority Key Identifier: keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:af:02:1f:25:5d:1a:15:95:83:76:75:23:cb:58:21:24:20: 3e:ec:63:72:cc:93:22:08:95:36:93:cd:d3:62:7f:12:46:4d: c2:3d:26:dd:79:44:d8:ca:7f:74:52:a7:9c:4c:a7:50:e0:bc: 51:da:5d:33:0e:05:c0:3b:14:95:c7:6f:b8:f8:98:4b:36:5d: 9b:ee:36:5d:be:35:70:cc:d0:a2:15:d6:ea:99:0d:76:c6:55: 2d:80:f2:7a:81:b2:b1:a0:53:6f:ef:38:f6:10:fe:2f:e8:f8: 85:ba:b1:e0:7a:d5:77:13:f5:fb:82:61:12:bd:73:fe:c5:f7: 1e:54:e5:7e:5d:d8:60:3c:a9:44:74:e7:d1:b4:04:d4:11:23: 08:d5:86:bf:fe:99:00:ad:f0:e9:05:34:90:e4:3d:91:6c:40: 97:b2:f2:44:c5:6f:15:19:51:c2:40:32:f6:0e:e8:8a:f3:12: ca:b4:40:ab:54:af:7e:13:3b:d1:53:01:0a:cc:b1:ef:02:bb: 1a:70:66:9a:72:ee:26:4c:09:cf:f9:db:f6:28:c0:6f:b2:e0: 8f:44:35:f5:63:85:23:77:37:a1:09:54:a8:0f:d8:98:b1:dd: 72:30:1b:d8:5b:35:77:11:3a:b0:bb:4b:84:05:d4:c0:3c:a0: 01:c5:21:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCNjcxMTAvBgNVBAUTKEQ0NTlEMjY3NTI1MjM0QTA1MzVFQzM4RDhDQ0M4OTkw MTk0REUxODkwHhcNMjUxMjIxMDUwNzUxWhcNMjUxMjI4MDUwNzUxWjAYMRYwFAYD VQQDDA02OTQ3ODBhNy1mNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3VHR9hkctzJVw/01qMdZgK58a0txkaelmZXqL0wG3llsabyMPQ5mpEIsxWYj li6xSfOt6MsGS4gyE+orXIArWIwZZR7RAxX4ixm2ouERz6moLZRzNl8tAUCA90mM RYx+w+UG4X1XhEHRVyvlsy3AAeVuRXDfHDNIqgl58Z2gVR95bVjaPnB0hnkljqNU fG3n50fuWAXqECWQnwS1Fa7ElCPiI6/xE2IXFFML+t9We6eeN4vEC13bsQZPgtUc naeF4fRXk8nZsMk7+DcNrQ1tSPPJoaVdRKuIPkaG6SvkKOKSSfu8dn8eNtr1uqMD WbxWNo0hgc67NzB5aKVShDV9CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2obakC FAXCQGkOA46ikotN+gk1MB8GA1UdIwQYMBaAFNRZ0mdSUjSgU17DjYzMiZAZTeGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEI2Ny8yRkEwMEQzRUM2 QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05LQlRYc09Oak15SmtCbE40 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEI2Ny8yRkEwMEQzRUM2QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05L QlRYc09Oak15SmtCbE40WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKrwIfJV0aFZWDdnUjy1ghJCA+7GNyzJMiCJU2k83TYn8SRk3CPSbd eUTYyn90UqecTKdQ4LxR2l0zDgXAOxSVx2+4+JhLNl2b7jZdvjVwzNCiFdbqmQ12 xlUtgPJ6gbKxoFNv7zj2EP4v6PiFurHgetV3E/X7gmESvXP+xfceVOV+XdhgPKlE dOfRtATUESMI1Ya//pkArfDpBTSQ5D2RbECXsvJExW8VGVHCQDL2DuiK8xLKtECr VK9+EzvRUwEKzLHvArsacGaacu4mTAnP+dv2KMBvsuCPRDX1Y4UjdzehCVSoD9iY sd1yMBvYWzV3ETqwu0uEBdTAPKABxSHP -----END CERTIFICATE-----Generated at Sun Dec 21 16:03:54 2025 by rpki-client