This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json) Hash identifier: kpV1pEg90OSwsbBlcEATvAjJXzLnUdE5WcUqeXbISgk= Subject key identifier: 5D:29:9A:E8:40:67:A0:F5:13:16:B2:92:46:46:68:44:79:94:BB:B8 Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Certificate serial: 0BC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft Manifest number: 0BB5 Signing time: Sat 20 Dec 2025 18:31:57 +0000 Manifest this update: Sat 20 Dec 2025 18:31:56 +0000 Manifest next update: Sat 27 Dec 2025 18:31:56 +0000 Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: HdojLcNW7QxLOb+z+HJq1aiouo05lkcOxlLhR9By608=) 2: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: fM914915Khakkai2qWkeTKAeeQDgBvP101R4o1zFbdM=) 3: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: pyQz1D6782Rt8rbYkLjsLImtzM5OVg/DTRlj4Kga3+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3013 (0xbc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Validity Not Before: Dec 20 18:31:56 2025 GMT Not After : Dec 27 18:31:56 2025 GMT Subject: CN=6946eb9d-b225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d3:a5:b3:65:1a:00:6a:c7:55:d0:16:cc:8b: 64:48:c2:91:bd:8c:8e:b4:e2:b4:99:a4:64:69:2f: 14:f5:bd:00:0b:fd:aa:1b:8e:7e:85:47:04:2e:05: 6e:b8:97:e3:d6:5f:b7:88:2f:f8:69:df:4b:67:0d: ad:7c:b5:28:36:24:b4:3f:d4:c0:4b:42:62:f1:99: 69:38:1f:82:b8:d5:44:b0:ea:52:5c:4d:ac:46:46: 7e:8a:8c:47:6d:31:9d:a2:ed:66:02:93:14:4e:04: 00:20:51:3e:2c:f5:0f:00:bb:16:97:1d:70:b7:00: e5:21:66:33:f8:9c:3e:ff:a0:ca:13:3b:b3:b1:d0: fd:de:c9:7a:a7:40:87:5b:b6:a1:11:34:f1:ae:ed: 1f:a0:8d:e8:cf:60:53:74:d4:bf:3d:e4:c1:15:03: f0:54:c5:50:ce:5e:89:3a:b7:d9:e6:c9:b0:76:ae: ae:75:1d:e4:a9:2b:c3:72:db:73:cb:42:3b:7e:da: da:71:5d:2c:4c:96:bb:35:e4:ec:70:ae:03:30:80: c9:5f:b7:4e:4e:36:fb:55:5a:1f:d8:a7:f3:a2:ba: 25:de:6d:34:c2:71:9c:dc:95:73:bc:36:d6:a3:d2: 86:f1:75:12:03:2c:41:b0:34:c5:80:e5:ea:e8:13: 89:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:29:9A:E8:40:67:A0:F5:13:16:B2:92:46:46:68:44:79:94:BB:B8 X509v3 Authority Key Identifier: keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:69:db:de:33:3d:63:63:e4:09:ed:e1:a2:6c:1f:2c:46:c3: 5f:e8:1f:d4:8e:0c:d1:78:71:2b:db:e0:d9:50:cc:c8:89:f5: 29:b0:09:4e:de:b3:a0:44:99:3e:38:57:d3:ca:d8:8b:85:19: 32:0c:80:77:f1:01:6d:d8:da:83:b7:24:0a:9d:bb:6e:eb:cd: 56:1e:ca:6b:7f:1a:95:c5:61:04:ff:5a:99:39:19:79:6e:15: 89:87:23:6d:1c:16:d9:81:54:27:9b:40:72:47:2e:fd:42:ba: bf:a2:8a:77:68:5e:d1:ef:0c:13:21:fc:9f:a7:e5:05:2a:82: 85:60:c7:a3:24:90:e3:c8:79:2c:9e:fe:42:9f:13:d0:f6:2d: 50:1e:c8:ec:b6:b3:e1:52:f8:38:dd:15:6e:d1:7d:9c:f9:b9: 95:57:0a:18:1f:81:a8:a0:74:19:55:9f:aa:79:ac:74:00:41: 59:7f:01:88:6c:b3:a4:be:c3:a1:8d:5e:dd:07:c9:00:51:0a: 7e:1f:c2:ad:d4:25:46:f5:57:eb:12:55:88:e5:87:78:2f:01: 01:fd:2b:d2:d2:69:2b:c7:ff:4d:23:8b:82:77:4b:3a:46:52: a0:7c:75:f8:ca:ec:18:e9:f5:4a:76:65:b0:f7:bd:af:4a:78: 83:88:a1:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRGNjYxMTAvBgNVBAUTKDY5QzgxOThCREEzRkQwOTA1M0Y0MjU1M0Q3M0VFQTE1 MTIxRDI0MUMwHhcNMjUxMjIwMTgzMTU2WhcNMjUxMjI3MTgzMTU2WjAYMRYwFAYD VQQDDA02OTQ2ZWI5ZC1iMjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk9Ols2UaAGrHVdAWzItkSMKRvYyOtOK0maRkaS8U9b0AC/2qG45+hUcELgVu uJfj1l+3iC/4ad9LZw2tfLUoNiS0P9TAS0Ji8ZlpOB+CuNVEsOpSXE2sRkZ+ioxH bTGdou1mApMUTgQAIFE+LPUPALsWlx1wtwDlIWYz+Jw+/6DKEzuzsdD93sl6p0CH W7ahETTxru0foI3oz2BTdNS/PeTBFQPwVMVQzl6JOrfZ5smwdq6udR3kqSvDcttz y0I7ftracV0sTJa7NeTscK4DMIDJX7dOTjb7VVof2Kfzorol3m00wnGc3JVzvDbW o9KG8XUSAyxBsDTFgOXq6BOJxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0pmuhA Z6D1ExaykkZGaER5lLu4MB8GA1UdIwQYMBaAFGnIGYvaP9CQU/QlU9c+6hUSHSQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEY2Ni9FNUY2NThBQTM2 OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBKQlQ5Q1ZUMXo3cUZSSWRK QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjZ1ppOW9fMEpCVDlDVlQxejdxRlJJZEpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEY2Ni9FNUY2NThBQTM2OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBK QlQ5Q1ZUMXo3cUZSSWRKQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2adveMz1jY+QJ7eGibB8sRsNf6B/UjgzReHEr2+DZUMzIifUpsAlO 3rOgRJk+OFfTytiLhRkyDIB38QFt2NqDtyQKnbtu681WHsprfxqVxWEE/1qZORl5 bhWJhyNtHBbZgVQnm0ByRy79Qrq/oop3aF7R7wwTIfyfp+UFKoKFYMejJJDjyHks nv5CnxPQ9i1QHsjstrPhUvg43RVu0X2c+bmVVwoYH4GooHQZVZ+qeax0AEFZfwGI bLOkvsOhjV7dB8kAUQp+H8Kt1CVG9VfrElWI5Yd4LwEB/SvS0mkrx/9NI4uCd0s6 RlKgfHX4yuwY6fVKdmWw972vSniDiKGE -----END CERTIFICATE-----Generated at Sun Dec 21 05:01:36 2025 by rpki-client