This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json) Hash identifier: 5X6L5zzVaYpYTEtETEq+ocC+ecVl3QICWazo+40R4FM= Subject key identifier: 61:58:50:AB:A7:CA:A0:91:38:49:03:32:9B:2B:F6:33:C5:7A:C9:6C Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Certificate serial: 0669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft Manifest number: 0646 Signing time: Mon 08 Dec 2025 21:29:33 +0000 Manifest this update: Mon 08 Dec 2025 21:29:32 +0000 Manifest next update: Mon 15 Dec 2025 21:29:32 +0000 Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: wVWawKyinvOq5oAfmc9X2BeaRLQgyzIeVJB8Ihr+pWg=) 2: C9BA671C3A2611F0908A2B20C4F9AE02.roa (hash: hAsOFqLGhlXPlJQqq8o+TJ1lqU96PHU1fRQ8ll9kM1c=) 3: F44E1EECCD8411EF88CD1464C4F9AE02.roa (hash: RAzhHtW1VH/eUjgZQiEsm0Ej6j+0F6PlwpjTpjOi8Jo=) 4: F4C73FCACD8411EF88CD1464C4F9AE02.roa (hash: EkzwfsPvhq1FP6pm5CT4LDCnqWr4szU6ESASOp0o6DU=) 5: B6116DBEC9C811F0931CA339C4F9AE02.roa (hash: mpDokGSx8dS0Rov34wArgaejqPAfetY5gGpqf+We+RE=) 6: 3FE8CD1051B111F0932E1173C4F9AE02.roa (hash: RB6HB76Hd37I1Qyua/UNLhe473Y5QaFhWKPCNvGT+Jc=) 7: DBF856463A3011F0B0C6F437C4F9AE02.roa (hash: 3y3NqdGA4Yb7KDxIbZnutCZORNmNgdB027E2G7UT98A=) 8: F559B7E2CD8411EF88CD1464C4F9AE02.roa (hash: 1YFs0Zqq59OdTTfQ9TRBhg+ye+627iyYVeuBlex3Kfk=) 9: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: ehyJGIeBDK390bSFLx2HamOEcgKmw6zu6VhcLaVRD/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 21:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Validity Not Before: Dec 8 21:29:32 2025 GMT Not After : Dec 15 21:29:32 2025 GMT Subject: CN=6937433d-2126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:92:90:98:37:78:1d:1e:1e:c8:e8:5a:6d:51: 43:75:e0:7d:ab:21:86:5d:89:92:7e:89:09:6b:f1: 8c:15:9b:08:f7:6b:de:3f:1d:61:df:ef:41:39:78: 5d:fb:a8:41:34:3b:a2:75:3f:c7:58:30:d2:12:15: 97:7b:bf:15:8a:4f:23:56:d2:cc:21:4f:e9:60:4c: f1:f3:97:dc:38:a1:20:12:85:2a:92:64:98:27:26: c1:92:7f:ee:7e:4a:ad:13:84:f1:e6:17:07:05:7f: 23:d6:31:6d:0c:8a:c2:d9:95:88:2e:c8:a4:5c:e1: e6:ff:f8:5f:2c:cf:02:2c:6d:9f:a2:23:05:07:46: 12:b0:a1:89:d5:d2:b7:7d:15:bc:3a:aa:a6:00:9a: 78:cc:fa:bf:67:c0:8d:69:18:0d:84:75:94:62:88: a9:1d:9f:2c:1a:23:ae:1d:ae:d6:8d:21:0e:13:63: 3d:60:30:a8:82:11:28:0f:97:fd:6e:23:f5:7a:d6: e6:41:68:5d:6f:08:c1:66:91:a7:7c:ba:af:b7:cd: