This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft File: PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json) Hash identifier: pNNXPluxz4fz2JR+p0LY5ZTJH9YOk03oaYzwbRZC2ow= Subject key identifier: 56:7F:76:FD:41:DF:6F:0B:F1:C7:85:59:01:20:E1:34:26:49:CC:35 Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 Certificate issuer: /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Certificate serial: 13B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft Manifest number: 13AD Signing time: Mon 22 Dec 2025 16:40:54 +0000 Manifest this update: Mon 22 Dec 2025 16:40:54 +0000 Manifest next update: Mon 29 Dec 2025 16:40:54 +0000 Files and hashes: 1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: TgJUzxG03LSh+AMLuJ13Iqh1zVMpGlZDre07HxXigVU=) 2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: cVw4oQcu4jILJ7GW153O1ZXHHSwLOkKZrLSzT1rC+6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5048 (0x13b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92FE, serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Validity Not Before: Dec 22 16:40:54 2025 GMT Not After : Dec 29 16:40:54 2025 GMT Subject: CN=69497496-be81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ec:26:de:a9:7d:69:bd:e4:60:0b:05:98:47: e2:37:87:08:e6:c1:72:26:d6:f4:55:cf:8b:03:36: 7c:32:a6:33:03:53:09:8f:71:e7:3c:70:4b:9f:be: a1:b0:49:e1:c2:24:18:c9:47:f3:4d:04:b2:fd:31: 6e:71:bf:9b:c0:12:22:7d:75:38:8d:45:a5:be:91: 57:e5:39:b4:64:6e:c9:ac:31:aa:8d:79:f5:02:39: b7:07:f2:f8:92:33:d9:cb:ee:b6:42:a0:d7:e9:fa: a2:d9:35:9b:95:a1:7d:a6:b1:84:d2:ba:b1:fb:95: dc:d5:4c:0b:1f:5e:a1:f3:a8:56:97:fe:91:03:e4: fa:a6:4b:94:b6:cf:ee:20:ca:df:d5:66:a3:e8:ba: 7e:28:f9:a9:07:9d:6f:a0:df:f8:b6:b1:59:5d:94: 51:03:83:b3:2e:c7:e8:d2:c9:ad:cf:3a:d7:64:85: 34:cc:a3:7d:88:97:64:8b:f0:50:ac:aa:0f:d8:2b: 83:89:b1:d7:9f:ac:71:89:c5:f4:05:18:ea:6e:b6: 13:ea:41:db:38:50:ca:ab:0d:87:ff:3b:fe:c6:23: 79:eb:b0:b8:e8:d7:5e:3b:4a:1b:49:51:30:0e:e3: 05:9d:ee:e3:80:53:3b:09:b9:d9:fc:75:f4:b0:67: 31:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7F:76:FD:41:DF:6F:0B:F1:C7:85:59:01:20:E1:34:26:49:CC:35 X509v3 Authority Key Identifier: keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:32:46:ee:a6:6a:60:2b:77:c7:14:6c:cb:9e:3b:a7:84:5f: 5f:cb:af:49:e5:12:f1:a2:b2:cd:ac:93:d6:78:e0:16:18:38: 9f:4e:91:24:89:2f:81:79:a4:a4:59:3b:b6:07:c0:ec:5d:b2: c2:ae:95:1e:1b:05:7c:cb:25:c3:ea:80:ff:b0:f5:49:21:11: f1:82:de:dc:0b:9a:49:e3:d2:0c:47:38:5a:17:06:89:b0:5c: ce:62:8e:40:b9:14:1b:b1:28:6b:ce:5e:43:17:ee:8b:2e:55: ac:b1:89:ab:78:ca:4c:e0:dd:df:5c:87:9f:ca:27:64:70:d3: 7c:b0:23:f1:27:2e:f7:f7:c9:97:97:ac:6c:63:41:84:e3:43: b8:73:c3:36:b7:1e:b4:9d:f6:80:d0:a4:5d:4b:ea:9c:de:17: 21:8e:a9:7e:f1:ef:d3:94:5c:17:95:73:0f:31:63:73:ff:19: 17:53:b5:45:cc:2c:89:77:1d:53:82:2f:68:da:8f:fa:7b:5d: 72:4b:b5:d5:60:88:5d:9b:de:34:40:6e:68:06:61:16:a8:6a: 92:3a:32:da:27:a4:c1:37:d1:27:43:75:be:8f:b5:c1:ba:58: 0f:da:94:f5:3e:59:9b:b5:31:15:69:8b:5d:b5:07:f8:a9:80: 5b:b2:60:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRkUxMTAvBgNVBAUTKDNENDNFREZFNjRGNjE0RTExMzA2QTg3RjFFRjI0RjI4 MkU3RTM3MTQwHhcNMjUxMjIyMTY0MDU0WhcNMjUxMjI5MTY0MDU0WjAYMRYwFAYD VQQDDA02OTQ5NzQ5Ni1iZTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+wm3ql9ab3kYAsFmEfiN4cI5sFyJtb0Vc+LAzZ8MqYzA1MJj3HnPHBLn76h sEnhwiQYyUfzTQSy/TFucb+bwBIifXU4jUWlvpFX5Tm0ZG7JrDGqjXn1Ajm3B/L4 kjPZy+62QqDX6fqi2TWblaF9prGE0rqx+5Xc1UwLH16h86hWl/6RA+T6pkuUts/u IMrf1Waj6Lp+KPmpB51voN/4trFZXZRRA4OzLsfo0smtzzrXZIU0zKN9iJdki/BQ rKoP2CuDibHXn6xxicX0BRjqbrYT6kHbOFDKqw2H/zv+xiN567C46NdeO0obSVEw DuMFne7jgFM7CbnZ/HX0sGcx0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZ/dv1B 328L8ceFWQEg4TQmScw1MB8GA1UdIwQYMBaAFD1D7f5k9hThEwaofx7yTygufjcU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJGRS83MTgxN0Y2Q0E1 QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZPRVRCcWhfSHZKUEtDNS1O eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVUHRfbVQyRk9FVEJxaF9IdkpQS0M1LU54US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJGRS83MTgxN0Y2Q0E1QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZP RVRCcWhfSHZKUEtDNS1OeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFMkbupmpgK3fHFGzLnjunhF9fy69J5RLxorLNrJPWeOAWGDifTpEk iS+BeaSkWTu2B8DsXbLCrpUeGwV8yyXD6oD/sPVJIRHxgt7cC5pJ49IMRzhaFwaJ sFzOYo5AuRQbsShrzl5DF+6LLlWssYmreMpM4N3fXIefyidkcNN8sCPxJy7398mX l6xsY0GE40O4c8M2tx60nfaA0KRdS+qc3hchjql+8e/TlFwXlXMPMWNz/xkXU7VF zCyJdx1Tgi9o2o/6e11yS7XVYIhdm940QG5oBmEWqGqSOjLaJ6TBN9EnQ3W+j7XB ulgP2pT1PlmbtTEVaYtdtQf4qYBbsmAY -----END CERTIFICATE-----Generated at Tue Dec 23 10:59:07 2025 by rpki-client