This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft File: sLiO7pE7KqjXtZU3FT782HAKkUA.mft (raw, json) Hash identifier: YRkkzRR2i51y08t1iGNKTYP4RRWeAugvv8QQSCHKIB0= Subject key identifier: C8:CD:0D:4B:4E:95:45:FB:76:EB:7B:A6:78:06:D3:36:3C:DE:0E:45 Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 Certificate issuer: /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Certificate serial: 34F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft Manifest number: 34EF Signing time: Mon 22 Dec 2025 14:59:39 +0000 Manifest this update: Mon 22 Dec 2025 14:59:39 +0000 Manifest next update: Mon 29 Dec 2025 14:59:39 +0000 Files and hashes: 1: sLiO7pE7KqjXtZU3FT782HAKkUA.crl (hash: 9byf/PFZC0hV6kzY8ly0+LgSJvdJAAFfCJLqQwKgnLY=) 2: 8146430A45BE11EF92C29882C4F9AE02.roa (hash: PxmSFkrKdWSS0b/4HxHMD4OMFaotkeq0lZg48oiZtE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13554 (0x34f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62A9, serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Validity Not Before: Dec 22 14:59:39 2025 GMT Not After : Dec 29 14:59:39 2025 GMT Subject: CN=69495cdb-31d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c9:b5:40:53:c8:4c:01:b5:e8:c6:ae:f7:7b: 01:0e:5b:c3:8e:42:76:90:fb:90:19:69:2a:31:57: dd:70:90:18:48:3d:54:dc:31:38:e0:cc:a1:15:fc: d5:fc:66:29:8e:13:65:c3:33:8a:0a:5c:ed:4c:cf: 2b:22:66:a5:be:8b:86:2b:0e:26:f2:ac:53:0a:69: 08:6c:48:fb:5c:cd:91:da:be:9d:69:4f:42:ee:83: bb:93:f5:57:61:5e:51:f7:31:90:66:9c:71:5e:30: d7:c0:c1:43:aa:65:02:af:58:d4:53:72:48:d7:44: bb:03:b3:2b:35:ed:20:e0:ec:69:49:a2:35:9c:f9: 4d:d6:51:b4:fb:71:ab:c5:54:9d:1b:11:db:b3:37: 80:50:a9:5a:20:c3:c6:9e:91:78:60:04:40:69:88: 68:f8:6f:8e:52:76:9b:d3:d7:2a:f4:35:6e:9f:04: 8d:9a:5c:bc:0b:d5:b1:f4:b0:af:c9:e8:3f:b9:86: d1:44:b0:6f:f1:76:01:34:94:31:c9:6a:35:7e:4c: 1c:77:cd:f3:c6:5b:0b:9a:c8:22:29:03:bd:9e:12: b2:24:f4:1d:9e:3d:36:ff:c3:68:55:41:18:3e:56: 02:6a:ec:94:7e:f9:88:ae:e7:63:62:a9:96:e1:25: 2a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CD:0D:4B:4E:95:45:FB:76:EB:7B:A6:78:06:D3:36:3C:DE:0E:45 X509v3 Authority Key Identifier: keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:51:8c:40:db:65:5a:8c:0c:e0:c9:24:d0:18:06:28:8c:6a: 6f:48:0c:ca:92:8d:5b:64:71:96:a3:51:7c:8d:e0:12:a5:9b: 8a:da:aa:34:21:25:80:3a:9c:2d:ff:e2:91:f6:df:9a:30:68: 84:4c:e9:04:20:0d:2f:5c:27:3a:d0:64:60:d9:2e:30:4c:47: 77:02:6c:84:ee:03:5f:0d:4a:5a:d5:fa:18:76:4b:72:73:9c: 44:49:a4:a3:45:3c:29:59:cb:d0:d4:d1:75:e8:8c:ee:57:6c: e0:bd:4d:23:d4:9a:a1:41:1c:f9:10:e6:64:e8:67:f2:52:9a: 79:42:88:8e:fa:17:1f:91:42:6a:0d:cf:74:af:12:04:f1:ec: 01:91:98:56:1b:53:f0:de:94:b0:dd:c9:69:94:a5:b8:e9:33: 6e:ef:eb:2a:30:fd:34:d8:24:b6:84:56:eb:80:05:bc:48:14: 57:fd:3f:43:ff:40:3d:7c:49:d3:5b:87:88:45:74:ec:5e:f6: 6f:3c:7d:43:85:26:44:ee:d8:47:b3:82:4a:1e:6a:71:6c:c1: 1a:25:ff:bb:16:f8:be:0a:88:2d:2b:99:b7:73:ea:1d:5b:d8: 59:94:68:25:5a:92:23:fe:47:cf:14:c0:6b:b5:c5:35:f4:66: ad:72:d1:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQTkxMTAvBgNVBAUTKEIwQjg4RUVFOTEzQjJBQThEN0I1OTUzNzE1M0VGQ0Q4 NzAwQTkxNDAwHhcNMjUxMjIyMTQ1OTM5WhcNMjUxMjI5MTQ1OTM5WjAYMRYwFAYD VQQDDA02OTQ5NWNkYi0zMWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sm1QFPITAG16Mau93sBDlvDjkJ2kPuQGWkqMVfdcJAYSD1U3DE44MyhFfzV /GYpjhNlwzOKClztTM8rImalvouGKw4m8qxTCmkIbEj7XM2R2r6daU9C7oO7k/VX YV5R9zGQZpxxXjDXwMFDqmUCr1jUU3JI10S7A7MrNe0g4OxpSaI1nPlN1lG0+3Gr xVSdGxHbszeAUKlaIMPGnpF4YARAaYho+G+OUnab09cq9DVunwSNmly8C9Wx9LCv yeg/uYbRRLBv8XYBNJQxyWo1fkwcd83zxlsLmsgiKQO9nhKyJPQdnj02/8NoVUEY PlYCauyUfvmIrudjYqmW4SUqyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjNDUtO lUX7dut7pngG0zY83g5FMB8GA1UdIwQYMBaAFLC4ju6ROyqo17WVNxU+/NhwCpFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJBOS9ENzdGOTE0MjFE QTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0txalh0WlUzRlQ3ODJIQUtr VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMaU83cEU3S3FqWHRaVTNGVDc4MkhBS2tVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJBOS9ENzdGOTE0MjFEQTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0tx alh0WlUzRlQ3ODJIQUtrVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgUYxA22VajAzgySTQGAYojGpvSAzKko1bZHGWo1F8jeASpZuK2qo0 ISWAOpwt/+KR9t+aMGiETOkEIA0vXCc60GRg2S4wTEd3AmyE7gNfDUpa1foYdkty c5xESaSjRTwpWcvQ1NF16IzuV2zgvU0j1JqhQRz5EOZk6GfyUpp5QoiO+hcfkUJq Dc90rxIE8ewBkZhWG1Pw3pSw3clplKW46TNu7+sqMP002CS2hFbrgAW8SBRX/T9D /0A9fEnTW4eIRXTsXvZvPH1DhSZE7thHs4JKHmpxbMEaJf+7Fvi+CogtK5m3c+od W9hZlGglWpIj/kfPFMBrtcU19GatctHn -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:13 2025 by rpki-client