This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft File: caPb4vD_0LEHymtXE7Fcl6jj4dE.mft (raw, json) Hash identifier: nbgrQnXZtsAXyEvVBukLc0ur2XJs80YUBP5QHMdDfFw= Subject key identifier: 8E:4C:BF:99:FA:2B:3E:31:42:F0:59:9B:1C:AB:8B:04:61:76:C5:4D Authority key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1 Certificate issuer: /CN=A91EEE79/serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft Manifest number: 12 Signing time: Fri 19 Dec 2025 06:49:58 +0000 Manifest this update: Fri 19 Dec 2025 06:49:58 +0000 Manifest next update: Fri 26 Dec 2025 06:49:58 +0000 Files and hashes: 1: caPb4vD_0LEHymtXE7Fcl6jj4dE.crl (hash: nRlYnBZZE5ksOuyjymnzUaRofVGZ1VocC5TNjyiTMuE=) 2: 0853E998C45711F080167D38C4F9AE02.roa (hash: UXfllLAn2oYs6QDv0DiGrvQ4onowkRfHyI9wXDB3nXw=) 3: 078123C8C45711F09E1B7D38C4F9AE02.roa (hash: er6jr1FS0D2/9mznlhepy8rxBzQvc9rNYi9PUnbvOIQ=) 4: 07EF6C98C45711F0A1027D38C4F9AE02.roa (hash: O7z3m4YVM0wU21WTponLx+IqwFDb7IX9H8f56v/43dA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1 Validity Not Before: Dec 19 06:49:58 2025 GMT Not After : Dec 26 06:49:58 2025 GMT Subject: CN=6944f596-3110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fc:66:f5:cf:6c:2f:bb:a6:ef:90:44:34:30: 16:d0:c0:85:00:0e:b2:e0:4e:6a:9f:12:ec:a2:ff: 14:6e:89:3e:b3:1d:45:f8:bd:ab:c6:50:7f:81:30: 20:7d:db:ed:1e:be:40:3b:77:f5:21:3b:53:bd:51: fa:a5:ad:05:db:5d:22:13:db:b4:c1:5d:86:43:8f: 12:63:db:53:0d:38:10:e2:3d:50:91:c5:22:a5:f2: 83:4e:ce:01:49:96:34:4a:e6:dc:5d:db:16:08:d2: d3:8b:bb:03:72:87:d2:e7:ba:ce:da:bc:1a:7e:bf: 15:5d:1a:d9:42:37:f6:2b:b8:9d:45:7d:98:9a:8d: 00:8c:60:40:27:aa:bf:84:ce:31:b4:de:db:30:f3: 98:94:9f:a7:8d:cc:a6:74:a1:80:b5:65:5e:c8:7a: 82:29:0f:4d:16:bf:bb:54:37:04:ca:b9:93:5d:2d: de:60:be:d2:e4:88:20:13:9e:0c:8c:88:8f:e0:68: 71:4b:76:64:98:57:20:de:83:5b:ab:6e:76:6a:38: 6c:d8:ef:3f:0e:8d:f3:8c:e4:a2:25:c1:4a:84:20: 0b:15:d8:59:87:7b:89:7e:c5:3b:d0:66:a7:83:ad: e3:43:84:0d:a8:e2:c5:7b:f1:f4:5c:36:75:0a:43: da:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4C:BF:99:FA:2B:3E:31:42:F0:59:9B:1C:AB:8B:04:61:76:C5:4D X509v3 Authority Key Identifier: keyid:71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c3:2b:b4:60:fb:2e:cd:dd:ef:84:ea:2a:2e:8a:8f:9a:06: 5a:f8:09:66:93:25:03:04:03:a7:41:2d:91:49:8b:03:23:16: 