This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json) Hash identifier: SBsJTFYrkMuiiDRgUQjG3poLJu/AE43PRPJviUfvqO0= Subject key identifier: 12:EF:B8:1B:87:AD:4E:B2:56:D2:97:9F:29:CE:00:B7:62:A2:54:FF Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Certificate serial: 08DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft Manifest number: 08D8 Signing time: Mon 22 Dec 2025 19:47:00 +0000 Manifest this update: Mon 22 Dec 2025 19:47:00 +0000 Manifest next update: Mon 29 Dec 2025 19:47:00 +0000 Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: hTgXpWxEeVW910KuSJVEU5nVLoHnT0iOn6eZFs4d8w8=) 2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: MIyBunftYkQco/m/ADmv4S1fyRxTgeEhYhl9wBxnLIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2271 (0x8df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Validity Not Before: Dec 22 19:47:00 2025 GMT Not After : Dec 29 19:47:00 2025 GMT Subject: CN=6949a034-7e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d3:40:e0:ad:74:80:b9:76:ad:0e:b3:e1:42: 9b:7c:3b:1e:a9:05:30:e1:7b:84:8c:e9:80:18:32: 8b:b6:90:06:97:81:b9:a5:e0:66:55:73:0b:98:74: 5f:25:7d:77:c5:02:bc:8c:ff:70:6a:ea:8a:85:ba: 6b:53:c6:ea:7e:9c:47:5a:0b:c4:59:20:17:f4:c3: 35:05:61:8f:df:6b:b2:16:b1:46:31:5f:d7:b6:a4: d9:3e:76:8c:51:56:69:96:0e:ae:64:02:16:23:06: 4d:04:52:5a:79:08:9d:ba:98:51:4c:b8:c4:d6:df: 26:1b:e5:a4:ec:70:7f:9c:e0:ba:7b:63:5c:43:2c: a3:c8:43:d9:cb:9c:ca:3b:9e:71:37:d4:10:d6:9f: a6:01:5c:bd:f9:14:82:69:55:4d:97:c1:93:9d:ab: 50:82:ff:15:03:e9:32:8d:2b:d5:e6:27:ea:7e:40: 0d:51:6d:28:2c:35:69:f9:f8:ee:99:4f:5a:48:25: 2a:40:87:f2:65:6c:2d:e6:b0:af:84:7a:47:ec:3e: a5:86:23:b1:58:24:a6:6c:75:c2:93:2e:1a:df:f0: 38:45:15:15:68:30:15:26:b9:bb:9a:00:ca:c5:10: 6c:f6:56:3b:36:99:5f:f3:6b:d0:a4:7f:bd:b1:d2: f3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EF:B8:1B:87:AD:4E:B2:56:D2:97:9F:29:CE:00:B7:62:A2:54:FF X509v3 Authority Key Identifier: keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:59:8b:76:b0:69:ff:66:e1:1e:cc:2e:34:82:3e:21:a8:15: 7b:a6:3e:3a:c5:d1:a2:19:5e:ad:26:80:d3:7c:bd:6f:7a:f5: 16:e3:89:59:c1:85:86:b1:97:77:3f:2d:40:82:a4:fc:29:e2: fa:f7:3a:81:12:db:7e:04:dd:38:da:6f:bf:c7:7f:b7:fc:64: 07:b0:6d:e2:6f:c1:63:fc:46:3a:37:a7:b2:08:6d:a9:e0:c4: eb:2a:f4:23:71:18:29:d3:e0:38:0d:b5:38:88:a5:88:1a:a1: 49:a8:cf:a6:65:91:06:9b:2b:4c:5d:94:d8:a7:86:97:09:9f: 21:44:b2:6a:29:19:4f:56:fb:fa:d7:00:b0:9d:bb:80:9c:dd: 0c:b6:6c:56:2f:86:c0:43:c5:9d:0f:9c:14:75:40:1c:d3:36: 70:83:4b:0e:dc:60:aa:2c:77:76:99:b0:89:b7:30:b5:40:19: a5:04:5a:b4:bd:43:d9:96:7e:14:96:2a:56:27:ee:74:eb:db: 11:ab:00:c8:6c:f1:0c:00:9e:18:f1:0f:75:87:a4:39:03:cf: 9b:b0:b0:f9:e8:1b:a9:52:56:3b:dc:43:ac:2f:ba:89:de:e0: 75:9f:6d:6c:80:95:33:8f:da:af:8e:12:b6:a7:87:d0:51:9a: 3a:55:c5:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3 RUE3QTRGMDIwHhcNMjUxMjIyMTk0NzAwWhcNMjUxMjI5MTk0NzAwWjAYMRYwFAYD VQQDDA02OTQ5YTAzNC03ZTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNNA4K10gLl2rQ6z4UKbfDseqQUw4XuEjOmAGDKLtpAGl4G5peBmVXMLmHRf JX13xQK8jP9wauqKhbprU8bqfpxHWgvEWSAX9MM1BWGP32uyFrFGMV/XtqTZPnaM UVZplg6uZAIWIwZNBFJaeQiduphRTLjE1t8mG+Wk7HB/nOC6e2NcQyyjyEPZy5zK O55xN9QQ1p+mAVy9+RSCaVVNl8GTnatQgv8VA+kyjSvV5ifqfkANUW0oLDVp+fju mU9aSCUqQIfyZWwt5rCvhHpH7D6lhiOxWCSmbHXCky4a3/A4RRUVaDAVJrm7mgDK xRBs9lY7Nplf82vQpH+9sdLzEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLvuBuH rU6yVtKXnynOALdiolT/MB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0 QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw dExwampOeUhuQXAtcDZUd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrWYt2sGn/ZuEezC40gj4hqBV7pj46xdGiGV6tJoDTfL1vevUW44lZ wYWGsZd3Py1AgqT8KeL69zqBEtt+BN042m+/x3+3/GQHsG3ib8Fj/EY6N6eyCG2p 4MTrKvQjcRgp0+A4DbU4iKWIGqFJqM+mZZEGmytMXZTYp4aXCZ8hRLJqKRlPVvv6 1wCwnbuAnN0MtmxWL4bAQ8WdD5wUdUAc0zZwg0sO3GCqLHd2mbCJtzC1QBmlBFq0 vUPZln4UlipWJ+5069sRqwDIbPEMAJ4Y8Q91h6Q5A8+bsLD56BupUlY73EOsL7qJ 3uB1n21sgJUzj9qvjhK2p4fQUZo6VcVd -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:14 2025 by rpki-client