This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft File: aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft (raw, json) Hash identifier: r5DR5k/RbBgzj11ama7AoLHxGM/UafWabDgAt25R4ok= Subject key identifier: 06:59:DD:49:0C:44:75:00:E4:2C:4B:21:50:FC:CD:3C:DE:D3:50:BE Authority key identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 Certificate issuer: /CN=A91F231C/serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft Manifest number: 17 Signing time: Fri 19 Dec 2025 06:49:42 +0000 Manifest this update: Fri 19 Dec 2025 06:49:41 +0000 Manifest next update: Fri 26 Dec 2025 06:49:41 +0000 Files and hashes: 1: aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl (hash: /fyJIbAdJNvA6YFgTNrieKafABpF8nzvQK5xg1CxOgQ=) 2: 7F29585EC43011F09039384AC4F9AE02.roa (hash: 48zywXKMdCoecrzGBCo9/VsiO+sSg4SaJvOnw5Kh4Qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F231C, serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Validity Not Before: Dec 19 06:49:41 2025 GMT Not After : Dec 26 06:49:41 2025 GMT Subject: CN=6944f586-45c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6e:db:21:f0:0b:9d:c3:fb:76:23:ff:ea:2f: 5d:7d:bd:16:09:88:cf:5f:3c:64:08:e6:e2:28:1e: 89:ab:b8:f9:24:47:3f:6f:94:5c:9d:67:c3:7b:5a: e3:cd:6a:88:22:77:38:c8:ba:06:54:24:66:89:f1: f7:d2:f9:19:53:be:25:d7:8c:ab:9b:80:06:db:25: e3:1f:ac:03:f0:5d:1d:1a:01:46:ad:0d:c0:6d:2b: 64:fe:17:eb:15:f4:45:08:16:82:8e:cb:8c:39:c8: 36:7c:b8:36:e3:97:cd:df:38:dd:f2:ee:8b:c2:ca: 26:17:02:cc:c3:fe:d3:48:89:d8:bd:b9:26:4c:b4: dd:61:cb:71:8c:e2:69:86:82:eb:cd:07:b4:ff:83: 11:21:66:42:1d:e0:7e:d0:fd:d9:a6:c2:4b:10:2f: 3c:3c:27:42:18:19:84:36:f2:86:a0:1f:1e:d9:3f: 2e:f7:af:dd:4f:58:a9:b2:c9:96:78:05:09:6a:70: df:2b:ba:51:a1:79:29:9e:18:14:56:23:69:b6:87: c7:dd:d3:9a:e2:85:cc:c8:0c:97:89:e9:d6:84:0f: 23:bc:ac:05:a0:81:5b:d1:e3:66:d0:e4:e7:4e:5a: 71:a3:81:98:17:f4:ff:e9:6b:09:90:1e:97:29:58: 0b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:59:DD:49:0C:44:75:00:E4:2C:4B:21:50:FC:CD:3C:DE:D3:50:BE X509v3 Authority Key Identifier: keyid:68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:da:45:24:1a:a9:83:f7:6b:2c:7e:ea:db:6b:f5:74:81:0d: 65:dc:87:07:96:38:c6:f0:83:2d:55:0f:9a:84:37:06:66:06: 85:af:32:da:7a:0b:2f:4f:4a:33:6a:8e:24:fd:c4:ad:6a:0c: 0a:6c:93:98:72:92:38:70:19:34:33:40:d8:bb:4a:20:37:fa: 08:fb:ac:eb:43:8f:6f:ad:93:6f:ce:3b:fb:5c:c1:13:5d:fe: 03:5e:8c:bc:b6:65:73:08:5f:5b:32:a4:b8:e1:55:be:90:27: 30:f9:81:31:99:e9:f9:34:bf:dc:56:b8:2e:56:d2:ed:39:4f: 9f:14:28:ef:a7:64:74:52:a5:13:5e:d8:b1:4d:89:11:2e:96: 21:62:25:96:8f:85:6f:3c:26:a7:d3:e2:3a:a1:09:3a:3b:3b: d7:79:d6:c3:f6:77:bb:11:b3:5c:4f:4b:a3:58:8b:b3:a7:de: da:01:cb:00:27:22:12:07:2a:8f:00:99:42:ea:75:7d:b7:4b: 1c:c1:74:0c:21:26:cf:bd:4c:e2:8e:2f:0e:d5:4f:cc:d8:ec: 28:60:5f:86:a3:f9:e6:64:65:b0:cb:b6:a6:8c:05:8e:f1:2e: 51:03:6e:b0:61:06:62:c1:49:41:61:33:d5:98:a3:d6:67:87: 44:84:d8:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjMxQzExMC8GA1UEBRMoNjhEMTQ2NjQzMzk1ODQxNkREODFBN0Q0QUJGMkIyNDNF RTdEOEI1NjAeFw0yNTEyMTkwNjQ5NDFaFw0yNTEyMjYwNjQ5NDFaMBgxFjAUBgNV BAMMDTY5NDRmNTg2LTQ1YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCibtsh8Audw/t2I//qL119vRYJiM9fPGQI5uIoHomruPkkRz9vlFydZ8N7WuPN aogidzjIugZUJGaJ8ffS+RlTviXXjKubgAbbJeMfrAPwXR0aAUatDcBtK2T+F+sV 9EUIFoKOy4w5yDZ8uDbjl83fON3y7ovCyiYXAszD/tNIidi9uSZMtN1hy3GM4mmG guvNB7T/gxEhZkId4H7Q/dmmwksQLzw8J0IYGYQ28oagHx7ZPy73r91PWKmyyZZ4 BQlqcN8rulGheSmeGBRWI2m2h8fd05rihczIDJeJ6daEDyO8rAWggVvR42bQ5OdO WnGjgZgX9P/pawmQHpcpWAtRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBlndSQxE dQDkLEshUPzNPN7TUL4wHwYDVR0jBBgwFoAUaNFGZDOVhBbdgafUq/KyQ+59i1Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyMzFDLzI4RTgzRTZBQzQz MDExRjA5NkNFOUM0OUM0RjlBRTAyL2FORkdaRE9WaEJiZGdhZlVxX0t5US01OWkx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYU5GR1pET1ZoQmJkZ2FmVXFfS3lRLTU5aTFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy MzFDLzI4RTgzRTZBQzQzMDExRjA5NkNFOUM0OUM0RjlBRTAyL2FORkdaRE9WaEJi ZGdhZlVxX0t5US01OWkxWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAALaRSQaqYP3ayx+6ttr9XSBDWXchweWOMbwgy1VD5qENwZmBoWvMtp6 Cy9PSjNqjiT9xK1qDApsk5hykjhwGTQzQNi7SiA3+gj7rOtDj2+tk2/OO/tcwRNd /gNejLy2ZXMIX1sypLjhVb6QJzD5gTGZ6fk0v9xWuC5W0u05T58UKO+nZHRSpRNe 2LFNiREuliFiJZaPhW88JqfT4jqhCTo7O9d51sP2d7sRs1xPS6NYi7On3toBywAn IhIHKo8AmULqdX23SxzBdAwhJs+9TOKOLw7VT8zY7ChgX4aj+eZkZbDLtqaMBY7x LlEDbrBhBmLBSUFhM9WYo9Znh0SE2B8= -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:59 2025 by rpki-client