This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json) Hash identifier: Ns3t2dZmFOi1hk3SDKPa+pENEb4aCqhEcS2evGw0xaM= Subject key identifier: D7:10:2F:C5:C8:47:B7:DD:4D:95:10:AA:90:41:C2:46:91:E9:5B:A5 Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Certificate serial: 0A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft Manifest number: 0A45 Signing time: Sun 28 Dec 2025 19:09:41 +0000 Manifest this update: Sun 28 Dec 2025 19:09:41 +0000 Manifest next update: Sun 04 Jan 2026 19:09:41 +0000 Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: 3uLxWag6urhvnp9Smg7bZ0wTKaC5k7lTq7X5IafUZ+Y=) 2: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: qU5SgxuYfj9EbloGsgp5NlU+LGZow7QsAYGZSye/EIM=) 3: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: yfdf5Mv/GJ9tUDZNlDnmM6hHiINUq2OvlkNbS0rVles=) 4: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: PgZPVHxtNUmnyrhnnwVcg3kijll4dZA2GpurrS7x078=) 5: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: mCrr4AsBoN0UqBzrLZ/+kB+0BpCUxnU7wJAUdq4LZdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 19:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Validity Not Before: Dec 28 19:09:41 2025 GMT Not After : Jan 4 19:09:41 2026 GMT Subject: CN=69518075-6021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:58:b8:11:87:e6:66:7d:a7:b8:7c:02:ad: be:70:02:09:53:b2:39:38:5d:82:06:fa:33:17:7f: b9:9a:e1:f9:22:50:c7:f6:7c:7c:2e:6f:27:25:09: 2c:9d:8f:00:46:af:62:2b:23:82:ca:d8:ee:60:16: 74:34:d5:1d:7e:eb:f5:a3:e2:29:27:6d:fb:b8:5b: 14:3c:3c:c0:6e:7a:57:c6:6a:23:04:a8:13:3d:74: 29:a6:1c:e8:5a:6f:d4:12:13:77:21:83:8b:95:fd: cf:0d:91:a0:89:7a:b5:b2:71:96:a4:a5:95:38:81: 8c:2b:9d:6a:25:b9:a2:34:db:93:51:94:4b:0a:d1: 8f:92:d1:9f:0c:f1:46:91:dd:c1:b7:74:bf:aa:27: b7:83:9b:4c:a0:8d:99:26:56:10:0f:28:e2:5f:82: a1:bc:de:8e:e7:7d:1d:e0:c9:e0:e7:7a:8f:f9:6a: 6d:41:f4:da:e1:e8:ba:e0:35:9a:99:95:f5:ee:e5: 06:1b:47:9b:fd:c4:21:54:c4:f1:4f:60:73:e9:27: fe:55:c8:5a:6b:5c:30:3d:3d:e8:3b:04:3f:31:59: ef:36:fc:eb:02:34:a2:7d:a0:e5:0b:2b:52:6e:d0: ad:37:c3:48:5d:8d:5f:7a:db:f5:09:fa:67:76:22: 55:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:10:2F:C5:C8:47:B7:DD:4D:95:10:AA:90:41:C2:46:91:E9:5B:A5 X509v3 Authority Key Identifier: keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6c:ac:3e:d7:68:ad:64:f1:c4:20:44:6a:88:fe:82:39:cb: 90:05:01:f2:0c:1d:8c:3d:82:2e:f3:cb:61:0e:77:2e:d2:82: ad:c9:00:5c:3d:19:a6:f5:1b:8c:4e:f4:c9:38:cf:f1:c5:3f: a2:3e:65:9c:0b:c6:7d:41:60:b5:f4:4d:98:3e:98:56:6c:5c: 8a:2f:ac:ce:d9:55:0f:a4:91:8a:d8:27:0e:8b:47:cd:d9:4d: 63:9e:29:87:e7:22:5a:c8:f4:47:3a:a5:85:4b:34:07:da:e9: 7c:97:4a:67:35:eb:20:77:23:bd:6c:29:fe:97:b0:f5:79:ad: f2:aa:dc:f2:75:43:50:e2:18:5c:a1:d0:87:eb:6c:c1:34:c5: 23:1a:d2:6d:95:14:fa:ac:eb:b5:56:6e:b4:d6:96:65:9f:03: 6e:d8:da:43:7e:5b:99:dd:08:09:16:eb:c7:d1:ec:cb:83:bb: 7b:23:00:8f:ee:e0:68:0e:1a:bd:43:ba:c2:47:06:b7:d3:57: 29:4b:08:7b:f5:b9:3a:5f:1e:d0:01:8e:d5:60:a8:44:b9:30: 07:75:ac:3e:0d:b2:ff:70:a0:f6:23:3d:65:76:52:54:10:ce: 06:23:5c:b5:9c:76:cd:d1:47:99:1e:96:e5:94:e8:e9:8a:34: 8a:c1:a8:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1ODAxMTAvBgNVBAUTKEZFNEZEQTM5NjcwMTZDMTEzQUM4MDdCODQ5MzQwQUM2 NTIwRjA4MDIwHhcNMjUxMjI4MTkwOTQxWhcNMjYwMTA0MTkwOTQxWjAYMRYwFAYD VQQDDA02OTUxODA3NS02MDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHBYuBGH5mZ9p7h8Aq2+cAIJU7I5OF2CBvozF3+5muH5IlDH9nx8Lm8nJQks nY8ARq9iKyOCytjuYBZ0NNUdfuv1o+IpJ237uFsUPDzAbnpXxmojBKgTPXQpphzo Wm/UEhN3IYOLlf3PDZGgiXq1snGWpKWVOIGMK51qJbmiNNuTUZRLCtGPktGfDPFG kd3Bt3S/qie3g5tMoI2ZJlYQDyjiX4KhvN6O530d4Mng53qP+WptQfTa4ei64DWa mZX17uUGG0eb/cQhVMTxT2Bz6Sf+Vchaa1wwPT3oOwQ/MVnvNvzrAjSifaDlCytS btCtN8NIXY1fetv1CfpndiJVBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcQL8XI R7fdTZUQqpBBwkaR6VulMB8GA1UdIwQYMBaAFP5P2jlnAWwROsgHuEk0CsZSDwgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTU4MC9DN0NFMkUxMDdG OEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJCRTZ5QWU0U1RRS3hsSVBD QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rX2FPV2NCYkJFNnlBZTRTVFFLeGxJUENBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTU4MC9DN0NFMkUxMDdGOEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJC RTZ5QWU0U1RRS3hsSVBDQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNbKw+12itZPHEIERqiP6COcuQBQHyDB2MPYIu88thDncu0oKtyQBc PRmm9RuMTvTJOM/xxT+iPmWcC8Z9QWC19E2YPphWbFyKL6zO2VUPpJGK2CcOi0fN 2U1jnimH5yJayPRHOqWFSzQH2ul8l0pnNesgdyO9bCn+l7D1ea3yqtzydUNQ4hhc odCH62zBNMUjGtJtlRT6rOu1Vm601pZlnwNu2NpDfluZ3QgJFuvH0ezLg7t7IwCP 7uBoDhq9Q7rCRwa301cpSwh79bk6Xx7QAY7VYKhEuTAHdaw+DbL/cKD2Iz1ldlJU EM4GI1y1nHbN0UeZHpbllOjpijSKwaiv -----END CERTIFICATE-----Generated at Sun Dec 28 23:21:34 2025 by rpki-client