This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json) Hash identifier: Q4F3648uPTP+na6Yb+F0rO30/By8ETf5DLotYJmpYVg= Subject key identifier: E1:E4:28:1F:B3:B9:12:25:C9:13:FF:3C:62:D4:8F:85:80:FC:8B:21 Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft Manifest number: 01E6 Signing time: Tue 23 Dec 2025 01:43:29 +0000 Manifest this update: Tue 23 Dec 2025 01:43:29 +0000 Manifest next update: Tue 30 Dec 2025 01:43:29 +0000 Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: TqOJWqMrnmhEMbyiLlHOvJ6gXAVt70ALyF/lWILOxRM=) 2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: VF+Qy3jNNDjRyR500naqK22zDcvwaaWbguSS+FWiTSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Validity Not Before: Dec 23 01:43:29 2025 GMT Not After : Dec 30 01:43:29 2025 GMT Subject: CN=6949f3c1-7398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:48:25:28:4b:07:8c:62:e1:d6:51:15:90: 23:e9:bf:c8:f1:ab:da:7a:6e:a3:bf:25:10:09:c7: a9:38:aa:c7:33:a7:d6:6d:07:a5:b3:3b:47:37:42: b6:4c:4b:b3:e8:af:0a:18:d9:de:cb:0f:03:0a:e7: a0:ab:b4:6f:34:ee:87:63:9a:aa:8f:5f:03:f0:eb: 96:59:ce:ef:d3:ce:b5:e6:ff:70:31:76:6e:a1:1d: e2:e1:87:6c:82:9c:ff:e0:96:36:61:ac:73:7a:f2: c7:46:88:0c:92:dd:73:b7:b7:e5:6b:03:bc:92:15: fb:d3:f1:a5:c4:cf:be:ec:81:90:9d:4c:a2:77:f6: fe:79:f1:0a:65:dd:81:6a:d2:2d:e7:0b:3d:3b:e7: 40:0e:96:c4:11:1e:b0:1a:bb:16:fe:a0:8e:19:40: 8d:1a:dd:a4:f3:3d:fb:ec:55:88:b0:ca:c9:c6:f4: 51:40:b3:4c:17:c3:35:3b:66:77:f0:d4:35:36:04: 97:9a:a9:11:24:77:c2:21:5e:f1:c9:04:96:0d:d1: 3d:6c:ba:a5:a9:4d:fc:b6:47:e8:bd:24:51:a7:f7: ef:ba:22:88:94:5b:86:6b:ac:b9:74:d7:6e:37:62: b9:5c:d4:f4:41:87:20:2f:b2:c7:7f:7e:e7:8c:7e: c2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E4:28:1F:B3:B9:12:25:C9:13:FF:3C:62:D4:8F:85:80:FC:8B:21 X509v3 Authority Key Identifier: keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e8:77:67:f3:61:4d:9b:af:db:a4:66:e1:c0:74:3e:a0:33: d5:89:75:ba:b6:c9:d7:11:b9:4a:ed:ce:42:20:76:05:0c:40: 55:58:a5:3b:3c:84:19:a6:39:fc:17:36:e3:99:fa:5f:3e:5f: e0:0a:52:0e:99:dc:9c:bc:66:e4:9d:2b:0e:30:c6:ce:ff:d3: 84:ff:ed:00:8b:d9:7c:eb:2e:55:53:e3:64:2a:99:2d:12:79: f9:90:d8:9e:46:b7:a0:45:40:a7:83:c3:1c:79:82:8e:c5:53: 8a:60:d3:78:f0:81:c1:98:86:fd:55:88:a9:3f:1a:59:a5:fb: 33:9f:95:41:c4:b8:c8:a9:86:55:3b:3d:a4:1e:9d:d2:8c:9d: a4:30:1d:e3:d9:4a:fa:df:85:8c:6a:91:92:a4:d3:83:d9:51: aa:a3:c7:0f:19:3f:f0:58:9b:62:99:bd:5c:a3:f5:01:01:3f: 64:e7:1c:cb:b7:07:58:59:57:6d:95:b2:af:33:05:7b:1b:1d: 76:82:f3:18:bf:6c:37:95:9e:bd:c5:bc:94:2d:77:7c:81:c1: a9:ac:c7:1e:79:3d:df:24:26:b0:fb:fd:0e:ff:3f:79:42:ec: 97:68:3d:57:7d:dc:dd:72:a5:93:02:0d:72:1c:23:b5:8f:d1: 5d:46:d0:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMyRjIxMTAvBgNVBAUTKDBCNjFBMDc0Rjg0MkE0NzE4QkFCMUQ4NDUyQTZDQjY4 MkU2RkVEREYwHhcNMjUxMjIzMDE0MzI5WhcNMjUxMjMwMDE0MzI5WjAYMRYwFAYD VQQDDA02OTQ5ZjNjMS03Mzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyFIJShLB4xi4dZRFZAj6b/I8avaem6jvyUQCcepOKrHM6fWbQelsztHN0K2 TEuz6K8KGNneyw8DCuegq7RvNO6HY5qqj18D8OuWWc7v08615v9wMXZuoR3i4Yds gpz/4JY2YaxzevLHRogMkt1zt7flawO8khX70/GlxM++7IGQnUyid/b+efEKZd2B atIt5ws9O+dADpbEER6wGrsW/qCOGUCNGt2k8z377FWIsMrJxvRRQLNMF8M1O2Z3 8NQ1NgSXmqkRJHfCIV7xyQSWDdE9bLqlqU38tkfovSRRp/fvuiKIlFuGa6y5dNdu N2K5XNT0QYcgL7LHf37njH7CywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHkKB+z uRIlyRP/PGLUj4WA/IshMB8GA1UdIwQYMBaAFAthoHT4QqRxi6sdhFKmy2gub+3f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzJGMi80MjFFMDVGMkZF Q0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BIR0xxeDJFVXFiTGFDNXY3 ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyR2dkUGhDcEhHTHF4MkVVcWJMYUM1djdkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzJGMi80MjFFMDVGMkZFQ0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BI R0xxeDJFVXFiTGFDNXY3ZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt6Hdn82FNm6/bpGbhwHQ+oDPViXW6tsnXEblK7c5CIHYFDEBVWKU7 PIQZpjn8FzbjmfpfPl/gClIOmdycvGbknSsOMMbO/9OE/+0Ai9l86y5VU+NkKpkt Enn5kNieRregRUCng8MceYKOxVOKYNN48IHBmIb9VYipPxpZpfszn5VBxLjIqYZV Oz2kHp3SjJ2kMB3j2Ur634WMapGSpNOD2VGqo8cPGT/wWJtimb1co/UBAT9k5xzL twdYWVdtlbKvMwV7Gx12gvMYv2w3lZ69xbyULXd8gcGprMceeT3fJCaw+/0O/z95 QuyXaD1XfdzdcqWTAg1yHCO1j9FdRtBw -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:09 2025 by rpki-client