This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft File: kcPJZndvAR_FNQIdhfWue_utpX4.mft (raw, json) Hash identifier: phSQifUc3N6wwsMq1i8rI1gor3/o7SOChJmkU9v7NzM= Subject key identifier: 88:5B:53:C8:FF:53:40:B3:00:E6:8E:C8:8A:57:1D:C9:FD:50:34:F4 Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E Certificate issuer: /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Certificate serial: 0BFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft Manifest number: 0BCE Signing time: Thu 18 Dec 2025 18:38:29 +0000 Manifest this update: Thu 18 Dec 2025 18:38:29 +0000 Manifest next update: Thu 25 Dec 2025 18:38:29 +0000 Files and hashes: 1: kcPJZndvAR_FNQIdhfWue_utpX4.crl (hash: Q2ci/mhRQ7/ZM53/AtyCsQ5H1l8zi58bgTkwF2WLdJk=) 2: 41B2F448ECE611EA882BEA79C4F9AE02.roa (hash: jfARn5Pllx6IMjPiI7FxZYgxXYW94DALaj8qH2++9WY=) 3: 436F1AE2ECF411EA822E8D28C4F9AE02.roa (hash: akcNDk8y+ODsfpu3oKFQYxPcSwPpaVaD8Gu1z5j+dkI=) 4: ACE4FD2C6D1711F085288D45C4F9AE02.roa (hash: riSPm8Um648H2O5onROefisDf6lA1aFxuieJBfuqrKc=) 5: AD4CF94A6D1711F085288D45C4F9AE02.roa (hash: dwF4PLUAXx1X1N5mZQhJUj6aIS0fEqRxQ0gkZCCE5EA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3071 (0xbff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Validity Not Before: Dec 18 18:38:29 2025 GMT Not After : Dec 25 18:38:29 2025 GMT Subject: CN=69444a25-29c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:47:ce:e4:cf:c8:b4:fd:84:5a:4d:cd:0c: 35:01:83:aa:31:cc:9d:be:70:52:fc:4b:00:78:6e: a8:59:4d:42:1a:43:59:c6:3c:00:b0:43:bb:df:59: a8:f1:c0:ad:73:79:f8:7f:9b:0d:81:96:f6:a9:9d: d9:2d:0b:4a:1d:5b:37:5c:91:bd:d5:80:85:a4:c7: b7:23:ea:4d:e2:f7:12:14:29:19:1d:69:71:3d:fd: cb:1a:64:74:20:73:db:a1:2f:5b:60:7f:de:8a:cd: 12:ee:cd:cf:a3:32:2b:d9:43:61:07:e1:2b:4d:42: a6:0e:64:65:a8:c3:44:2d:5d:69:99:33:82:ac:03: 90:a8:18:8a:49:be:37:5a:a7:d7:46:b7:fa:2c:e2: 8f:2e:dc:13:84:7e:f0:c5:f9:97:96:f3:d2:0d:22: c5:5e:3a:dd:d3:14:4d:ff:76:92:fe:5a:33:b1:fa: aa:8f:31:44:b2:6f:de:c7:16:f3:14:34:44:d4:66: 7d:6d:26:41:00:d6:6e:1f:c8:ed:55:fa:c3:6e:81: 91:f8:eb:1b:b2:4c:91:a1:3c:d9:71:f0:b0:63:5e: fc:03:42:d6:e5:1d:ce:5d:57:2c:93:f9:e1:06:30: bf:81:40:0b:36:4e:b2:b2:cd:15:97:1a:17:85:d5: 9f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5B:53:C8:FF:53:40:B3:00:E6:8E:C8:8A:57:1D:C9:FD:50:34:F4 X509v3 Authority Key Identifier: keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d8:b4:08:85:28:03:b0:ba:da:47:50:63:29:97:ca:19:f3: