This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft File: cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json) Hash identifier: Kp6zDAnDY5XwRgGzra6CZ0DDKkcmoNSmmTo3XeAZFTE= Subject key identifier: 03:36:AB:20:68:35:1A:CC:E7:24:31:A8:15:6D:A7:DD:E6:BF:92:A0 Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Certificate serial: 3552 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft Manifest number: 351D Signing time: Sat 20 Dec 2025 14:18:07 +0000 Manifest this update: Sat 20 Dec 2025 14:18:07 +0000 Manifest next update: Sat 27 Dec 2025 14:18:07 +0000 Files and hashes: 1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: oDM0+QXSSlDYCWZhlBOMlePy2kLv24/JDSzh8T1zOY8=) 2: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: ZsKZ4KjphdPT0jn69q25ishvkQ6ZWEITVVyaEZP50Kk=) 3: 392987D254F611E79DF7E643C4F9AE02.roa (hash: Zj1VjgjescNA34ntuLagaf4Gpvf1qUoGCJyDKrDQ9CM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13650 (0x3552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Validity Not Before: Dec 20 14:18:07 2025 GMT Not After : Dec 27 14:18:07 2025 GMT Subject: CN=6946b01f-4e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d6:d1:89:19:16:15:b9:81:ec:b0:76:1c:8a: 50:1d:3e:ca:5f:70:0f:0d:78:f3:45:25:9c:ae:5e: 65:b1:c2:80:3f:28:a8:d1:69:80:c6:3d:bf:a0:56: 97:be:f5:9d:97:63:c7:6d:1d:ed:b9:42:dd:b3:eb: bc:1d:f5:23:0f:6d:18:36:b0:07:f4:df:29:1a:4f: 95:e7:33:42:33:a4:f9:7c:fa:ea:27:6e:f8:af:c7: a7:a8:6d:61:4e:f7:47:3e:d5:96:0d:98:c9:0f:47: 7d:53:7f:e5:99:53:f2:0e:05:c9:ac:a8:dd:db:1a: 17:f1:84:d3:63:81:0a:2a:9a:63:a4:d4:68:a5:ef: 61:8d:87:a7:b1:4b:08:8e:12:9b:77:ad:46:de:d3: 58:20:60:e2:c3:8c:d3:09:a7:0c:ef:5f:e7:6a:e7: 6d:b2:3f:11:e2:68:ed:f1:5e:50:ba:f2:c3:df:4b: 61:69:18:8b:aa:ab:55:90:cb:ae:25:5d:52:1d:57: ce:2b:aa:35:a2:f6:60:9d:30:5a:8f:19:b6:d4:9d: 65:3e:28:09:11:ce:27:c6:ff:2b:4a:52:17:12:fa: 32:37:0a:52:cf:00:19:f3:cb:b0:13:f2:3e:ff:1c: 75:6f:5a:d0:c9:61:1a:16:1c:21:08:e7:97:83:c1: 64:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:36:AB:20:68:35:1A:CC:E7:24:31:A8:15:6D:A7:DD:E6:BF:92:A0 X509v3 Authority Key Identifier: keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:8a:75:c3:ea:bc:4d:fe:b5:1f:d9:11:04:c1:7d:59:37:39: d0:79:00:36:07:fb:af:56:f3:aa:f4:44:5e:8e:ae:23:66:0b: af:6a:cc:a5:1c:9a:4c:a3:30:9f:08:f9:83:c5:67:90:33:4b: c9:f8:3c:1a:c2:d1:89:e9:4b:c2:50:0f:b1:9b:1f:3c:29:63: d1:6e:35:e6:82:da:88:90:a2:90:38:9e:33:45:d7:c5:a6:f7: ba:57:7d:47:47:86:76:1a:ae:11:07:ae:9a:48:ed:50:c6:d6: e3:2c:cb:89:64:0b:c6:64:a7:79:2a:ed:30:7f:d0:7a:9a:65: 66:07:89:46:d9:32:ca:48:c6:66:38:d7:df:d5:32:93:ac:01: d4:0e:3a:61:de:3e:e2:87:5f:91:37:67:43:88:d9:1f:7b:e8: 6b:cf:bf:0a:b9:27:ab:7b:f4:ef:eb:b3:43:59:27:da:22:53: 49:22:d0:f8:ab:b3:e7:55:e5:e1:17:3b:51:28:0d:21:8d:f1: 83:1a:74:0a:b7:9c:82:09:2e:e0:b6:47:c9:15:08:47:0d:b0: ff:42:59:44:0d:61:16:89:17:67:4e:aa:66:ba:6b:1f:cd:08: c1:f6:fc:08:a0:e9:1a:80:9e:04:db:7d:fd:cf:b0:90:46:3f: 30:c5:20:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZCRTM0N0ZBNjZB MUYwMjM0OTAwHhcNMjUxMjIwMTQxODA3WhcNMjUxMjI3MTQxODA3WjAYMRYwFAYD VQQDDA02OTQ2YjAxZi00ZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj9bRiRkWFbmB7LB2HIpQHT7KX3APDXjzRSWcrl5lscKAPyio0WmAxj2/oFaX vvWdl2PHbR3tuULds+u8HfUjD20YNrAH9N8pGk+V5zNCM6T5fPrqJ274r8enqG1h TvdHPtWWDZjJD0d9U3/lmVPyDgXJrKjd2xoX8YTTY4EKKppjpNRope9hjYensUsI jhKbd61G3tNYIGDiw4zTCacM71/naudtsj8R4mjt8V5QuvLD30thaRiLqqtVkMuu JV1SHVfOK6o1ovZgnTBajxm21J1lPigJEc4nxv8rSlIXEvoyNwpSzwAZ88uwE/I+ /xx1b1rQyWEaFhwhCOeXg8FkmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAM2qyBo NRrM5yQxqBVtp93mv5KgMB8GA1UdIwQYMBaAFHCXZcfU0zH0w2rGvjR/pmofAjSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8wQkVEMzUyNjFE NkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1mVERhc2EtTkgtbWFoOENO SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKZGx4OVRUTWZURGFzYS1OSC1tYWg4Q05KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8wQkVEMzUyNjFENkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1m VERhc2EtTkgtbWFoOENOSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIinXD6rxN/rUf2REEwX1ZNznQeQA2B/uvVvOq9ERejq4jZguvasyl HJpMozCfCPmDxWeQM0vJ+DwawtGJ6UvCUA+xmx88KWPRbjXmgtqIkKKQOJ4zRdfF pve6V31HR4Z2Gq4RB66aSO1QxtbjLMuJZAvGZKd5Ku0wf9B6mmVmB4lG2TLKSMZm ONff1TKTrAHUDjph3j7ih1+RN2dDiNkfe+hrz78KuSere/Tv67NDWSfaIlNJItD4 q7PnVeXhFztRKA0hjfGDGnQKt5yCCS7gtkfJFQhHDbD/QllEDWEWiRdnTqpmumsf zQjB9vwIoOkagJ4E2339z7CQRj8wxSD+ -----END CERTIFICATE-----Generated at Sun Dec 21 20:58:39 2025 by rpki-client