This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft File: v-RhN13CI9T3snBV4rNHRf5hAdQ.mft (raw, json) Hash identifier: TAF0UeuKvSAVBIDIwMC/xtejbcVGrnPGtx1W5wc4sQA= Subject key identifier: DC:4B:69:22:E3:A0:63:6B:1B:A7:51:3A:C7:B5:3F:EF:DA:B4:29:DB Authority key identifier: BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4 Certificate issuer: /CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4 Certificate serial: 07C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft Manifest number: 078B Signing time: Mon 22 Dec 2025 20:58:15 +0000 Manifest this update: Mon 22 Dec 2025 20:58:15 +0000 Manifest next update: Mon 29 Dec 2025 20:58:15 +0000 Files and hashes: 1: v-RhN13CI9T3snBV4rNHRf5hAdQ.crl (hash: U9KnWQOGxj4v9+WpJuQ6R/wzUBoQ6uBImKrAb62J6Dk=) 2: 05AF21A4B71311F0B98A8D22C4F9AE02.roa (hash: /IPfDG3dNkKnM9ckspPgqTdtR8Igue5PV2ka5sPIhHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1988 (0x7c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD98D, serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4 Validity Not Before: Dec 22 20:58:15 2025 GMT Not After : Dec 29 20:58:15 2025 GMT Subject: CN=6949b0e7-cbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ac:4b:00:a5:e8:c7:bd:66:fb:22:34:a8:76: 06:84:62:8c:66:50:19:01:ef:64:29:f9:e1:6f:80: 96:ca:1e:45:93:3c:6d:94:f0:1f:90:c9:f3:ee:ea: 5a:0d:5a:49:11:82:36:80:e4:a2:49:22:09:15:64: 2e:8f:a0:97:cb:f0:a7:31:15:fd:07:98:94:ac:7f: 7a:fe:4a:69:c6:05:35:88:99:46:df:9c:b8:2d:53: 5e:39:bd:b2:68:3d:b0:ab:a5:4b:4f:5d:f0:54:b6: 62:d4:cb:1e:3a:4f:ca:fa:fb:7f:f8:bb:7e:9e:7f: 87:7b:b6:ef:5b:2d:16:43:30:3f:9a:d0:93:3e:b8: 8e:d3:29:7b:78:0f:49:ff:0a:74:dd:4e:c0:e8:59: 29:21:8b:4b:ee:7c:c8:4d:9e:3f:dd:d6:e3:35:fa: 38:b6:e0:55:47:3b:d6:a1:af:e0:dd:69:62:26:0c: 67:b8:92:d1:cb:5b:85:0b:1d:f5:23:de:c5:8b:38: e1:fd:78:2d:5e:63:6e:b9:d4:70:6a:57:67:95:e0: 48:6a:bf:1c:e8:dd:1c:c5:6e:b2:02:fd:2b:07:87: fb:82:63:7c:92:fb:ad:39:04:f0:18:56:33:e2:c6: f2:57:c8:7b:6e:bb:63:7f:d2:01:ce:81:d9:69:71: 83:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4B:69:22:E3:A0:63:6B:1B:A7:51:3A:C7:B5:3F:EF:DA:B4:29:DB X509v3 Authority Key Identifier: keyid:BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:f9:b3:f6:d0:98:8e:25:b1:2f:55:36:96:75:e8:19:6c:34: 64:ae:a3:0c:1b:7b:86:26:2b:80:90:e5:36:97:bf:71:42:cc: b6:7c:b5:8c:f4:9d:44:32:cc:8a:11:3e:c6:b9:36:87:ab:5e: 2b:91:ff:2d:e5:47:d3:cf:c3:0a:27:29:f5:96:25:4e:c8:f2: 1f:51:2f:3b:43:2c:d0:70:ce:5c:eb:54:dd:97:00:23:4d:fb: 71:3c:8f:e8:34:c9:74:da:d0:31:5b:70:68:cd:bd:b7:0e:11: 69:e0:2e:31:7c:9a:13:06:0b:8f:18:57:a8:c5:ec:9c:3a:4e: 4e:43:15:35:5b:21:bd:9a:73:61:06:cc:df:45:31:35:82:51: b9:5f:67:d6:86:fd:86:67:1b:79:a5:c1:34:4a:e4:3f:4a:d2: 3f:0a:5e:94:7d:5c:95:2d:5f:fd:a6:12:6a:fa:3e:ac:63:79: c9:9d:63:aa:3c:34:74:21:5d:c0:54:58:4e:14:fb:8f:9d:39: 82:99:c9:2e:90:7c:6f:a4:9a:c8:f0:e2:21:b3:ae:3c:67:fa: f1:a8:ba:8d:38:dc:98:08:69:cf:26:1c:e1:7c:31:e2:f0:07: 5d:2a:c2:4a:c6:96:2c:c1:f6:ca:51:5c:3d:ee:33:33:e3:6c: 64:27:15:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q5OEQxMTAvBgNVBAUTKEJGRTQ2MTM3NURDMjIzRDRGN0IyNzA1NUUyQjM0NzQ1 RkU2MTAxRDQwHhcNMjUxMjIyMjA1ODE1WhcNMjUxMjI5MjA1ODE1WjAYMRYwFAYD VQQDDA02OTQ5YjBlNy1jYmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkaxLAKXox71m+yI0qHYGhGKMZlAZAe9kKfnhb4CWyh5FkzxtlPAfkMnz7upa DVpJEYI2gOSiSSIJFWQuj6CXy/CnMRX9B5iUrH96/kppxgU1iJlG35y4LVNeOb2y aD2wq6VLT13wVLZi1MseOk/K+vt/+Lt+nn+He7bvWy0WQzA/mtCTPriO0yl7eA9J /wp03U7A6FkpIYtL7nzITZ4/3dbjNfo4tuBVRzvWoa/g3WliJgxnuJLRy1uFCx31 I97Fizjh/XgtXmNuudRwaldnleBIar8c6N0cxW6yAv0rB4f7gmN8kvutOQTwGFYz 4sbyV8h7brtjf9IBzoHZaXGDPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxLaSLj oGNrG6dROse1P+/atCnbMB8GA1UdIwQYMBaAFL/kYTddwiPU97JwVeKzR0X+YQHU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDk4RC80NjE0NTdCNDUw MEMxMUVCQTcyREJFMjRDNEY5QUUwMi92LVJoTjEzQ0k5VDNzbkJWNHJOSFJmNWhB ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YtUmhOMTNDSTlUM3NuQlY0ck5IUmY1aEFkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDk4RC80NjE0NTdCNDUwMEMxMUVCQTcyREJFMjRDNEY5QUUwMi92LVJoTjEzQ0k5 VDNzbkJWNHJOSFJmNWhBZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1+bP20JiOJbEvVTaWdegZbDRkrqMMG3uGJiuAkOU2l79xQsy2fLWM 9J1EMsyKET7GuTaHq14rkf8t5UfTz8MKJyn1liVOyPIfUS87QyzQcM5c61TdlwAj TftxPI/oNMl02tAxW3Bozb23DhFp4C4xfJoTBguPGFeoxeycOk5OQxU1WyG9mnNh BszfRTE1glG5X2fWhv2GZxt5pcE0SuQ/StI/Cl6UfVyVLV/9phJq+j6sY3nJnWOq PDR0IV3AVFhOFPuPnTmCmckukHxvpJrI8OIhs648Z/rxqLqNONyYCGnPJhzhfDHi 8AddKsJKxpYswfbKUVw97jMz42xkJxVd -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:39 2025 by rpki-client