This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft File: CekFd0f2O6Ciga54ATZozt6kCrQ.mft (raw, json) Hash identifier: 6c1GYx+0kr5fCWEjrhhha+NTmVQHRbjFsDByuQuzIZg= Subject key identifier: 57:E7:78:2F:5A:C3:39:40:DE:08:53:D1:0A:3D:C2:1E:FE:4D:22:BC Authority key identifier: 09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 Certificate issuer: /CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft Manifest number: 01DC Signing time: Tue 23 Dec 2025 01:44:15 +0000 Manifest this update: Tue 23 Dec 2025 01:44:15 +0000 Manifest next update: Tue 30 Dec 2025 01:44:15 +0000 Files and hashes: 1: CekFd0f2O6Ciga54ATZozt6kCrQ.crl (hash: PaBbAO6/Cl8cDsTSeyGAitEUAtu5zQerYzTKqRJlS88=) 2: 2815D106041A11EEA67A6B4DC4F9AE02.roa (hash: SwrvoVYgU6/JlbNtHbJmqe4zyeb9jSsFgyQPBZNxoww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDAFB, serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Validity Not Before: Dec 23 01:44:15 2025 GMT Not After : Dec 30 01:44:15 2025 GMT Subject: CN=6949f3ef-2ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f1:da:56:29:92:7e:d3:b6:d7:75:4b:34:f3: 5b:bb:b1:f5:c8:22:0c:86:da:ab:e4:a8:1d:c3:45: cf:56:71:1d:e5:41:2e:8a:96:37:76:b6:3a:8f:7e: 83:99:61:4a:bc:c8:5f:e6:c3:45:1a:3c:f9:4b:3a: a1:56:49:22:7f:61:e7:c1:fa:87:2c:9b:d6:d8:cd: c2:e8:95:e6:a7:56:9f:85:6e:84:a7:11:cd:2c:16: 47:32:33:fc:b3:b5:d5:c0:33:28:dd:c7:d9:2d:6a: 5e:22:72:47:1b:98:3a:d6:8a:42:6b:6b:59:56:8a: 61:a4:cb:ed:b7:32:df:c1:1d:ae:ca:3a:2e:9d:16: e4:94:db:be:2a:46:02:87:1c:15:24:02:c4:eb:44: fe:3b:aa:57:65:b2:cd:df:e4:6f:ea:ef:1a:50:0a: 26:e5:62:82:3b:32:f0:2f:70:10:7a:c9:e7:76:e8: f0:28:19:e5:fd:5a:b2:03:4e:89:59:ac:15:21:ec: a7:0b:90:e0:65:da:98:1e:04:0a:23:ec:61:72:74: e1:a9:4b:6c:fe:0d:f3:82:c3:04:be:21:3c:2f:b9: e0:41:6c:f8:df:df:8b:31:76:88:ef:51:40:90:61: 53:55:6b:ff:dc:f8:66:ce:30:2d:dd:6a:bc:5f:1f: ab:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E7:78:2F:5A:C3:39:40:DE:08:53:D1:0A:3D:C2:1E:FE:4D:22:BC X509v3 Authority Key Identifier: keyid:09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:5e:a6:78:97:32:12:a0:ee:4a:a0:17:f2:4f:22:79:50:c8: 69:34:ca:e4:a6:2f:86:20:63:6f:1c:46:72:41:b2:e5:8c:e6: bf:8c:f9:a7:9e:25:56:5b:cb:66:9e:04:fe:06:51:2a:18:9c: 36:99:2d:75:89:a5:fa:4f:f7:2a:30:cc:49:a3:ae:ff:8a:43: da:cb:96:97:69:5e:62:34:0c:f5:3e:b9:e8:1c:e0:e7:0c:a4: dd:f5:9d:10:91:11:d3:b5:26:c9:31:e0:e0:a7:0a:30:25:73: 31:1b:0d:79:8f:4d:5c:71:4b:a6:95:00:4d:10:31:5f:2b:01: b4:af:bf:65:13:1d:30:b6:e6:de:cb:d4:7f:e8:9e:59:7a:4a: 45:9e:34:00:20:1d:40:90:01:30:a8:83:91:f2:3f:31:9c:8f: e3:1e:53:86:0b:96:f8:5a:48:a4:a7:71:41:aa:0b:ca:ea:be: d0:6f:d8:d4:d5:f3:4f:07:42:fb:ef:5e:0b:18:a2:10:30:05: 84:8d:bd:41:07:f8:18:76:bc:d6:a8:c0:7a:f5:8c:7d:25:3a: 56:fb:b0:76:4c:3f:c6:84:c0:da:95:75:7a:87:fc:8c:4d:eb: 2b:ec:08:05:7d:20:65:66:56:8d:37:b8:fa:7e:d5:1d:bb:4c: a0:f2:c6:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RBRkIxMTAvBgNVBAUTKDA5RTkwNTc3NDdGNjNCQTBBMjgxQUU3ODAxMzY2OENF REVBNDBBQjQwHhcNMjUxMjIzMDE0NDE1WhcNMjUxMjMwMDE0NDE1WjAYMRYwFAYD VQQDDA02OTQ5ZjNlZi0yZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fHaVimSftO213VLNPNbu7H1yCIMhtqr5Kgdw0XPVnEd5UEuipY3drY6j36D mWFKvMhf5sNFGjz5SzqhVkkif2HnwfqHLJvW2M3C6JXmp1afhW6EpxHNLBZHMjP8 s7XVwDMo3cfZLWpeInJHG5g61opCa2tZVophpMvttzLfwR2uyjounRbklNu+KkYC hxwVJALE60T+O6pXZbLN3+Rv6u8aUAom5WKCOzLwL3AQesnndujwKBnl/VqyA06J WawVIeynC5DgZdqYHgQKI+xhcnThqUts/g3zgsMEviE8L7ngQWz439+LMXaI71FA kGFTVWv/3PhmzjAt3Wq8Xx+rowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfneC9a wzlA3ghT0Qo9wh7+TSK8MB8GA1UdIwQYMBaAFAnpBXdH9jugooGueAE2aM7epAq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREFGQi9FQzBGNkEzODAz NDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82Q2lnYTU0QVRab3p0NmtD clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nla0ZkMGYyTzZDaWdhNTRBVFpvenQ2a0NyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REFGQi9FQzBGNkEzODAzNDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82 Q2lnYTU0QVRab3p0NmtDclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYXqZ4lzISoO5KoBfyTyJ5UMhpNMrkpi+GIGNvHEZyQbLljOa/jPmn niVWW8tmngT+BlEqGJw2mS11iaX6T/cqMMxJo67/ikPay5aXaV5iNAz1PrnoHODn DKTd9Z0QkRHTtSbJMeDgpwowJXMxGw15j01ccUumlQBNEDFfKwG0r79lEx0wtube y9R/6J5ZekpFnjQAIB1AkAEwqIOR8j8xnI/jHlOGC5b4Wkikp3FBqgvK6r7Qb9jU 1fNPB0L7714LGKIQMAWEjb1BB/gYdrzWqMB69Yx9JTpW+7B2TD/GhMDalXV6h/yM Tesr7AgFfSBlZlaNN7j6ftUdu0yg8sZC -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:18 2025 by rpki-client