This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json) Hash identifier: 1nYHikDJSkMd6kO0oQ+g3musRllFZtXfBomjZ15Gojw= Subject key identifier: 9F:BF:E7:0D:36:99:89:D0:9A:BF:35:87:41:AA:CA:2D:E3:41:D8:80 Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 054A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft Manifest number: 0526 Signing time: Thu 18 Dec 2025 22:58:34 +0000 Manifest this update: Thu 18 Dec 2025 22:58:33 +0000 Manifest next update: Thu 25 Dec 2025 22:58:33 +0000 Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: zdVAcRfG4y9QQDOyeTVaV2nC+15sBKm8oCY3dVY0hRc=) 2: 9F890910DA3C11F088DF33818DD3641D.roa (hash: xzSi1UuzNWpD6HyPJQ8fyYnG2jejbsfTjsT5VO2sPn0=) 3: 6E6FEF28DC1311F0BA8FDA195F6F56BC.roa (hash: mo1wOSg3aRPO3RbCWNG9vySpJfn0iy8HAMqJ5Ud1CP8=) 4: 1BEFBED451B911F097C15C49C4F9AE02.roa (hash: au2wuZlStRAiQIz6GHb6zEgbdpYBgkZrv7Xcs6eeF3c=) 5: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: uvWCOvomLN/7hlVYLp/jcmXt9zO2kyVBg9I1lGQNm1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1354 (0x54a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Validity Not Before: Dec 18 22:58:33 2025 GMT Not After : Dec 25 22:58:33 2025 GMT Subject: CN=69448719-ca02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:0d:e2:7a:20:74:b6:c0:93:30:26:4e:77: e8:52:8b:0e:a2:1a:4f:df:f8:34:be:a0:ab:cf:57: 8c:f5:43:5e:fc:bf:35:eb:c0:dd:90:6e:ec:c2:0c: dc:e9:cb:eb:ab:b6:f4:2e:78:a3:61:05:8a:51:a9: c9:f1:72:b3:15:71:cc:2a:0b:27:39:32:b6:72:b9: f4:89:2f:b4:e0:1e:c4:d0:21:78:cc:b3:7a:c7:e4: f1:4e:bd:ae:9b:4b:63:99:fe:19:cf:28:08:cc:33: f4:ca:1c:45:29:36:91:e1:2c:a4:fe:9d:4b:5f:a6: 95:a4:52:8c:8a:a6:e5:ef:2c:f1:7d:a3:33:4d:8d: a8:f8:28:bb:f5:a0:d3:68:33:3d:c8:e4:a8:5e:d7: 5b:dd:00:c0:84:5e:2d:00:00:5d:42:a9:d2:af:44: ed:f6:80:90:06:04:69:a0:06:93:12:f4:d8:7a:b4: 75:c1:5c:74:cf:46:3f:1f:84:e8:57:d7:71:5b:b7: 22:e5:6c:fd:51:69:9a:f2:9c:26:c3:03:2e:3e:62: 13:1b:01:dc:8b:a7:cf:10:40:91:21:71:b6:08:80: 50:22:d9:6c:2c:54:39:de:30:3a:61:4c:5d:35:f4: dc:55:da:97:06:10:e3:06:84:cf:9c:80:79:75:fa: b3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BF:E7:0D:36:99:89:D0:9A:BF:35:87:41:AA:CA:2D:E3:41:D8:80 X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:cf:7c:38:3d:9a:0b:16:b4:63:0b:7c:16:0f:1e:10:12:c3: 5b:71:ab:16:93:64:98:8f:08:f7:66:20:42:f7:fc:a7:23:0b: f2:a7:a5:d9:ad:ab:c2:f1:34:bb:10:f6:bb:c8:63:9d:cd:5d: 71:6b:39:a2:19:3f:34:9a:d0:f5:2c:97:e0:30:8d:aa:c2:11: 3e:41:71:a2:41:7a:c6:b8:3f:f5:5c:06:be:80:c8:2c:5e:8c: 46:80:c9:0f:90:12:9f:da:50:c6:f8:c7:19:ff:14:81:88:0c: 49:67:ab:09:6e:0e:14:82:f1:f1:8f:9a:36:1c:52:ef:6c:63: 5c:e0:1e:80:82:0d:dc:06:d4:e3:d1:3f:73:00:a0:8d:c4:39: 52:c7:a5:b9:3a:79:39:4c:58:d9:f2:24:54:2a:07:5e:12:8f: 6f:18:90:7e:f2:80:f1:68:1a:6c:b3:b6:84:cc:d5:4a:ba:a4: 24:b3:25:a4:d6:6f:98:ee:fb:73:18:f7:6a:8c:d1:93:ca:85: 0d:58:a4:df:97:3b:8d:55:39:5d:91:9f:83:a0:7c:d9:60:a9: 00:5f:76:e9:6c:f6:26:fa:af:d7:9d:86:d8:a5:96:10:35:cc: d3:d7:48:ae:35:32:94:75:1e:59:19:d6:4f:53:ef:65:36:d1: 32:8c:4f:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjUxMjE4MjI1ODMzWhcNMjUxMjI1MjI1ODMzWjAYMRYwFAYD VQQDDA02OTQ0ODcxOS1jYTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZoN4nogdLbAkzAmTnfoUosOohpP3/g0vqCrz1eM9UNe/L8168DdkG7swgzc 6cvrq7b0LnijYQWKUanJ8XKzFXHMKgsnOTK2crn0iS+04B7E0CF4zLN6x+TxTr2u m0tjmf4ZzygIzDP0yhxFKTaR4Syk/p1LX6aVpFKMiqbl7yzxfaMzTY2o+Ci79aDT aDM9yOSoXtdb3QDAhF4tAABdQqnSr0Tt9oCQBgRpoAaTEvTYerR1wVx0z0Y/H4To V9dxW7ci5Wz9UWma8pwmwwMuPmITGwHci6fPEECRIXG2CIBQItlsLFQ53jA6YUxd NfTcVdqXBhDjBoTPnIB5dfqzcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+/5w02 mYnQmr81h0Gqyi3jQdiAMB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM5Qi9BNDZFOTg5QTMyMkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlD ZGtNVmVnYnZxa3dIREg4LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpz3w4PZoLFrRjC3wWDx4QEsNbcasWk2SYjwj3ZiBC9/ynIwvyp6XZ ravC8TS7EPa7yGOdzV1xazmiGT80mtD1LJfgMI2qwhE+QXGiQXrGuD/1XAa+gMgs XoxGgMkPkBKf2lDG+McZ/xSBiAxJZ6sJbg4UgvHxj5o2HFLvbGNc4B6Agg3cBtTj 0T9zAKCNxDlSx6W5Onk5TFjZ8iRUKgdeEo9vGJB+8oDxaBpss7aEzNVKuqQksyWk 1m+Y7vtzGPdqjNGTyoUNWKTflzuNVTldkZ+DoHzZYKkAX3bpbPYm+q/XnYbYpZYQ NczT10iuNTKUdR5ZGdZPU+9lNtEyjE92 -----END CERTIFICATE-----Generated at Sat Dec 20 05:15:18 2025 by rpki-client