This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json) Hash identifier: W7+PYEieqfjjr6JTcbJ8P4ybQQ26iNQZPkzriamNo4c= Subject key identifier: FD:B7:F8:04:DE:CF:6E:0B:21:B0:08:CE:98:3A:CD:78:31:57:87:99 Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Certificate serial: 0C28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft Manifest number: 0C18 Signing time: Mon 22 Dec 2025 18:20:37 +0000 Manifest this update: Mon 22 Dec 2025 18:20:37 +0000 Manifest next update: Mon 29 Dec 2025 18:20:37 +0000 Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: 1gPh+ll6zSKPvFd1KC7GI5tSF2NbKPhcxe4AOYAlQKc=) 2: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: MyUFtJY4lLof0Zwtdhx7AIg2aYopA1OEBl/K6VizYaU=) 3: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: Myi9k4IrBdVLRWD9OtQqLIwtmIphhX+YDXYJBcNy/bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3112 (0xc28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Validity Not Before: Dec 22 18:20:37 2025 GMT Not After : Dec 29 18:20:37 2025 GMT Subject: CN=69498bf5-fe00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7f:03:88:3b:b5:2c:3a:45:8b:f8:ee:9a:2f: 9a:6c:a3:9e:3e:a5:31:45:3f:32:a0:69:61:a2:57: 63:27:fd:84:57:ef:0d:63:24:e7:7b:57:06:c2:dc: 0c:cb:ac:97:6c:49:95:b9:f1:59:48:6b:b1:a8:f2: c4:7a:22:b0:d7:bb:b1:74:8b:d8:c3:84:6a:df:90: e8:67:d7:76:0c:f4:7b:1f:2d:3c:43:4a:90:95:72: 6b:ed:d1:d1:b0:76:f9:53:bc:c0:8e:a5:03:bc:5b: ec:14:af:2f:00:3c:d3:26:6c:3a:f9:87:20:d9:3a: f5:7c:2d:4c:93:99:df:ee:eb:40:3a:51:03:c8:53: b9:2d:db:49:f8:24:f8:9f:51:0a:86:d7:f7:36:61: 30:7d:9a:21:c7:08:f3:66:cd:c6:b9:32:e6:db:76: ab:24:3c:19:8f:5f:e4:52:ee:0d:5c:e3:f7:f9:cc: 9d:0f:ad:de:d1:28:51:f5:45:10:33:f4:aa:63:8b: f1:d7:c5:14:af:9b:3d:1b:44:ee:52:bd:e2:ee:82: 47:1d:df:43:d8:8e:3b:5b:c8:4b:a0:08:af:b0:9d: be:cf:63:17:09:a1:83:d3:6b:ed:bb:22:ab:b9:6e: 8c:af:10:d1:23:eb:fd:9b:07:77:9e:f7:ac:4d:dd: f8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B7:F8:04:DE:CF:6E:0B:21:B0:08:CE:98:3A:CD:78:31:57:87:99 X509v3 Authority Key Identifier: keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:3b:0c:6f:8f:c7:08:29:39:ba:b3:15:3f:a7:62:e9:76:4f: ca:d2:cc:83:41:bb:75:8a:5b:57:95:95:b2:58:01:a6:ab:9a: bc:c2:87:04:e7:f5:80:94:ee:3c:75:36:04:90:cd:fa:e1:8e: ea:ae:b1:43:8c:62:0d:dc:67:8e:47:99:82:18:4b:32:a5:ef: 82:61:52:c3:7f:cd:59:b3:53:0b:81:97:be:1e:cf:b4:c2:27: fb:1c:85:c1:7c:6e:cf:ba:a2:60:ce:26:eb:8e:c2:8b:b0:97: 8f:37:5c:d8:d1:19:5e:65:f1:b0:13:f2:f0:33:ba:92:9b:1b: 98:6c:f2:67:11:e2:5f:7d:31:8e:b0:6f:93:8e:b8:1f:c9:69: 17:87:c2:aa:b0:8e:ed:6c:7d:c8:30:18:8a:57:7e:8d:dd:8b: 26:4c:59:2f:81:b8:be:2a:d2:40:f0:15:1e:d3:da:ff:5a:c1: f9:7c:4b:41:aa:29:b0:6b:45:58:ff:3d:43:51:b6:70:27:0e: 0c:de:60:a2:ef:2b:c4:1d:e8:69:c0:22:8d:4c:d3:59:aa:91: 84:7b:81:20:b0:8f:f3:91:6b:87:e7:88:dc:93:79:82:83:b5: 23:6a:24:33:b2:b5:e6:17:17:b5:2d:0f:d8:b5:5b:7b:f1:44: a0:81:fb:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM0QzkxMTAvBgNVBAUTKEUzNDgwOUJDNUI0NTRGQzc5OTQ4N0ZFRURBRDcwMjEy NDAyNDYyM0EwHhcNMjUxMjIyMTgyMDM3WhcNMjUxMjI5MTgyMDM3WjAYMRYwFAYD VQQDDA02OTQ5OGJmNS1mZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6X8DiDu1LDpFi/jumi+abKOePqUxRT8yoGlholdjJ/2EV+8NYyTne1cGwtwM y6yXbEmVufFZSGuxqPLEeiKw17uxdIvYw4Rq35DoZ9d2DPR7Hy08Q0qQlXJr7dHR sHb5U7zAjqUDvFvsFK8vADzTJmw6+Ycg2Tr1fC1Mk5nf7utAOlEDyFO5LdtJ+CT4 n1EKhtf3NmEwfZohxwjzZs3GuTLm23arJDwZj1/kUu4NXOP3+cydD63e0ShR9UUQ M/SqY4vx18UUr5s9G0TuUr3i7oJHHd9D2I47W8hLoAivsJ2+z2MXCaGD02vtuyKr uW6MrxDRI+v9mwd3nvesTd34QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP23+ATe z24LIbAIzpg6zXgxV4eZMB8GA1UdIwQYMBaAFONICbxbRU/HmUh/7trXAhJAJGI6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzRDOS82NzM2MDI0QTIy NUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4ZVpTSF91MnRjQ0VrQWtZ am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwZ0p2RnRGVDhlWlNIX3UydGNDRWtBa1lqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzRDOS82NzM2MDI0QTIyNUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4 ZVpTSF91MnRjQ0VrQWtZam8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzOwxvj8cIKTm6sxU/p2Lpdk/K0syDQbt1iltXlZWyWAGmq5q8wocE 5/WAlO48dTYEkM364Y7qrrFDjGIN3GeOR5mCGEsype+CYVLDf81Zs1MLgZe+Hs+0 wif7HIXBfG7PuqJgzibrjsKLsJePN1zY0RleZfGwE/LwM7qSmxuYbPJnEeJffTGO sG+TjrgfyWkXh8KqsI7tbH3IMBiKV36N3YsmTFkvgbi+KtJA8BUe09r/WsH5fEtB qimwa0VY/z1DUbZwJw4M3mCi7yvEHehpwCKNTNNZqpGEe4EgsI/zkWuH54jck3mC g7UjaiQzsrXmFxe1LQ/YtVt78USggfud -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:01 2025 by rpki-client