This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: VqCnsRa7j83xVYedC8sQJPjA23IBBxBoBeA9lr10Pg8= Subject key identifier: 12:BA:B0:54:55:A1:CC:12:1A:6A:0B:D9:7E:FD:40:C1:C7:15:F4:16 Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0AF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 0AE7 Signing time: Thu 18 Dec 2025 19:03:21 +0000 Manifest this update: Thu 18 Dec 2025 19:03:21 +0000 Manifest next update: Thu 25 Dec 2025 19:03:21 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: 4bMtcgZ9vd21QHIRU9AHpyjdwVxDTI467QnVH4Z0Dn8=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: aO7ZzsxjyqFcAzfGikfamjQffULd11X020Rl4PUmMgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2805 (0xaf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA, serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: Dec 18 19:03:21 2025 GMT Not After : Dec 25 19:03:21 2025 GMT Subject: CN=69444ff9-f4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:d7:39:bd:51:32:47:bb:47:92:57:64:6e: 1c:7e:01:f4:ca:26:ee:82:77:fd:b6:9a:50:5d:13: 55:9a:a5:6f:f0:36:82:46:87:25:9b:b0:49:3f:6f: 84:46:cb:6a:5f:2b:15:24:b5:42:d9:78:ec:d8:20: fd:8e:72:aa:e4:89:fd:e0:41:5a:47:60:21:81:68: 56:a1:f5:b0:98:a5:b1:39:ef:8c:6a:5e:6f:2b:c0: 70:5a:7b:91:60:3d:98:0b:af:25:79:0a:0a:59:42: f9:58:81:f0:6f:d4:f5:ed:8f:1d:5f:bb:44:52:cf: 68:4c:03:d9:5b:d0:ea:f8:75:58:91:91:4b:0c:64: 07:d6:c1:78:8f:f2:69:44:c2:e2:8d:b1:33:b5:95: 2b:44:ca:38:33:d7:fd:46:dc:38:42:de:b6:c6:1f: b6:1f:31:23:71:34:d4:55:6d:b6:9e:06:d6:8b:bc: 2a:97:97:c3:52:7c:35:70:31:53:43:ec:36:7c:df: d9:fa:6b:dd:1d:3c:47:23:6c:7e:84:2e:d2:26:01: 0f:67:f4:37:fc:b4:da:b7:d5:ef:09:95:f3:ab:5d: b2:1a:ae:50:4f:98:13:a7:25:50:f3:8c:c2:0a:3c: c0:ba:04:61:4b:70:4a:5e:a1:68:96:37:35:19:ee: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BA:B0:54:55:A1:CC:12:1A:6A:0B:D9:7E:FD:40:C1:C7:15:F4:16 X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:e9:db:95:af:45:7f:e6:8d:fc:9c:c0:26:b7:53:a6:2d:ce: 02:34:13:bd:de:91:01:c1:5a:47:51:c8:5c:2b:03:60:c5:af: 57:9b:d1:ec:e0:12:25:ca:db:10:4a:ca:2b:84:ac:4a:0b:6f: c4:2f:f8:45:ac:98:ee:21:1c:c3:68:21:1a:f3:b5:22:8e:da: 39:17:85:05:8b:4a:10:0e:d3:63:4e:6c:e1:47:70:20:88:66: 42:a1:5a:fb:83:df:3a:76:54:dd:4c:05:29:17:28:f5:45:dc: 1b:4c:20:ae:c9:c1:e7:7a:47:fc:56:47:dc:80:99:fc:4d:a1: c8:c4:ff:4a:e1:43:6b:d0:11:90:8f:d9:94:d4:4e:d8:aa:39: a5:f7:31:64:ad:c2:3a:0a:3c:73:cc:76:b1:bc:96:07:34:5f: c9:0b:fe:92:08:cd:1c:b2:2e:24:e4:a3:fd:0a:c5:14:3c:d8: ac:54:e4:db:e5:19:c4:4a:76:a1:bb:16:5e:7f:79:82:55:84: 59:fb:7d:d0:0c:0d:16:b0:27:1a:d9:7f:36:6b:2a:3c:16:25: 89:5c:a6:9e:0f:f6:3f:c7:25:13:eb:32:50:3a:cc:7a:ef:9c: 34:7a:9d:14:89:d8:99:8d:43:a1:34:c5:c7:66:62:bb:e0:c9: dc:71:dd:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjUxMjE4MTkwMzIxWhcNMjUxMjI1MTkwMzIxWjAYMRYwFAYD VQQDDA02OTQ0NGZmOS1mNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqTXOb1RMke7R5JXZG4cfgH0yibugnf9tppQXRNVmqVv8DaCRoclm7BJP2+E RstqXysVJLVC2Xjs2CD9jnKq5In94EFaR2AhgWhWofWwmKWxOe+Mal5vK8BwWnuR YD2YC68leQoKWUL5WIHwb9T17Y8dX7tEUs9oTAPZW9Dq+HVYkZFLDGQH1sF4j/Jp RMLijbEztZUrRMo4M9f9Rtw4Qt62xh+2HzEjcTTUVW22ngbWi7wql5fDUnw1cDFT Q+w2fN/Z+mvdHTxHI2x+hC7SJgEPZ/Q3/LTat9XvCZXzq12yGq5QT5gTpyVQ84zC CjzAugRhS3BKXqFoljc1Ge4iFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBK6sFRV ocwSGmoL2X79QMHHFfQWMB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg6duVr0V/5o38nMAmt1OmLc4CNBO93pEBwVpHUchcKwNgxa9Xm9Hs 4BIlytsQSsorhKxKC2/EL/hFrJjuIRzDaCEa87Uijto5F4UFi0oQDtNjTmzhR3Ag iGZCoVr7g986dlTdTAUpFyj1RdwbTCCuycHnekf8VkfcgJn8TaHIxP9K4UNr0BGQ j9mU1E7Yqjml9zFkrcI6CjxzzHaxvJYHNF/JC/6SCM0csi4k5KP9CsUUPNisVOTb 5RnESnahuxZef3mCVYRZ+33QDA0WsCca2X82ayo8FiWJXKaeD/Y/xyUT6zJQOsx6 75w0ep0UidiZjUOhNMXHZmK74Mnccd2c -----END CERTIFICATE-----Generated at Fri Dec 19 19:24:38 2025 by rpki-client