This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft File: SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json) Hash identifier: 1CFQJEwvM2691f+7eO1o20wH0vqomon+un6gYaTnULE= Subject key identifier: 51:F7:1C:1F:8D:06:84:6B:9A:D8:4B:07:A9:20:CD:4A:76:66:D3:E6 Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F Certificate issuer: /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft Manifest number: E8 Signing time: Sat 27 Dec 2025 04:21:46 +0000 Manifest this update: Sat 27 Dec 2025 04:21:46 +0000 Manifest next update: Sat 03 Jan 2026 04:21:46 +0000 Files and hashes: 1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: PFEDLq3KC6GccRbBMpHGZg9izhUMmAcv78xjcoM2LbA=) 2: 35525B92845611EFB053C341C4F9AE02.roa (hash: VrKew/904a7WGaHwfTfVmRygoJsUgD+2JGEhLd8TxAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 04:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Validity Not Before: Dec 27 04:21:46 2025 GMT Not After : Jan 3 04:21:46 2026 GMT Subject: CN=694f5eda-88fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:ee:1d:8f:d1:d0:c1:c1:73:05:00:20:b2: 0e:66:86:59:03:6f:3c:e7:4a:b3:e2:e4:5d:ed:36: 9f:94:0e:dd:cc:6b:43:5c:64:ca:3f:b9:63:67:f0: 58:da:cd:64:b8:e4:c3:ef:87:24:f7:2e:e4:5c:b6: 00:c7:37:14:14:27:69:64:9f:89:f6:a5:b3:73:53: 1e:aa:b4:ee:70:49:aa:25:75:8f:7f:d7:ea:48:80: 27:22:29:d2:c2:31:2b:d8:bf:10:0c:0b:33:44:c3: 59:b4:ee:ee:5a:5d:29:6e:a5:a1:24:80:66:a6:48: 56:e3:46:d1:34:4d:a1:ea:0c:d7:70:42:61:3a:37: 8e:f9:29:36:86:1f:8f:e0:d8:2f:7f:5b:9a:e1:0c: 07:94:e4:aa:99:f6:cb:84:b3:f9:b6:7e:27:aa:c6: a7:0c:d7:98:43:29:bc:f3:08:74:03:bc:45:92:57: 34:3c:65:98:7b:2e:b7:0e:f3:5d:11:55:c9:8c:18: 93:43:0b:1c:f2:5e:69:27:08:31:7d:76:a5:96:53: 1f:ce:bb:06:0d:4b:bb:b7:3b:6d:a2:30:88:17:ab: ad:65:43:8f:5c:cd:9c:41:18:fa:88:c7:5e:90:2e: bb:80:69:9c:25:9f:2c:cf:a0:7e:57:25:c0:aa:82: 7b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F7:1C:1F:8D:06:84:6B:9A:D8:4B:07:A9:20:CD:4A:76:66:D3:E6 X509v3 Authority Key Identifier: keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:11:61:89:04:67:75:85:67:d6:16:fc:31:81:f9:bb:94:cb: 37:03:4f:60:67:68:d2:24:69:e6:8b:3e:a0:a0:39:f0:3c:67: d4:6c:63:87:93:c7:ab:0c:c9:2d:ce:9d:da:23:e1:f7:38:99: 71:0b:44:31:aa:4b:5d:20:a9:c0:26:83:e9:47:6c:18:ef:4d: 7f:50:5d:1e:75:9c:35:4a:30:1f:50:83:98:ee:50:75:0c:dc: 7d:01:d2:0f:3b:e3:b8:c7:42:a7:40:43:41:db:b3:75:fb:45: b0:12:9f:e6:82:6f:15:e5:1e:ab:fe:1e:3b:94:17:d3:03:cc: 95:b2:a5:e6:db:1d:9d:58:4a:ae:54:98:4b:27:a1:f1:38:cd: 93:53:69:af:ef:b8:ce:56:9a:68:77:fc:0b:0d:03:7f:9a:f6: 9d:37:a3:6e:48:ce:70:e3:c5:0a:9d:25:29:0e:ea:05:e0:ab: c6:de:d1:0a:de:07:60:92:f1:12:56:74:f2:40:ae:83:a8:d6: 34:33:d3:cd:f4:94:c0:30:3e:c2:60:0a:b1:df:00:4f:ff:52: 22:a5:28:46:9e:fc:d5:b4:22:a0:db:cd:bb:00:2f:64:44:52: 92:b0:53:3b:27:f1:80:32:64:50:d6:f8:cf:c1:7d:78:22:dd: eb:43:6e:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM0RkYxMTAvBgNVBAUTKDQ5NDc1QjU5NzVGMTk3OTg5NUEzQzZFNDQxODNFNEJD QTJFODM0NkYwHhcNMjUxMjI3MDQyMTQ2WhcNMjYwMTAzMDQyMTQ2WjAYMRYwFAYD VQQDDA02OTRmNWVkYS04OGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfPuHY/R0MHBcwUAILIOZoZZA28850qz4uRd7TaflA7dzGtDXGTKP7ljZ/BY 2s1kuOTD74ck9y7kXLYAxzcUFCdpZJ+J9qWzc1MeqrTucEmqJXWPf9fqSIAnIinS wjEr2L8QDAszRMNZtO7uWl0pbqWhJIBmpkhW40bRNE2h6gzXcEJhOjeO+Sk2hh+P 4Ngvf1ua4QwHlOSqmfbLhLP5tn4nqsanDNeYQym88wh0A7xFklc0PGWYey63DvNd EVXJjBiTQwsc8l5pJwgxfXalllMfzrsGDUu7tzttojCIF6utZUOPXM2cQRj6iMde kC67gGmcJZ8sz6B+VyXAqoJ77QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFH3HB+N BoRrmthLB6kgzUp2ZtPmMB8GA1UdIwQYMBaAFElHW1l18ZeYlaPG5EGD5Lyi6DRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzRGRi85QzU2QkU0Mjg0 NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1aVZvOGJrUVlQa3ZLTG9O RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVZGJXWFh4bDVpVm84YmtRWVBrdktMb05HOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzRGRi85QzU2QkU0Mjg0NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1 aVZvOGJrUVlQa3ZLTG9ORzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJEWGJBGd1hWfWFvwxgfm7lMs3A09gZ2jSJGnmiz6goDnwPGfUbGOH k8erDMktzp3aI+H3OJlxC0QxqktdIKnAJoPpR2wY701/UF0edZw1SjAfUIOY7lB1 DNx9AdIPO+O4x0KnQENB27N1+0WwEp/mgm8V5R6r/h47lBfTA8yVsqXm2x2dWEqu VJhLJ6HxOM2TU2mv77jOVppod/wLDQN/mvadN6NuSM5w48UKnSUpDuoF4KvG3tEK 3gdgkvESVnTyQK6DqNY0M9PN9JTAMD7CYAqx3wBP/1IipShGnvzVtCKg2827AC9k RFKSsFM7J/GAMmRQ1vjPwX14It3rQ26q -----END CERTIFICATE-----Generated at Mon Dec 29 04:45:09 2025 by rpki-client