This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json) Hash identifier: nDufymEZp+mtMtzfK9cGAe0QyY/jFqxmqt75ua6xEI0= Subject key identifier: 4C:8D:29:29:12:17:3F:B1:B6:CE:3F:E3:06:99:4D:6F:F0:58:7B:33 Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Certificate serial: 0CCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft Manifest number: 0CBE Signing time: Tue 16 Dec 2025 18:01:50 +0000 Manifest this update: Tue 16 Dec 2025 18:01:50 +0000 Manifest next update: Tue 23 Dec 2025 18:01:50 +0000 Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: FDlK6oNCcAL2ybvBXDeUK5PsgMsyYYsMpG97edyoyps=) 2: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: 9COC4JU57eLtq+93AZXJxKxezKMRUvq8Ungs1T3DP7c=) 3: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: EAQL7hv/BTjKApjc3ZIYKNpClj0rUyMUA1WrPrbN2NU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 18:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3277 (0xccd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Validity Not Before: Dec 16 18:01:50 2025 GMT Not After : Dec 23 18:01:50 2025 GMT Subject: CN=69419e8e-41ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6f:b3:90:cd:cb:4c:71:d3:0e:d5:68:6f:dc: 03:4b:3d:10:28:94:b4:4f:39:50:b9:72:58:ad:ab: 28:00:e7:c2:f8:09:e0:9e:4f:1d:83:a8:b9:30:05: c3:07:bf:99:0f:31:eb:da:21:62:24:a9:af:3b:6f: 84:bd:5e:04:3d:38:23:3c:33:5d:4d:06:97:ea:31: 03:71:06:52:6b:3f:cd:ae:ef:67:c0:4b:68:5e:da: 58:12:6b:ca:65:6f:57:34:8e:56:cd:02:ee:c0:5d: 8d:bb:88:44:e3:8d:26:2a:42:52:02:25:3f:6b:72: 6a:43:a6:f9:5f:e4:50:95:23:28:36:56:5d:dd:e4: 3f:0f:6a:7b:f7:fe:35:13:92:c4:a6:26:04:24:30: b9:1e:b3:1e:9e:45:44:3a:1a:54:f0:59:c5:c6:6b: 22:7b:7f:70:38:44:8b:1f:7f:b7:d5:89:62:63:69: cb:43:bd:b3:03:3f:b4:64:c6:8b:fa:16:4d:99:bc: f5:0a:e9:97:c2:4e:b4:ff:df:30:45:f3:b7:a8:a0: 4c:ea:ca:a4:5e:29:58:0f:8b:dd:f2:3b:13:72:35: c3:d2:83:84:42:50:4d:22:17:ab:dd:66:7d:cd:d0: 45:af:d0:24:49:b3:fa:04:ca:a9:1f:c3:eb:3d:fe: b3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8D:29:29:12:17:3F:B1:B6:CE:3F:E3:06:99:4D:6F:F0:58:7B:33 X509v3 Authority Key Identifier: keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d3:a4:a3:2e:49:af:c5:40:c1:b4:ef:d0:b5:82:1d:a4:36: 49:60:db:cc:2b:b8:a2:76:d0:d9:08:1f:72:73:db:29:c1:4e: a8:9f:81:af:ed:25:12:95:35:e7:e3:43:07:6a:98:fc:b4:50: cf:4d:cf:85:e1:f6:10:bd:70:90:88:ca:f7:cf:3b:94:77:d0: 63:25:fe:5d:03:6b:6a:98:bb:54:7d:fe:1d:07:77:f0:51:9a: 31:a1:e4:bf:00:82:58:bc:fe:08:b0:f9:29:f3:ec:62:1c:5f: ec:cc:62:de:85:5d:33:2d:a4:17:7c:6a:fb:36:14:43:bd:64: 61:ef:d4:f9:2e:77:8d:df:a9:d0:72:0b:90:bc:69:d0:e0:b4: 3f:27:b7:ab:73:95:18:b3:92:46:6d:55:be:80:3d:2e:70:0d: 5e:09:d1:dd:1a:bb:3e:e6:53:56:6e:0d:ac:51:5e:b9:d5:a7: 6b:13:bf:d4:bd:44:a2:ec:d3:94:3d:87:dc:66:ff:b7:e1:73: 42:28:48:f9:10:d1:4f:85:b5:f9:a5:25:42:e6:f5:8c:01:96: ee:4c:fb:e7:b9:7e:df:b7:4d:b0:b9:5a:4b:ed:cd:52:2a:10: 81:8e:a1:87:67:8c:5d:33:be:9d:f3:27:b8:95:59:c0:00:d6: f8:f7:23:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QzUxMTAvBgNVBAUTKEVGOTVDQkQ1OTgzNTI2NDBENDJCMEFBQzYwMDA0MTA2 NUI0REM0NDIwHhcNMjUxMjE2MTgwMTUwWhcNMjUxMjIzMTgwMTUwWjAYMRYwFAYD VQQDDA02OTQxOWU4ZS00MWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1W+zkM3LTHHTDtVob9wDSz0QKJS0TzlQuXJYrasoAOfC+Angnk8dg6i5MAXD B7+ZDzHr2iFiJKmvO2+EvV4EPTgjPDNdTQaX6jEDcQZSaz/Nru9nwEtoXtpYEmvK ZW9XNI5WzQLuwF2Nu4hE440mKkJSAiU/a3JqQ6b5X+RQlSMoNlZd3eQ/D2p79/41 E5LEpiYEJDC5HrMenkVEOhpU8FnFxmsie39wOESLH3+31YliY2nLQ72zAz+0ZMaL +hZNmbz1CumXwk60/98wRfO3qKBM6sqkXilYD4vd8jsTcjXD0oOEQlBNIher3WZ9 zdBFr9AkSbP6BMqpH8PrPf6z1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyNKSkS Fz+xts4/4waZTW/wWHszMB8GA1UdIwQYMBaAFO+Vy9WYNSZA1CsKrGAAQQZbTcRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThDNS8wNTJDODRGQzAx MTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUprRFVLd3FzWUFCQkJsdE54 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1WEwxWmcxSmtEVUt3cXNZQUJCQmx0TnhFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThDNS8wNTJDODRGQzAxMTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUpr RFVLd3FzWUFCQkJsdE54RUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr06SjLkmvxUDBtO/QtYIdpDZJYNvMK7iidtDZCB9yc9spwU6on4Gv 7SUSlTXn40MHapj8tFDPTc+F4fYQvXCQiMr3zzuUd9BjJf5dA2tqmLtUff4dB3fw UZoxoeS/AIJYvP4IsPkp8+xiHF/szGLehV0zLaQXfGr7NhRDvWRh79T5LneN36nQ cguQvGnQ4LQ/J7erc5UYs5JGbVW+gD0ucA1eCdHdGrs+5lNWbg2sUV651adrE7/U vUSi7NOUPYfcZv+34XNCKEj5ENFPhbX5pSVC5vWMAZbuTPvnuX7ft02wuVpL7c1S KhCBjqGHZ4xdM76d8ye4lVnAANb49yPz -----END CERTIFICATE-----Generated at Wed Dec 17 10:41:01 2025 by rpki-client