This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft File: s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft (raw, json) Hash identifier: xSzfbfknWPhL/+ZacEXHM9cyJtQSJciyReui6+L2nvw= Subject key identifier: 3B:3E:AF:FE:8D:7A:D3:98:7A:F0:30:68:0A:5D:2C:A8:A9:6F:B0:F6 Authority key identifier: B3:60:DB:14:9D:55:C1:8E:03:71:E0:42:87:57:CA:F1:FD:D4:2C:33 Certificate issuer: /CN=A91A05BF/serialNumber=B360DB149D55C18E0371E0428757CAF1FDD42C33 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2DbFJ1VwY4DceBCh1fK8f3ULDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft Manifest number: 1F Signing time: Tue 23 Dec 2025 06:36:49 +0000 Manifest this update: Tue 23 Dec 2025 06:36:49 +0000 Manifest next update: Tue 30 Dec 2025 06:36:49 +0000 Files and hashes: 1: s2DbFJ1VwY4DceBCh1fK8f3ULDM.crl (hash: B1MuPgkNRi1W9n2wMj+8UItyhDxDUNVd5Jllv+dMus4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.crl rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2DbFJ1VwY4DceBCh1fK8f3ULDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A05BF, serialNumber=B360DB149D55C18E0371E0428757CAF1FDD42C33 Validity Not Before: Dec 23 06:36:49 2025 GMT Not After : Dec 30 06:36:49 2025 GMT Subject: CN=694a3881-072e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:93:c9:a4:5a:99:02:d5:a0:7a:7a:1d:7f:2b: 70:e7:9a:54:66:43:85:f2:d6:6d:30:c7:09:53:da: 98:2c:d1:3e:af:60:76:44:2f:b2:8a:a2:35:5d:b3: ac:af:76:9a:10:42:c3:65:23:18:1e:b4:b1:80:bc: 5c:34:8e:f3:1f:8d:ee:96:32:58:28:35:77:ad:42: a2:9e:d8:57:a0:3f:07:a9:a8:b2:7a:a5:db:6f:eb: b4:01:65:7c:02:a7:e9:d2:62:60:47:c4:17:a7:61: 36:7f:06:e6:12:25:26:c1:1a:dd:1d:51:fb:c4:28: 42:84:99:80:5d:a4:4f:15:d8:9e:9c:08:3a:2e:e6: 43:7b:0a:a0:25:5c:e3:63:35:b4:08:c9:f9:96:55: 59:59:83:b3:3a:76:d6:b8:73:6c:0c:1d:bb:93:f4: 27:86:8f:7b:56:57:9f:ca:fd:98:d4:2e:63:0d:11: ee:8b:f0:48:50:e9:0a:c0:80:c8:bc:f5:09:cb:21: da:e8:21:18:d8:da:d6:61:be:61:a7:a6:41:b8:c5: d3:13:42:d7:3f:69:b4:42:a0:a3:83:67:ae:3b:5c: e8:9c:82:c0:d7:5d:86:67:ec:d6:ad:a6:42:71:f8: 1f:6e:89:b9:62:f0:ea:1f:e5:51:43:09:48:54:29: 7d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3E:AF:FE:8D:7A:D3:98:7A:F0:30:68:0A:5D:2C:A8:A9:6F:B0:F6 X509v3 Authority Key Identifier: keyid:B3:60:DB:14:9D:55:C1:8E:03:71:E0:42:87:57:CA:F1:FD:D4:2C:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2DbFJ1VwY4DceBCh1fK8f3ULDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3b:a2:77:a1:53:fb:6f:80:27:72:03:36:09:43:b0:ad:e9: