This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json) Hash identifier: x7ap1CSd2h1iMen/N/fcl+X8Oj2J10Qx18LXBihrZ5U= Subject key identifier: 28:1B:79:B5:F4:B0:AA:D6:2C:C5:08:46:DA:43:9B:C2:31:03:5A:1E Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft Manifest number: 0215 Signing time: Thu 25 Dec 2025 01:22:28 +0000 Manifest this update: Thu 25 Dec 2025 01:22:28 +0000 Manifest next update: Thu 01 Jan 2026 01:22:28 +0000 Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: fbjGlzWc2fNfzzI+mMdkJo+LZfk3/IVSIfp77vHCSNc=) 2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: O+pEwQE3iQIl6k8H64M8+4x6mQxagzl13MHt0furEwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 01:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6C6, serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Validity Not Before: Dec 25 01:22:28 2025 GMT Not After : Jan 1 01:22:28 2026 GMT Subject: CN=694c91d4-d34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:aa:e1:20:c3:12:fc:51:fb:7d:5d:0a:26: b1:c4:f5:76:24:2c:1a:ca:a1:de:3c:2d:27:f2:07: 28:0f:2c:2f:04:77:5d:3a:87:2e:23:43:7b:b1:db: 59:cd:db:1d:fd:88:b0:a5:09:c6:d2:13:d6:8e:ef: 44:50:fa:de:be:9f:ca:df:60:c9:0d:a4:23:a0:01: 78:73:31:5c:eb:56:e2:d6:15:93:a7:ab:ce:a6:7f: 8d:fb:16:a5:a5:13:72:f8:19:75:1c:a5:a9:74:37: 52:f3:16:9e:ec:5b:f0:dd:c1:96:ca:48:d7:fc:0b: d3:0c:65:fa:b1:26:7c:af:98:21:38:ce:6d:73:0d: 4d:45:86:81:61:79:f7:d9:49:3a:4d:72:e8:b0:26: 3b:6d:0f:a5:b9:af:5c:d0:99:a3:a8:32:7b:36:e4: 0a:25:82:a9:64:99:35:4c:4b:ea:79:a2:42:b0:38: 7f:a3:17:24:d6:ba:69:bc:ad:7b:b5:cb:02:dc:22: 94:10:5b:b6:63:de:36:78:3e:e1:89:65:3e:fc:11: 0f:b7:cb:e5:b3:b1:4c:7e:88:91:60:de:f6:a5:23: 3f:8f:38:0d:95:7f:3f:4a:b2:e4:17:0c:ac:92:2c: c7:9e:32:77:82:71:db:93:61:e3:12:44:b4:23:5e: 38:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1B:79:B5:F4:B0:AA:D6:2C:C5:08:46:DA:43:9B:C2:31:03:5A:1E X509v3 Authority Key Identifier: keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:39:ff:96:f0:b0:01:08:a7:31:1e:9f:ee:c0:99:8e:be:94: 82:07:bf:d9:ba:38:1d:98:6e:25:00:51:13:94:34:aa:86:22: e3:c1:a9:9e:0b:b8:f5:bb:0d:f9:f1:86:c8:0c:73:34:3b:19: 5f:79:d8:b0:61:d1:08:ff:ad:f6:d2:65:71:4d:2e:5a:c4:93: 91:40:1b:76:c2:7c:6f:77:23:29:b5:ee:f7:70:8e:0b:81:92: 46:d6:49:93:50:71:e3:55:34:52:c7:a5:d5:86:d3:6a:aa:3f: f5:25:77:1c:6f:2f:fb:b0:bf:a6:ad:0f:89:10:5d:12:26:b5: 52:b8:4a:f1:5a:fb:90:1a:ee:3b:07:33:b1:d0:cf:69:86:f1: b9:95:4b:98:7e:81:47:cc:63:f4:3a:d8:a5:cc:27:32:ef:37: e5:bc:58:5c:da:62:d5:d6:2f:91:c1:22:68:5f:b0:58:93:e7: 04:9a:13:d4:a6:5f:4d:2b:4c:f2:8e:7e:98:94:6e:1f:30:87: c3:38:7e:01:e5:b3:ac:94:3d:2a:94:e3:62:08:82:37:55:57: 0b:3a:2b:eb:ce:a5:4d:e6:5a:89:ae:43:07:9c:cf:ff:ba:2f: b1:78:2b:c0:db:a3:26:64:f7:78:28:1c:dc:6d:55:b6:a6:e2: eb:9a:6a:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QzYxMTAvBgNVBAUTKDcxNTQ2MDczQkQwOTI3RUJFQjg1MEYwNkRBNzZBNzI3 NjlFNzEzNkIwHhcNMjUxMjI1MDEyMjI4WhcNMjYwMTAxMDEyMjI4WjAYMRYwFAYD VQQDDA02OTRjOTFkNC1kMzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7mq4SDDEvxR+31dCiaxxPV2JCwayqHePC0n8gcoDywvBHddOocuI0N7sdtZ zdsd/YiwpQnG0hPWju9EUPrevp/K32DJDaQjoAF4czFc61bi1hWTp6vOpn+N+xal pRNy+Bl1HKWpdDdS8xae7Fvw3cGWykjX/AvTDGX6sSZ8r5ghOM5tcw1NRYaBYXn3 2Uk6TXLosCY7bQ+lua9c0JmjqDJ7NuQKJYKpZJk1TEvqeaJCsDh/oxck1rppvK17 tcsC3CKUEFu2Y942eD7hiWU+/BEPt8vls7FMfoiRYN72pSM/jzgNlX8/SrLkFwys kizHnjJ3gnHbk2HjEkS0I144gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgbebX0 sKrWLMUIRtpDm8IxA1oeMB8GA1UdIwQYMBaAFHFUYHO9CSfr64UPBtp2pydp5xNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZDNi8yQ0FFQUQwNEIz M0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkotdnJoUThHMm5hbkoybm5F MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWUmdjNzBKSi12cmhROEcybmFuSjJubkUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZDNi8yQ0FFQUQwNEIzM0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkot dnJoUThHMm5hbkoybm5FMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuOf+W8LABCKcxHp/uwJmOvpSCB7/ZujgdmG4lAFETlDSqhiLjwame C7j1uw358YbIDHM0OxlfediwYdEI/6320mVxTS5axJORQBt2wnxvdyMpte73cI4L gZJG1kmTUHHjVTRSx6XVhtNqqj/1JXccby/7sL+mrQ+JEF0SJrVSuErxWvuQGu47 BzOx0M9phvG5lUuYfoFHzGP0OtilzCcy7zflvFhc2mLV1i+RwSJoX7BYk+cEmhPU pl9NK0zyjn6YlG4fMIfDOH4B5bOslD0qlONiCII3VVcLOivrzqVN5lqJrkMHnM// ui+xeCvA26MmZPd4KBzcbVW2puLrmmrY -----END CERTIFICATE-----Generated at Sat Dec 27 00:45:22 2025 by rpki-client