This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft File: g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json) Hash identifier: gKWvtRHBddgCiKP3A9cuxJ350yxYcGnkN+sdZlGvYcM= Subject key identifier: 9C:EB:0D:ED:8A:34:CB:BF:A0:E7:0C:F5:1C:93:2F:FF:C2:67:33:40 Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 Certificate issuer: /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft Manifest number: 0146 Signing time: Tue 23 Dec 2025 03:21:23 +0000 Manifest this update: Tue 23 Dec 2025 03:21:23 +0000 Manifest next update: Tue 30 Dec 2025 03:21:23 +0000 Files and hashes: 1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: rjq+VBBHmT8bgffuKkWEQMR1bNbcUeixRXXQSfG5ZlM=) 2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: Vp6oIV4Kwe3FgHjDClftctReHYiAIs5p4BPX7qetipE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4A3A, serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Validity Not Before: Dec 23 03:21:23 2025 GMT Not After : Dec 30 03:21:23 2025 GMT Subject: CN=694a0ab3-a8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:96:10:45:26:1a:80:ee:d4:10:58:2f:0b: 38:d8:b9:db:56:f7:48:06:06:eb:5b:97:20:18:b3: 15:5f:ae:b4:b6:38:e5:bc:70:ae:a0:cc:31:e7:d4: ec:44:6e:7f:9d:4f:37:77:bc:1b:7b:84:b8:4e:67: 40:cc:06:f9:33:52:71:b7:47:4f:ff:0b:97:4c:b1: 45:30:9f:86:36:77:d1:42:1f:dd:24:79:1e:34:2a: 35:b0:0f:dc:c8:b9:41:ac:8d:1a:32:9c:69:e7:1f: 35:8c:35:29:ab:cb:4e:19:c4:5b:3a:c8:b5:15:1d: 5f:4c:a0:bf:c4:7e:e3:17:fc:ff:19:0f:e6:07:4d: 35:8f:54:88:29:4a:95:04:a4:82:76:ff:2d:7a:a8: 13:ee:b9:12:73:d1:2f:ab:99:41:d1:d9:94:6e:28: e8:49:d4:7d:48:4d:f1:5d:7a:85:d0:05:1e:ae:9e: b5:1f:14:ed:a9:d5:a3:ed:4a:67:8d:f9:92:65:4f: e8:32:8f:8d:e0:5c:00:17:b5:1b:0d:81:d4:f6:7d: 81:da:42:e8:5f:6c:35:88:a0:a2:f2:fc:81:1e:9a: a2:9f:42:7f:ce:d0:81:09:0e:eb:f0:4b:36:58:bc: fd:dc:85:9e:23:cc:cc:7b:4d:03:09:f7:22:33:a9: 88:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EB:0D:ED:8A:34:CB:BF:A0:E7:0C:F5:1C:93:2F:FF:C2:67:33:40 X509v3 Authority Key Identifier: keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:75:73:6f:f9:52:21:27:18:94:43:73:4d:d5:a9:80:79:6d: 1f:d1:6c:5b:44:9c:2a:8d:05:dd:15:4e:26:3d:25:9f:f8:b1: ce:01:e3:17:49:ea:51:bd:a7:af:7a:76:cd:c7:5c:8b:07:8a: 50:f4:3b:28:19:d8:57:3c:e6:08:98:1b:3b:65:55:e8:1d:d8: 8e:f3:ca:92:7e:17:1d:9a:1e:e4:80:ed:9d:d0:50:ca:24:92: 00:fc:0b:8d:17:ed:cf:85:5d:b5:e2:45:e1:8e:8c:c5:89:01: 4d:42:96:8a:28:1d:d1:ad:07:8d:e3:ec:5b:fd:6f:98:93:64: f3:ef:a0:97:a8:e2:15:59:56:15:2d:c7:a0:f5:54:60:28:68: ff:bf:a4:7c:f7:2b:9e:6e:f1:4b:9c:c0:d9:9b:f0:f0:68:48: 63:f0:f5:d2:64:cc:3a:bd:3d:92:25:6a:de:a7:6e:b9:bb:fa: 06:a7:48:35:3c:90:9d:08:c3:fb:98:54:ad:a4:44:38:68:46: 36:ba:fd:fd:31:79:25:d5:c4:ca:65:62:fe:ce:9b:46:bd:e3: bf:ce:4d:9c:c9:21:63:2c:24:a0:ab:f7:50:7a:e9:3f:24:87: d8:ab:f1:0d:68:c4:bb:0b:e3:dc:db:d0:d9:4a:3a:96:e3:dc: 3b:f0:7f:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBM0ExMTAvBgNVBAUTKDgzRTRCQ0I3NjNCOENFRDAzNjUxOTBFNzI4MEYwQTZB MzRCMzVCNTEwHhcNMjUxMjIzMDMyMTIzWhcNMjUxMjMwMDMyMTIzWjAYMRYwFAYD VQQDDA02OTRhMGFiMy1hOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvp+WEEUmGoDu1BBYLws42LnbVvdIBgbrW5cgGLMVX660tjjlvHCuoMwx59Ts RG5/nU83d7wbe4S4TmdAzAb5M1Jxt0dP/wuXTLFFMJ+GNnfRQh/dJHkeNCo1sA/c yLlBrI0aMpxp5x81jDUpq8tOGcRbOsi1FR1fTKC/xH7jF/z/GQ/mB001j1SIKUqV BKSCdv8teqgT7rkSc9Evq5lB0dmUbijoSdR9SE3xXXqF0AUerp61HxTtqdWj7Upn jfmSZU/oMo+N4FwAF7UbDYHU9n2B2kLoX2w1iKCi8vyBHpqin0J/ztCBCQ7r8Es2 WLz93IWeI8zMe00DCfciM6mIEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzrDe2K NMu/oOcM9RyTL//CZzNAMB8GA1UdIwQYMBaAFIPkvLdjuM7QNlGQ5ygPCmo0s1tR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEEzQS8xODE0RjM2NkVD QjUxMUVFQTQ2NTAzMzdDNEY5QUUwMi9nLVM4dDJPNHp0QTJVWkRuS0E4S2FqU3pX MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ctUzh0Mk80enRBMlVaRG5LQThLYWpTelcxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEEzQS8xODE0RjM2NkVDQjUxMUVFQTQ2NTAzMzdDNEY5QUUwMi9nLVM4dDJPNHp0 QTJVWkRuS0E4S2FqU3pXMUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8dXNv+VIhJxiUQ3NN1amAeW0f0WxbRJwqjQXdFU4mPSWf+LHOAeMX SepRvaevenbNx1yLB4pQ9DsoGdhXPOYImBs7ZVXoHdiO88qSfhcdmh7kgO2d0FDK JJIA/AuNF+3PhV214kXhjozFiQFNQpaKKB3RrQeN4+xb/W+Yk2Tz76CXqOIVWVYV Lceg9VRgKGj/v6R89yuebvFLnMDZm/DwaEhj8PXSZMw6vT2SJWrep265u/oGp0g1 PJCdCMP7mFStpEQ4aEY2uv39MXkl1cTKZWL+zptGveO/zk2cySFjLCSgq/dQeuk/ JIfYq/ENaMS7C+Pc29DZSjqW49w78H8w -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:35 2025 by rpki-client