This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json) Hash identifier: Daw1BUY/1/vWnXBoz0lM1nlP+02bMqO1KzYtwLY6R64= Subject key identifier: D3:64:81:11:59:B4:4D:8F:8F:49:35:0A:2C:C2:91:91:14:92:4F:75 Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft Manifest number: 041B Signing time: Sat 20 Dec 2025 23:38:53 +0000 Manifest this update: Sat 20 Dec 2025 23:38:52 +0000 Manifest next update: Sat 27 Dec 2025 23:38:52 +0000 Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: 1Mxuq9m/Zqne7PDvxERP6TOL2v2qnGlJIIYqxj+rZEA=) 2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 4GJunqqaJYIF16cCsMPgPX96ELnXrrR7663nppGhNhg=) 3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: QyHX2tVKdXvBrNBfn6kDQfZOmLtDJUfGgQzAxEofZ58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: Dec 20 23:38:52 2025 GMT Not After : Dec 27 23:38:52 2025 GMT Subject: CN=6947338d-6499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5f:c0:a6:88:f4:af:d3:18:cc:96:23:15:a2: f5:8b:cf:96:d6:01:67:ff:83:53:8a:a2:21:a2:07: 71:39:01:f3:7e:55:b9:e5:9c:b3:c2:d2:f9:14:d6: 49:fb:83:0f:45:71:b3:b0:49:e1:da:36:fa:dc:31: 57:de:35:59:d9:d9:b7:d0:4c:f6:d8:8d:89:a8:12: 82:1b:38:c7:f1:34:9e:78:df:b0:3e:9d:e8:92:70: f1:7f:68:25:14:00:01:96:25:23:69:56:ac:25:8d: 4f:e4:64:dd:b2:a4:0e:73:05:60:26:de:82:ce:0d: 42:de:b6:fe:45:8f:88:ae:20:7c:36:9b:2d:6d:de: c3:4f:23:41:29:e6:de:aa:3b:01:52:cb:ea:59:22: d3:a2:d0:6b:98:d6:42:d3:b4:62:97:15:25:33:95: c6:6b:7b:41:0b:29:44:3c:17:ce:ed:48:ab:38:04: 62:f2:6d:46:13:6e:55:92:71:8a:4c:12:b7:b1:e5: 17:bd:25:e1:5c:a4:03:ba:d5:8c:d6:84:4f:89:16: f3:64:ea:3a:33:b2:1a:ff:76:2b:c3:43:b6:23:7b: 75:38:4b:ab:62:8d:f7:91:42:ea:5e:14:79:73:9f: c1:05:96:1b:a7:32:99:2c:57:47:f5:de:48:a2:12: 77:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:64:81:11:59:B4:4D:8F:8F:49:35:0A:2C:C2:91:91:14:92:4F:75 X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7b:42:d0:12:f9:f6:dc:e7:92:32:aa:e7:fa:fc:6a:ef:69: 94:08:3e:eb:ea:e9:2f:ff:28:c1:35:e2:83:38:5e:df:ae:45: 80:b2:63:f5:fc:2b:84:52:9d:53:53:5a:70:01:77:ef:10:da: 9b:62:21:dd:cd:24:4b:17:42:b4:81:fd:1a:34:e6:4d:54:d3: 99:62:78:15:68:ec:46:78:a4:5d:ff:b1:70:6f:14:b6:3f:1f: dc:4b:e2:67:0f:4e:0b:97:54:e3:96:bd:e0:57:b1:f8:f0:87: 04:4b:1d:50:0c:18:64:7a:e5:51:ab:32:4c:7b:79:8c:09:93: 30:5a:73:dd:dd:b3:6d:a7:d2:7a:97:e8:9e:40:f0:32:56:f6: b7:5c:a9:e8:05:6d:64:bd:e9:21:78:10:1a:09:dd:d7:ec:ef: 2e:07:72:83:7a:34:c8:6c:98:7e:bb:45:e8:79:43:09:ac:3c: fa:68:01:58:12:7a:2c:fa:63:9a:84:a9:72:dc:d4:27:61:ec: 1f:7d:56:b5:01:6b:b7:cd:67:28:5b:12:5c:97:13:44:d0:71: 27:79:1e:de:0b:9c:18:3a:7e:d1:92:7b:ff:cb:08:3b:a8:5d: c4:55:4d:3b:a6:c2:e6:70:e6:db:9d:f2:44:fb:27:ec:42:b2: 3e:89:09:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjUxMjIwMjMzODUyWhcNMjUxMjI3MjMzODUyWjAYMRYwFAYD VQQDDA02OTQ3MzM4ZC02NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3F/Apoj0r9MYzJYjFaL1i8+W1gFn/4NTiqIhogdxOQHzflW55ZyzwtL5FNZJ +4MPRXGzsEnh2jb63DFX3jVZ2dm30Ez22I2JqBKCGzjH8TSeeN+wPp3oknDxf2gl FAABliUjaVasJY1P5GTdsqQOcwVgJt6Czg1C3rb+RY+IriB8Npstbd7DTyNBKebe qjsBUsvqWSLTotBrmNZC07RilxUlM5XGa3tBCylEPBfO7UirOARi8m1GE25VknGK TBK3seUXvSXhXKQDutWM1oRPiRbzZOo6M7Ia/3Yrw0O2I3t1OEurYo33kULqXhR5 c5/BBZYbpzKZLFdH9d5IohJ3vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNkgRFZ tE2Pj0k1CizCkZEUkk91MB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfe0LQEvn23OeSMqrn+vxq72mUCD7r6ukv/yjBNeKDOF7frkWAsmP1 /CuEUp1TU1pwAXfvENqbYiHdzSRLF0K0gf0aNOZNVNOZYngVaOxGeKRd/7FwbxS2 Px/cS+JnD04Ll1Tjlr3gV7H48IcESx1QDBhkeuVRqzJMe3mMCZMwWnPd3bNtp9J6 l+ieQPAyVva3XKnoBW1kvekheBAaCd3X7O8uB3KDejTIbJh+u0XoeUMJrDz6aAFY Enos+mOahKly3NQnYewffVa1AWu3zWcoWxJclxNE0HEneR7eC5wYOn7Rknv/ywg7 qF3EVU07psLmcObbnfJE+yfsQrI+iQks -----END CERTIFICATE-----Generated at Sun Dec 21 15:53:05 2025 by rpki-client