This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft File: ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft (raw, json) Hash identifier: wK0gJ9+/gwKHs8/orHbodLKiYA+GLnzujIm0m7OBYKs= Subject key identifier: 72:AD:4A:4B:F8:72:0C:76:CF:5D:6F:C5:12:2C:BE:C0:62:D4:F8:CF Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE Certificate issuer: /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft Manifest number: 58 Signing time: Tue 23 Dec 2025 06:03:06 +0000 Manifest this update: Tue 23 Dec 2025 06:03:06 +0000 Manifest next update: Tue 30 Dec 2025 06:03:06 +0000 Files and hashes: 1: ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl (hash: 6saA5gQlUP8/GIGdY2ujSj5mbOsYZUXZI2khpIisNtg=) 2: D616F9C45CB011F09DD6183AC4F9AE02.roa (hash: ml1Kug9S1qOScffHzmjdmVF6lgBnT/45matCF9JTOhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE Validity Not Before: Dec 23 06:03:06 2025 GMT Not After : Dec 30 06:03:06 2025 GMT Subject: CN=694a309a-cf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b5:af:70:70:bc:2c:ff:08:64:91:36:30:05: ba:a6:e3:01:b9:58:bc:80:98:29:7c:48:a3:df:f5: e4:be:bf:51:11:6c:ca:b3:2c:91:43:2b:ec:e1:72: 09:4f:54:c2:65:56:6f:8a:3d:8d:12:ab:15:76:f3: 5b:bf:27:a2:8e:a9:34:80:27:b1:ea:5c:7e:11:8d: 6e:35:70:0f:48:b3:97:ff:8c:03:40:8d:33:96:a6: 79:16:45:df:e0:0b:29:92:47:d0:4f:dd:7b:6d:12: 77:dc:69:64:aa:7c:97:00:3d:3e:c9:f5:65:8d:42: b2:6c:a7:2a:09:93:d0:71:f4:01:32:0e:10:9a:5d: 3e:e2:74:de:e3:fc:58:55:d1:a2:2e:ac:73:df:8d: c8:72:c9:5f:74:f8:6d:9f:bf:97:8d:43:bb:98:f7: c6:41:6b:71:8e:a0:a5:5f:3d:29:1b:47:13:c7:46: ec:9d:a7:c2:81:74:90:86:2b:38:c3:3e:51:e7:7a: 33:21:67:46:c1:09:df:90:00:4b:90:37:98:41:3a: 5d:93:2d:1d:37:a4:83:f8:a1:f7:a7:21:bc:a3:29: 14:7c:2a:ec:a7:b5:4c:06:3b:0b:e0:4d:0d:64:d5: 0a:37:a8:a2:33:a1:ce:77:60:82:23:0d:36:f6:45: 5f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AD:4A:4B:F8:72:0C:76:CF:5D:6F:C5:12:2C:BE:C0:62:D4:F8:CF X509v3 Authority Key Identifier: keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:5a:97:a0:38:d7:27:6b:96:2a:b8:a0:25:25:c1:aa:85:d9: 89:28:11:91:a1:43:36:a1:a8:c7:c9:db:b5:3e:12:37:a6:67: e9:7c:53:6a:25:6a:b2:fe:26:9d:cb:38:b9:27:4f:fc:04:65: ac:1b:cc:d7:5c:22:ba:aa:b1:3d:61:69:27:e9:9b:f4:12:cb: 1b:78:a2:fc:84:ad:a6:b6:7b:1f:21:dd:b4:e5:b5:81:af:48: e1:ac:d5:db:a9:f0:b7:f6:5e:35:21:c2:1e:ee:a0:36:92:60: be:88:b2:2b:57:1e:a2:04:e3:96:4c:9e:13:41:0e:db:40:34: 24:3a:b4:a1:3e:3b:c4:b3:a8:b7:b0:75:ec:2e:60:03:6a:77: e4:a5:ca:31:47:41:04:8b:8e:c8:3c:ca:45:ef:39:5c:e5:70: a1:1b:9a:1e:fb:1a:b0:34:4a:5d:29:16:c6:d4:62:a1:ae:d5: 92:af:4b:a3:56:b7:83:2e:04:2c:77:e6:15:a9:28:db:c6:9d: d1:34:08:c4:96:de:99:29:3e:8a:35:f2:6b:d8:01:cd:6a:72: 9c:89:24:05:38:ff:7c:25:1c:46:02:a2:7c:22:10:57:6a:86: 30:15:9b:6c:27:73:4e:ec:44:a3:3b:38:e5:aa:e5:aa:9f:a7: 44:06:68:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkM1QzExMC8GA1UEBRMoNzJEQUI3Q0VCRThBN0YyNzg4REU3ODJFREE3MDFFNDY3 RDhDNzhERTAeFw0yNTEyMjMwNjAzMDZaFw0yNTEyMzAwNjAzMDZaMBgxFjAUBgNV BAMMDTY5NGEzMDlhLWNmODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQta9wcLws/whkkTYwBbqm4wG5WLyAmCl8SKPf9eS+v1ERbMqzLJFDK+zhcglP VMJlVm+KPY0SqxV281u/J6KOqTSAJ7HqXH4RjW41cA9Is5f/jANAjTOWpnkWRd/g CymSR9BP3XttEnfcaWSqfJcAPT7J9WWNQrJspyoJk9Bx9AEyDhCaXT7idN7j/FhV 0aIurHPfjchyyV90+G2fv5eNQ7uY98ZBa3GOoKVfPSkbRxPHRuydp8KBdJCGKzjD PlHnejMhZ0bBCd+QAEuQN5hBOl2TLR03pIP4ofenIbyjKRR8KuyntUwGOwvgTQ1k 1Qo3qKIzoc53YIIjDTb2RV//AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcq1KS/hy DHbPXW/FEiy+wGLU+M8wHwYDVR0jBBgwFoAUctq3zr6KfyeI3ngu2nAeRn2MeN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGQzVDLzM2Mzc4OEVDNUNC MDExRjBCNzQ0MjUzOUM0RjlBRTAyL2N0cTN6cjZLZnllSTNuZ3UybkFlUm4yTWVO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3RxM3pyNktmeWVJM25ndTJuQWVSbjJNZU40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG QzVDLzM2Mzc4OEVDNUNCMDExRjBCNzQ0MjUzOUM0RjlBRTAyL2N0cTN6cjZLZnll STNuZ3UybkFlUm4yTWVONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACdal6A41ydrliq4oCUlwaqF2YkoEZGhQzahqMfJ27U+EjemZ+l8U2ol arL+Jp3LOLknT/wEZawbzNdcIrqqsT1haSfpm/QSyxt4ovyEraa2ex8h3bTltYGv SOGs1dup8Lf2XjUhwh7uoDaSYL6IsitXHqIE45ZMnhNBDttANCQ6tKE+O8SzqLew dewuYANqd+SlyjFHQQSLjsg8ykXvOVzlcKEbmh77GrA0Sl0pFsbUYqGu1ZKvS6NW t4MuBCx35hWpKNvGndE0CMSW3pkpPoo18mvYAc1qcpyJJAU4/3wlHEYConwiEFdq hjAVm2wnc07sRKM7OOWq5aqfp0QGaN4= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:12 2025 by rpki-client