This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft File: AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json) Hash identifier: b0Y62Ev5Vjdh4QGeo5dzvXqwoyT49cu51FdiD1Ud0T4= Subject key identifier: 1B:15:37:74:EE:F2:2A:78:5D:37:A8:F0:0E:40:E6:61:BB:8D:42:0C Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 Certificate issuer: /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Certificate serial: 0FB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft Manifest number: 0FAD Signing time: Mon 22 Dec 2025 17:11:32 +0000 Manifest this update: Mon 22 Dec 2025 17:11:31 +0000 Manifest next update: Mon 29 Dec 2025 17:11:31 +0000 Files and hashes: 1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: mVjOrzvSCSZsdcp0H7GCjXtsWuGnsKhPCc4R9eCT7MA=) 2: 85B9F090F35011EFAE695322C4F9AE02.roa (hash: pq5+H8QeR9KAWVSI+cw+pkg68tHfepgn1G46rJN6KyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4023 (0xfb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECDA, serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Validity Not Before: Dec 22 17:11:31 2025 GMT Not After : Dec 29 17:11:31 2025 GMT Subject: CN=69497bc3-e567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:21:80:3b:fa:4f:d7:d5:d2:15:16:50:02: 76:6c:3c:03:11:c7:5f:c8:ee:c7:e8:64:12:8d:a7: f6:6f:f9:37:9e:f6:de:7c:a7:03:2e:32:0f:9d:ec: 1e:f9:36:22:b6:9f:bd:56:21:78:2b:54:53:0c:06: 8c:9f:2f:c5:77:a0:a4:a5:32:0f:fd:c6:15:dc:71: 2c:15:f9:d0:a5:73:35:02:73:78:8a:a4:36:03:20: 9d:1c:b9:ff:2d:e4:3e:93:41:77:72:a6:58:53:b1: ae:f3:27:a6:a5:09:c9:1e:2d:d0:9a:d7:03:80:09: 44:64:13:9c:3a:53:36:49:42:30:b8:71:52:30:55: c3:59:47:31:2b:33:11:d0:19:b6:2d:97:df:de:dc: 59:1a:92:2e:31:30:5c:2a:09:46:11:49:1c:a1:14: 75:09:ca:a6:82:0e:dd:37:f7:05:32:cf:16:5d:4d: c8:dd:92:64:51:c5:9a:db:c2:cf:cd:3e:15:fb:d7: 20:02:fc:64:a5:3a:70:29:b1:3c:6e:95:e4:dc:71: ff:0a:2d:e8:90:11:6f:d4:4a:d4:a4:3d:20:43:1d: e8:07:a5:2f:f9:e4:92:05:87:70:20:5b:c0:0b:1d: 5a:c0:9a:f6:a7:91:c3:dc:da:b1:87:0d:f4:7e:21: 6f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:15:37:74:EE:F2:2A:78:5D:37:A8:F0:0E:40:E6:61:BB:8D:42:0C X509v3 Authority Key Identifier: keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:16:75:30:db:72:d2:45:55:b7:cd:73:01:c8:de:ff:11:0c: df:86:fb:ca:24:51:e1:6c:88:5c:d0:b3:5d:b2:79:fd:ce:05: d8:63:70:f1:d3:39:9d:32:d4:f5:8e:8c:98:95:e5:50:44:b0: 60:4d:8f:71:b1:fd:e4:43:f8:e5:37:84:d3:ac:39:f8:d6:68: de:4e:31:56:85:1b:ef:3a:d6:a4:a0:42:3c:2a:aa:82:ae:63: b4:71:e9:42:29:77:cf:f2:ef:08:4f:19:61:42:dc:22:d8:42: e9:fe:03:2c:bc:a4:36:bc:c0:c4:bf:62:0c:47:57:e3:fe:e4: 00:f4:b1:c5:58:7d:0f:85:75:c2:08:de:9a:b7:ef:75:72:7a: 92:38:a7:b4:7b:7f:dc:11:32:9a:1e:71:00:7e:69:82:05:04: 98:2d:18:c7:88:68:a5:5c:8a:3f:05:44:1f:30:0a:3f:33:3b: fa:e4:2c:e1:11:66:55:0b:24:43:ee:48:54:8a:f4:c4:b2:42: 32:c1:75:db:01:ff:e7:49:21:c8:a7:02:cf:fb:87:67:71:3c: 8c:8c:84:16:b0:6a:df:58:95:01:df:37:bc:50:b8:f6:26:56: 61:a9:1b:83:35:23:33:66:23:a9:d3:b1:2a:9b:73:d6:c3:16: a3:08:b4:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDREExMTAvBgNVBAUTKDAxREI4MUVGNkQ2Mzk0RTY2RDNCMzIzMTVCNDc5RUJF RDc5OUM5MzcwHhcNMjUxMjIyMTcxMTMxWhcNMjUxMjI5MTcxMTMxWjAYMRYwFAYD VQQDDA02OTQ5N2JjMy1lNTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrIhgDv6T9fV0hUWUAJ2bDwDEcdfyO7H6GQSjaf2b/k3nvbefKcDLjIPnewe +TYitp+9ViF4K1RTDAaMny/Fd6CkpTIP/cYV3HEsFfnQpXM1AnN4iqQ2AyCdHLn/ LeQ+k0F3cqZYU7Gu8yempQnJHi3QmtcDgAlEZBOcOlM2SUIwuHFSMFXDWUcxKzMR 0Bm2LZff3txZGpIuMTBcKglGEUkcoRR1Ccqmgg7dN/cFMs8WXU3I3ZJkUcWa28LP zT4V+9cgAvxkpTpwKbE8bpXk3HH/Ci3okBFv1ErUpD0gQx3oB6Uv+eSSBYdwIFvA Cx1awJr2p5HD3Nqxhw30fiFvGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsVN3Tu 8ip4XTeo8A5A5mG7jUIMMB8GA1UdIwQYMBaAFAHbge9tY5TmbTsyMVtHnr7Xmck3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS84QTg4RjEwNDZG OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxPWnRPekl4VzBlZXZ0ZVp5 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FkdUI3MjFqbE9adE96SXhXMGVldnRlWnlUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNEQS84QTg4RjEwNDZGOUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxP WnRPekl4VzBlZXZ0ZVp5VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnFnUw23LSRVW3zXMByN7/EQzfhvvKJFHhbIhc0LNdsnn9zgXYY3Dx 0zmdMtT1joyYleVQRLBgTY9xsf3kQ/jlN4TTrDn41mjeTjFWhRvvOtakoEI8KqqC rmO0celCKXfP8u8ITxlhQtwi2ELp/gMsvKQ2vMDEv2IMR1fj/uQA9LHFWH0PhXXC CN6at+91cnqSOKe0e3/cETKaHnEAfmmCBQSYLRjHiGilXIo/BUQfMAo/Mzv65Czh EWZVCyRD7khUivTEskIywXXbAf/nSSHIpwLP+4dncTyMjIQWsGrfWJUB3ze8ULj2 JlZhqRuDNSMzZiOp07Eqm3PWwxajCLQR -----END CERTIFICATE-----Generated at Wed Dec 24 08:47:18 2025 by rpki-client