This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft File: SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft (raw, json) Hash identifier: tsnMV0DS6tCfzvnBSgQhn3+787QIfCuOcZpoK4wtgr8= Subject key identifier: 59:89:EE:D0:60:CB:78:5A:48:C7:28:9B:7C:72:82:4A:75:F6:E5:66 Authority key identifier: 4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F Certificate issuer: /CN=A91E01A9/serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F Certificate serial: 2037 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft Manifest number: 202A Signing time: Wed 24 Dec 2025 15:48:25 +0000 Manifest this update: Wed 24 Dec 2025 15:48:25 +0000 Manifest next update: Wed 31 Dec 2025 15:48:25 +0000 Files and hashes: 1: SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl (hash: Uj7TEdLXDZeLjNUFyPjQmAtOtWRx/HinqxNART79nvc=) 2: A212A64854F611E79DF7E643C4F9AE02.roa (hash: X+fXZ0PrCkpU/Zz2pOrb1G2WQInc8FuVJwsYYh/w08g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8247 (0x2037) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01A9, serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F Validity Not Before: Dec 24 15:48:25 2025 GMT Not After : Dec 31 15:48:25 2025 GMT Subject: CN=694c0b49-2c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:75:ca:ec:9b:6b:96:45:7d:d4:8a:3e:75: 16:6b:85:d7:c5:ef:f1:da:52:41:96:69:1b:5a:cc: a9:dd:8f:28:16:d3:74:75:42:a6:a0:df:46:46:13: 09:81:94:d2:09:ec:08:aa:35:91:48:98:de:c1:1a: 47:63:46:94:89:ae:a7:c2:77:4e:72:d5:76:0e:8a: fc:42:a3:93:a8:07:e9:4d:f1:a6:c3:d4:66:35:a7: d7:7c:8b:7a:65:4e:a4:96:a5:9c:77:9e:73:8f:da: 3c:bc:11:50:42:aa:d5:e9:1e:72:45:f5:37:c5:38: e8:e2:80:83:2b:34:d9:5e:29:f5:d3:11:d4:1d:5c: c2:f5:26:c3:e8:fe:89:74:1a:d6:71:12:62:8c:6a: 73:48:ad:55:c5:bf:2f:32:0e:6e:14:e3:8b:62:07: d8:b4:af:86:75:57:74:43:82:98:15:01:0c:55:c2: 84:d8:17:86:4f:96:07:40:42:ac:ba:ca:42:c7:5c: 51:0c:09:28:57:9a:0a:df:b3:c6:02:8a:86:70:14: 71:89:29:d2:67:3e:6b:da:73:ce:17:3e:f2:27:7d: 06:23:4a:a0:8d:e1:3d:77:fa:c5:14:33:f5:cd:93: bf:64:61:50:fa:26:5f:3b:2d:c0:c8:5f:53:30:b8: a9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:89:EE:D0:60:CB:78:5A:48:C7:28:9B:7C:72:82:4A:75:F6:E5:66 X509v3 Authority Key Identifier: keyid:4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:63:93:1b:be:f4:c0:2a:14:3b:b9:d3:aa:78:29:24:81:fc: 3e:6a:1b:a7:d6:9c:4f:55:e7:f3:8b:4d:57:6c:c0:c2:d2:a8: fe:b6:10:cd:dd:65:37:39:32:22:ca:c6:50:98:ea:9a:41:05: 27:8f:ce:cf:e9:3e:86:41:bb:be:ba:80:bb:c6:a4:15:ad:84: 7d:d2:1d:f6:e3:3e:54:f5:d7:0e:e0:b5:d3:9b:56:c1:c0:2b: d4:c2:63:19:d3:36:ea:06:14:a5:3e:1f:b4:fe:3b:c3:b9:e3: b5:1b:17:3e:2a:20:d4:52:ed:d1:5b:99:f1:e6:94:fd:2a:5e: 5d:3f:99:e1:af:ea:bd:eb:19:2b:4d:5b:ea:79:64:e8:a2:b2: 58:22:5c:6a:a9:36:de:a9:da:38:4e:36:eb:5d:db:7e:ad:20: 7a:79:b4:5a:51:bd:df:a1:74:3e:bf:aa:bd:10:f6:7a:bb:fc: 70:2d:ae:17:4c:ea:27:85:14:58:8c:4f:28:c1:92:ee:38:c2: 16:50:23:3c:09:6e:6a:08:9a:30:52:78:b5:66:c8:9f:93:17: a9:77:78:d5:b5:1e:d6:3c:78:2a:76:cf:49:58:53:af:bc:06: 70:c5:91:81:2d:99:aa:5f:24:5c:0d:0b:d5:68:1a:34:28:af: 49:d4:96:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQTkxMTAvBgNVBAUTKDRBNTc1RjJCRjMzMTI0NjJGODU2NDYxQUU5REREMEEz ODQ0QUJEMkYwHhcNMjUxMjI0MTU0ODI1WhcNMjUxMjMxMTU0ODI1WjAYMRYwFAYD VQQDDA02OTRjMGI0OS0yYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJd1yuyba5ZFfdSKPnUWa4XXxe/x2lJBlmkbWsyp3Y8oFtN0dUKmoN9GRhMJ gZTSCewIqjWRSJjewRpHY0aUia6nwndOctV2Dor8QqOTqAfpTfGmw9RmNafXfIt6 ZU6klqWcd55zj9o8vBFQQqrV6R5yRfU3xTjo4oCDKzTZXin10xHUHVzC9SbD6P6J dBrWcRJijGpzSK1Vxb8vMg5uFOOLYgfYtK+GdVd0Q4KYFQEMVcKE2BeGT5YHQEKs uspCx1xRDAkoV5oK37PGAoqGcBRxiSnSZz5r2nPOFz7yJ30GI0qgjeE9d/rFFDP1 zZO/ZGFQ+iZfOy3AyF9TMLip9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmJ7tBg y3haSMcom3xygkp19uVmMB8GA1UdIwQYMBaAFEpXXyvzMSRi+FZGGund0KOESr0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBOS84M0MzMTEwODMz NUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpHTDRWa1lhNmQzUW80Ukt2 UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NsZGZLX014SkdMNFZrWWE2ZDNRbzRSS3ZTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFBOS84M0MzMTEwODMzNUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpH TDRWa1lhNmQzUW80Ukt2UzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKY5MbvvTAKhQ7udOqeCkkgfw+ahun1pxPVefzi01XbMDC0qj+thDN 3WU3OTIiysZQmOqaQQUnj87P6T6GQbu+uoC7xqQVrYR90h324z5U9dcO4LXTm1bB wCvUwmMZ0zbqBhSlPh+0/jvDueO1Gxc+KiDUUu3RW5nx5pT9Kl5dP5nhr+q96xkr TVvqeWToorJYIlxqqTbeqdo4TjbrXdt+rSB6ebRaUb3foXQ+v6q9EPZ6u/xwLa4X TOonhRRYjE8owZLuOMIWUCM8CW5qCJowUni1Zsifkxepd3jVtR7WPHgqds9JWFOv vAZwxZGBLZmqXyRcDQvVaBo0KK9J1JZd -----END CERTIFICATE-----Generated at Wed Dec 24 17:35:03 2025 by rpki-client