This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft File: V02z1iXehCAuOsnBw9Wwd01reOM.mft (raw, json) Hash identifier: uzdpLS7Bz1dkcp3GqYr4cquPv1wEQQ2cQBu3cysbTVw= Subject key identifier: 46:B5:B4:37:2D:44:8F:24:F1:6C:14:98:80:B9:EE:AA:45:EA:DA:33 Authority key identifier: 57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3 Certificate issuer: /CN=A91E33AA/serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft Manifest number: 5B Signing time: Sun 21 Dec 2025 06:12:16 +0000 Manifest this update: Sun 21 Dec 2025 06:12:16 +0000 Manifest next update: Sun 28 Dec 2025 06:12:16 +0000 Files and hashes: 1: V02z1iXehCAuOsnBw9Wwd01reOM.crl (hash: //jZd3iV2gUZdGOamusolkcECiL3r7dkkyorMfxwhMQ=) 2: A5E6E422A8E511F0A46A7729C4F9AE02.roa (hash: I9mTloe+CBVyT9j1b2vknypKCm7MYiUBGA2nLvqI+nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33AA, serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3 Validity Not Before: Dec 21 06:12:16 2025 GMT Not After : Dec 28 06:12:16 2025 GMT Subject: CN=69478fc0-493c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:d3:6f:49:80:14:e7:86:e8:f1:5a:91:15: 5e:42:cc:bb:24:2f:4d:51:9a:99:4a:84:ad:a7:75: 39:4e:66:32:a8:ef:d3:a2:25:df:73:c1:6f:a4:46: b6:ed:e4:54:7f:8c:72:ea:ec:f4:b4:b7:18:dc:8f: f6:b9:de:97:31:dd:52:a8:7a:25:f8:a6:3c:f1:1e: 66:99:71:95:0b:d1:27:bc:5a:13:71:aa:96:34:09: e3:b0:96:cb:f9:68:47:09:7e:50:b7:a0:f6:ad:54: 41:57:5c:87:8e:2d:43:9f:31:b8:2c:28:55:cf:48: 61:ba:69:2a:81:1f:b7:eb:e8:d8:1e:4c:1e:7a:ce: d0:96:8d:9a:4b:0a:42:f9:bf:0b:48:f8:04:25:1d: 51:b2:70:15:74:ab:c9:45:34:18:b4:6c:f6:a6:6d: 93:6d:45:67:e9:c3:45:29:43:48:57:d4:9a:71:2c: 94:53:2b:40:6e:8e:cd:82:ab:fc:a0:45:f8:92:38: 0a:ce:b1:26:77:c9:45:be:a5:a3:18:b0:30:5b:93: c9:bf:c9:7f:56:b7:01:75:5d:15:ee:cb:f3:a2:64: 51:7e:87:63:aa:56:d4:24:d8:e7:3a:63:06:b9:02: 43:49:67:05:3f:e3:e7:0e:de:78:df:65:83:ca:1b: 4c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B5:B4:37:2D:44:8F:24:F1:6C:14:98:80:B9:EE:AA:45:EA:DA:33 X509v3 Authority Key Identifier: keyid:57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:07:cf:6a:b2:15:54:e9:74:43:6a:94:fe:bc:b6:94:0d:ca: b1:ab:8d:91:3e:d1:22:83:dc:b5:ed:7f:08:17:02:49:70:98: 22:45:52:34:df:85:5b:42:d2:87:45:be:f2:9b:59:92:e1:88: e4:77:17:a0:42:2d:4f:35:4e:c7:28:d1:aa:6e:96:ad:72:2a: 36:28:a5:61:69:f0:4e:fd:56:26:a6:69:6b:41:65:eb:c3:7f: fd:80:07:c8:6a:2b:0c:33:62:ba:f4:fc:e4:ad:df:bd:b0:4a: 34:9e:a1:23:d5:b3:e3:67:ed:94:b9:83:1d:9e:1b:a2:67:b8: 11:1b:48:f4:66:3c:bb:81:01:e3:50:90:bd:fc:47:6d:bd:c6: a7:f8:aa:06:1a:20:e2:0a:c5:16:33:ba:db:ef:c4:ef:1f:ab: 1e:b2:de:43:31:0d:3c:20:ec:75:bb:c0:30:5d:48:38:57:bd: 82:98:8c:b9:14:4d:78:45:46:57:12:79:3b:49:60:be:4e:a7: 19:98:80:e5:62:46:1a:34:59:05:f4:df:ef:b3:23:cd:7c:46: 86:71:f2:45:fe:f4:62:03:87:c1:f0:15:e6:1c:54:16:26:8a: 4c:ce:36:8d:70:f5:73:ce:5a:8b:22:71:2f:e9:0c:8d:6a:32: 0e:6d:62:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzNBQTExMC8GA1UEBRMoNTc0REIzRDYyNURFODQyMDJFM0FDOUMxQzNENUIwNzc0 RDZCNzhFMzAeFw0yNTEyMjEwNjEyMTZaFw0yNTEyMjgwNjEyMTZaMBgxFjAUBgNV BAMMDTY5NDc4ZmMwLTQ5M2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvVNNvSYAU54bo8VqRFV5CzLskL01RmplKhK2ndTlOZjKo79OiJd9zwW+kRrbt 5FR/jHLq7PS0txjcj/a53pcx3VKoeiX4pjzxHmaZcZUL0Se8WhNxqpY0CeOwlsv5 aEcJflC3oPatVEFXXIeOLUOfMbgsKFXPSGG6aSqBH7fr6NgeTB56ztCWjZpLCkL5 vwtI+AQlHVGycBV0q8lFNBi0bPambZNtRWfpw0UpQ0hX1JpxLJRTK0Bujs2Cq/yg RfiSOArOsSZ3yUW+paMYsDBbk8m/yX9WtwF1XRXuy/OiZFF+h2OqVtQk2Oc6Ywa5 AkNJZwU/4+cO3njfZYPKG0x/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURrW0Ny1E jyTxbBSYgLnuqkXq2jMwHwYDVR0jBBgwFoAUV02z1iXehCAuOsnBw9Wwd01reOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzM0FBLzQ5QTFBODc4NTk2 NzExRjA4QzQwNzkyQ0M0RjlBRTAyL1YwMnoxaVhlaENBdU9zbkJ3OVd3ZDAxcmVP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVjAyejFpWGVoQ0F1T3NuQnc5V3dkMDFyZU9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz M0FBLzQ5QTFBODc4NTk2NzExRjA4QzQwNzkyQ0M0RjlBRTAyL1YwMnoxaVhlaENB dU9zbkJ3OVd3ZDAxcmVPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACIHz2qyFVTpdENqlP68tpQNyrGrjZE+0SKD3LXtfwgXAklwmCJFUjTf hVtC0odFvvKbWZLhiOR3F6BCLU81Tsco0apulq1yKjYopWFp8E79ViamaWtBZevD f/2AB8hqKwwzYrr0/OSt372wSjSeoSPVs+Nn7ZS5gx2eG6JnuBEbSPRmPLuBAeNQ kL38R229xqf4qgYaIOIKxRYzutvvxO8fqx6y3kMxDTwg7HW7wDBdSDhXvYKYjLkU TXhFRlcSeTtJYL5OpxmYgOViRho0WQX03++zI818RoZx8kX+9GIDh8HwFeYcVBYm ikzONo1w9XPOWosicS/pDI1qMg5tYiA= -----END CERTIFICATE-----Generated at Mon Dec 22 22:16:13 2025 by rpki-client