This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json) Hash identifier: meQcmtY88w86PAf25n8hEBD0IEo+aeC3DJWYwM29bn8= Subject key identifier: 0B:F6:95:A0:C5:BC:9F:87:37:6B:93:2B:C8:57:F6:79:12:C0:1D:D4 Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft Manifest number: 21 Signing time: Fri 19 Dec 2025 06:39:34 +0000 Manifest this update: Fri 19 Dec 2025 06:39:34 +0000 Manifest next update: Fri 26 Dec 2025 06:39:34 +0000 Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: DLYx3VQyyv8SQBGhMjL3FvTBAYVlWHO/FiM+4INaleM=) 2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: Vrxbp4tg7Ch8ynxq67uyQgBvWF4QcT0YiwQ07xaqChg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Validity Not Before: Dec 19 06:39:34 2025 GMT Not After : Dec 26 06:39:34 2025 GMT Subject: CN=6944f326-cb47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:b9:ab:d1:6c:83:01:95:75:64:6e:71:67: d6:e1:ac:d9:fd:69:cd:6e:26:5c:9a:ec:38:f1:4f: 85:a3:18:f2:22:c7:dd:35:a8:3e:81:74:7e:67:a9: 84:6b:d3:c2:e0:d1:ec:ab:ee:38:d9:12:a8:a8:32: f3:eb:83:a8:b0:db:ea:8b:53:2b:4d:f1:30:75:ac: f8:ec:2b:f0:8a:50:86:19:04:e7:3c:15:c6:2b:99: b4:79:8e:17:05:47:85:92:38:7e:54:dd:ff:62:9f: 5c:52:ce:c3:81:28:f5:ac:5e:b5:33:8c:7f:1a:11: f2:de:be:4b:6c:28:8b:a0:9a:80:5f:13:a9:3a:f2: 34:ec:bd:f6:19:05:9e:f4:34:20:26:71:e9:cf:8b: a9:5d:39:e6:8e:1e:cc:c5:fc:db:d4:15:6f:28:28: 7d:2d:2f:af:b1:08:ae:d3:99:aa:37:00:df:b0:71: eb:c9:5f:eb:d3:48:b3:59:44:be:f4:94:65:94:1c: e2:73:8b:c3:ac:c2:4d:d3:e8:7d:ed:dc:b6:df:79: c9:e9:c0:50:75:6d:d7:bf:a3:91:7f:b6:b8:18:61: 60:9f:58:1b:bb:12:b9:56:a5:cf:b1:f8:b2:ac:fa: 5e:0c:9f:79:63:a3:5f:ca:63:80:85:b2:00:b1:e6: 72:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F6:95:A0:C5:BC:9F:87:37:6B:93:2B:C8:57:F6:79:12:C0:1D:D4 X509v3 Authority Key Identifier: keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:84:59:0c:c9:90:3e:62:f8:cf:dc:d3:86:5b:4a:c3:ec:57: ee:be:34:5d:d0:70:11:87:35:60:3c:43:65:26:d2:1a:ee:90: 50:fd:ac:2e:0c:dc:a6:24:aa:62:24:7e:da:86:a0:f2:6e:c0: 64:0a:6d:b8:78:28:9a:20:19:a9:42:8b:5e:6f:14:95:92:93: f0:02:0f:79:0f:9a:d0:8d:7c:a3:20:c2:8f:34:36:a2:5b:00: 6b:0f:c4:7f:0f:8e:bf:fa:87:5b:e9:9d:ff:f8:0a:c4:17:d9: 72:a6:b1:74:17:54:b3:95:da:95:95:a4:9f:04:15:e3:78:eb: f7:84:ff:e6:6e:5d:c0:10:ae:af:ab:34:7d:be:40:80:d1:4d: 3f:67:fb:12:82:6e:50:89:ee:d9:62:c9:0a:d6:43:e1:e3:d2: ac:e3:d9:85:5c:0c:9a:a9:c3:7f:6e:f9:be:e5:0a:c8:cb:74: 7d:c6:1e:74:16:ac:39:d0:e6:d4:0e:0c:bd:12:9f:7f:c2:5f: 37:c8:5d:91:b8:49:45:3f:7b:b9:b3:79:cc:19:c5:a3:d6:3a: 56:c2:7d:7a:19:34:fc:c2:9b:1b:e9:92:eb:8e:ea:ef:66:8b: 85:4d:e3:52:bc:ea:81:67:28:d9:b2:e1:f3:2e:35:5c:73:55: 49:b4:2a:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzRBNzExMC8GA1UEBRMoRTQyRjVERUYyNjU5QjVFN0ZBMjcwMzc2OEU5NDg3RUZE QzU5NUJCMDAeFw0yNTEyMTkwNjM5MzRaFw0yNTEyMjYwNjM5MzRaMBgxFjAUBgNV BAMMDTY5NDRmMzI2LWNiNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH/7mr0WyDAZV1ZG5xZ9bhrNn9ac1uJlya7DjxT4WjGPIix901qD6BdH5nqYRr 08Lg0eyr7jjZEqioMvPrg6iw2+qLUytN8TB1rPjsK/CKUIYZBOc8FcYrmbR5jhcF R4WSOH5U3f9in1xSzsOBKPWsXrUzjH8aEfLevktsKIugmoBfE6k68jTsvfYZBZ70 NCAmcenPi6ldOeaOHszF/NvUFW8oKH0tL6+xCK7Tmao3AN+wcevJX+vTSLNZRL70 lGWUHOJzi8Oswk3T6H3t3LbfecnpwFB1bde/o5F/trgYYWCfWBu7ErlWpc+x+LKs +l4Mn3ljo1/KY4CFsgCx5nLBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC/aVoMW8 n4c3a5MryFf2eRLAHdQwHwYDVR0jBBgwFoAU5C9d7yZZtef6JwN2jpSH79xZW7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3L0ZBOThGQjNFQUI0 NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVmNkp3TjJqcFNINzl4Wlc3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNUM5ZDd5Wlp0ZWY2SndOMmpwU0g3OXhaVzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NEE3L0ZBOThGQjNFQUI0NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVm Nkp3TjJqcFNINzl4Wlc3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHiEWQzJkD5i+M/c04ZbSsPsV+6+NF3QcBGHNWA8Q2Um0hrukFD9rC4M 3KYkqmIkftqGoPJuwGQKbbh4KJogGalCi15vFJWSk/ACD3kPmtCNfKMgwo80NqJb AGsPxH8Pjr/6h1vpnf/4CsQX2XKmsXQXVLOV2pWVpJ8EFeN46/eE/+ZuXcAQrq+r NH2+QIDRTT9n+xKCblCJ7tliyQrWQ+Hj0qzj2YVcDJqpw39u+b7lCsjLdH3GHnQW rDnQ5tQODL0Sn3/CXzfIXZG4SUU/e7mzecwZxaPWOlbCfXoZNPzCmxvpkuuO6u9m i4VN41K86oFnKNmy4fMuNVxzVUm0Kok= -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:17 2025 by rpki-client