This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft File: r_zmN5iBZebFG_v-vRKD1REkAZA.mft (raw, json) Hash identifier: OllTdD+wGPIGvczRv7f5TqJnoMvd2jMg4UzmTyrGRLA= Subject key identifier: 6B:C7:48:80:A4:F6:E1:C7:BC:9F:4A:BB:87:A3:B6:6B:42:F3:2F:BC Authority key identifier: AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90 Certificate issuer: /CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft Manifest number: 0188 Signing time: Sun 21 Dec 2025 02:53:21 +0000 Manifest this update: Sun 21 Dec 2025 02:53:20 +0000 Manifest next update: Sun 28 Dec 2025 02:53:20 +0000 Files and hashes: 1: r_zmN5iBZebFG_v-vRKD1REkAZA.crl (hash: uE/mC5V9g4K0lVGONi6v2FLDHu3peXNHJtWg1NlW4SI=) 2: C531DD12226F11EF8D24AD63C4F9AE02.roa (hash: a2/vehSWDoff6mLTg7VEADcM0ey8iDfcQQZxJYEqkDM=) 3: C608133C226F11EF8D24AD63C4F9AE02.roa (hash: GATUqbNDhKaVb/i1ZjCIO1rgwevFVCyWk8Ts83izVL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4468, serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190 Validity Not Before: Dec 21 02:53:20 2025 GMT Not After : Dec 28 02:53:20 2025 GMT Subject: CN=69476121-503b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:17:dd:c4:31:41:a6:21:5b:8b:10:dc:02: 5e:89:02:ec:f7:d0:5d:3a:a5:96:e9:4f:d3:b8:9b: 9c:c0:48:f4:4c:0c:c2:7b:7c:d0:43:42:56:3f:3b: 06:df:ac:a2:4a:2f:85:ce:64:de:1b:c3:a2:ce:8d: d2:9f:3e:0b:dc:07:1d:45:4b:88:93:66:cd:1a:e1: 4e:f3:cd:4a:e9:8e:f8:e9:a3:24:b9:8f:2e:fd:5a: 31:8e:18:cb:c4:c1:73:3f:82:7b:6a:4b:a1:8f:95: 21:dd:9c:42:33:63:b9:1b:14:b8:67:c1:8a:76:1a: 1f:1c:b0:2b:5b:24:5d:1a:e8:97:c8:cc:9d:3c:e4: 7a:75:de:df:95:0a:b1:5b:2f:56:e6:fc:46:da:58: 1a:01:78:2d:51:05:f3:7b:23:e2:fe:5e:14:d2:72: e6:e1:78:d1:0d:e8:a4:ed:69:86:0b:e3:e1:1e:31: 67:1b:fe:fa:6d:f9:d6:61:46:4b:bd:f8:9e:52:2b: 6a:e4:b6:6b:24:cb:03:b9:48:e0:83:ff:36:3a:63: cc:2f:6b:d7:e0:bb:eb:07:fe:4e:45:37:f3:34:de: ec:d2:ac:37:6c:9a:7e:7e:56:ed:d0:7b:43:ce:d1: ed:94:5a:63:56:d9:ac:21:29:40:99:65:3a:f1:a4: f5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C7:48:80:A4:F6:E1:C7:BC:9F:4A:BB:87:A3:B6:6B:42:F3:2F:BC X509v3 Authority Key Identifier: keyid:AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:dd:b3:38:a7:94:59:a6:4d:4e:f7:da:79:d1:66:eb:11:ad: c4:dc:04:00:c4:3f:1b:2d:95:e4:f5:47:ac:f2:f4:5b:df:8c: 