This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft File: RRIms-l3zxGWF1WwaTfB9-c13F4.mft (raw, json) Hash identifier: qJUh5mgfK/vPDbdEVDkmHvtsgO2/aq39uJV58A0hLho= Subject key identifier: E1:F1:AA:C6:F6:78:C5:AD:15:C9:04:5B:21:85:E8:23:9F:42:C0:2B Authority key identifier: 45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E Certificate issuer: /CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E Certificate serial: 0740 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft Manifest number: 072B Signing time: Sat 20 Dec 2025 21:10:02 +0000 Manifest this update: Sat 20 Dec 2025 21:10:02 +0000 Manifest next update: Sat 27 Dec 2025 21:10:02 +0000 Files and hashes: 1: RRIms-l3zxGWF1WwaTfB9-c13F4.crl (hash: v8AUEGMovtcY2JQrVRmcWuPUJ+Ob8XoksIRRPPgcprs=) 2: 4D5AE9DC5EEB11EB9D80C03EC4F9AE02.roa (hash: jYfZr7/iFVYF5J1j6a8BqeR3kIi6XvCYwk4AnIjqfgg=) 3: 76A8A3E460F111EBBA7FFA79C4F9AE02.roa (hash: g2lfXdwkotQXY9cMG0/cbM9bl8KUkelXULfBurO9D/A=) 4: 277A0A5A642B11EBBB477E4EC4F9AE02.roa (hash: i0LX5QdlbizZ0/uveNFuURibPjijIfLWLYK4vXt9/Xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1856 (0x740) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D18DA, serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E Validity Not Before: Dec 20 21:10:02 2025 GMT Not After : Dec 27 21:10:02 2025 GMT Subject: CN=694710aa-5690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:88:af:da:97:14:e1:86:f7:dd:be:40:d6: 1f:e1:5e:54:06:6e:dc:6f:de:08:93:0f:f6:65:06: 48:0f:47:90:66:50:eb:4f:5d:f9:ed:b7:b3:2b:b7: 4b:de:34:2d:ce:74:a9:f7:88:ae:50:bc:df:d9:16: 21:45:e0:bc:e5:59:cb:cc:84:ed:7c:61:e1:f2:2b: c8:2c:24:60:08:78:35:23:05:50:37:29:47:5b:51: 34:82:55:ec:df:99:b9:e0:0f:f8:09:82:c8:57:98: 04:54:1f:b9:29:d8:18:ce:d0:b9:7d:fc:2b:3b:c2: 3b:ff:99:1b:34:5b:2d:d9:d7:f1:d1:37:fe:9a:33: 85:e8:87:bd:95:99:61:4f:52:93:da:58:23:87:6a: 7c:5c:7d:0f:37:d7:ef:36:93:52:32:29:35:25:9c: f0:a5:8a:c6:f5:fb:f5:51:c5:37:e5:32:24:5c:53: db:4e:e9:45:10:d8:aa:da:4a:e8:ba:ac:b7:c7:da: 3f:4a:2c:ed:e9:25:d2:48:14:9f:9c:2a:78:c9:9f: ea:c3:6a:92:1a:93:87:cb:74:9d:29:3f:11:b9:27: 66:c8:74:6f:08:42:cf:e7:ce:07:3a:ad:05:e0:17: 86:9d:0a:86:ab:25:09:f2:4f:d4:7d:15:be:14:82: 8a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F1:AA:C6:F6:78:C5:AD:15:C9:04:5B:21:85:E8:23:9F:42:C0:2B X509v3 Authority Key Identifier: