This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json) Hash identifier: GgMoyUDUfnq0y9UtOrgWltiITaTnIvfqKztyPH9fvzA= Subject key identifier: 9F:8D:DB:C5:0D:F9:03:32:E2:5B:C3:3F:64:45:4E:92:EE:F6:5D:BC Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0BCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft Manifest number: 0B6D Signing time: Thu 18 Dec 2025 18:57:31 +0000 Manifest this update: Thu 18 Dec 2025 18:57:30 +0000 Manifest next update: Thu 25 Dec 2025 18:57:30 +0000 Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: 76yLad/8ZV26Ynv/CR3+VIV1iFejG0oyMOxTui56AiM=) 2: B66F0C58817111EFB121970CC4F9AE02.roa (hash: mu1iARnCi5kA2mbUie8M1ra9hiXhkaHe7HXaTEKFUdU=) 3: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: Gi3ZB3u4tIqQA57JWptzmGj4T0h+RzUq8o/c0VetBYI=) 4: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: TTlhGhUAD/2NGqtgzSrC9HKcOBdgmaTheq7ErX+FNZ4=) 5: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: YF3wvRDD0dzUZakdeFWJrsLYoJUpMBgClY/hZFPMmvI=) 6: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: 3JOJzRv4irtlrsMwD4nhQQebwbICPddO6QXSBTA7ZXU=) 7: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: eR1CwoT+DNfBY5Fom2xgTVdBct441pK1ZuTbHGG+Djc=) 8: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: lgdsNT8nYBqcm8DCsobXOW7p2S7NgKOOoWUT5xQjbBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3019 (0xbcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Dec 18 18:57:30 2025 GMT Not After : Dec 25 18:57:30 2025 GMT Subject: CN=69444e9a-c3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:a1:80:b9:46:ba:db:bf:81:e4:23:26:8a: 7d:96:d3:aa:d8:fd:75:65:e9:07:56:53:d2:1b:01: 62:28:aa:ee:31:29:a5:5d:1e:bf:4c:38:42:29:91: 52:d5:c0:6c:ed:be:0c:61:db:33:1e:ec:d5:43:e5: 72:ef:e0:11:0b:5f:3f:09:18:4a:46:bc:d5:c1:92: e8:79:f0:de:32:ef:9f:e5:d5:9f:b9:75:2c:48:e6: 07:42:a0:5c:59:52:ab:05:9e:40:5a:03:e8:a8:a7: 24:7f:16:5d:63:30:e1:62:c4:bd:8b:ee:16:29:97: 57:d8:b6:63:39:9f:7c:b0:9c:70:cd:c6:c7:02:6a: 8f:b9:e9:b8:fa:57:d8:65:4c:7c:5d:70:41:4b:e3: ab:1b:69:57:c3:fc:7d:2e:76:04:e7:e0:8d:53:bd: 0a:46:2e:77:ba:a0:e6:34:69:1e:f0:91:41:2e:24: 0d:4b:80:af:4d:a1:7e:35:fb:6c:fb:6c:03:ca:ba: dd:57:6f:3b:74:0e:1a:66:05:3f:89:39:b7:20:5b: 30:12:e3:ac:8d:b5:6d:1e:6c:00:33:62:f0:14:a3: e5:86:11:57:bd:dc:0e:d8:74:3a:f3:a2:aa:9c:5e: 22:d8:50:be:45:55:9b:bd:82:95:a8:bc:c0:b5:fe: d7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8D:DB:C5:0D:F9:03:32:E2:5B:C3:3F:64:45:4E:92:EE:F6:5D:BC X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:f4:cc:35:06:8b:86:cc:74:37:91:6d:3e:de:3b:d3:2a:39: 2a:8d:59:5b:0f:88:ef:91:3d:2d:b6:09:c6:0f:dc:d4:ee:c2: f8:a0:d0:2a:64:ee:27:13:c7:98:2c:1b:36:f6:23:00:a3:ce: 4c:34:76:37:0b:9f:de:3d:37:1f:9b:2f:0d:0d:e1:55:df:92: a7:69:5e:a6:53:45:c1:1d:0d:db:3f:84:0d:bd:2e:bd:50:a4: 99:05:95:79:b3:23:28:ea:fb:28:a6:7a:71:34:b4:fb:fb:ae: 88:ce:3f:5e:54:66:e9:d9:00:09:37:81:29:72:85:ef:dd:5a: 2b:64:9b:14:53:66:cc:54:31:c8:dc:a2:c8:fc:01:0a:e5:99: df:3f:10:dc:bd:9a:db:fb:e3:db:2c:23:5c:f2:ce:6e:8f:8e: e5:a1:7e:c4:2a:5c:53:f4:ff:42:e1:a0:1c:3c:0b:32:47:07: d5:26:56:ea:78:fa:bc:63:85:0b:3c:f2:02:67:b0:7a:5e:70: 74:db:9c:53:79:ff:14:79:f7:de:a9:7b:c3:65:23:59:47:9f: 0e:6f:59:1b:f9:7e:d2:e6:08:69:5d:8c:62:f8:5f:07:a8:04: cc:ae:96:7c:03:11:22:0f:bb:71:00:98:ab:f8:d6:63:35:a8: d8:38:92:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjUxMjE4MTg1NzMwWhcNMjUxMjI1MTg1NzMwWjAYMRYwFAYD VQQDDA02OTQ0NGU5YS1jM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+ahgLlGutu/geQjJop9ltOq2P11ZekHVlPSGwFiKKruMSmlXR6/TDhCKZFS 1cBs7b4MYdszHuzVQ+Vy7+ARC18/CRhKRrzVwZLoefDeMu+f5dWfuXUsSOYHQqBc WVKrBZ5AWgPoqKckfxZdYzDhYsS9i+4WKZdX2LZjOZ98sJxwzcbHAmqPuem4+lfY ZUx8XXBBS+OrG2lXw/x9LnYE5+CNU70KRi53uqDmNGke8JFBLiQNS4CvTaF+Nfts +2wDyrrdV287dA4aZgU/iTm3IFswEuOsjbVtHmwAM2LwFKPlhhFXvdwO2HQ686Kq nF4i2FC+RVWbvYKVqLzAtf7XywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+N28UN +QMy4lvDP2RFTpLu9l28MB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi9Mw1BouGzHQ3kW0+3jvTKjkqjVlbD4jvkT0ttgnGD9zU7sL4oNAq ZO4nE8eYLBs29iMAo85MNHY3C5/ePTcfmy8NDeFV35KnaV6mU0XBHQ3bP4QNvS69 UKSZBZV5syMo6vsopnpxNLT7+66Izj9eVGbp2QAJN4EpcoXv3VorZJsUU2bMVDHI 3KLI/AEK5ZnfPxDcvZrb++PbLCNc8s5uj47loX7EKlxT9P9C4aAcPAsyRwfVJlbq ePq8Y4ULPPICZ7B6XnB025xTef8UeffeqXvDZSNZR58Ob1kb+X7S5ghpXYxi+F8H qATMrpZ8AxEiD7txAJir+NZjNajYOJIR -----END CERTIFICATE-----Generated at Fri Dec 19 08:00:29 2025 by rpki-client