This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft File: mFDq_-09ooRdUfCVrBEkUIjVYj8.mft (raw, json) Hash identifier: CDOdSBJBrvn0ZYEbbSB3qICRSl4EeYcLAQhpDJSD0SY= Subject key identifier: D8:B2:DC:69:FF:FB:22:B8:AB:63:7C:E3:8D:B0:63:7E:D8:80:45:A2 Authority key identifier: 98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F Certificate issuer: /CN=A91678AA/serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft Manifest number: 32 Signing time: Tue 23 Dec 2025 06:25:33 +0000 Manifest this update: Tue 23 Dec 2025 06:25:32 +0000 Manifest next update: Tue 30 Dec 2025 06:25:32 +0000 Files and hashes: 1: mFDq_-09ooRdUfCVrBEkUIjVYj8.crl (hash: BebLWhGI3jTIhdHBAOW8utOvsoFyxiS4dnozMATYX4U=) 2: ACA405589E7011F083978F1AC4F9AE02.roa (hash: YmblmfroJEPUhmWz7o6a8qxz0P00eBgbcYH8HDNSw40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91678AA, serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F Validity Not Before: Dec 23 06:25:32 2025 GMT Not After : Dec 30 06:25:32 2025 GMT Subject: CN=694a35dc-bf0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:e3:8b:fa:95:44:a4:84:0d:f5:69:4e:63: b1:e0:72:44:99:0f:d8:f8:0e:03:ec:4b:fe:7b:a1: bf:1c:0f:f7:c1:9c:51:8a:18:1d:c7:ff:c3:a7:fe: 91:40:c7:37:0d:85:0c:a1:a9:02:00:d5:e2:2e:e9: 3a:34:52:23:fb:60:47:be:44:df:51:42:12:5f:4e: e4:f9:26:6c:59:7f:85:be:bd:51:73:5b:ff:29:49: 63:20:c0:0f:b7:3d:df:ca:b2:c8:be:05:80:e5:3a: ea:9a:a0:04:c5:86:02:c9:59:89:8e:a1:67:b3:6e: 9a:ed:3f:82:cf:fb:9e:a5:26:e1:c3:06:45:99:6d: 58:0c:2f:92:4a:cf:6f:c2:bc:34:b4:43:f3:68:a5: 47:a3:81:c3:06:78:09:66:36:37:a1:d1:a6:77:a0: e4:c7:5e:a3:c9:93:58:96:65:3e:2f:43:d9:ce:90: 39:3a:83:ad:9b:19:fb:0d:ff:96:e7:0f:75:8d:b9: 4e:d3:ca:ce:b6:2a:bd:f3:46:89:7c:27:5f:5b:b7: 42:93:0e:39:54:56:3f:eb:d9:63:6c:ff:34:56:bc: 6a:de:54:62:2d:b6:51:83:6e:04:0a:13:33:83:db: 5d:87:a7:73:26:e7:29:2e:21:f6:d2:41:0c:99:e5: af:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B2:DC:69:FF:FB:22:B8:AB:63:7C:E3:8D:B0:63:7E:D8:80:45:A2 X509v3 Authority Key Identifier: keyid:98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:8d:45:98:61:b5:aa:ba:f0:c3:e3:01:22:db:cd:38:cc:25: 0f:77:06:ee:fb:25:09:eb:e5:51:f7:97:ad:56:45:fb:e8:2b: 33:ac:f0:a3:e2:93:0c:ef:0a:19:a9:f4:bc:8e:40:81:6b:32: 71:c8:48:94:8f:ee:0a:e4:d7:02:2e:f8:2e:9f:cb:e2:fd:c7: ee:b3:bb:da:d9:60:aa:ba:d3:ac:b9:fd:d7:dc:63:97:d9:8a: 94:ea:f1:84:e8:f4:ff:0d:ff:b9:8a:d6:5d:74:6a:f2:30:07: 2b:14:e1:19:a2:88:75:cc:50:b2:07:db:b9:1e:c9:81:68:ae: 04:b5:dd:4f:7d:3c:3d:f8:99:5d:89:c7:cf:df:16:15:63:4e: 6f:a1:a0:b6:13:d4:b8:e7:d7:46:a7:ca:cf:d2:6d:15:69:bf: cf:14:be:08:d6:68:97:af:bc:95:37:b2:cb:b5:d3:10:d9:0c: c5:d7:07:0e:90:51:e3:9a:60:20:5b:4e:14:3b:41:ce:07:d2: 6c:7d:6a:17:43:5f:ae:1c:6f:1f:30:a7:9b:f1:13:a6:7d:66: f9:60:fa:a8:56:c0:5b:20:b7:7b:8e:3f:77:ab:64:63:40:cf: a2:f1:59:e9:3d:ae:bd:28:03:69:53:b9:25:a1:72:f7:38:ef: e4:d0:ed:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzhBQTExMC8GA1UEBRMoOTg1MEVBRkZFRDNEQTI4NDVENTFGMDk1QUMxMTI0NTA4 OEQ1NjIzRjAeFw0yNTEyMjMwNjI1MzJaFw0yNTEyMzAwNjI1MzJaMBgxFjAUBgNV BAMMDTY5NGEzNWRjLWJmMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5AuOL+pVEpIQN9WlOY7HgckSZD9j4DgPsS/57ob8cD/fBnFGKGB3H/8On/pFA xzcNhQyhqQIA1eIu6To0UiP7YEe+RN9RQhJfTuT5JmxZf4W+vVFzW/8pSWMgwA+3 Pd/Kssi+BYDlOuqaoATFhgLJWYmOoWezbprtP4LP+56lJuHDBkWZbVgML5JKz2/C vDS0Q/NopUejgcMGeAlmNjeh0aZ3oOTHXqPJk1iWZT4vQ9nOkDk6g62bGfsN/5bn D3WNuU7Tys62Kr3zRol8J19bt0KTDjlUVj/r2WNs/zRWvGreVGIttlGDbgQKEzOD 212Hp3Mm5ykuIfbSQQyZ5a+VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2LLcaf/7 IrirY3zjjbBjftiARaIwHwYDVR0jBBgwFoAUmFDq/+09ooRdUfCVrBEkUIjVYj8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3OEFBLzM3QzgxN0ZDOTc0 NDExRjA4MDRBNTkxOEM0RjlBRTAyL21GRHFfLTA5b29SZFVmQ1ZyQkVrVUlqVllq OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUZEcV8tMDlvb1JkVWZDVnJCRWtVSWpWWWo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 OEFBLzM3QzgxN0ZDOTc0NDExRjA4MDRBNTkxOEM0RjlBRTAyL21GRHFfLTA5b29S ZFVmQ1ZyQkVrVUlqVllqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJKNRZhhtaq68MPjASLbzTjMJQ93Bu77JQnr5VH3l61WRfvoKzOs8KPi kwzvChmp9LyOQIFrMnHISJSP7grk1wIu+C6fy+L9x+6zu9rZYKq606y5/dfcY5fZ ipTq8YTo9P8N/7mK1l10avIwBysU4RmiiHXMULIH27keyYForgS13U99PD34mV2J x8/fFhVjTm+hoLYT1Ljn10anys/SbRVpv88UvgjWaJevvJU3ssu10xDZDMXXBw6Q UeOaYCBbThQ7Qc4H0mx9ahdDX64cbx8wp5vxE6Z9Zvlg+qhWwFsgt3uOP3erZGNA z6LxWek9rr0oA2lTuSWhcvc47+TQ7XY= -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:03 2025 by rpki-client