keyid:45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:7c:3c:96:4a:57:18:56:01:96:c8:dc:5b:d1:70:6d:a8:78: 6b:79:19:e5:bb:29:21:eb:bf:d7:d2:b2:09:ac:30:f9:43:44: c8:b6:d0:68:18:85:26:c0:25:a0:3e:d2:94:f2:09:8e:47:24: 53:66:51:c6:1e:91:de:6c:ec:c7:2b:40:44:df:e5:b0:87:2d: 6a:71:d8:13:49:ea:d4:96:25:63:38:e7:9d:55:f9:49:be:cc: 39:1c:ef:f8:97:ab:41:bc:63:3a:67:b1:44:04:d8:fa:31:4a: 16:75:7b:16:db:2a:b7:6f:c7:96:59:49:00:20:b5:12:44:9d: cb:70:36:97:29:ab:d8:40:42:32:2d:75:2e:ed:27:b0:5c:56: 6a:39:0d:8d:c2:1e:b2:ed:92:5e:f0:a0:0f:be:63:82:32:31: 47:27:0c:64:d8:13:dc:1d:42:fa:4c:5d:07:39:57:9d:84:3c: fe:20:ac:f1:10:70:d6:a8:f7:ab:3d:63:3c:f7:b1:3f:cf:c1: a4:bc:35:54:ee:e4:db:8e:ef:1c:01:5e:02:d7:34:7e:32:3a: f5:7b:e3:41:31:60:11:8f:bb:17:68:98:a5:44:3d:04:65:dd: 0b:4d:ac:50:2e:80:ff:fd:65:2c:4e:a9:d8:11:4a:96:ec:a7: bf:a6:a0:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE4REExMTAvBgNVBAUTKDQ1MTIyNkIzRTk3N0NGMTE5NjE3NTVCMDY5MzdDMUY3 RTczNURDNUUwHhcNMjUxMjIwMjExMDAyWhcNMjUxMjI3MjExMDAyWjAYMRYwFAYD VQQDDA02OTQ3MTBhYS01NjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1GIr9qXFOGG992+QNYf4V5UBm7cb94Ikw/2ZQZID0eQZlDrT1357bezK7dL 3jQtznSp94iuULzf2RYhReC85VnLzITtfGHh8ivILCRgCHg1IwVQNylHW1E0glXs 35m54A/4CYLIV5gEVB+5KdgYztC5ffwrO8I7/5kbNFst2dfx0Tf+mjOF6Ie9lZlh T1KT2lgjh2p8XH0PN9fvNpNSMik1JZzwpYrG9fv1UcU35TIkXFPbTulFENiq2kro uqy3x9o/Sizt6SXSSBSfnCp4yZ/qw2qSGpOHy3SdKT8RuSdmyHRvCELP584HOq0F 4BeGnQqGqyUJ8k/UfRW+FIKKlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHxqsb2 eMWtFckEWyGF6COfQsArMB8GA1UdIwQYMBaAFEUSJrPpd88RlhdVsGk3wffnNdxe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMThEQS9ERTM4OTRFQzVF RTkxMUVCOUYzQjdGM0RDNEY5QUUwMi9SUkltcy1sM3p4R1dGMVd3YVRmQjktYzEz RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JSSW1zLWwzenhHV0YxV3dhVGZCOS1jMTNGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MThEQS9ERTM4OTRFQzVFRTkxMUVCOUYzQjdGM0RDNEY5QUUwMi9SUkltcy1sM3p4 R1dGMVd3YVRmQjktYzEzRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArfDyWSlcYVgGWyNxb0XBtqHhreRnluykh67/X0rIJrDD5Q0TIttBo GIUmwCWgPtKU8gmORyRTZlHGHpHebOzHK0BE3+Wwhy1qcdgTSerUliVjOOedVflJ vsw5HO/4l6tBvGM6Z7FEBNj6MUoWdXsW2yq3b8eWWUkAILUSRJ3LcDaXKavYQEIy LXUu7SewXFZqOQ2Nwh6y7ZJe8KAPvmOCMjFHJwxk2BPcHUL6TF0HOVedhDz+IKzx EHDWqPerPWM897E/z8GkvDVU7uTbju8cAV4C1zR+Mjr1e+NBMWARj7sXaJilRD0E Zd0LTaxQLoD//WUsTqnYEUqW7Ke/pqCL -----END CERTIFICATE-----Generated at Mon Dec 22 11:58:47 2025 by rpki-client