5b:46:90:f6:bf:35:55:64:15:c8:d4:ec:a2:26:dc:aa:32:89: 71:b1:de:f4:fe:c1:17:3f:bd:e3:43:33:76:64:88:43:9f:15: 69:ed:6e:4b:bb:8d:d4:8c:60:d5:17:db:1c:c2:8b:41:0e:6a: 30:f5:5b:16:b8:ab:0e:11:cd:29:31:9b:0a:2d:4f:79:23:b3: b1:a6:f8:f8:36:83:3b:e4:ae:57:2f:68:a9:d5:6f:2d:86:a1: e8:78:64:b1:17:05:38:36:eb:be:5f:11:72:35:53:c9:6f:51: 47:ee:86:30:a7:7b:75:8a:ec:ca:f7:a0:00:e6:55:39:d8:e8: a3:44:ff:60:ff:e6:c5:63:47:59:b9:c1:9f:eb:9e:cc:99:9f: 10:a6:15:81:93:dd:32:aa:19:d8:4f:2f:f7:ec:c5:9a:23:80: a3:9c:7c:45:53:49:44:6a:48:19:2f:eb:e3:dd:ce:08:89:72: f8:d6:c3:e5:d6:bc:b1:ae:0b:36:6f:ed:4e:71:26:46:a2:93: 2a:3d:c0:7c:22:25:a2:6e:fc:51:b4:42:53:91:63:65:5b:ae: cc:21:c3:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUU3OTExMC8GA1UEBRMoNzFBM0RCRTJGMEZGRDBCMTA3Q0E2QjU3MTNCMTVDOTdB OEUzRTFEMTAeFw0yNTEyMTkwNjQ5NThaFw0yNTEyMjYwNjQ5NThaMBgxFjAUBgNV BAMMDTY5NDRmNTk2LTMxMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDs/Gb1z2wvu6bvkEQ0MBbQwIUADrLgTmqfEuyi/xRuiT6zHUX4vavGUH+BMCB9 2+0evkA7d/UhO1O9UfqlrQXbXSIT27TBXYZDjxJj21MNOBDiPVCRxSKl8oNOzgFJ ljRK5txd2xYI0tOLuwNyh9Lnus7avBp+vxVdGtlCN/YruJ1FfZiajQCMYEAnqr+E zjG03tsw85iUn6eNzKZ0oYC1ZV7IeoIpD00Wv7tUNwTKuZNdLd5gvtLkiCATngyM iI/gaHFLdmSYVyDeg1urbnZqOGzY7z8OjfOM5KIlwUqEIAsV2FmHe4l+xTvQZqeD reNDhA2o4sV78fRcNnUKQ9olAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjky/mfor PjFC8FmbHKuLBGF2xU0wHwYDVR0jBBgwFoAUcaPb4vD/0LEHymtXE7Fcl6jj4dEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFRTc5Lzk1MUUyOEY4QzQ1 NjExRjA4RTUzOTIwQkM0RjlBRTAyL2NhUGI0dkRfMExFSHltdFhFN0ZjbDZqajRk RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY2FQYjR2RF8wTEVIeW10WEU3RmNsNmpqNGRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF RTc5Lzk1MUUyOEY4QzQ1NjExRjA4RTUzOTIwQkM0RjlBRTAyL2NhUGI0dkRfMExF SHltdFhFN0ZjbDZqajRkRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEHDK7Rg+y7N3e+E6iouio+aBlr4CWaTJQMEA6dBLZFJiwMjFltGkPa/ NVVkFcjU7KIm3KoyiXGx3vT+wRc/veNDM3ZkiEOfFWntbku7jdSMYNUX2xzCi0EO ajD1Wxa4qw4RzSkxmwotT3kjs7Gm+Pg2gzvkrlcvaKnVby2Goeh4ZLEXBTg2675f EXI1U8lvUUfuhjCne3WK7Mr3oADmVTnY6KNE/2D/5sVjR1m5wZ/rnsyZnxCmFYGT 3TKqGdhPL/fsxZojgKOcfEVTSURqSBkv6+PdzgiJcvjWw+XWvLGuCzZv7U5xJkai kyo9wHwiJaJu/FG0QlORY2Vbrswhw9g= -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:00 2025 by rpki-client