This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft File: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft (raw, json) Hash identifier: F3gsg5e/Qs/dAntZdPwrmMbo4ciRIU6zkcf2rA/3JTg= Subject key identifier: 3A:17:6C:D1:F8:7E:8F:8E:D3:82:A0:C9:0E:2E:92:0A:1C:D2:38:58 Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A Certificate issuer: /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Certificate serial: 0930 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft Manifest number: 091F Signing time: Sat 20 Dec 2025 19:43:27 +0000 Manifest this update: Sat 20 Dec 2025 19:43:27 +0000 Manifest next update: Sat 27 Dec 2025 19:43:27 +0000 Files and hashes: 1: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl (hash: EhRagH7C96q5hYCzGiwPXmEEOC6j9clhqldZDgBtUY4=) 2: 465DBB30BA8811EAAF996D39C4F9AE02.roa (hash: 23ndFVCcLg+/bCNKhL706A7YBuPjvG2i31lg9YjdTYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2352 (0x930) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Validity Not Before: Dec 20 19:43:27 2025 GMT Not After : Dec 27 19:43:27 2025 GMT Subject: CN=6946fc5f-6a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8a:81:ab:a8:9c:27:c8:fa:42:c4:a6:ab:ab: bf:51:cc:49:d4:99:ab:8e:37:18:24:c5:be:63:a9: 77:00:b1:84:a5:4d:cd:4f:87:13:97:ed:31:9e:81: 9f:c3:71:8a:5f:4a:91:ae:43:2c:a9:6d:75:27:10: 43:f0:0c:cb:66:34:67:46:08:a8:00:30:0b:7a:ee: f9:d3:90:8e:d7:90:7a:2e:de:57:6f:8f:cd:2a:96: d7:50:c2:73:68:e7:62:57:7d:f5:3d:b5:83:ab:0b: 56:29:b8:c0:1c:87:e2:40:80:75:ac:10:9b:6a:2f: 42:d5:6c:21:ad:7d:54:a3:ea:cb:b3:7d:05:93:ce: fc:8b:fc:80:e2:1f:23:dc:ae:53:8b:54:6e:d7:a5: f6:24:ca:11:23:49:8f:6e:ea:09:e7:aa:df:57:d8: f4:ef:89:7a:ba:0c:78:3a:7f:bd:2e:e1:c7:0a:da: ac:ee:0f:a2:80:d2:5c:97:95:23:b6:df:7f:e3:07: 54:12:bf:35:f8:d9:02:30:c6:3f:eb:42:3f:0e:86: d1:fd:fa:05:ef:60:0d:81:48:a6:3a:3b:d2:f4:d5: c9:7b:42:e1:08:ab:8f:ff:84:88:3d:a6:b1:f1:f0: 1e:c8:db:2a:c0:c2:90:bd:d6:30:c3:1e:44:66:9a: 40:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:17:6C:D1:F8:7E:8F:8E:D3:82:A0:C9:0E:2E:92:0A:1C:D2:38:58 X509v3 Authority Key Identifier: keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:41:1e:84:da:b4:72:91:63:4c:ba:1c:2d:7b:c4:af:f2:47: c4:49:87:96:f4:a8:42:ea:9a:dc:01:98:47:70:22:fb:d8:5e: 5d:0b:ec:55:50:36:00:f1:a5:7b:58:bf:fa:d3:76:a7:b5:0e: ff:14:41:47:d3:ad:a8:9c:f9:1a:e4:56:44:26:41:13:2a:ed: f7:b3:98:26:e6:2e:bc:a0:8e:91:40:50:00:92:7c:ee:6a:cb: 3e:59:eb:34:06:02:2d:42:8c:28:5e:76:64:4b:b9:fe:72:90: 74:1c:fd:7c:25:be:82:75:72:18:67:c0:6f:4c:b5:e8:86:52: 88:ad:46:c6:e2:1a:fb:9e:b3:14:f1:97:8e:c0:3a:df:b5:91: 0d:4f:6e:d0:c4:ad:7d:ce:52:de:21:b2:fa:21:a0:02:b6:09: 71:8f:e3:2d:c7:2e:bd:df:73:8f:1d:9b:85:be:ff:0a:6e:ad: b1:b5:88:4a:36:4e:a2:36:1d:9a:16:c4:b0:16:f2:fb:a3:56: 0a:89:b9:ec:d0:00:d2:d0:ab:e2:66:8f:1b:fb:86:7d:e5:c7: b5:ae:2e:00:6d:e7:b4:6b:88:3d:ef:e3:d2:1f:75:06:db:e2: 04:f9:de:0c:d9:04:45:74:9e:7f:78:57:aa:99:19:1b:a7:34: 7c:3c:db:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDQ3MEE5MzQ0OUU2MTFGQTlBRDA1QTI4OUQ2MTg4MjIw QjVGQ0ZDM0EwHhcNMjUxMjIwMTk0MzI3WhcNMjUxMjI3MTk0MzI3WjAYMRYwFAYD VQQDDA02OTQ2ZmM1Zi02YThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4qBq6icJ8j6QsSmq6u/UcxJ1JmrjjcYJMW+Y6l3ALGEpU3NT4cTl+0xnoGf w3GKX0qRrkMsqW11JxBD8AzLZjRnRgioADALeu7505CO15B6Lt5Xb4/NKpbXUMJz aOdiV331PbWDqwtWKbjAHIfiQIB1rBCbai9C1WwhrX1Uo+rLs30Fk878i/yA4h8j 3K5Ti1Ru16X2JMoRI0mPbuoJ56rfV9j074l6ugx4On+9LuHHCtqs7g+igNJcl5Uj tt9/4wdUEr81+NkCMMY/60I/DobR/foF72ANgUimOjvS9NXJe0LhCKuP/4SIPaax 8fAeyNsqwMKQvdYwwx5EZppAAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoXbNH4 fo+O04KgyQ4ukgoc0jhYMB8GA1UdIwQYMBaAFEcKk0SeYR+prQWiidYYgiC1/Pw6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yQjczMkU3MEJB ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2bXRCYUtKMWhpQ0lMWDhf RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1J3cVRSSjVoSDZtdEJhS0oxaGlDSUxYOF9Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yQjczMkU3MEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2 bXRCYUtKMWhpQ0lMWDhfRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzQR6E2rRykWNMuhwte8Sv8kfESYeW9KhC6prcAZhHcCL72F5dC+xV UDYA8aV7WL/603antQ7/FEFH062onPka5FZEJkETKu33s5gm5i68oI6RQFAAknzu ass+Wes0BgItQowoXnZkS7n+cpB0HP18Jb6CdXIYZ8BvTLXohlKIrUbG4hr7nrMU 8ZeOwDrftZENT27QxK19zlLeIbL6IaACtglxj+Mtxy6933OPHZuFvv8Kbq2xtYhK Nk6iNh2aFsSwFvL7o1YKibns0ADS0KviZo8b+4Z95ce1ri4Abee0a4g97+PSH3UG 2+IE+d4M2QRFdJ5/eFeqmRkbpzR8PNto -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:54 2025 by rpki-client