f5:a7:89:0b:87:ff:c8:31:ce:77:86:cb:4c:f6:dd:31:97:92: 42:25:6f:aa:c5:9e:76:e1:fa:07:9c:a3:be:38:38:74:ec:f3: 10:d2:2c:60:03:4c:06:da:e0:69:14:ce:1d:f2:d3:4c:e9:4e: da:a2:88:df:ed:e5:b9:0e:03:2e:8d:7a:71:9c:0f:39:e3:6b: 21:2e:99:44:3e:51:90:95:22:b3:10:84:28:b8:6e:e4:5f:86: cb:00:ed:bf:c4:1b:28:92:19:e6:03:3e:9f:63:91:1c:d2:51: e3:58:5a:4c:ad:2a:8a:cf:53:54:8d:d2:d8:57:46:89:d2:4c: 73:1b:c4:8e:1f:20:98:c0:f8:20:90:97:85:22:2a:64:eb:a6: c6:99:21:b1:81:68:ab:ff:83:92:4c:38:77:ff:da:19:94:e0: 19:a0:bc:07:b1:e2:4d:13:48:8a:40:5d:e7:72:9a:0f:0e:29: 16:ee:6a:25:35:18:97:2f:26:bb:61:5d:02:8e:f5:5f:69:ff: ba:60:65:95:bb:fb:fc:63:3c:09:38:da:d8:37:ea:8a:16:3f: 6f:25:59:0e:2d:72:d1:d0:3e:4d:ed:0f:dd:24:f3:73:a2:a9: a5:47:da:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3ODYxMTAvBgNVBAUTKDkxQzNDOTY2Nzc2RjAxMUZDNTM1MDIxRDg1RjVBRTdC RkJBREE1N0UwHhcNMjUxMjE4MTgzODI5WhcNMjUxMjI1MTgzODI5WjAYMRYwFAYD VQQDDA02OTQ0NGEyNS0yOWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3VHzuTPyLT9hFpNzQw1AYOqMcydvnBS/EsAeG6oWU1CGkNZxjwAsEO731mo 8cCtc3n4f5sNgZb2qZ3ZLQtKHVs3XJG91YCFpMe3I+pN4vcSFCkZHWlxPf3LGmR0 IHPboS9bYH/eis0S7s3PozIr2UNhB+ErTUKmDmRlqMNELV1pmTOCrAOQqBiKSb43 WqfXRrf6LOKPLtwThH7wxfmXlvPSDSLFXjrd0xRN/3aS/lozsfqqjzFEsm/exxbz FDRE1GZ9bSZBANZuH8jtVfrDboGR+OsbskyRoTzZcfCwY178A0LW5R3OXVcsk/nh BjC/gUALNk6yss0VlxoXhdWfSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhbU8j/ U0CzAOaOyIpXHcn9UDT0MB8GA1UdIwQYMBaAFJHDyWZ3bwEfxTUCHYX1rnv7raV+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc4Ni9CMEQ3MjNFRTM1 REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFSX0ZOUUlkaGZXdWVfdXRw WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjUEpabmR2QVJfRk5RSWRoZld1ZV91dHBYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc4Ni9CMEQ3MjNFRTM1REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFS X0ZOUUlkaGZXdWVfdXRwWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw2LQIhSgDsLraR1BjKZfKGfP1p4kLh//IMc53hstM9t0xl5JCJW+q xZ524foHnKO+ODh07PMQ0ixgA0wG2uBpFM4d8tNM6U7aoojf7eW5DgMujXpxnA85 42shLplEPlGQlSKzEIQouG7kX4bLAO2/xBsokhnmAz6fY5Ec0lHjWFpMrSqKz1NU jdLYV0aJ0kxzG8SOHyCYwPggkJeFIipk66bGmSGxgWir/4OSTDh3/9oZlOAZoLwH seJNE0iKQF3ncpoPDikW7molNRiXLya7YV0CjvVfaf+6YGWVu/v8YzwJONrYN+qK Fj9vJVkOLXLR0D5N7Q/dJPNzoqmlR9o4 -----END CERTIFICATE-----Generated at Sat Dec 20 03:23:33 2025 by rpki-client