This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json) Hash identifier: 42zHw18R5Aprto7CbjqsaoHJz82GdNLLCQh7XQPDD7k= Subject key identifier: DC:DC:C1:09:C3:BC:50:F6:9F:78:F4:EC:2E:0C:A1:D7:62:94:D3:E4 Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft Manifest number: C6 Signing time: Fri 19 Dec 2025 04:58:58 +0000 Manifest this update: Fri 19 Dec 2025 04:58:57 +0000 Manifest next update: Fri 26 Dec 2025 04:58:57 +0000 Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: WVtFbzHUkKw7XBqNN9AEiXfyJCMr7H6WPuLOc5HDkPc=) 2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: JGdoimcsZId56ABxtYNO3O8F9yLyNcE47QHhWM1CwzM=) 3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: 8YAiDz51IhiZ3/LyDkdEcZ6UuqFMuj+zIvbwZUX+Mu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Validity Not Before: Dec 19 04:58:57 2025 GMT Not After : Dec 26 04:58:57 2025 GMT Subject: CN=6944db92-ad57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:b4:c7:9c:35:28:9b:3c:61:d1:e6:ac:8f: 3b:ce:1e:5f:da:df:3a:f7:58:2f:be:9d:a2:0e:ed: 8b:89:03:4e:b0:91:75:60:e3:84:2f:9e:fd:e9:e0: db:01:64:ee:cf:78:97:e8:78:98:cd:e8:60:25:8e: b3:cc:f4:82:0e:60:4e:c2:7f:b7:64:78:7c:08:47: 03:44:c4:33:50:28:e4:0b:2d:28:24:82:90:6b:0b: 2c:73:a3:c4:c3:f2:51:dc:a5:21:e1:04:17:ab:40: f4:ee:25:8f:f2:95:3e:70:45:53:dc:e3:20:03:9a: 5d:89:e0:d2:32:8f:0a:36:38:49:dd:a4:47:62:07: 69:5d:c6:57:d3:64:1e:a2:61:6b:ef:f5:10:5f:1a: 5d:f5:fd:60:c8:f4:ad:d6:77:16:a2:bd:ef:4c:3a: b6:77:23:49:7b:8c:70:76:61:11:51:9f:bc:e8:7c: 35:6a:e1:fc:0c:e8:ec:4e:9c:9f:f8:51:cb:30:60: 9b:71:04:60:3c:e5:2c:2f:01:a4:48:2e:f3:dd:d2: 35:a2:d5:d0:e3:43:8e:80:21:86:22:73:54:06:a9: 9d:f4:d1:ac:68:a1:aa:6a:df:a9:a3:80:aa:4d:7d: cf:55:96:7b:0d:db:4d:e8:53:db:b1:45:f1:dd:04: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DC:C1:09:C3:BC:50:F6:9F:78:F4:EC:2E:0C:A1:D7:62:94:D3:E4 X509v3 Authority Key Identifier: keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c7:f5:c6:9a:4d:cf:f9:5c:35:6e:23:e4:54:7f:e9:a5:f6: ab:69:97:d6:62:6b:d8:70:4f:0b:83:7e:3b:9d:2e:7b:ff:41: ec:22:05:1e:e7:23:4f:54:3f:6c:7b:14:d9:da:29:3b:f9:49: 4d:6f:47:a3:eb:1f:67:ff:e7:76:45:1a:60:48:62:ba:db:aa: 51:5f:70:14:61:14:1a:6d:76:1c:50:6b:08:a1:2c:38:dd:ca: 6b:61:68:5d:02:92:9d:5a:0c:f4:ff:10:56:a3:ab:59:c0:c4: ce:1a:74:05:aa:b2:16:89:b9:b5:39:90:40:78:03:06:e8:8a: c8:90:16:53:bf:03:cc:82:95:05:d4:30:ad:c9:f2:c0:c3:a0: 25:e4:97:c7:ea:ff:7f:95:a8:1c:72:e7:d6:b4:fa:0c:2a:ad: 0d:02:03:77:a9:29:01:29:ba:82:ec:7b:f3:8e:3a:92:bb:ec: 62:95:8b:e3:8b:7c:71:d6:74:13:16:67:f8:2c:26:ab:d4:00: 2e:ea:de:a3:67:6f:af:d3:de:58:6f:05:6f:e5:e0:94:d9:e9: f5:1f:e2:64:45:f8:78:3c:0a:15:93:b5:8d:5e:6b:01:4d:fe: ed:2a:14:f6:bd:f5:84:f6:c0:26:d3:35:da:01:86:0c:00:83: 6e:2f:19:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU1RTUxMTAvBgNVBAUTKDY5MjM2RTU5OTYzMDBBMkZENzg1RUY4NTc4M0M1QzI5 QzVCNEU4NzQwHhcNMjUxMjE5MDQ1ODU3WhcNMjUxMjI2MDQ1ODU3WjAYMRYwFAYD VQQDDA02OTQ0ZGI5Mi1hZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlW0x5w1KJs8YdHmrI87zh5f2t8691gvvp2iDu2LiQNOsJF1YOOEL5796eDb AWTuz3iX6HiYzehgJY6zzPSCDmBOwn+3ZHh8CEcDRMQzUCjkCy0oJIKQawssc6PE w/JR3KUh4QQXq0D07iWP8pU+cEVT3OMgA5pdieDSMo8KNjhJ3aRHYgdpXcZX02Qe omFr7/UQXxpd9f1gyPSt1ncWor3vTDq2dyNJe4xwdmERUZ+86Hw1auH8DOjsTpyf +FHLMGCbcQRgPOUsLwGkSC7z3dI1otXQ40OOgCGGInNUBqmd9NGsaKGqat+po4Cq TX3PVZZ7DdtN6FPbsUXx3QQniQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzcwQnD vFD2n3j07C4ModdilNPkMB8GA1UdIwQYMBaAFGkjblmWMAov14XvhXg8XCnFtOh0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTVFNS9GMEU3NkUxMkFG QkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9hU051V1pZd0NpX1hoZS1GZUR4Y0tjVzA2 SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FTTnVXWll3Q2lfWGhlLUZlRHhjS2NXMDZIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTVFNS9GMEU3NkUxMkFGQkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9hU051V1pZd0Np X1hoZS1GZUR4Y0tjVzA2SFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATx/XGmk3P+Vw1biPkVH/ppfaraZfWYmvYcE8Lg347nS57/0HsIgUe 5yNPVD9sexTZ2ik7+UlNb0ej6x9n/+d2RRpgSGK626pRX3AUYRQabXYcUGsIoSw4 3cprYWhdApKdWgz0/xBWo6tZwMTOGnQFqrIWibm1OZBAeAMG6IrIkBZTvwPMgpUF 1DCtyfLAw6Al5JfH6v9/lagccufWtPoMKq0NAgN3qSkBKbqC7HvzjjqSu+xilYvj i3xx1nQTFmf4LCar1AAu6t6jZ2+v095YbwVv5eCU2en1H+JkRfh4PAoVk7WNXmsB Tf7tKhT2vfWE9sAm0zXaAYYMAINuLxlM -----END CERTIFICATE-----Generated at Sat Dec 20 22:47:15 2025 by rpki-client