This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft File: rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft (raw, json) Hash identifier: UD1j2ASZCMJRicHpKC3VJkP4Aav1DmGKaNS4E8a7Xk4= Subject key identifier: F9:7C:83:A0:E1:0A:7B:7E:89:7F:EF:1F:33:9A:DC:C6:12:64:A3:8C Authority key identifier: AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0 Certificate issuer: /CN=A91A95AB/serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0 Certificate serial: 3500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft Manifest number: 3DAB Signing time: Thu 18 Dec 2025 15:08:20 +0000 Manifest this update: Thu 18 Dec 2025 15:08:20 +0000 Manifest next update: Thu 25 Dec 2025 15:08:20 +0000 Files and hashes: 1: rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl (hash: V2HPlU4ImhrMu+4kvoeaK5+pouSKvYK8VSNXC4hVKBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13568 (0x3500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95AB, serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0 Validity Not Before: Dec 18 15:08:20 2025 GMT Not After : Dec 25 15:08:20 2025 GMT Subject: CN=694418e4-455e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:40:db:e4:19:9d:4c:e8:aa:ea:0f:97:c1: bb:4a:b1:19:24:a5:23:b4:1b:ef:4a:aa:cf:e5:50: fb:58:f9:4d:64:29:df:ea:47:3a:0b:c6:f0:74:bd: 67:5a:a9:7c:a0:4b:aa:de:1c:13:cb:9c:5a:7d:42: 43:0e:95:d9:1f:34:da:18:8e:80:93:97:6f:26:d9: ea:2a:34:eb:d5:f5:1c:bd:2d:c5:07:0a:b8:7f:af: 49:1c:8b:d7:0f:2b:7e:f3:f7:a3:fa:d2:d8:95:47: b6:fd:8f:e3:d2:8c:5e:98:f5:e3:a0:08:bd:f5:d1: 8b:4c:bf:1b:30:a6:a1:2f:c4:b4:44:78:46:0a:ba: be:24:c7:1c:e7:d7:14:bc:57:64:83:56:f9:1d:ef: e0:f3:c7:54:78:4f:25:0a:29:15:9a:68:65:fd:f3: a1:8b:4d:08:fc:c0:bb:c5:16:b4:d0:9a:01:5b:8c: 63:de:ff:34:fd:5a:ae:20:23:a5:3c:3f:70:91:e8: 08:ec:31:26:a7:45:1a:d6:65:84:d4:ab:65:33:60: c5:de:76:2b:e1:fe:fa:47:61:d5:55:fa:0f:3f:e1: 40:15:0e:20:16:cc:18:98:ae:87:bf:17:c9:05:e9: 14:3d:ea:19:8c:54:ed:7b:bd:f3:57:43:a2:19:0f: c5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7C:83:A0:E1:0A:7B:7E:89:7F:EF:1F:33:9A:DC:C6:12:64:A3:8C X509v3 Authority Key Identifier: keyid:AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:47:c6:49:54:91:3b:f6:06:b1:a3:23:f9:48:51:d8:0e:3a: 9d:c4:da:cd:56:a7:6e:db:ec:02:77:83:8b:79:b8:db:65:c0: 01:ba:b4:64:3e:98:66:ef:af:5e:65:6e:bd:92:49:43:da:a3: b5:09:09:fd:37:c5:2f:33:e2:43:d4:6b:31:4b:1c:15:b9:19: 23:9d:09:e3:d5:3e:0a:b8:4e:16:ca:84:79:6d:f9:53:da:3b: 7f:d4:17:97:b4:e3:81:70:e6:2d:be:b6:9b:48:75:11:34:8e: 42:1e:f7:34:f9:92:44:a3:69:47:f2:b0:25:95:05:d8:35:af: b9:30:08:44:35:73:7d:64:4a:5c:60:29:cf:b7:e6:40:8d:a1: 7e:c1:2a:2c:d2:49:6e:64:c2:d0:23:d9:9b:6b:c2:d6:24:53: 35:de:75:56:8b:8f:63:da:dd:91:0d:40:0b:f8:38:d7:e6:78: 3d:8b:cf:9d:78:25:a3:5c:f9:6d:5f:12:25:fa:2e:20:be:fa: 3d:fa:71:cf:8b:67:d1:96:d9:15:24:cb:df:25:b3:52:04:ca: a6:ce:6b:5c:c9:60:3f:44:ff:15:72:31:11:fd:77:cf:ed:6a: 49:c5:c9:a9:4b:c0:91:da:90:52:26:97:cf:37:6d:74:a1:ee: 0e:28:12:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QUIxMTAvBgNVBAUTKEFENkE4NTY4OTc3RUFGNThFRUFGMUM4QTk3RDYzNzdD MkUyNUU0QjAwHhcNMjUxMjE4MTUwODIwWhcNMjUxMjI1MTUwODIwWjAYMRYwFAYD VQQDDA02OTQ0MThlNC00NTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzB5A2+QZnUzoquoPl8G7SrEZJKUjtBvvSqrP5VD7WPlNZCnf6kc6C8bwdL1n Wql8oEuq3hwTy5xafUJDDpXZHzTaGI6Ak5dvJtnqKjTr1fUcvS3FBwq4f69JHIvX Dyt+8/ej+tLYlUe2/Y/j0oxemPXjoAi99dGLTL8bMKahL8S0RHhGCrq+JMcc59cU vFdkg1b5He/g88dUeE8lCikVmmhl/fOhi00I/MC7xRa00JoBW4xj3v80/VquICOl PD9wkegI7DEmp0Ua1mWE1KtlM2DF3nYr4f76R2HVVfoPP+FAFQ4gFswYmK6HvxfJ BekUPeoZjFTte73zV0OiGQ/FfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPl8g6Dh Cnt+iX/vHzOa3MYSZKOMMB8GA1UdIwQYMBaAFK1qhWiXfq9Y7q8cipfWN3wuJeSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIxanVyeHlLbDlZM2ZDNGw1 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXcUZhSmQtcjFqdXJ4eUtsOVkzZkM0bDVMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIx anVyeHlLbDlZM2ZDNGw1TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXR8ZJVJE79gaxoyP5SFHYDjqdxNrNVqdu2+wCd4OLebjbZcABurRk Pphm769eZW69kklD2qO1CQn9N8UvM+JD1GsxSxwVuRkjnQnj1T4KuE4WyoR5bflT 2jt/1BeXtOOBcOYtvrabSHURNI5CHvc0+ZJEo2lH8rAllQXYNa+5MAhENXN9ZEpc YCnPt+ZAjaF+wSos0kluZMLQI9mba8LWJFM13nVWi49j2t2RDUAL+DjX5ng9i8+d eCWjXPltXxIl+i4gvvo9+nHPi2fRltkVJMvfJbNSBMqmzmtcyWA/RP8VcjER/XfP 7WpJxcmpS8CR2pBSJpfPN210oe4OKBLh -----END CERTIFICATE-----Generated at Fri Dec 19 14:44:29 2025 by rpki-client