51:11:39:59:f1:3d:10:96:2e:c0:11:ab:ab:5e:f5:21:c1:46: a1:05:e1:9b:45:6e:dd:26:5d:b4:59:0b:f1:ee:2c:9e:8e:f3: 78:b9:9c:55:35:c6:2e:62:a3:ec:15:cd:64:f8:46:72:aa:ed: a2:59:cd:bd:22:04:ea:ab:7c:ee:bc:d4:5d:53:df:6d:fb:44: bb:4e:d5:04:a7:2d:61:a8:a2:e9:69:82:53:68:62:8f:05:00: 01:8f:8c:17:b6:ef:46:1d:85:23:cf:4b:17:06:1b:ea:0b:40: 6e:67:d2:da:1a:b2:71:ea:26:86:f6:e2:45:84:f5:7c:73:1d: 86:9a:4f:99:71:5a:71:3a:a6:ca:cb:5b:a5:b2:3d:3e:8b:47: 06:38:63:ac:c2:86:b6:fc:c8:12:e0:a3:a9:98:63:69:20:28: ab:7d:ef:e2:fa:84:f5:01:0c:a1:64:dc:a4:1f:20:65:0d:dc: 3a:b6:5d:3c:34:02:e1:36:4d:d3:0f:ca:7f:61:51:55:5a:8d: c8:db:ec:43:00:4e:62:97:b6:b6:f6:69:f2:32:81:59:e4:db: 11:60:12:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjgxMTAvBgNVBAUTKEFGRkNFNjM3OTg4MTY1RTZDNTFCRkJGRUJEMTI4M0Q1 MTEyNDAxOTAwHhcNMjUxMjIxMDI1MzIwWhcNMjUxMjI4MDI1MzIwWjAYMRYwFAYD VQQDDA02OTQ3NjEyMS01MDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsosX3cQxQaYhW4sQ3AJeiQLs99BdOqWW6U/TuJucwEj0TAzCe3zQQ0JWPzsG 36yiSi+FzmTeG8Oizo3Snz4L3AcdRUuIk2bNGuFO881K6Y746aMkuY8u/VoxjhjL xMFzP4J7akuhj5Uh3ZxCM2O5GxS4Z8GKdhofHLArWyRdGuiXyMydPOR6dd7flQqx Wy9W5vxG2lgaAXgtUQXzeyPi/l4U0nLm4XjRDeik7WmGC+PhHjFnG/76bfnWYUZL vfieUitq5LZrJMsDuUjgg/82OmPML2vX4LvrB/5ORTfzNN7s0qw3bJp+flbt0HtD ztHtlFpjVtmsISlAmWU68aT1jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvHSICk 9uHHvJ9Ku4ejtmtC8y+8MB8GA1UdIwQYMBaAFK/85jeYgWXmxRv7/r0Sg9URJAGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2OC84Mjc1MjRFODhF RTUxMUVFQTJFRUREMTJDNEY5QUUwMi9yX3ptTjVpQlplYkZHX3YtdlJLRDFSRWtB WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jfem1ONWlCWmViRkdfdi12UktEMVJFa0FaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDQ2OC84Mjc1MjRFODhFRTUxMUVFQTJFRUREMTJDNEY5QUUwMi9yX3ptTjVpQlpl YkZHX3YtdlJLRDFSRWtBWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi3bM4p5RZpk1O99p50WbrEa3E3AQAxD8bLZXk9Ues8vRb34xRETlZ 8T0Qli7AEaurXvUhwUahBeGbRW7dJl20WQvx7iyejvN4uZxVNcYuYqPsFc1k+EZy qu2iWc29IgTqq3zuvNRdU99t+0S7TtUEpy1hqKLpaYJTaGKPBQABj4wXtu9GHYUj z0sXBhvqC0BuZ9LaGrJx6iaG9uJFhPV8cx2Gmk+ZcVpxOqbKy1ulsj0+i0cGOGOs woa2/MgS4KOpmGNpICirfe/i+oT1AQyhZNykHyBlDdw6tl08NALhNk3TD8p/YVFV Wo3I2+xDAE5il7a29mnyMoFZ5NsRYBIe -----END CERTIFICATE-----Generated at Sun Dec 21 19:18:21 2025 by rpki-client