This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft File: m1pTZdorJfppi3Awk8-9wqLCP88.mft (raw, json) Hash identifier: AWc7u6Z53bavU0eoD1nBJ1BhB0wbG70vusjK53Ia7zI= Subject key identifier: 3A:30:67:ED:B6:D3:83:B1:D9:F9:FF:79:D0:F7:5B:36:78:EC:A4:02 Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF Certificate issuer: /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft Manifest number: 0AE5 Signing time: Sat 20 Dec 2025 19:38:26 +0000 Manifest this update: Sat 20 Dec 2025 19:38:25 +0000 Manifest next update: Sat 27 Dec 2025 19:38:25 +0000 Files and hashes: 1: m1pTZdorJfppi3Awk8-9wqLCP88.crl (hash: ZoqcN2gUaS2KueCj9QyJduZq1sxNh7dAlL/UXuH5FO8=) 2: 048E963C92B611F0841D2F21C4F9AE02.roa (hash: N4gw2f/bDc4vAICNgZt17fcv5vKiGHjdnsBTX4dpjPM=) 3: 05287CD492B611F0841D2F21C4F9AE02.roa (hash: aZPKGOPG+1Lf391VuMHJv72RD5TC+yEcx6KaYkumZxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF Validity Not Before: Dec 20 19:38:25 2025 GMT Not After : Dec 27 19:38:25 2025 GMT Subject: CN=6946fb31-c5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:af:f6:f3:8b:c1:7a:84:4d:4d:50:56:bc:ab: 6c:d4:af:0a:28:17:11:52:a9:58:7e:8d:5d:42:8f: c0:5a:69:fe:18:b8:0e:d5:39:ab:57:64:61:0a:f9: 85:3b:e7:f3:89:95:62:f7:6c:55:e7:05:a5:eb:7f: 34:a7:d9:1f:ab:5e:97:d2:fd:7a:a9:78:f4:86:0d: 4a:0d:21:3a:ec:4b:4a:19:fc:93:dd:67:5a:c5:30: ce:32:15:5d:ea:61:66:f5:93:74:94:c5:4e:57:56: 72:29:20:22:ac:74:57:3c:fb:03:e4:36:a6:3a:28: 75:0f:9a:05:f3:64:42:63:76:14:25:c4:9c:c1:ef: d4:f2:e8:f5:fb:aa:a7:be:ea:ba:85:a0:aa:ea:39: e3:b4:79:c5:01:97:06:64:69:f3:b5:5b:e9:4b:0b: 8d:93:3c:23:63:c2:d1:09:de:82:b5:ea:1e:af:81: 7f:c3:e3:e0:4e:e9:a0:af:37:5d:32:e2:3d:2e:4a: 3c:72:02:4b:53:77:b7:c4:69:2d:c9:2f:06:04:bf: ec:ff:c2:37:9d:d9:1e:66:e7:fe:3d:d9:2e:ed:4f: 00:f5:67:60:d8:e5:c5:7c:4c:78:a6:d3:eb:cc:7c: 30:99:92:82:d3:fb:7c:6e:0c:9b:fb:2c:4e:ad:21: 5f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:30:67:ED:B6:D3:83:B1:D9:F9:FF:79:D0:F7:5B:36:78:EC:A4:02 X509v3 Authority Key Identifier: keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a5:be:38:de:bd:5a:f9:7a:4f:d4:8b:b7:8e:f7:7d:61:93: 9c:1c:b6:88:32:7b:c8:00:14:66:c7:4a:9e:33:c4:e4:11:b6: 88:d4:56:50:b5:9a:e9:1e:8a:96:6e:61:a2:9c:f8:39:65:5f: 