This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft File: CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft (raw, json) Hash identifier: ilf/0oHQwJYRhghwquTAcdok5U2TBxN1ifE7D6stnKY= Subject key identifier: 89:23:10:EE:0F:F2:CF:B1:4E:53:6A:B3:6A:93:C8:79:8E:55:C3:DF Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E Certificate issuer: /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Certificate serial: 19B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft Manifest number: 19A9 Signing time: Mon 22 Dec 2025 16:09:21 +0000 Manifest this update: Mon 22 Dec 2025 16:09:21 +0000 Manifest next update: Mon 29 Dec 2025 16:09:21 +0000 Files and hashes: 1: CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl (hash: SnFoxwEVPrjduji7IE87ukRuwn66TnQtQtPWH4ZnAmk=) 2: 290732FC79A211E79F34D81FC4F9AE02.roa (hash: SR7eVnerj/ud7fW+5gtERIt5ClN7aXRbGYLPuzi6Nlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6581 (0x19b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE533, serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Validity Not Before: Dec 22 16:09:21 2025 GMT Not After : Dec 29 16:09:21 2025 GMT Subject: CN=69496d31-6ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7e:0d:58:32:01:95:84:1d:d6:86:6b:5f:ee: 9a:85:fa:eb:ec:3c:80:7e:86:95:7e:a9:fe:aa:4b: 93:be:a1:6f:f5:21:59:22:55:5c:a4:e1:65:2b:44: fb:a6:2b:97:00:6a:54:eb:ff:1a:c5:79:57:eb:50: 38:87:8c:f2:d4:0d:2b:c1:30:a3:44:8a:3b:12:0c: 8c:b7:cb:73:9c:ef:99:d3:7e:fb:54:d3:71:73:99: 9f:bb:f7:e5:88:5b:b2:89:d9:92:9b:08:d2:51:13: 21:de:e2:5a:7f:80:4e:f8:5c:74:fc:73:36:fd:09: 72:0b:40:60:66:56:9e:13:23:ca:35:25:8a:f6:0a: 0b:e9:a5:e8:69:48:c1:b0:4f:a7:92:14:ec:1a:7c: 39:8d:45:72:c0:d1:6f:54:f1:3b:72:46:96:1b:cf: 72:d8:be:a1:7d:9c:69:c3:83:a9:af:88:46:61:f0: 86:27:84:c3:46:9a:a0:90:5d:02:79:17:ad:ea:52: 14:36:9a:85:d9:ce:3d:f6:ed:54:df:55:fd:d8:98: 45:3c:b3:29:01:71:61:a7:65:02:ec:bc:cc:c9:60: bc:45:94:34:c4:67:2a:c7:b8:59:e5:d8:9f:d6:8f: b3:9b:9c:b3:09:86:0f:52:b0:8b:2f:d8:71:b8:ff: 09:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:23:10:EE:0F:F2:CF:B1:4E:53:6A:B3:6A:93:C8:79:8E:55:C3:DF X509v3 Authority Key Identifier: keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:87:43:5e:c1:a0:28:48:78:60:e2:6e:5b:a1:f7:af:d2:fb: ca:c8:32:e7:82:23:30:96:e7:57:22:38:81:20:f4:e4:31:8c: 65:f3:c3:ed:55:1b:3b:d2:0b:f4:d8:6c:76:76:7c:06:7a:0c: 8c:a9:73:3e:fe:ba:f3:71:1d:70:c2:d3:79:80:14:de:28:f8: 2d:cb:f1:c5:c0:02:f0:7f:b0:dd:1a:c1:23:03:5c:22:be:c6: 42:1e:60:93:a0:3d:ca:24:3a:59:85:61:92:83:c8:dc:9b:e1: 59:e8:e7:e5:4e:b3:26:30:56:66:fc:6b:a5:a0:d9:63:58:05: 79:ab:c3:d9:26:b8:c8:90:c3:0e:02:15:db:1b:57:a4:e7:80: 17:9d:45:fa:30:f1:54:87:29:09:f0:0e:88:f6:4c:94:01:4f: 72:d3:40:d5:d4:1c:4c:63:68:35:7a:1e:e7:d2:43:64:58:29: 78:ce:66:c6:d0:c7:ce:09:cb:63:58:08:d2:82:ff:f8:d3:d2: dc:c6:f4:50:6a:ef:30:f1:82:78:9d:fe:d0:85:84:7c:00:df: 27:4f:f4:ca:16:63:0d:09:2e:82:88:7f:58:00:3d:53:c2:54: d1:a8:66:3d:d5:b8:7d:64:2a:0a:d2:9a:fc:44:41:24:69:43: 64:71:d8:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MzMxMTAvBgNVBAUTKDA5QTNFQ0M0OUY4M0E3OThBRTEzOUYxRENCQzUzNkVF NkY2N0NFN0UwHhcNMjUxMjIyMTYwOTIxWhcNMjUxMjI5MTYwOTIxWjAYMRYwFAYD VQQDDA02OTQ5NmQzMS02YWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoH4NWDIBlYQd1oZrX+6ahfrr7DyAfoaVfqn+qkuTvqFv9SFZIlVcpOFlK0T7 piuXAGpU6/8axXlX61A4h4zy1A0rwTCjRIo7EgyMt8tznO+Z0377VNNxc5mfu/fl iFuyidmSmwjSURMh3uJaf4BO+Fx0/HM2/QlyC0BgZlaeEyPKNSWK9goL6aXoaUjB sE+nkhTsGnw5jUVywNFvVPE7ckaWG89y2L6hfZxpw4Opr4hGYfCGJ4TDRpqgkF0C eRet6lIUNpqF2c499u1U31X92JhFPLMpAXFhp2UC7LzMyWC8RZQ0xGcqx7hZ5dif 1o+zm5yzCYYPUrCLL9hxuP8JUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkjEO4P 8s+xTlNqs2qTyHmOVcPfMB8GA1UdIwQYMBaAFAmj7MSfg6eYrhOfHcvFNu5vZ85+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUzMy9FOEZENEZBNDc5 OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1aXVFNThkeThVMjdtOW56 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhUHN4Si1EcDVpdUU1OGR5OFUyN205bnpuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUzMy9FOEZENEZBNDc5OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1 aXVFNThkeThVMjdtOW56bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfh0NewaAoSHhg4m5bofev0vvKyDLngiMwludXIjiBIPTkMYxl88Pt VRs70gv02Gx2dnwGegyMqXM+/rrzcR1wwtN5gBTeKPgty/HFwALwf7DdGsEjA1wi vsZCHmCToD3KJDpZhWGSg8jcm+FZ6OflTrMmMFZm/GuloNljWAV5q8PZJrjIkMMO AhXbG1ek54AXnUX6MPFUhykJ8A6I9kyUAU9y00DV1BxMY2g1eh7n0kNkWCl4zmbG 0MfOCctjWAjSgv/409LcxvRQau8w8YJ4nf7QhYR8AN8nT/TKFmMNCS6CiH9YAD1T wlTRqGY91bh9ZCoK0pr8REEkaUNkcdjQ -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:55 2025 by rpki-client