This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json) Hash identifier: karGIQ7lYC1tKE3KaSNS4mV5Kz9M+WARFp80URZNI2s= Subject key identifier: 92:2B:E8:0C:CA:5A:02:B8:CE:E7:71:BB:4F:D0:94:8B:B6:CA:D6:DF Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Certificate serial: 04AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft Manifest number: 04A7 Signing time: Mon 22 Dec 2025 23:03:14 +0000 Manifest this update: Mon 22 Dec 2025 23:03:14 +0000 Manifest next update: Mon 29 Dec 2025 23:03:14 +0000 Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: 7rDtD1yOCwKs2wSg4vLhdiOaAR2vESckhSqSu0AGLJ0=) 2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: 252kB+fX+BBhzn4gsCNSBIXgmIL37+s/mdPS5IK/AQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1198 (0x4ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8C9, serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Validity Not Before: Dec 22 23:03:14 2025 GMT Not After : Dec 29 23:03:14 2025 GMT Subject: CN=6949ce32-e3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8c:4f:39:8c:5e:f5:55:3b:d5:05:96:c6:c3: ef:de:fb:e7:7d:80:84:30:da:5b:a5:26:24:e3:59: 24:ab:41:74:50:3f:86:a7:86:cf:de:63:1d:4b:7c: de:8c:3e:d9:c1:fe:c8:2a:27:f0:85:2a:c4:d4:d0: fc:74:98:5f:47:aa:db:04:9f:46:ea:96:c9:e6:5f: f6:a0:98:d6:0f:ea:fd:9a:f2:ae:28:40:95:5a:b7: 83:79:42:9f:b7:5c:01:df:39:0c:82:2a:9b:f1:71: 79:08:6c:ce:29:53:02:15:38:b4:c8:31:f1:0b:d3: ca:f5:8f:ff:40:4d:a0:21:9c:ec:89:a3:dd:3f:7b: d6:2c:a9:b9:45:b1:52:6d:72:5b:ad:f6:9d:71:47: 54:65:16:6b:a8:a0:97:e0:b4:53:49:71:1c:8c:5a: f2:87:4d:cd:c8:f1:03:ab:b7:bd:31:ab:c9:ce:88: c9:55:ab:08:11:99:20:d6:72:9c:d8:a2:ad:74:12: 5f:46:cc:e9:8a:f5:60:99:fe:2e:36:7f:50:54:23: e2:a9:e0:e6:52:36:2a:8b:72:35:18:c4:83:86:d7: e5:ad:7d:80:24:e5:6d:92:e3:c1:a1:ab:14:6a:32: 3a:13:e4:3e:b4:ab:24:d0:39:67:77:0d:fa:ff:2a: a1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2B:E8:0C:CA:5A:02:B8:CE:E7:71:BB:4F:D0:94:8B:B6:CA:D6:DF X509v3 Authority Key Identifier: keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:66:c8:6b:60:86:f6:15:77:af:94:94:34:c8:bf:78:ac:72: df:de:34:5f:82:49:0e:35:31:80:73:97:89:3b:01:81:f6:52: 7d:c3:4d:33:8f:c6:6e:4c:c6:87:9e:ef:ef:e3:75:f4:ba:bc: 00:d4:5a:5c:96:84:19:d8:d8:f4:4b:63:a6:fd:2b:4a:44:9a: f5:ad:53:9d:99:f0:5d:cd:e1:12:0b:15:89:20:b3:5c:3b:8d: d1:1e:83:be:b8:a0:0a:de:68:8b:a5:df:28:89:ba:d3:05:53: 6d:fe:71:6e:97:15:bf:61:57:5b:cf:4f:a6:8b:00:3a:1a:bd: f0:92:c2:34:e8:bb:b4:d1:b3:8e:5f:56:e0:eb:be:ff:89:3c: fa:a1:7e:74:f3:99:b4:65:e8:6a:d1:fd:04:4b:e1:bd:ba:da: 8b:67:43:8f:27:18:f5:d3:03:4d:0f:e2:ac:19:df:63:67:59: 33:6c:19:5c:92:20:67:57:ab:53:90:31:6e:a8:5a:6d:fd:83: d3:26:ea:4f:9d:07:44:98:5a:e1:94:80:8a:08:d9:33:7e:f1: 04:73:30:f1:7a:75:5c:6b:13:46:91:81:6c:3a:bb:01:cd:d5: 7e:6c:be:7c:be:22:08:dc:37:ea:49:03:60:c5:f3:de:ef:01: cc:ca:8a:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QzkxMTAvBgNVBAUTKDY4MjBFNTM2OTQyNjEyRjM0QjAzNzNERDFGNzdFRDIz NEZGREYzNUMwHhcNMjUxMjIyMjMwMzE0WhcNMjUxMjI5MjMwMzE0WjAYMRYwFAYD VQQDDA02OTQ5Y2UzMi1lM2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IxPOYxe9VU71QWWxsPv3vvnfYCEMNpbpSYk41kkq0F0UD+Gp4bP3mMdS3ze jD7Zwf7IKifwhSrE1ND8dJhfR6rbBJ9G6pbJ5l/2oJjWD+r9mvKuKECVWreDeUKf t1wB3zkMgiqb8XF5CGzOKVMCFTi0yDHxC9PK9Y//QE2gIZzsiaPdP3vWLKm5RbFS bXJbrfadcUdUZRZrqKCX4LRTSXEcjFryh03NyPEDq7e9MavJzojJVasIEZkg1nKc 2KKtdBJfRszpivVgmf4uNn9QVCPiqeDmUjYqi3I1GMSDhtflrX2AJOVtkuPBoasU ajI6E+Q+tKsk0Dlndw36/yqhyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIr6AzK WgK4zudxu0/QlIu2ytbfMB8GA1UdIwQYMBaAFGgg5TaUJhLzSwNz3R937SNP/fNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhDOS80QjRENzEyQTVD REIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2TkxBM1BkSDNmdEkwXzk4 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FDRGxOcFFtRXZOTEEzUGRIM2Z0STBfOTgxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhDOS80QjRENzEyQTVDREIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2 TkxBM1BkSDNmdEkwXzk4MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjZshrYIb2FXevlJQ0yL94rHLf3jRfgkkONTGAc5eJOwGB9lJ9w00z j8ZuTMaHnu/v43X0urwA1FpcloQZ2Nj0S2Om/StKRJr1rVOdmfBdzeESCxWJILNc O43RHoO+uKAK3miLpd8oibrTBVNt/nFulxW/YVdbz0+miwA6Gr3wksI06Lu00bOO X1bg677/iTz6oX5085m0Zehq0f0ES+G9utqLZ0OPJxj10wNND+KsGd9jZ1kzbBlc kiBnV6tTkDFuqFpt/YPTJupPnQdEmFrhlICKCNkzfvEEczDxenVcaxNGkYFsOrsB zdV+bL58viII3DfqSQNgxfPe7wHMyooq -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:37 2025 by rpki-client