11:fc:3a:7f:0d:eb:57:26:20:8e:bf:32:5a:f7:1b:4e:6a:64: 8e:5c:ac:d6:fa:f4:1a:c5:b6:6b:f6:11:49:2b:82:3f:e6:e1: 01:22:e5:1b:b6:02:8c:26:2b:08:46:15:fa:12:e1:9d:6b:9e: 56:02:7c:3c:f5:ad:12:f4:8e:41:00:5b:4b:51:2e:d2:f9:33: 46:61:b7:cf:ad:0a:d1:7d:05:4f:d5:33:6c:84:f7:bd:4b:b3: a8:27:54:8d:f2:4f:e5:a1:1f:1d:9f:1b:e9:6b:e1:07:3b:f8: fd:db:c9:e3:6a:47:70:e5:f2:d9:1e:4c:55:f8:89:05:90:01: 81:e8:d9:9d:cb:82:14:b1:5b:9e:9d:d4:b6:ff:ac:c7:43:c2: 1d:b7:11:3c:07:0f:08:2b:4b:c4:7a:42:5f:21:c7:40:39:92: 83:ad:e7:9a:cf:1e:61:41:e2:bc:b1:68:cd:4f:64:11:8f:1d: 4e:5c:ba:40:ce:5d:ab:31:26:0c:f0:cc:b5:24:65:7a:3e:ba: 36:f6:1a:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0I2ODExMC8GA1UEBRMoOUI1QTUzNjVEQTJCMjVGQTY5OEI3MDMwOTNDRkJEQzJB MkMyM0ZDRjAeFw0yNTEyMjAxOTM4MjVaFw0yNTEyMjcxOTM4MjVaMBgxFjAUBgNV BAMMDTY5NDZmYjMxLWM1Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcr/bzi8F6hE1NUFa8q2zUrwooFxFSqVh+jV1Cj8Baaf4YuA7VOatXZGEK+YU7 5/OJlWL3bFXnBaXrfzSn2R+rXpfS/XqpePSGDUoNITrsS0oZ/JPdZ1rFMM4yFV3q YWb1k3SUxU5XVnIpICKsdFc8+wPkNqY6KHUPmgXzZEJjdhQlxJzB79Ty6PX7qqe+ 6rqFoKrqOeO0ecUBlwZkafO1W+lLC42TPCNjwtEJ3oK16h6vgX/D4+BO6aCvN10y 4j0uSjxyAktTd7fEaS3JLwYEv+z/wjed2R5m5/492S7tTwD1Z2DY5cV8THim0+vM fDCZkoLT+3xuDJv7LE6tIV+5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOjBn7bbT g7HZ+f950PdbNnjspAIwHwYDVR0jBBgwFoAUm1pTZdorJfppi3Awk8+9wqLCP88w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3QjY4LzUzQTdCOTJDQjBB NTExRUE4RjkyRUQxN0M0RjlBRTAyL20xcFRaZG9ySmZwcGkzQXdrOC05d3FMQ1A4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTFwVFpkb3JKZnBwaTNBd2s4LTl3cUxDUDg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 QjY4LzUzQTdCOTJDQjBBNTExRUE4RjkyRUQxN0M0RjlBRTAyL20xcFRaZG9ySmZw cGkzQXdrOC05d3FMQ1A4OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC+lvjjevVr5ek/Ui7eO931hk5wctogye8gAFGbHSp4zxOQRtojUVlC1 mukeipZuYaKc+DllXxH8On8N61cmII6/Mlr3G05qZI5crNb69BrFtmv2EUkrgj/m 4QEi5Ru2AowmKwhGFfoS4Z1rnlYCfDz1rRL0jkEAW0tRLtL5M0Zht8+tCtF9BU/V M2yE971Ls6gnVI3yT+WhHx2fG+lr4Qc7+P3byeNqR3Dl8tkeTFX4iQWQAYHo2Z3L ghSxW56d1Lb/rMdDwh23ETwHDwgrS8R6Ql8hx0A5koOt55rPHmFB4ryxaM1PZBGP HU5cukDOXasxJgzwzLUkZXo+ujb2GgU= -----END CERTIFICATE-----Generated at Sun Dec 21 10:36:40 2025 by rpki-client