This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft File: cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json) Hash identifier: HP9FW234yiqxZvvTwKTEFT50OJfBtXxjDf15xhIpP4A= Subject key identifier: C5:3A:1F:DE:C5:AE:05:1E:79:12:9B:A3:F1:13:9C:39:C9:33:49:2A Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Certificate serial: 3550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft Manifest number: 351B Signing time: Tue 16 Dec 2025 14:17:52 +0000 Manifest this update: Tue 16 Dec 2025 14:17:52 +0000 Manifest next update: Tue 23 Dec 2025 14:17:52 +0000 Files and hashes: 1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: JdklN1Qsapqnodl/t+Jx+sTHx8McrOUVsSoTCCIM9qA=) 2: 392987D254F611E79DF7E643C4F9AE02.roa (hash: Zj1VjgjescNA34ntuLagaf4Gpvf1qUoGCJyDKrDQ9CM=) 3: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: ZsKZ4KjphdPT0jn69q25ishvkQ6ZWEITVVyaEZP50Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 14:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13648 (0x3550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Validity Not Before: Dec 16 14:17:52 2025 GMT Not After : Dec 23 14:17:52 2025 GMT Subject: CN=69416a10-51c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:07:01:f2:98:fd:f5:d9:84:ed:50:f9:05: 4e:f0:97:62:99:ff:9f:1b:44:eb:a8:b9:45:bd:b3: c3:e2:a7:94:5f:5b:1e:a4:8e:ae:a0:64:4a:0e:ea: 53:4e:c9:f5:ce:a6:8c:8e:fc:1c:fc:42:65:c9:93: a9:88:dd:19:f3:43:a4:7e:26:53:a9:0d:0c:82:df: 5a:bc:6a:0f:db:f0:3c:4a:60:1c:45:46:86:4e:bc: 44:14:89:b3:bd:b6:0f:9b:3f:9a:ed:c0:80:d1:92: b9:77:7e:0b:7d:39:b2:c7:5e:99:99:c6:dd:a0:67: 94:a3:e8:e3:71:5f:5d:c3:31:79:21:28:fc:10:61: 08:99:20:60:41:9c:07:bd:d2:63:95:1b:85:7a:4a: 62:e1:f6:b1:6d:87:97:93:2d:63:0f:0c:83:76:e5: 94:b0:69:c1:79:1c:42:1b:38:66:26:3f:42:0b:7a: 55:cb:10:07:ed:ad:1e:75:34:14:4e:02:c3:a1:ba: c3:d8:a1:55:c8:ce:74:24:d9:f5:02:72:c2:7c:09: 77:b6:9a:de:75:00:76:30:2a:31:d0:8d:0d:63:4e: c6:94:52:25:9d:10:33:26:11:9e:b5:5d:b8:df:ee: ea:c2:3f:be:75:12:c9:da:30:fc:98:07:ca:da:20: 8c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3A:1F:DE:C5:AE:05:1E:79:12:9B:A3:F1:13:9C:39:C9:33:49:2A X509v3 Authority Key Identifier: keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:67:c5:f6:e9:b3:68:7c:75:cc:24:74:57:8a:5d:b1:d6:35: c5:9a:6c:0b:24:29:4e:af:79:8b:72:bd:44:ba:cc:29:90:92: f4:9f:e2:f3:ac:4e:de:83:c7:33:cf:8e:80:11:6a:d6:1e:50: ef:73:83:96:85:28:b8:39:92:c5:48:a6:13:6c:9d:97:f3:be: 04:b3:c5:14:b1:f2:04:58:3b:4c:a8:95:5c:f8:02:94:47:05: 41:e5:00:3f:7b:a6:48:ea:98:ac:24:39:7c:fa:d2:b5:c0:42: a9:f9:a3:f6:cf:ce:44:f8:e1:e8:08:4d:5b:25:33:f2:da:57: f6:82:f6:8e:92:8b:c6:3a:5e:82:dd:b5:ac:94:3e:9c:76:2b: 1d:fc:55:01:61:51:80:d4:6b:8d:19:83:0f:82:a9:3b:06:b1: fa:39:f4:3b:69:d1:00:fe:b9:33:3f:0a:2e:43:00:00:8d:0d: b0:64:31:2a:a6:ff:34:96:e3:38:1c:9c:10:5e:be:9f:b6:cb: 1b:f0:f8:47:66:e8:d4:54:d2:49:88:4e:da:34:cb:0d:94:6e: ed:2d:d6:00:d1:b3:5a:80:fa:23:5c:1b:43:2d:d5:61:d3:ae: 05:b0:70:a6:51:c8:d4:01:a9:91:f8:59:15:97:7c:a7:2f:8e: 07:df:ed:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZCRTM0N0ZBNjZB MUYwMjM0OTAwHhcNMjUxMjE2MTQxNzUyWhcNMjUxMjIzMTQxNzUyWjAYMRYwFAYD VQQDDA02OTQxNmExMC01MWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AQHAfKY/fXZhO1Q+QVO8Jdimf+fG0TrqLlFvbPD4qeUX1sepI6uoGRKDupT Tsn1zqaMjvwc/EJlyZOpiN0Z80OkfiZTqQ0Mgt9avGoP2/A8SmAcRUaGTrxEFImz vbYPmz+a7cCA0ZK5d34LfTmyx16ZmcbdoGeUo+jjcV9dwzF5ISj8EGEImSBgQZwH vdJjlRuFekpi4faxbYeXky1jDwyDduWUsGnBeRxCGzhmJj9CC3pVyxAH7a0edTQU TgLDobrD2KFVyM50JNn1AnLCfAl3tpredQB2MCox0I0NY07GlFIlnRAzJhGetV24 3+7qwj++dRLJ2jD8mAfK2iCMQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMU6H97F rgUeeRKbo/ETnDnJM0kqMB8GA1UdIwQYMBaAFHCXZcfU0zH0w2rGvjR/pmofAjSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8wQkVEMzUyNjFE NkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1mVERhc2EtTkgtbWFoOENO SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKZGx4OVRUTWZURGFzYS1OSC1tYWg4Q05KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8wQkVEMzUyNjFENkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1m VERhc2EtTkgtbWFoOENOSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmZ8X26bNofHXMJHRXil2x1jXFmmwLJClOr3mLcr1EuswpkJL0n+Lz rE7eg8czz46AEWrWHlDvc4OWhSi4OZLFSKYTbJ2X874Es8UUsfIEWDtMqJVc+AKU RwVB5QA/e6ZI6pisJDl8+tK1wEKp+aP2z85E+OHoCE1bJTPy2lf2gvaOkovGOl6C 3bWslD6cdisd/FUBYVGA1GuNGYMPgqk7BrH6OfQ7adEA/rkzPwouQwAAjQ2wZDEq pv80luM4HJwQXr6ftssb8PhHZujUVNJJiE7aNMsNlG7tLdYA0bNagPojXBtDLdVh 064FsHCmUcjUAamR+FkVl3ynL44H3+0k -----END CERTIFICATE-----Generated at Tue Dec 16 21:54:32 2025 by rpki-client