This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: ukNh7Mb+yWBi6kEHnK4YLTcnJDqkcou/hqKybFqnunc= Subject key identifier: F0:B3:7E:1F:29:BA:9E:F6:BC:1E:DE:59:D2:11:43:08:24:D2:EF:1A Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0AE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0ACD Signing time: Wed 10 Dec 2025 18:35:09 +0000 Manifest this update: Wed 10 Dec 2025 18:35:08 +0000 Manifest next update: Wed 17 Dec 2025 18:35:08 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: tYe/hQHuBMmz7VfZI9NzF/7HwiMX7bodqqax616dvGY=) 2: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: z5ES9QnxCtUmMGb5rTePskEShI6wqlkuHRSuLJa+HEo=) 3: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: Sq5YLnrI6niWLMeWLjro3RFtUrBz6mhWVJH2BrDvMPI=) 4: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: QgJRfFH6YN7lRNZNVoON5AcD6zI0xlKC/pPKsOyjCXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 18:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2786 (0xae2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Dec 10 18:35:08 2025 GMT Not After : Dec 17 18:35:08 2025 GMT Subject: CN=6939bd5d-9f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fb:01:2f:fd:2f:4d:a4:14:d5:6a:44:0a:80: af:a7:93:5f:89:05:c7:ca:84:07:a0:64:a2:18:8a: 09:d2:0e:a2:76:51:27:7d:a6:bd:35:c7:07:9f:59: 9e:3e:fe:c4:7b:52:39:00:10:38:f0:83:4a:70:24: ea:91:3d:3e:0d:df:41:15:5e:0f:67:ba:8a:45:5a: 08:4c:60:77:19:e9:09:b5:08:4f:22:b2:c5:45:0a: 55:c2:65:cd:51:3f:73:43:01:fa:83:1d:1a:2c:82: 91:46:82:b4:9e:15:c3:25:80:4d:b5:d7:0a:87:3c: eb:22:e8:43:dc:bc:a9:67:ad:c7:cd:50:42:a0:b3: 8b:1f:85:26:d8:99:a7:1e:93:10:37:b7:d9:42:79: 30:62:10:92:90:7c:34:82:5c:c7:cd:53:3a:1a:0f: e1:2b:cf:c2:d7:9a:f1:00:38:1b:9a:4e:fb:16:5e: 3c:0b:f9:95:29:92:c3:6b:48:69:25:75:1f:64:4b: 6e:52:3c:af:a6:53:62:01:8e:66:0d:ae:e9:19:63: 84:e6:75:5a:fb:e7:45:c7:93:b7:cd:4e:5e:dc:5a: 05:70:2a:42:c5:2f:99:c1:f7:3c:b3:f8:43:10:f1: 87:7b:9e:55:10:49:c1:2a:a3:d3:73:95:50:ef:19: ae:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B3:7E:1F:29:BA:9E:F6:BC:1E:DE:59:D2:11:43:08:24:D2:EF:1A X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:b8:a8:0b:b6:aa:3f:42:bb:af:2a:26:5c:b0:8f:a9:63:81: 32:3f:8e:22:f9:2c:7e:88:1e:6b:dc:61:43:4d:c9:f7:32:70: d5:17:4f:18:71:2d:81:df:b1:e2:f5:e1:a0:75:af:d2:45:d2: 86:ae:92:51:85:be:74:6e:0f:8c:08:fe:66:64:89:b2:d9:d4: a5:bd:e9:36:6a:4a:9f:92:d8:a6:e7:b7:79:d5:8b:c8:6f:92: 32:19:85:fe:4a:92:ae:d9:e2:12:c6:f4:34:56:1a:e6:13:e3: e0:0f:7b:7e:cd:1d:89:bb:fb:aa:89:20:0b:6c:25:83:ff:23: f7:cd:44:a4:f4:ac:63:17:dd:d2:c0:72:2b:5c:90:45:17:51: d8:e1:bd:0b:5f:3c:19:bd:a7:93:9c:07:0d:56:78:15:c4:10: f4:ca:4c:59:6e:eb:21:fc:11:6f:41:9c:bf:ef:08:20:27:fe: 55:61:1c:b0:dc:e3:b5:5c:9f:30:1b:cb:8b:9a:78:ab:3c:20: 5a:80:02:b4:ab:11:e5:5d:2c:69:c7:eb:87:d5:01:55:e5:06: e6:48:7b:25:ca:1f:8d:34:ab:66:30:0a:d8:cd:ce:0a:90:c7: 1b:47:db:5b:2d:2d:32:ba:f3:a2:0c:f5:e8:9a:08:f5:10:a8: 80:5d:7d:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjUxMjEwMTgzNTA4WhcNMjUxMjE3MTgzNTA4WjAYMRYwFAYD VQQDEw02OTM5YmQ1ZC05Zjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPsBL/0vTaQU1WpECoCvp5NfiQXHyoQHoGSiGIoJ0g6idlEnfaa9NccHn1me Pv7Ee1I5ABA48INKcCTqkT0+Dd9BFV4PZ7qKRVoITGB3GekJtQhPIrLFRQpVwmXN UT9zQwH6gx0aLIKRRoK0nhXDJYBNtdcKhzzrIuhD3LypZ63HzVBCoLOLH4Um2Jmn HpMQN7fZQnkwYhCSkHw0glzHzVM6Gg/hK8/C15rxADgbmk77Fl48C/mVKZLDa0hp JXUfZEtuUjyvplNiAY5mDa7pGWOE5nVa++dFx5O3zU5e3FoFcCpCxS+Zwfc8s/hD EPGHe55VEEnBKqPTc5VQ7xmuUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCzfh8p up72vB7eWdIRQwgk0u8aMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJuKgLtqo/QruvKiZcsI+pY4EyP44i+Sx+iB5r3GFDTcn3MnDVF08Y cS2B37Hi9eGgda/SRdKGrpJRhb50bg+MCP5mZImy2dSlvek2akqfktim57d51YvI b5IyGYX+SpKu2eISxvQ0VhrmE+PgD3t+zR2Ju/uqiSALbCWD/yP3zUSk9KxjF93S wHIrXJBFF1HY4b0LXzwZvaeTnAcNVngVxBD0ykxZbush/BFvQZy/7wggJ/5VYRyw 3OO1XJ8wG8uLmnirPCBagAK0qxHlXSxpx+uH1QFV5QbmSHslyh+NNKtmMArYzc4K kMcbR9tbLS0yuvOiDPXomgj1EKiAXX2f -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:36 2025 by rpki-client