This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft File: mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json) Hash identifier: zd7IotkQAkTzgmf1iouZpV/MDmkJcNzvdUsqUAOQ7MI= Subject key identifier: C1:58:F8:BA:6D:92:A0:3D:5D:90:BE:8F:12:D2:8B:41:1F:2C:7F:5E Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Certificate serial: 06A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft Manifest number: 069B Signing time: Sat 20 Dec 2025 21:43:56 +0000 Manifest this update: Sat 20 Dec 2025 21:43:56 +0000 Manifest next update: Sat 27 Dec 2025 21:43:56 +0000 Files and hashes: 1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: vN8BT5b8tuWiTuKtoU4WZS8Pzp41Lxkc89rygfrgyxQ=) 2: 2CB68FE8943211F0B1116B74C4F9AE02.roa (hash: EQNnt+47JakLAicAJpey8kMF4fyXy0EyBy2A09Z/nmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1700 (0x6a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Validity Not Before: Dec 20 21:43:56 2025 GMT Not After : Dec 27 21:43:56 2025 GMT Subject: CN=6947189c-02aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:7a:8c:f3:00:c3:c1:34:3b:49:9c:01:7f: 4b:17:7e:ff:0c:f7:24:81:e9:48:97:b2:00:09:f7: 42:2d:50:ef:31:1e:4d:b0:ce:67:7b:76:5c:5a:80: 7f:33:67:41:12:fd:81:db:59:5c:d3:35:02:09:2b: 46:d6:ac:39:04:d2:2d:5a:16:e1:db:3e:d4:73:10: 4e:05:5d:51:a4:94:ab:f2:de:31:44:0a:83:03:f9: 42:e5:c4:e7:50:94:09:85:c5:f4:93:03:1b:04:c4: 39:c4:ee:f1:bf:a6:6b:dc:39:42:40:92:d5:d1:3c: 81:d7:64:61:e7:cb:e5:b3:cc:09:4a:39:82:ce:3c: 89:66:6a:ba:4b:3a:20:f2:a8:e6:10:88:f1:ae:cb: 70:e5:6f:d7:82:25:98:af:6b:c6:e4:37:d0:76:fe: 30:41:47:3e:c2:53:b7:7a:88:8d:c7:69:db:ff:07: 0f:99:4f:ce:fe:13:aa:04:f0:7f:cc:15:43:d7:99: 10:3b:43:b7:a9:90:c8:44:f3:6b:6b:34:d3:dd:cd: 7e:e9:d3:3d:53:eb:8f:d2:64:09:3c:ad:50:84:24: 91:b3:68:3b:24:17:15:c3:ff:81:cb:d3:cc:07:7b: eb:57:5b:0c:eb:f7:fc:e0:6a:49:f3:53:cf:68:b5: 48:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:58:F8:BA:6D:92:A0:3D:5D:90:BE:8F:12:D2:8B:41:1F:2C:7F:5E X509v3 Authority Key Identifier: keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:5d:5a:b7:5b:61:f8:5a:28:7c:77:b2:3f:2c:a8:be:16:48: 57:78:e8:17:20:a0:58:8a:aa:dd:0a:24:f2:fe:fd:35:6f:c1: af:14:ce:66:3b:9d:6c:bb:48:72:f7:3a:a1:18:9d:92:17:70: 85:07:a0:b6:ed:65:74:e0:f7:28:eb:c8:dc:78:3c:64:ce:64: 3d:9a:9b:bc:b9:54:9f:63:c5:af:cd:23:49:74:52:3b:6d:4c: ad:40:19:0d:5c:91:0a:dc:00:be:a0:dc:ae:3b:ee:24:1f:29: 79:98:d3:f3:a6:66:84:96:52:9b:e3:16:67:71:99:e3:e6:2f: 16:a2:61:57:a4:48:14:36:67:29:3d:b7:b6:c2:80:e2:bb:6d: 1c:4f:e5:a1:11:f6:6a:4f:48:3d:4c:70:d9:04:c9:58:ed:8f: fa:b6:08:e9:c8:0a:fd:f3:bc:d0:83:0c:2c:ea:53:64:00:33: ba:86:d8:2c:a3:e1:8b:93:28:d1:0f:88:95:7b:a3:a6:65:f7: ab:8e:83:b8:2b:b3:4c:e5:8e:eb:b7:a3:c2:0c:d3:8d:8b:14: eb:fe:06:ef:c5:1d:54:c6:a6:88:44:14:8b:1b:5e:fe:91:12: 46:02:79:3e:92:7e:6e:24:74:b9:e6:5e:67:ab:de:99:69:87: 70:f2:34:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQTkxMTAvBgNVBAUTKDk5NEQ5QjJEOTdDQkNDQjVENTI0NERFMEE3RTUzOTc0 MUY4ODhBMjMwHhcNMjUxMjIwMjE0MzU2WhcNMjUxMjI3MjE0MzU2WjAYMRYwFAYD VQQDDA02OTQ3MTg5Yy0wMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXF6jPMAw8E0O0mcAX9LF37/DPckgelIl7IACfdCLVDvMR5NsM5ne3ZcWoB/ M2dBEv2B21lc0zUCCStG1qw5BNItWhbh2z7UcxBOBV1RpJSr8t4xRAqDA/lC5cTn UJQJhcX0kwMbBMQ5xO7xv6Zr3DlCQJLV0TyB12Rh58vls8wJSjmCzjyJZmq6Szog 8qjmEIjxrstw5W/XgiWYr2vG5DfQdv4wQUc+wlO3eoiNx2nb/wcPmU/O/hOqBPB/ zBVD15kQO0O3qZDIRPNrazTT3c1+6dM9U+uP0mQJPK1QhCSRs2g7JBcVw/+By9PM B3vrV1sM6/f84GpJ81PPaLVIZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFY+Lpt kqA9XZC+jxLSi0EfLH9eMB8GA1UdIwQYMBaAFJlNmy2Xy8y11SRN4KflOXQfiIoj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVBOS9FNjQ2QkYxRTk2 ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpMWFZKRTNncC1VNWRCLUlp aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21VMmJMWmZMekxYVkpFM2dwLVU1ZEItSWlpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVBOS9FNjQ2QkYxRTk2ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpM WFZKRTNncC1VNWRCLUlpaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmXVq3W2H4Wih8d7I/LKi+FkhXeOgXIKBYiqrdCiTy/v01b8GvFM5m O51su0hy9zqhGJ2SF3CFB6C27WV04Pco68jceDxkzmQ9mpu8uVSfY8WvzSNJdFI7 bUytQBkNXJEK3AC+oNyuO+4kHyl5mNPzpmaEllKb4xZncZnj5i8WomFXpEgUNmcp Pbe2woDiu20cT+WhEfZqT0g9THDZBMlY7Y/6tgjpyAr987zQgwws6lNkADO6htgs o+GLkyjRD4iVe6OmZferjoO4K7NM5Y7rt6PCDNONixTr/gbvxR1UxqaIRBSLG17+ kRJGAnk+kn5uJHS55l5nq96ZaYdw8jQ0 -----END CERTIFICATE-----Generated at Sun Dec 21 00:16:58 2025 by rpki-client