This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft File: vY48wqk9XbzYQnUJc4oxS_kMiH0.mft (raw, json) Hash identifier: oIa7TYFKAQm9t8+MqoX2ne4VwL2Hxs/9Znwx2beACoo= Subject key identifier: E3:97:24:8B:B0:56:BB:A5:42:04:BF:33:B1:36:2D:87:CB:99:44:3D Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D Certificate issuer: /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft Manifest number: 1B Signing time: Fri 19 Dec 2025 06:45:18 +0000 Manifest this update: Fri 19 Dec 2025 06:45:18 +0000 Manifest next update: Fri 26 Dec 2025 06:45:18 +0000 Files and hashes: 1: vY48wqk9XbzYQnUJc4oxS_kMiH0.crl (hash: 32yG8CjY8RcK0eZiRKburuj6Ql37wxqtEst3M1L0tpI=) 2: 79734D6AB9EB11F095C2C735C4F9AE02.roa (hash: zTRiAtvXJqXVBRjtXMDww/8yB6SUllc65zHvKU0WltI=) 3: E9A639DAB9EB11F0AE27CB70C4F9AE02.roa (hash: rEHYvI4H6kzy3QLBvK5c7/+2A8OlyxQVAExaC8Q6VxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D Validity Not Before: Dec 19 06:45:18 2025 GMT Not After : Dec 26 06:45:18 2025 GMT Subject: CN=6944f47e-519a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:80:e2:82:9c:ce:78:68:0a:34:fe:4f:d2: 17:0e:87:ad:16:2f:42:0f:f9:aa:62:42:67:ba:ef: e4:c4:dc:4c:34:2e:43:4c:08:fe:fa:82:ef:89:8f: 88:d9:fe:3b:7e:81:a7:26:17:cc:f7:3e:a2:ac:55: a7:a3:00:57:d2:79:53:9c:8a:3b:e3:d9:bd:a9:07: 3d:3d:f9:5c:a6:a1:ca:ed:61:4c:bd:c6:bf:be:29: 4b:f8:0d:12:03:be:63:f2:0f:2a:19:79:56:c5:11: 92:9b:7f:7e:10:69:90:26:44:6d:ac:76:21:63:a2: b5:7a:b3:07:b4:08:bc:5a:fc:ae:ea:97:7b:d1:f7: e6:b2:51:ef:6f:ee:fc:48:c1:22:e0:1e:b2:37:72: ea:e6:5d:fa:e7:6b:db:8b:88:26:11:2c:37:f4:3e: 72:a0:93:c1:fe:59:c5:be:45:92:0c:18:2f:44:62: e5:b2:b3:73:29:1f:d4:15:c3:68:69:4b:57:b6:ee: a0:18:77:33:46:2b:0b:53:b3:ea:14:87:27:f9:02: 2a:05:85:cf:e6:fc:b8:f6:da:03:d6:75:8f:40:98: 1e:da:32:39:f3:6a:85:92:b8:fe:70:43:a8:3b:b8: 49:4a:cc:bf:d5:8a:0a:65:33:ad:06:57:2e:60:aa: b3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:97:24:8B:B0:56:BB:A5:42:04:BF:33:B1:36:2D:87:CB:99:44:3D X509v3 Authority Key Identifier: keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:05:41:2f:29:55:1f:7b:74:30:91:7b:99:72:f7:99:fd:fc: 65:ac:ce:2a:cc:5b:69:64:82:9e:87:49:7f:48:ec:e1:8e:ff: 18:de:68:cf:dc:9a:8f:64:89:2d:c4:fb:73:03:5a:f0:f7:af: 75:e5:3d:d9:74:8b:9a:9a:71:40:f1:00:df:3e:f5:ad:14:f7: 47:97:7b:9d:f6:ba:28:f6:2b:94:8b:90:a3:28:13:fe:5c:fb: fc:7c:92:60:40:71:d8:71:00:f4:4e:35:3e:ee:b4:47:a5:de: c6:89:d3:e4:c9:f6:61:94:86:a4:cc:c9:56:3d:cb:85:94:26: c7:27:33:37:78:3f:b4:31:76:ca:c2:f4:d5:aa:24:8b:1e:aa: 7d:07:f4:6e:35:d9:a9:6e:cc:50:4c:90:20:d3:e9:f7:33:a6: 6c:00:55:7b:e5:c7:92:41:2b:f4:82:d3:0b:fe:a9:ec:97:56: 79:d3:6c:24:07:00:4d:94:88:44:bb:db:a9:a6:dd:54:16:1a: 7c:d5:e0:cf:e1:04:af:3b:8f:0a:b8:10:72:78:e0:24:43:e8: 14:50:52:c6:7e:82:fb:93:43:12:4c:c6:bb:37:63:cc:3e:ae: f4:84:ce:25:1b:4c:ae:1f:cd:25:f4:7f:d7:1d:10:f4:cd:82: b3:56:7f:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkU3NjExMC8GA1UEBRMoQkQ4RTNDQzJBOTNENURCQ0Q4NDI3NTA5NzM4QTMxNEJG OTBDODg3RDAeFw0yNTEyMTkwNjQ1MThaFw0yNTEyMjYwNjQ1MThaMBgxFjAUBgNV BAMMDTY5NDRmNDdlLTUxOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD8oDigpzOeGgKNP5P0hcOh60WL0IP+apiQme67+TE3Ew0LkNMCP76gu+Jj4jZ /jt+gacmF8z3PqKsVaejAFfSeVOcijvj2b2pBz09+VymocrtYUy9xr++KUv4DRID vmPyDyoZeVbFEZKbf34QaZAmRG2sdiFjorV6swe0CLxa/K7ql3vR9+ayUe9v7vxI wSLgHrI3curmXfrna9uLiCYRLDf0PnKgk8H+WcW+RZIMGC9EYuWys3MpH9QVw2hp S1e27qAYdzNGKwtTs+oUhyf5AioFhc/m/Lj22gPWdY9AmB7aMjnzaoWSuP5wQ6g7 uElKzL/VigplM60GVy5gqrN7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU45cki7BW u6VCBL8zsTYth8uZRD0wHwYDVR0jBBgwFoAUvY48wqk9XbzYQnUJc4oxS/kMiH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRTc2L0Q5RTRDNENDQjky NzExRjBCODBFQzQ1RUM0RjlBRTAyL3ZZNDh3cWs5WGJ6WVFuVUpjNG94U19rTWlI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdlk0OHdxazlYYnpZUW5VSmM0b3hTX2tNaUgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG RTc2L0Q5RTRDNENDQjkyNzExRjBCODBFQzQ1RUM0RjlBRTAyL3ZZNDh3cWs5WGJ6 WVFuVUpjNG94U19rTWlIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACsFQS8pVR97dDCRe5ly95n9/GWszirMW2lkgp6HSX9I7OGO/xjeaM/c mo9kiS3E+3MDWvD3r3XlPdl0i5qacUDxAN8+9a0U90eXe532uij2K5SLkKMoE/5c +/x8kmBAcdhxAPRONT7utEel3saJ0+TJ9mGUhqTMyVY9y4WUJscnMzd4P7QxdsrC 9NWqJIseqn0H9G412aluzFBMkCDT6fczpmwAVXvlx5JBK/SC0wv+qeyXVnnTbCQH AE2UiES726mm3VQWGnzV4M/hBK87jwq4EHJ44CRD6BRQUsZ+gvuTQxJMxrs3Y8w+ rvSEziUbTK4fzSX0f9cdEPTNgrNWf3M= -----END CERTIFICATE-----Generated at Sat Dec 20 02:47:49 2025 by rpki-client