This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json) Hash identifier: LNpLWynGQBTJasKSI2v6vNsxbVXAuUadj54EF9OlUek= Subject key identifier: 10:85:53:02:5C:4F:0A:53:FF:6A:B2:65:00:FE:9E:6D:F0:0E:F1:E4 Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 053E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft Manifest number: 051C Signing time: Tue 02 Dec 2025 22:32:16 +0000 Manifest this update: Tue 02 Dec 2025 22:32:15 +0000 Manifest next update: Tue 09 Dec 2025 22:32:15 +0000 Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: 5T19/7/YwfiC28VZfzgQwkFSdvRJpeAHk7o0Hihlbrc=) 2: 1BEFBED451B911F097C15C49C4F9AE02.roa (hash: au2wuZlStRAiQIz6GHb6zEgbdpYBgkZrv7Xcs6eeF3c=) 3: A042865C3DB211EE9EB40D3DC4F9AE02.roa (hash: ZqfsDoVxPPlDBErW76OplgU+s6rrOgPc04UOswio6BA=) 4: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: uvWCOvomLN/7hlVYLp/jcmXt9zO2kyVBg9I1lGQNm1w=) 5: 1CC78D4651B911F097C15C49C4F9AE02.roa (hash: eTkkjeUWF+laUxu3hlPAVMSxjb/tJZE5KKWsck/tHH4=) 6: 1D854DF451B911F097C15C49C4F9AE02.roa (hash: nW399cZU57cUehuWqrSPp5Ss8HGWsGUyXyuMRoZuVYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 22:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1342 (0x53e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Validity Not Before: Dec 2 22:32:15 2025 GMT Not After : Dec 9 22:32:15 2025 GMT Subject: CN=692f68f0-1eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:bd:13:65:c6:1c:67:61:9a:79:ea:e8:15: a5:2e:c4:f3:b4:90:db:c9:ba:b6:4f:27:a9:9a:ad: 3a:ec:88:fa:19:00:15:11:45:38:ce:e0:25:77:55: 57:bb:d5:b5:8a:5d:18:16:8c:df:ff:88:89:18:1e: 88:74:7c:b0:53:70:c1:f3:48:fe:54:06:24:4e:5d: 7a:d6:34:f8:d4:5a:4a:1f:a5:0b:3a:45:32:4d:3a: 1c:72:57:13:3e:f5:ff:ac:83:3e:b5:73:2c:8a:8e: 2f:54:a0:5c:bb:f8:e5:84:1f:73:9e:c7:9b:6b:17: 0f:da:9a:c8:eb:1e:57:51:55:0e:73:de:36:aa:42: c5:5e:2f:33:db:44:14:cf:cb:a0:00:d6:b7:42:c8: 02:74:b4:a7:4d:66:3d:04:73:b8:74:69:c6:66:43: 24:e0:0a:b9:21:50:18:53:09:c8:4b:8f:88:dc:5f: ff:c2:f7:81:b1:81:10:50:20:d0:95:96:18:42:8a: 6c:7b:2d:31:b7:a6:00:c2:3e:22:62:ca:7b:2d:22: e1:ed:17:12:9d:2e:dc:dc:bf:62:1f:8c:45:d9:0d: bf:6f:81:23:8b:5a:6d:6f:f2:57:0a:5b:f1:c7:e4: 4d:33:36:ff:c7:1a:e4:43:ec:21:0b:0e:85:20:26: 87:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:85:53:02:5C:4F:0A:53:FF:6A:B2:65:00:FE:9E:6D:F0:0E:F1:E4 X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:45:d0:02:04:e3:95:0e:6d:54:af:f3:a0:89:3b:44:b7:30: 62:cb:b0:28:11:82:2b:81:ae:f6:d9:45:0e:b8:ba:8b:00:85: 66:84:69:29:b4:be:ea:bf:2d:bd:0e:fc:26:ab:f8:a8:31:ee: 9e:27:fe:d3:88:8f:9c:18:0f:49:03:ba:51:27:87:be:99:13: 0b:e8:97:46:52:60:9b:24:7c:de:c3:c6:ad:6e:ef:2b:74:6a: 26:af:d7:00:48:99:68:0e:65:78:ce:5d:8b:43:35:66:52:ac: 8d:2b:f3:32:6c:31:fd:5a:51:35:91:40:a6:a2:8e:e7:07:2a: e1:4a:74:50:72:52:83:0f:e7:a2:10:50:13:38:ea:49:53:e5: 02:67:5b:58:67:db:0f:af:fc:4f:dc:70:bf:c9:87:0f:11:fd: 12:03:94:ac:ed:1e:03:44:c2:cf:3f:25:18:ed:d3:a2:58:72: 9b:09:00:b6:65:4f:38:ae:80:06:f2:4a:83:de:10:ee:e0:a9: 4d:35:6a:df:b3:4e:76:51:d3:be:c4:5b:03:3f:af:98:51:4d: 51:e0:58:5e:f4:2d:0c:cb:9e:46:04:c3:cb:ee:27:c8:5f:23: df:76:16:4c:cc:6d:b2:ff:ce:28:d2:cf:21:ad:6c:28:63:05: cd:f8:c9:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjUxMjAyMjIzMjE1WhcNMjUxMjA5MjIzMjE1WjAYMRYwFAYD VQQDEw02OTJmNjhmMC0xZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1m9E2XGHGdhmnnq6BWlLsTztJDbybq2Tyepmq067Ij6GQAVEUU4zuAld1VX u9W1il0YFozf/4iJGB6IdHywU3DB80j+VAYkTl161jT41FpKH6ULOkUyTTocclcT PvX/rIM+tXMsio4vVKBcu/jlhB9znsebaxcP2prI6x5XUVUOc942qkLFXi8z20QU z8ugANa3QsgCdLSnTWY9BHO4dGnGZkMk4Aq5IVAYUwnIS4+I3F//wveBsYEQUCDQ lZYYQopsey0xt6YAwj4iYsp7LSLh7RcSnS7c3L9iH4xF2Q2/b4Eji1ptb/JXClvx x+RNMzb/xxrkQ+whCw6FICaHZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCFUwJc TwpT/2qyZQD+nm3wDvHkMB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM5Qi9BNDZFOTg5QTMyMkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlD ZGtNVmVnYnZxa3dIREg4LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYRdACBOOVDm1Ur/OgiTtEtzBiy7AoEYIrga722UUOuLqLAIVmhGkp tL7qvy29Dvwmq/ioMe6eJ/7TiI+cGA9JA7pRJ4e+mRML6JdGUmCbJHzew8atbu8r dGomr9cASJloDmV4zl2LQzVmUqyNK/MybDH9WlE1kUCmoo7nByrhSnRQclKDD+ei EFATOOpJU+UCZ1tYZ9sPr/xP3HC/yYcPEf0SA5Ss7R4DRMLPPyUY7dOiWHKbCQC2 ZU84roAG8kqD3hDu4KlNNWrfs052UdO+xFsDP6+YUU1R4Fhe9C0My55GBMPL7ifI XyPfdhZMzG2y/84o0s8hrWwoYwXN+Mma -----END CERTIFICATE-----Generated at Wed Dec 3 17:16:20 2025 by rpki-client