This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft File: A0a2NPJj9jaEI52232S7us33-KQ.mft (raw, json) Hash identifier: v0CSMm2fAfCtpOixGNHZn4j57AWjVxtd8QuRYQNXr9c= Subject key identifier: 90:8D:4F:C0:11:1B:42:1F:10:84:D8:C9:D8:46:94:8F:96:27:70:39 Authority key identifier: 03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4 Certificate issuer: /CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4 Certificate serial: 11A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft Manifest number: 0F6F Signing time: Mon 22 Dec 2025 17:40:27 +0000 Manifest this update: Mon 22 Dec 2025 17:40:27 +0000 Manifest next update: Mon 29 Dec 2025 17:40:27 +0000 Files and hashes: 1: A0a2NPJj9jaEI52232S7us33-KQ.crl (hash: LbhfVXTVdrNlBJWlNORNvi8iQNYeFZc0/95BgEz/g1k=) 2: 161D8022A24611EF966F6286C4F9AE02.roa (hash: TBlZiuTwGUAL/S4SWJ+uMXyA9TxQ/N4TkgdjoflSU1k=) 3: 26DA1E16247411EA8E1A1178C4F9AE02.roa (hash: j7XNm5DKP0Bl1Qb4lNAiZR4S+roC1NEkMzkbumJCusw=) 4: F13EB484826311F092F0144AC4F9AE02.roa (hash: GZZJl1eE+4cKYzJ1SIxoVng8+8JqX7BjD1PpjJ2aFy0=) 5: 942F8E2CCB7811F08DD67782C4F9AE02.roa (hash: JiSs/MyyKf91SvEzW9GyCAyecuNfv95KJI9TELzwxYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4515 (0x11a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7156, serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4 Validity Not Before: Dec 22 17:40:27 2025 GMT Not After : Dec 29 17:40:27 2025 GMT Subject: CN=6949828b-f0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:87:64:e4:07:5b:75:fe:f3:82:2f:7d:ca:b7: 82:ab:0c:be:70:2e:ca:56:2b:33:fc:32:ad:8a:64: c8:a3:cf:98:5b:6c:60:94:7e:24:39:e4:96:51:3e: d9:2d:8e:36:94:da:75:71:2b:8b:4b:7f:f1:fa:2e: b0:03:74:7c:97:04:c8:01:8d:b7:df:a9:53:7a:25: 70:80:9c:f4:e7:bc:19:df:9c:36:5e:36:61:7f:ae: 2f:e2:1d:b2:4a:59:01:4d:d8:ee:59:05:f8:91:51: 2a:75:a0:8c:f1:fb:2b:b7:73:9d:e0:90:2b:7e:ea: 26:1d:c8:03:fa:90:c3:6e:3d:fd:35:4c:64:67:73: e6:55:b3:2c:f6:eb:cc:6f:bc:a7:8c:8f:d5:25:6b: 1c:4e:9c:a5:ed:56:1e:f6:72:2a:d3:2f:ae:19:7d: f0:62:7b:69:1f:ea:3d:a9:1a:65:57:45:68:8a:99: 20:43:77:0d:f2:9a:1c:ed:2c:e2:ba:6e:27:0f:b6: 15:b1:df:66:c5:0a:02:91:ce:ed:3c:89:7c:e9:5e: 7b:c1:da:04:28:a0:7a:67:4e:f6:77:c5:f8:53:89: f9:28:10:7c:a6:7b:4b:d5:e6:61:56:d6:46:56:ea: bd:1e:14:5f:b3:cc:2c:d0:bd:cc:e9:c6:18:d5:24: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8D:4F:C0:11:1B:42:1F:10:84:D8:C9:D8:46:94:8F:96:27:70:39 X509v3 Authority Key Identifier: