This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft File: PUfmaHu030DFGwOkVZwQyiL2dy8.mft (raw, json) Hash identifier: YdEv8t+cIGKAJb2LgNIdX63FCZW+tOHRIOIWZHopsI4= Subject key identifier: 08:BD:FE:17:90:9A:7C:45:39:F8:19:BA:69:E8:19:08:38:21:E8:2F Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F Certificate issuer: /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft Manifest number: 01B7 Signing time: Fri 19 Dec 2025 02:22:48 +0000 Manifest this update: Fri 19 Dec 2025 02:22:47 +0000 Manifest next update: Fri 26 Dec 2025 02:22:47 +0000 Files and hashes: 1: PUfmaHu030DFGwOkVZwQyiL2dy8.crl (hash: FAs3bJX9GwqIUSx92niA7mpFQlxtFP/C6pEXlxYDVlQ=) 2: FAA2E3324C3811EEB7116433C4F9AE02.roa (hash: lp3xmOm8VpMKZjMN4wnKudx9lNNJk9A7QEoVNpNZM/Y=) 3: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (hash: zLJmvWY7239Phf4yPfDTSksmKOjgZNQc6mllvDN5PGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Validity Not Before: Dec 19 02:22:47 2025 GMT Not After : Dec 26 02:22:47 2025 GMT Subject: CN=6944b6f8-8105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8e:ea:2d:96:e1:0e:bd:dc:fa:b1:15:c6:c3: 66:b3:a8:bf:25:7e:7f:64:a3:42:71:94:ed:e7:96: d9:50:5a:47:32:e4:60:c4:22:9f:2d:ff:00:3b:ed: 88:c9:96:54:f4:c6:37:5b:70:55:a8:8a:40:95:e6: a5:2d:45:0a:e9:10:f6:df:0f:aa:d1:be:82:15:3d: 4a:1c:e2:48:a7:87:c1:82:12:86:02:e3:d9:bd:38: 17:72:69:d6:81:c7:20:6a:ed:42:db:68:1b:49:24: cd:40:4e:ce:78:c0:99:0b:94:c1:96:fe:a7:38:ea: 60:89:91:7e:86:7e:cf:34:4c:3a:2c:44:fd:46:1b: 4f:3d:e5:4f:57:e5:bc:71:1c:03:35:5a:ac:b5:ee: 48:b0:2c:78:fd:31:86:ba:3a:08:ba:c2:bd:ba:61: b8:3f:f1:0a:7b:df:04:d2:de:df:e5:b7:28:63:26: 60:23:ba:83:a0:06:df:a2:40:75:48:b7:9e:8a:02: f7:b4:2a:b0:a4:c7:d5:7a:68:78:02:29:ad:d1:b0: 09:9c:72:3e:d6:73:ec:78:c3:1e:75:34:5c:b1:41: 2c:4c:ff:29:ef:e2:e1:d9:fb:db:d0:68:ad:40:da: 7f:7f:58:a1:44:c9:33:53:ea:13:39:a9:f6:53:bf: 28:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BD:FE:17:90:9A:7C:45:39:F8:19:BA:69:E8:19:08:38:21:E8:2F X509v3 Authority Key Identifier: keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:6a:ec:f5:f5:a1:a0:e5:c2:1e:17:93:b2:af:bb:40:f7:dd: 04:c3:07:a5:82:f6:ad:1a:ad:36:ed:14:e0:0d:db:8e:8d:53: 3a:80:6a:b5:9c:b7:69:94:73:79:b1:bf:92:51:eb:06:01:41: 76:99:03:6c:cf:2a:44:b9:ed:f5:68:41:f4:d5:75:e2:93:3b: 2f:d2:01:eb:e4:79:d9:7f:31:c3:73:0b:6b:68:3c:76:4b:ff: 60:4e:49:51:7f:30:c5:33:42:95:f4:a6:09:f9:3f:92:7f:21: ae:ee:a8:f9:55:3b:7b:a7:c9:e9:16:4b:3d:ad:b2:66:5d:8a: 0b:93:92:29:d1:d3:de:d7:f7:fe:63:3e:4f:da:70:9c:32:00: b1:63:fe:bc:64:4c:81:27:9b:6d:e1:b3:6e:de:49:86:f2:56: 5d:f7:06:f7:6e:f6:0a:f3:5a:98:58:0b:9b:1e:d7:20:82:ec: fb:0f:54:2a:e9:ca:d9:56:68:f4:2e:93:65:83:4f:1e:a7:91: 48:ca:c8:4b:e1:e0:52:0f:2d:03:e8:cd:5d:ff:31:06:52:5c: 7c:f9:64:a9:9d:2c:1b:c7:cd:7c:67:f6:c2:36:9e:59:e9:cf: 4a:2f:56:93:26:f7:58:77:70:3a:2d:fc:0e:ce:3a:8d:1d:6d: d2:90:6f:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE1QzYxMTAvBgNVBAUTKDNENDdFNjY4N0JCNERGNDBDNTFCMDNBNDU1OUMxMENB MjJGNjc3MkYwHhcNMjUxMjE5MDIyMjQ3WhcNMjUxMjI2MDIyMjQ3WjAYMRYwFAYD VQQDDA02OTQ0YjZmOC04MTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm47qLZbhDr3c+rEVxsNms6i/JX5/ZKNCcZTt55bZUFpHMuRgxCKfLf8AO+2I yZZU9MY3W3BVqIpAlealLUUK6RD23w+q0b6CFT1KHOJIp4fBghKGAuPZvTgXcmnW gccgau1C22gbSSTNQE7OeMCZC5TBlv6nOOpgiZF+hn7PNEw6LET9RhtPPeVPV+W8 cRwDNVqste5IsCx4/TGGujoIusK9umG4P/EKe98E0t7f5bcoYyZgI7qDoAbfokB1 SLeeigL3tCqwpMfVemh4Aimt0bAJnHI+1nPseMMedTRcsUEsTP8p7+Lh2fvb0Git QNp/f1ihRMkzU+oTOan2U78oVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAi9/heQ mnxFOfgZumnoGQg4IegvMB8GA1UdIwQYMBaAFD1H5mh7tN9AxRsDpFWcEMoi9ncv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTVDNi9ENTU1MTlCNDRD MzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMwREZHd09rVlp3UXlpTDJk eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVZm1hSHUwMzBERkd3T2tWWndReWlMMmR5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTVDNi9ENTU1MTlCNDRDMzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMw REZHd09rVlp3UXlpTDJkeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBauz19aGg5cIeF5Oyr7tA990EwwelgvatGq027RTgDduOjVM6gGq1 nLdplHN5sb+SUesGAUF2mQNszypEue31aEH01XXikzsv0gHr5HnZfzHDcwtraDx2 S/9gTklRfzDFM0KV9KYJ+T+SfyGu7qj5VTt7p8npFks9rbJmXYoLk5Ip0dPe1/f+ Yz5P2nCcMgCxY/68ZEyBJ5tt4bNu3kmG8lZd9wb3bvYK81qYWAubHtcgguz7D1Qq 6crZVmj0LpNlg08ep5FIyshL4eBSDy0D6M1d/zEGUlx8+WSpnSwbx818Z/bCNp5Z 6c9KL1aTJvdYd3A6LfwOzjqNHW3SkG+z -----END CERTIFICATE-----Generated at Fri Dec 19 23:51:18 2025 by rpki-client