be:bf:9c:4a:af:8b:23:7e:85:99:d4:ee:b9:0a:90: 2f:34:ec:80:2e:bd:db:18:c5:84:69:a3:c4:7e:84: f4:8a:ae:ec:4d:cd:4b:c6:e6:b9:6a:f6:53:6b:c2: 0b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:58:50:AB:A7:CA:A0:91:38:49:03:32:9B:2B:F6:33:C5:7A:C9:6C X509v3 Authority Key Identifier: keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:cc:8d:cc:cb:f1:04:eb:ea:e7:f1:e3:54:58:91:70:45:84: 4f:f0:74:50:94:1d:2e:86:ea:a1:47:7d:35:d5:72:b8:05:30: 73:3b:f4:23:9d:70:06:94:95:64:f8:98:dc:e7:cf:d3:d6:df: f3:c9:56:83:fb:d1:80:06:3a:5c:19:9c:7c:5d:33:e8:b0:5e: b6:65:29:ea:b0:a2:f9:fb:64:51:d8:77:ed:05:4a:14:8f:a7: 67:31:26:36:8b:b5:22:21:5d:75:5b:85:a2:24:42:4d:12:9a: 6d:6e:75:4f:15:86:94:a8:71:07:95:86:5b:2d:da:7a:63:df: 58:7e:71:48:74:58:29:05:c4:80:f7:02:4f:c9:e7:28:59:9b: c8:c7:e4:06:4d:48:13:4c:68:c3:ae:28:2c:36:87:7e:cf:3b: 63:dc:c6:94:1a:0e:93:78:eb:42:11:28:cb:7f:a6:12:3f:71: e7:8c:a7:ac:42:9d:80:35:ee:c5:d2:88:d2:46:d0:96:70:fe: 19:ec:63:5a:25:6f:47:35:7e:31:d6:a5:7c:5a:24:47:28:4f: e3:59:ce:a6:b7:9d:0a:ab:44:fb:ab:37:c8:80:cd:13:3a:85: 43:79:0d:5d:29:91:24:e9:97:31:c4:90:78:b1:a7:f5:ea:e9: ce:2f:cb:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG MDVCQUYyMTEwHhcNMjUxMjA4MjEyOTMyWhcNMjUxMjE1MjEyOTMyWjAYMRYwFAYD VQQDEw02OTM3NDMzZC0yMTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpKQmDd4HR4eyOhabVFDdeB9qyGGXYmSfokJa/GMFZsI92vePx1h3+9BOXhd +6hBNDuidT/HWDDSEhWXe78Vik8jVtLMIU/pYEzx85fcOKEgEoUqkmSYJybBkn/u fkqtE4Tx5hcHBX8j1jFtDIrC2ZWILsikXOHm//hfLM8CLG2foiMFB0YSsKGJ1dK3 fRW8OqqmAJp4zPq/Z8CNaRgNhHWUYoipHZ8sGiOuHa7WjSEOE2M9YDCoghEoD5f9 biP1etbmQWhdbwjBZpGnfLqvt82+v5xKr4sjfoWZ1O65CpAvNOyALr3bGMWEaaPE foT0iq7sTc1Lxua5avZTa8ILTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFYUKun yqCROEkDMpsr9jPFeslsMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4 bFZGSjlYWWhHUVR3VzY4aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChzI3My/EE6+rn8eNUWJFwRYRP8HRQlB0uhuqhR3011XK4BTBzO/Qj nXAGlJVk+Jjc58/T1t/zyVaD+9GABjpcGZx8XTPosF62ZSnqsKL5+2RR2HftBUoU j6dnMSY2i7UiIV11W4WiJEJNEpptbnVPFYaUqHEHlYZbLdp6Y99YfnFIdFgpBcSA 9wJPyecoWZvIx+QGTUgTTGjDrigsNod+zztj3MaUGg6TeOtCESjLf6YSP3HnjKes Qp2ANe7F0ojSRtCWcP4Z7GNaJW9HNX4x1qV8WiRHKE/jWc6mt50Kq0T7qzfIgM0T OoVDeQ1dKZEk6ZcxxJB4saf16unOL8vz -----END CERTIFICATE-----Generated at Wed Dec 10 14:22:11 2025 by rpki-client