This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft File: esDADw_KR57kZeT39UXoyUmT1hw.mft (raw, json) Hash identifier: cSjAreR6Rgif49oe2U73oow4AvUOutDpxNxxt7CJW2k= Subject key identifier: 33:66:FD:09:06:7B:E8:39:7A:B0:37:A8:9E:36:40:1C:37:76:C4:F1 Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Certificate serial: 24B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft Manifest number: 2487 Signing time: Sat 20 Dec 2025 15:39:11 +0000 Manifest this update: Sat 20 Dec 2025 15:39:11 +0000 Manifest next update: Sat 27 Dec 2025 15:39:11 +0000 Files and hashes: 1: esDADw_KR57kZeT39UXoyUmT1hw.crl (hash: 9QyU4Y28V7AUCOLiwyFOEthTKOcpsCQZhOPilFTiIoM=) 2: E8976FF0928211EF8D2A551EC4F9AE02.roa (hash: KaXP6yLqLy6u16YQgUTkal+kksEzHmImjnWX4XyyF9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9395 (0x24b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Validity Not Before: Dec 20 15:39:11 2025 GMT Not After : Dec 27 15:39:11 2025 GMT Subject: CN=6946c31f-7090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e8:13:b3:a2:d1:cf:eb:31:76:6f:3c:8e:84: 19:3c:3d:5b:b1:f9:32:d9:b0:2e:45:56:71:4d:91: d2:b1:6b:f0:86:fa:50:92:93:ea:e8:d9:63:14:34: 4f:2e:93:f3:19:c0:1b:aa:c0:93:bb:f1:25:0e:b0: 6e:9c:62:fe:65:83:ae:2d:31:5b:66:04:1a:59:22: 9b:47:c0:5a:32:c9:af:d2:11:3d:ee:ba:07:13:46: 02:dd:c7:8b:80:7e:29:91:e8:02:85:4b:4c:33:8a: bb:58:b2:e2:da:ab:6b:b4:78:3a:07:97:85:cd:f5: b9:dc:52:71:69:3f:47:82:4a:1b:49:5c:0b:17:eb: 50:6d:ee:9b:1f:e6:b1:d1:b0:3c:c8:d7:51:40:6c: c9:32:c4:22:b6:71:c9:1e:bf:b2:c7:86:22:b9:fa: 6a:46:e4:93:41:ab:d9:30:e6:e8:28:04:9d:82:43: 11:78:a7:fa:6c:b1:5d:58:a6:e6:ff:8b:de:6a:3e: 28:c5:d9:68:8a:72:f2:2d:21:87:aa:57:f2:5d:a1: 46:e3:bd:41:1b:d8:6e:a7:f7:fb:a2:62:0b:78:12: b5:01:7a:72:41:27:9e:bd:b4:d2:56:bf:dc:a4:9f: 73:5b:01:8f:6d:a8:01:00:5c:45:d4:6f:fe:7b:19: 3d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:66:FD:09:06:7B:E8:39:7A:B0:37:A8:9E:36:40:1C:37:76:C4:F1 X509v3 Authority Key Identifier: keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:df:98:cc:50:ff:9d:1f:39:d7:e4:6f:06:da:66:44:bd:ea: 73:5e:2b:d3:11:de:cf:34:dd:4d:e3:c7:8f:f0:f9:ce:0d:bd: 5c:d9:b6:fd:47:97:e5:60:4a:aa:16:08:67:3a:f5:79:3a:85: 2d:a6:76:19:5c:dd:db:1c:85:e7:4a:18:cb:ae:e3:ec:87:58: ab:35:47:a9:19:df:c2:d3:e6:b8:85:54:05:25:e8:7d:9a:cc: 97:e4:7d:38:4f:17:ed:ee:14:e8:13:76:ea:b7:8c:f4:b9:aa: 8e:3c:4e:86:1d:9a:3e:c7:c8:cf:f6:ea:1f:ee:4f:8c:ac:36: 29:0f:0c:a8:a9:fb:c4:12:9c:50:66:86:ba:6a:83:4a:8f:31: b6:ff:06:be:db:19:1b:ad:64:c8:0d:3d:ae:1e:7e:16:0a:d2: 34:84:58:ea:a2:d6:4f:0c:42:5b:f0:85:ad:30:7c:78:7b:7a: 29:af:80:42:d5:25:b5:ee:da:e5:c2:c5:f9:31:51:d0:bc:9e: 13:9e:74:07:fc:29:da:52:10:68:4c:72:f3:57:b1:95:a6:25: b4:37:c7:c4:26:8c:a6:ac:39:24:16:53:cf:d2:c1:d0:8c:8f: a0:c6:04:39:d0:86:fa:61:17:9a:0c:f3:33:88:e5:8d:52:fb: e4:aa:73:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKDdBQzBDMDBGMEZDQTQ3OUVFNDY1RTRGN0Y1NDVFOEM5 NDk5M0Q2MUMwHhcNMjUxMjIwMTUzOTExWhcNMjUxMjI3MTUzOTExWjAYMRYwFAYD VQQDDA02OTQ2YzMxZi03MDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OgTs6LRz+sxdm88joQZPD1bsfky2bAuRVZxTZHSsWvwhvpQkpPq6NljFDRP LpPzGcAbqsCTu/ElDrBunGL+ZYOuLTFbZgQaWSKbR8BaMsmv0hE97roHE0YC3ceL gH4pkegChUtMM4q7WLLi2qtrtHg6B5eFzfW53FJxaT9HgkobSVwLF+tQbe6bH+ax 0bA8yNdRQGzJMsQitnHJHr+yx4YiufpqRuSTQavZMOboKASdgkMReKf6bLFdWKbm /4veaj4oxdloinLyLSGHqlfyXaFG471BG9hup/f7omILeBK1AXpyQSeevbTSVr/c pJ9zWwGPbagBAFxF1G/+exk9bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNm/QkG e+g5erA3qJ42QBw3dsTxMB8GA1UdIwQYMBaAFHrAwA8Pykee5GXk9/VF6MlJk9Yc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81QUZDMjY5MjY1 MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1N2taZVQzOVVYb3lVbVQx aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzREFEd19LUjU3a1plVDM5VVhveVVtVDFody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81QUZDMjY5MjY1MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1 N2taZVQzOVVYb3lVbVQxaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr35jMUP+dHznX5G8G2mZEvepzXivTEd7PNN1N48eP8PnODb1c2bb9 R5flYEqqFghnOvV5OoUtpnYZXN3bHIXnShjLruPsh1irNUepGd/C0+a4hVQFJeh9 msyX5H04Txft7hToE3bqt4z0uaqOPE6GHZo+x8jP9uof7k+MrDYpDwyoqfvEEpxQ Zoa6aoNKjzG2/wa+2xkbrWTIDT2uHn4WCtI0hFjqotZPDEJb8IWtMHx4e3opr4BC 1SW17trlwsX5MVHQvJ4TnnQH/CnaUhBoTHLzV7GVpiW0N8fEJoymrDkkFlPP0sHQ jI+gxgQ50Ib6YReaDPMziOWNUvvkqnNW -----END CERTIFICATE-----Generated at Mon Dec 22 07:58:44 2025 by rpki-client