This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: o1ycs+sEPiXkMWKMzpPvSakxlK0En4prDpfToJMkM0M= Subject key identifier: C1:45:C3:6A:0A:99:FB:89:3F:78:A4:56:18:E2:D3:FF:51:75:B4:A4 Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 3510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 34FB Signing time: Thu 18 Dec 2025 15:12:12 +0000 Manifest this update: Thu 18 Dec 2025 15:12:11 +0000 Manifest next update: Thu 25 Dec 2025 15:12:11 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: /lvfweIA1tSzaVyL7tgAoQqXIsIaHVCJIbFr0hhemrQ=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: diz+Mu2U4uCFECF4R8aohazh+vKfN3ig2+OPcHe2dC8=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 7uOB6N38ardleWnTuq1RJZwPlZnlnhINCIW0PLcMR9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13584 (0x3510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Dec 18 15:12:11 2025 GMT Not After : Dec 25 15:12:11 2025 GMT Subject: CN=694419cc-27ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:de:6c:ad:ce:e1:1f:65:ec:2f:56:63:e7:1e: ce:e0:dc:ae:cd:f2:26:fd:66:50:e8:45:f9:a5:6b: 1e:90:aa:a7:49:e3:e6:85:82:01:c7:ac:c8:27:92: 78:ab:ff:58:50:5a:71:73:27:de:ff:5e:be:a3:fb: c3:07:8d:fc:0b:6e:01:da:e7:b2:e7:8d:b1:a3:1f: 01:2b:52:6b:c1:c9:68:b7:80:7a:87:4a:9e:c9:f1: e1:65:4f:13:c5:10:3b:5f:a4:f6:2c:33:c0:dd:80: 0c:d1:f5:13:cf:3d:20:28:c6:8f:fa:c3:31:b9:e2: bc:17:86:09:27:a5:4d:dc:da:c5:55:c1:94:bf:dc: 9f:e9:2d:9d:b9:5a:77:ff:ee:67:52:b5:bd:72:4d: 02:2f:78:39:41:ca:68:2a:36:aa:9b:10:a0:2c:65: 88:8e:12:2c:83:29:c8:bd:47:6f:99:24:3b:4c:81: af:98:5e:21:19:ba:25:76:d7:3c:79:c7:78:e6:a0: 7c:e6:31:78:0e:2c:a1:6b:c1:b1:be:43:94:aa:6d: 77:92:ea:01:cb:b4:10:e6:38:81:1e:34:b8:76:64: 6a:e5:a7:ad:f0:70:f9:6c:05:cc:00:49:f6:0a:12: 25:71:62:53:fc:1c:3b:3d:b4:b5:1b:c3:52:3a:75: df:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:45:C3:6A:0A:99:FB:89:3F:78:A4:56:18:E2:D3:FF:51:75:B4:A4 X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:2c:98:8c:e7:89:9e:44:c1:40:bb:70:02:11:26:2d:50:ca: c9:8c:48:be:ad:62:cf:a1:0c:0c:c2:e4:fc:3c:c1:8b:85:03: a3:51:82:79:8e:9a:87:d7:0d:f0:25:f7:a4:28:e7:59:de:d4: c7:89:6c:4d:3a:e4:ac:2b:e0:43:f0:d4:bb:0f:c1:76:c4:f7: 2d:dc:82:39:6c:0d:80:04:1b:21:1f:c4:9e:3b:1e:d2:a7:fa: 06:21:8e:63:22:1f:a4:13:9a:af:18:55:9e:f5:91:fe:20:ee: 43:3e:5d:32:75:64:9d:c1:c2:28:24:c7:1e:ac:34:01:bd:b0: 4a:c7:0b:fa:f4:1a:2f:bb:d7:86:d1:6b:a5:fc:76:a1:19:35: ef:6d:e5:3d:88:75:84:25:91:65:6f:b6:f2:ce:3a:a3:2c:eb: c6:69:95:6f:24:d5:f0:3b:e4:38:56:a8:35:d0:78:e5:12:4f: d4:75:18:cf:3f:1b:be:41:70:1f:6c:ee:30:b3:39:86:c3:af: 2d:25:70:75:f6:28:68:4c:a1:4b:e1:da:7d:36:ed:d9:a6:3b: c5:70:82:64:74:3d:bd:3e:e9:cb:a7:cf:37:7b:73:c4:6f:d4: a2:bd:41:7a:08:63:f7:65:4b:70:e1:12:4a:89:ba:28:c1:c4: 14:46:81:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjUxMjE4MTUxMjExWhcNMjUxMjI1MTUxMjExWjAYMRYwFAYD VQQDDA02OTQ0MTljYy0yN2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3N5src7hH2XsL1Zj5x7O4NyuzfIm/WZQ6EX5pWsekKqnSePmhYIBx6zIJ5J4 q/9YUFpxcyfe/16+o/vDB438C24B2uey542xox8BK1Jrwclot4B6h0qeyfHhZU8T xRA7X6T2LDPA3YAM0fUTzz0gKMaP+sMxueK8F4YJJ6VN3NrFVcGUv9yf6S2duVp3 /+5nUrW9ck0CL3g5QcpoKjaqmxCgLGWIjhIsgynIvUdvmSQ7TIGvmF4hGboldtc8 ecd45qB85jF4Diyha8GxvkOUqm13kuoBy7QQ5jiBHjS4dmRq5aet8HD5bAXMAEn2 ChIlcWJT/Bw7PbS1G8NSOnXfdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFFw2oK mfuJP3ikVhji0/9RdbSkMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyLJiM54meRMFAu3ACESYtUMrJjEi+rWLPoQwMwuT8PMGLhQOjUYJ5 jpqH1w3wJfekKOdZ3tTHiWxNOuSsK+BD8NS7D8F2xPct3II5bA2ABBshH8SeOx7S p/oGIY5jIh+kE5qvGFWe9ZH+IO5DPl0ydWSdwcIoJMcerDQBvbBKxwv69Bovu9eG 0Wul/HahGTXvbeU9iHWEJZFlb7byzjqjLOvGaZVvJNXwO+Q4Vqg10HjlEk/UdRjP Pxu+QXAfbO4wszmGw68tJXB19ihoTKFL4dp9Nu3ZpjvFcIJkdD29PunLp883e3PE b9SivUF6CGP3ZUtw4RJKiboowcQURoHG -----END CERTIFICATE-----Generated at Sat Dec 20 06:31:51 2025 by rpki-client