This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft File: 148wkE5135TOt1lmr4OOdj6ol2I.mft (raw, json) Hash identifier: L8zQOCyu4IFww7vI7lwzwih3O+dHXctYNXI7PRg/6/E= Subject key identifier: 66:7C:3C:67:3E:3E:F5:3F:23:6F:C8:C1:DF:7F:AC:23:73:62:E8:8C Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 Certificate issuer: /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft Manifest number: 012B Signing time: Sun 21 Dec 2025 03:48:20 +0000 Manifest this update: Sun 21 Dec 2025 03:48:20 +0000 Manifest next update: Sun 28 Dec 2025 03:48:20 +0000 Files and hashes: 1: 148wkE5135TOt1lmr4OOdj6ol2I.crl (hash: nX/X50XZ8K6uKtZFwof2wHkxrSI9O63nC6zQBQIAs+Y=) 2: B74BF7F018BF11EFB54AFB20C4F9AE02.roa (hash: +v9ocLXg3YzZw7HHn7yYFOAlsFrXXQzQx6yND19fOBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE403, serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Validity Not Before: Dec 21 03:48:20 2025 GMT Not After : Dec 28 03:48:20 2025 GMT Subject: CN=69476e04-6f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:57:37:4c:e3:bc:8b:09:79:c6:8b:32:6f:cf: 54:c2:52:fe:03:a9:79:d7:ba:0f:0e:5b:cf:42:20: 4f:68:ab:9c:f8:1b:27:27:64:a5:f4:b7:89:ce:66: f4:95:62:f6:3d:51:bc:7c:54:83:1b:8f:54:5f:97: 61:f4:8a:36:f9:a7:48:0e:d3:62:27:77:a3:87:78: f0:ea:12:97:be:4a:5c:49:31:3f:37:0d:7f:2c:bb: 15:7c:40:7c:05:62:51:c5:03:17:07:be:d9:4f:50: 63:f1:9c:5d:ba:c0:1f:2d:dc:43:a6:b0:3a:a0:13: 73:05:84:cc:ed:60:c2:27:08:83:f4:44:5b:e0:9a: cf:49:db:47:88:b6:cb:8b:d2:53:cf:5d:78:d0:57: 6d:f3:0f:83:eb:d3:16:c0:e5:fa:5c:78:d1:63:d3: a8:f9:de:a7:4b:b5:d7:19:86:b7:0d:19:80:0f:01: 54:a5:cc:f2:c5:9d:b5:8c:28:21:4b:05:a4:46:2c: f1:13:bb:e8:e7:c1:04:fc:89:ad:42:c3:31:82:98: 8f:2b:22:aa:49:3b:18:9f:4f:9a:10:a8:d7:d5:7e: d8:de:cc:d8:7a:2a:fa:9d:fc:25:a2:28:58:bb:b0: a9:ea:3e:ed:61:44:43:e1:65:1e:52:77:35:ed:15: 31:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7C:3C:67:3E:3E:F5:3F:23:6F:C8:C1:DF:7F:AC:23:73:62:E8:8C X509v3 Authority Key Identifier: keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:07:fb:02:db:71:7e:0c:dd:aa:dd:8e:d3:3e:50:40:e5:67: f2:08:1d:66:dc:f9:e5:73:21:4a:6c:ac:89:63:4c:c2:70:ba: f3:e8:ef:b0:6b:cb:10:39:91:0b:52:44:ee:69:27:82:e6:a8: eb:90:e8:d6:89:6b:43:af:c2:a0:97:41:84:b3:22:a8:19:ae: 03:df:52:de:6d:c4:11:11:10:d2:74:87:6a:c8:a5:a0:94:b0: 36:46:b5:ad:7a:40:6c:5f:50:14:cc:47:f9:96:41:73:30:75: b1:8e:1d:85:e4:6d:ac:4d:f9:72:92:90:1c:22:8e:94:8e:0e: 9c:7d:f5:77:2e:60:64:35:41:cd:b1:6c:fe:16:62:c3:af:37: f9:f4:ee:32:59:5f:14:03:7a:80:38:8c:08:6a:c2:ed:51:97: b0:a3:58:7a:87:09:1f:02:bc:46:dc:af:05:a3:3f:ac:f0:5e: 33:1e:7d:c2:1d:c3:54:9e:2d:52:4f:09:ee:03:d8:8d:ed:25: f9:b3:df:0e:aa:bd:4c:90:64:6a:92:71:49:f4:59:8c:95:44: 60:a0:7c:e6:20:57:19:8c:0f:d1:d3:62:79:2f:81:1d:1e:bf: 93:95:a4:fe:79:61:25:6d:e6:af:ce:2d:0e:bd:56:76:2e:ee: 40:95:4f:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0MDMxMTAvBgNVBAUTKEQ3OEYzMDkwNEU3NURGOTRDRUI3NTk2NkFGODM4RTc2 M0VBODk3NjIwHhcNMjUxMjIxMDM0ODIwWhcNMjUxMjI4MDM0ODIwWjAYMRYwFAYD VQQDDA02OTQ3NmUwNC02ZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFc3TOO8iwl5xosyb89UwlL+A6l517oPDlvPQiBPaKuc+BsnJ2Sl9LeJzmb0 lWL2PVG8fFSDG49UX5dh9Io2+adIDtNiJ3ejh3jw6hKXvkpcSTE/Nw1/LLsVfEB8 BWJRxQMXB77ZT1Bj8ZxdusAfLdxDprA6oBNzBYTM7WDCJwiD9ERb4JrPSdtHiLbL i9JTz1140Fdt8w+D69MWwOX6XHjRY9Oo+d6nS7XXGYa3DRmADwFUpczyxZ21jCgh SwWkRizxE7vo58EE/ImtQsMxgpiPKyKqSTsYn0+aEKjX1X7Y3szYeir6nfwloihY u7Cp6j7tYURD4WUeUnc17RUxSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZ8PGc+ PvU/I2/Iwd9/rCNzYuiMMB8GA1UdIwQYMBaAFNePMJBOdd+UzrdZZq+DjnY+qJdi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTQwMy84MDIwNzJFODE4 QkUxMUVGQURBN0U1MURDNEY5QUUwMi8xNDh3a0U1MTM1VE90MWxtcjRPT2RqNm9s MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE0OHdrRTUxMzVUT3QxbG1yNE9PZGo2b2wySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTQwMy84MDIwNzJFODE4QkUxMUVGQURBN0U1MURDNEY5QUUwMi8xNDh3a0U1MTM1 VE90MWxtcjRPT2RqNm9sMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANB/sC23F+DN2q3Y7TPlBA5WfyCB1m3PnlcyFKbKyJY0zCcLrz6O+w a8sQOZELUkTuaSeC5qjrkOjWiWtDr8Kgl0GEsyKoGa4D31LebcQRERDSdIdqyKWg lLA2RrWtekBsX1AUzEf5lkFzMHWxjh2F5G2sTflykpAcIo6Ujg6cffV3LmBkNUHN sWz+FmLDrzf59O4yWV8UA3qAOIwIasLtUZewo1h6hwkfArxG3K8Foz+s8F4zHn3C HcNUni1STwnuA9iN7SX5s98Oqr1MkGRqknFJ9FmMlURgoHzmIFcZjA/R02J5L4Ed Hr+TlaT+eWElbeavzi0OvVZ2Lu5AlU+F -----END CERTIFICATE-----Generated at Mon Dec 22 04:26:41 2025 by rpki-client