cc:72:b6:25:73:00:68:b4:bb:0e:a2:92:a8:27:3d:6e:79:42: 56:12:20:e0:b6:83:ab:1e:0b:eb:70:e6:24:09:da:fe:b4:d5: 93:8e:bb:b5:39:b3:a3:53:fc:ac:7f:b6:8d:64:0e:f8:8e:69: 7d:e2:2d:87:a1:cb:f2:9e:b4:f1:ba:26:97:b9:23:dd:65:35: 0d:43:b0:2e:80:6c:14:16:c0:23:93:3c:c3:c8:08:38:d9:d8: 79:51:c7:b8:52:76:5d:72:2d:cd:3d:5e:ce:6b:60:df:a7:7d: dd:d5:9d:d7:89:a1:ac:d0:d4:80:25:60:62:09:8b:1c:8b:19: 2f:2a:fa:62:7d:ea:80:c8:6a:f5:76:9e:b3:13:1a:cf:51:64: df:0b:72:91:34:c1:3b:55:e5:2b:77:64:70:f2:9c:0e:05:75: e8:73:37:4a:f3:b4:71:be:c5:04:ba:f9:41:6a:c3:b2:43:c6: 37:e0:88:50:44:11:a3:71:09:7d:0f:ae:e2:4d:a3:88:48:18: b4:9c:16:38:88:58:d6:3a:15:07:ce:be:5f:1c:c4:79:18:98: b7:c1:7f:8a:14:54:d0:53:29:75:bf:76:e6:fb:b1:2f:d7:76: 59:34:35:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDVCRjExMC8GA1UEBRMoQjM2MERCMTQ5RDU1QzE4RTAzNzFFMDQyODc1N0NBRjFG REQ0MkMzMzAeFw0yNTEyMjMwNjM2NDlaFw0yNTEyMzAwNjM2NDlaMBgxFjAUBgNV BAMMDTY5NGEzODgxLTA3MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCDk8mkWpkC1aB6eh1/K3DnmlRmQ4Xy1m0wxwlT2pgs0T6vYHZEL7KKojVds6yv dpoQQsNlIxgetLGAvFw0jvMfje6WMlgoNXetQqKe2FegPwepqLJ6pdtv67QBZXwC p+nSYmBHxBenYTZ/BuYSJSbBGt0dUfvEKEKEmYBdpE8V2J6cCDou5kN7CqAlXONj NbQIyfmWVVlZg7M6dta4c2wMHbuT9CeGj3tWV5/K/ZjULmMNEe6L8EhQ6QrAgMi8 9QnLIdroIRjY2tZhvmGnpkG4xdMTQtc/abRCoKODZ647XOicgsDXXYZn7NatpkJx +B9uibli8Oof5VFDCUhUKX2PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOz6v/o16 05h68DBoCl0sqKlvsPYwHwYDVR0jBBgwFoAUs2DbFJ1VwY4DceBCh1fK8f3ULDMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNUJGLzIxQkNENjc4QjNC NDExRjBCNjkxN0YwRUM0RjlBRTAyL3MyRGJGSjFWd1k0RGNlQkNoMWZLOGYzVUxE TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvczJEYkZKMVZ3WTREY2VCQ2gxZks4ZjNVTERNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NUJGLzIxQkNENjc4QjNCNDExRjBCNjkxN0YwRUM0RjlBRTAyL3MyRGJGSjFWd1k0 RGNlQkNoMWZLOGYzVUxETS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGw7onehU/tvgCdyAzYJQ7Ct6cxytiVzAGi0uw6ikqgnPW55QlYSIOC2 g6seC+tw5iQJ2v601ZOOu7U5s6NT/Kx/to1kDviOaX3iLYehy/KetPG6Jpe5I91l NQ1DsC6AbBQWwCOTPMPICDjZ2HlRx7hSdl1yLc09Xs5rYN+nfd3VndeJoazQ1IAl YGIJixyLGS8q+mJ96oDIavV2nrMTGs9RZN8LcpE0wTtV5St3ZHDynA4FdehzN0rz tHG+xQS6+UFqw7JDxjfgiFBEEaNxCX0PruJNo4hIGLScFjiIWNY6FQfOvl8cxHkY mLfBf4oUVNBTKXW/dub7sS/Xdlk0NRU= -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:42 2025 by rpki-client