keyid:03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:7c:f9:4c:c5:57:e7:61:e7:ea:82:fb:d7:da:c1:95:40:08: 62:9f:ad:0d:5b:3f:31:de:8c:0e:72:b2:9d:b6:bd:0f:3b:02: 3d:4c:68:62:e6:f6:ca:e8:15:a9:cc:d9:87:67:56:59:97:6f: c0:c2:f1:00:b2:24:90:a0:ad:f1:1e:da:94:d7:f0:84:2b:8a: f2:db:35:28:5f:bb:3b:4a:e5:d6:32:b4:a5:34:51:fc:e0:04: 9f:58:1f:52:08:cc:53:99:33:73:92:98:05:cf:45:75:b9:b8: cf:0d:62:64:78:9a:bd:9b:07:e2:39:76:4b:b6:34:83:1e:6d: bb:1c:ca:47:fc:e3:3a:ad:c4:9a:af:10:2c:7a:4e:2d:f8:1d: 34:40:90:f8:0d:7d:73:68:c3:63:29:ec:0b:48:80:0b:0e:3c: 18:59:87:30:5e:11:e7:79:da:cb:ea:b1:3a:60:e3:e3:8e:fb: 9a:1f:65:3b:f4:f1:41:9e:cb:e0:47:98:b1:85:38:c0:07:4e: 6b:8e:68:95:9c:46:2c:3a:f1:b9:bb:01:0a:27:ed:d0:4f:65: 01:f8:23:64:99:cd:0c:62:56:a6:e2:08:66:f8:a0:c2:c0:c7: d2:ba:80:6e:f9:84:32:5c:5e:ce:ff:03:3a:67:16:7b:bf:7f: e1:6a:3f:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxNTYxMTAvBgNVBAUTKDAzNDZCNjM0RjI2M0Y2MzY4NDIzOURCNkRGNjRCQkJB Q0RGN0Y4QTQwHhcNMjUxMjIyMTc0MDI3WhcNMjUxMjI5MTc0MDI3WjAYMRYwFAYD VQQDDA02OTQ5ODI4Yi1mMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4dk5Adbdf7zgi99yreCqwy+cC7KVisz/DKtimTIo8+YW2xglH4kOeSWUT7Z LY42lNp1cSuLS3/x+i6wA3R8lwTIAY2336lTeiVwgJz057wZ35w2XjZhf64v4h2y SlkBTdjuWQX4kVEqdaCM8fsrt3Od4JArfuomHcgD+pDDbj39NUxkZ3PmVbMs9uvM b7ynjI/VJWscTpyl7VYe9nIq0y+uGX3wYntpH+o9qRplV0VoipkgQ3cN8poc7Szi um4nD7YVsd9mxQoCkc7tPIl86V57wdoEKKB6Z072d8X4U4n5KBB8pntL1eZhVtZG Vuq9HhRfs8ws0L3M6cYY1STUWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCNT8AR G0IfEITYydhGlI+WJ3A5MB8GA1UdIwQYMBaAFANGtjTyY/Y2hCOdtt9ku7rN9/ik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzE1Ni9COUYwODQ0Q0Yy M0QxMUU5QUY4NDI3MjRDNEY5QUUwMi9BMGEyTlBKajlqYUVJNTIyMzJTN3VzMzMt S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EwYTJOUEpqOWphRUk1MjIzMlM3dXMzMy1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzE1Ni9COUYwODQ0Q0YyM0QxMUU5QUY4NDI3MjRDNEY5QUUwMi9BMGEyTlBKajlq YUVJNTIyMzJTN3VzMzMtS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBfPlMxVfnYefqgvvX2sGVQAhin60NWz8x3owOcrKdtr0POwI9TGhi 5vbK6BWpzNmHZ1ZZl2/AwvEAsiSQoK3xHtqU1/CEK4ry2zUoX7s7SuXWMrSlNFH8 4ASfWB9SCMxTmTNzkpgFz0V1ubjPDWJkeJq9mwfiOXZLtjSDHm27HMpH/OM6rcSa rxAsek4t+B00QJD4DX1zaMNjKewLSIALDjwYWYcwXhHnedrL6rE6YOPjjvuaH2U7 9PFBnsvgR5ixhTjAB05rjmiVnEYsOvG5uwEKJ+3QT2UB+CNkmc0MYlam4ghm+KDC wMfSuoBu+YQyXF7O/wM6ZxZ7v3/haj8V -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:39 2025 by rpki-client