This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft File: elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json) Hash identifier: YqrIpC+IF8CDQqER0vbAUpmu7Pwrqo+Qa2tgRwRuZZY= Subject key identifier: E5:85:37:0F:66:C6:DC:4F:BA:A0:AC:5D:61:46:80:29:CF:96:85:4F Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Certificate serial: 0D10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft Manifest number: 0D07 Signing time: Mon 22 Dec 2025 17:41:17 +0000 Manifest this update: Mon 22 Dec 2025 17:41:16 +0000 Manifest next update: Mon 29 Dec 2025 17:41:16 +0000 Files and hashes: 1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: gYvHxqxDpS4oYVTw3MUn997wMnChSw9pwsQyBob+o9M=) 2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: qm9jDcnTJhuOKIEMpVyp7iPMTXqtw87t7pPJBICpZrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3344 (0xd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E Validity Not Before: Dec 22 17:41:16 2025 GMT Not After : Dec 29 17:41:16 2025 GMT Subject: CN=694982bd-aeb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2a:b3:99:f3:4c:11:6f:c2:4d:00:e2:fc:93: 50:b1:ce:f4:d9:f8:ec:cf:39:ab:0f:9e:ee:4a:73: 0c:3e:4f:f8:dd:c4:71:1d:97:99:16:67:33:23:d9: 74:02:75:bb:12:99:0e:7f:78:41:61:8c:9a:94:a5: f5:2a:57:21:23:70:81:02:f8:f9:fe:40:8b:19:9e: a7:91:f5:70:87:03:47:2c:83:06:83:e0:be:98:d5: 32:69:97:e9:4c:64:16:0d:c9:af:a5:bf:08:cc:24: 4d:43:2f:2b:0f:52:eb:7c:50:e6:20:75:e2:e1:5d: ad:bc:87:58:63:1f:c2:99:1c:9e:6b:c1:b5:f7:fe: 9e:6a:3e:c3:a3:82:cd:b3:96:0c:28:48:ff:7c:fc: e6:aa:e4:4a:37:a2:f1:ad:81:8d:d7:11:c3:a8:e8: f3:a1:4d:8d:43:ef:bc:0e:71:1f:ce:f4:0c:7c:12: b0:56:5c:36:62:81:c3:23:8d:80:12:c3:15:d8:77: 0f:af:4f:06:e9:38:b3:b2:b8:92:ac:5d:b5:87:1f: 24:b2:c9:d1:2e:85:f2:50:e0:11:db:9e:11:06:e1: 16:2c:f4:fc:74:e3:48:2c:1f:f4:45:64:1c:b6:46: 31:df:d1:34:f5:d5:22:c0:61:4b:37:ac:bc:27:ca: 8e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:85:37:0F:66:C6:DC:4F:BA:A0:AC:5D:61:46:80:29:CF:96:85:4F X509v3 Authority Key Identifier: keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:b5:21:56:73:39:3a:66:1b:70:7f:02:2e:d9:73:68:2f:73: 59:47:a4:8c:6c:b7:77:2a:a9:79:18:97:ce:50:16:44:cc:8a: dd:28:c1:8d:4d:b3:6d:56:7e:be:f7:89:59:86:bc:a2:5d:6b: 47:71:04:54:16:8f:21:bc:b2:60:7d:af:6a:27:11:1a:fd:3e: 01:79:a0:c6:b4:d9:ed:a8:a2:a7:bf:c2:f5:2a:cc:42:38:41: ee:d9:27:c1:1b:61:85:11:93:fd:c3:af:35:59:31:b4:28:65: d5:81:9f:5a:06:e6:73:36:25:22:24:3f:89:71:4e:a7:d8:39: f9:01:c4:96:ae:07:4c:40:39:6e:68:e6:04:62:86:55:42:b0: 7a:32:85:35:95:91:fa:3e:e7:6e:8c:c8:85:97:97:63:3a:9f: c6:10:d9:b0:c4:a1:58:a2:85:5d:4c:fc:a8:50:12:0d:30:86: 65:c8:ef:ef:f4:d3:a1:91:90:a1:83:13:d9:2b:a3:ba:c3:0b: 5c:56:10:3f:79:41:84:c1:26:2b:fb:d4:61:17:e1:7f:06:dc: 39:01:3f:d2:9a:27:bd:98:42:8e:71:b5:bc:11:49:3f:af:79: 03:9a:f3:50:de:96:9b:c5:57:0e:0c:e9:93:ac:5f:13:56:19: f4:1c:50:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZERjgxMTAvBgNVBAUTKDdBNTA2QzIxN0EzMTA3OEU0MjE3ODE2MDM4MEREMkM4 MzkyOEQ5MkUwHhcNMjUxMjIyMTc0MTE2WhcNMjUxMjI5MTc0MTE2WjAYMRYwFAYD VQQDDA02OTQ5ODJiZC1hZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCqzmfNMEW/CTQDi/JNQsc702fjszzmrD57uSnMMPk/43cRxHZeZFmczI9l0 AnW7EpkOf3hBYYyalKX1KlchI3CBAvj5/kCLGZ6nkfVwhwNHLIMGg+C+mNUyaZfp TGQWDcmvpb8IzCRNQy8rD1LrfFDmIHXi4V2tvIdYYx/CmRyea8G19/6eaj7Do4LN s5YMKEj/fPzmquRKN6LxrYGN1xHDqOjzoU2NQ++8DnEfzvQMfBKwVlw2YoHDI42A EsMV2HcPr08G6TizsriSrF21hx8kssnRLoXyUOAR254RBuEWLPT8dONILB/0RWQc tkYx39E09dUiwGFLN6y8J8qO4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWFNw9m xtxPuqCsXWFGgCnPloVPMB8GA1UdIwQYMBaAFHpQbCF6MQeOQheBYDgN0sg5KNku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkRGOC83Njc2RjVEQ0Yz Q0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0NUNGNEZnT0EzU3lEa28y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsQnNJWG94QjQ1Q0Y0RmdPQTNTeURrbzJTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkRGOC83Njc2RjVEQ0YzQ0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0 NUNGNEZnT0EzU3lEa28yUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2tSFWczk6ZhtwfwIu2XNoL3NZR6SMbLd3Kql5GJfOUBZEzIrdKMGN TbNtVn6+94lZhryiXWtHcQRUFo8hvLJgfa9qJxEa/T4BeaDGtNntqKKnv8L1KsxC OEHu2SfBG2GFEZP9w681WTG0KGXVgZ9aBuZzNiUiJD+JcU6n2Dn5AcSWrgdMQDlu aOYEYoZVQrB6MoU1lZH6PudujMiFl5djOp/GENmwxKFYooVdTPyoUBINMIZlyO/v 9NOhkZChgxPZK6O6wwtcVhA/eUGEwSYr+9RhF+F/Btw5AT/Smie9mEKOcbW8EUk/ r3kDmvNQ3pabxVcODOmTrF8TVhn0HFDb -----END CERTIFICATE-----Generated at Wed Dec 24 17:42:00 2025 by rpki-client