This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft File: cNjYKyIacSIO_Vg9kvc2F15dAvE.mft (raw, json) Hash identifier: /o8suW/dAEkiEZ5T+PhWZ6mIUic3OeAKrXw885BQlBY= Subject key identifier: 07:48:59:3D:E0:12:54:34:4A:9B:ED:37:9F:1B:98:61:08:AC:43:43 Authority key identifier: 70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1 Certificate issuer: /CN=A91E9B39/serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft Manifest number: 0B Signing time: Tue 23 Dec 2025 06:54:15 +0000 Manifest this update: Tue 23 Dec 2025 06:54:15 +0000 Manifest next update: Tue 30 Dec 2025 06:54:15 +0000 Files and hashes: 1: cNjYKyIacSIO_Vg9kvc2F15dAvE.crl (hash: H9sUw0Z+p19DcK81itlfh3HpTpIFotchD748Z/x3yqM=) 2: 98127914D29411F0BA72510FC4F9AE02.roa (hash: cJUf464wfN4hlFnC0PZnSNNiMNLf0O5oWZ+yW9kxGh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B39, serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1 Validity Not Before: Dec 23 06:54:15 2025 GMT Not After : Dec 30 06:54:15 2025 GMT Subject: CN=694a3c97-892d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f9:80:d4:4c:a0:74:18:47:90:ff:13:10:a8: d9:0c:d6:0c:54:a7:81:5c:fb:48:13:a7:f2:19:05: a6:09:cf:6a:f4:9d:6d:83:7c:af:48:27:44:a9:27: 31:0c:84:b2:1a:32:e3:9a:81:01:3d:3d:07:5d:cd: ff:1c:02:ea:2b:55:47:de:85:da:76:30:c9:53:61: 83:49:71:10:94:c1:e5:62:da:3a:3d:2e:2c:32:c0: 57:6d:90:9a:1a:b8:0c:f2:25:d1:b9:18:89:de:6e: 66:e0:80:0d:12:2c:40:e5:d7:73:9b:17:b5:af:3d: 91:2e:22:60:38:91:53:7d:dc:e0:13:19:4e:2b:af: 4e:81:b2:07:ba:4e:f7:d6:a0:ed:e0:b9:45:54:86: 32:c2:84:fd:8d:d8:7c:1d:3a:95:ba:08:07:fc:df: da:ca:f1:23:37:d5:14:fd:cf:32:13:ff:d8:fa:d9: af:25:7b:dc:4c:1f:49:f8:cc:1d:1d:a0:d0:31:25: a9:a6:d4:9c:db:d0:24:d9:98:c9:96:ff:8b:9b:7e: ec:db:dc:21:52:fb:5f:62:11:07:73:b6:e9:23:33: c4:e5:d9:1f:97:5e:2a:f9:29:cc:a8:8d:e3:6d:d6: d4:d1:5f:c7:77:97:b8:3a:5e:cb:e2:c4:14:b5:25: 7c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:48:59:3D:E0:12:54:34:4A:9B:ED:37:9F:1B:98:61:08:AC:43:43 X509v3 Authority Key Identifier: keyid:70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6c:d8:1c:70:6c:14:03:51:de:e5:62:d2:73:e5:da:89:ab: cf:a8:b8:28:f7:28:7b:2c:d0:3a:10:ff:c0:b0:ee:6d:b2:60: e2:a0:05:19:f7:b4:02:c6:50:ea:87:10:54:9e:0f:d8:80:9b: 9f:79:63:35:85:33:3a:76:8a:30:f6:53:21:19:78:2d:a5:b2: 59:fa:e7:ae:fc:dd:70:b3:70:89:02:04:2c:75:dc:86:ef:07: d4:6c:13:d9:5e:89:0f:a4:f3:68:9a:c4:3a:6b:30:be:f2:ff: dd:2f:63:04:b4:6f:21:8d:f3:6d:50:43:90:db:b0:2b:48:75: 2e:d2:ff:1b:09:dc:69:a2:8c:04:cc:a3:48:b0:a3:21:97:0d: 77:70:db:f9:a6:70:67:c1:18:65:d6:d5:1a:05:c7:0f:91:ce: 6b:8b:30:07:f1:45:75:7d:58:07:14:f2:d2:c0:e7:ae:9a:be: 55:5b:a6:94:42:c5:fd:8c:98:68:ad:f5:80:7b:34:9f:eb:64: 33:4c:ef:ec:35:0a:df:de:84:46:11:cc:14:c6:d5:71:52:61: 8b:c2:09:58:5d:6b:14:9c:23:fa:f8:8c:3f:05:81:87:39:fe: 5b:bb:bc:3d:ea:91:bc:21:ec:b0:f9:96:d6:6c:fd:f1:57:a9: 3f:7d:39:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUIzOTExMC8GA1UEBRMoNzBEOEQ4MkIyMjFBNzEyMjBFRkQ1ODNEOTJGNzM2MTc1 RTVEMDJGMTAeFw0yNTEyMjMwNjU0MTVaFw0yNTEyMzAwNjU0MTVaMBgxFjAUBgNV BAMMDTY5NGEzYzk3LTg5MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy+YDUTKB0GEeQ/xMQqNkM1gxUp4Fc+0gTp/IZBaYJz2r0nW2DfK9IJ0SpJzEM hLIaMuOagQE9PQddzf8cAuorVUfehdp2MMlTYYNJcRCUweVi2jo9LiwywFdtkJoa uAzyJdG5GInebmbggA0SLEDl13ObF7WvPZEuImA4kVN93OATGU4rr06Bsge6TvfW oO3guUVUhjLChP2N2HwdOpW6CAf839rK8SM31RT9zzIT/9j62a8le9xMH0n4zB0d oNAxJamm1Jzb0CTZmMmW/4ubfuzb3CFS+19iEQdztukjM8Tl2R+XXir5KcyojeNt 1tTRX8d3l7g6XsvixBS1JXz/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB0hZPeAS VDRKm+03nxuYYQisQ0MwHwYDVR0jBBgwFoAUcNjYKyIacSIO/Vg9kvc2F15dAvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QjM5LzVBRUYyMjJDRDI5 MzExRjA4Q0E2NUQ3N0M0RjlBRTAyL2NOallLeUlhY1NJT19WZzlrdmMyRjE1ZEF2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY05qWUt5SWFjU0lPX1ZnOWt2YzJGMTVkQXZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QjM5LzVBRUYyMjJDRDI5MzExRjA4Q0E2NUQ3N0M0RjlBRTAyL2NOallLeUlhY1NJ T19WZzlrdmMyRjE1ZEF2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB9s2BxwbBQDUd7lYtJz5dqJq8+ouCj3KHss0DoQ/8Cw7m2yYOKgBRn3 tALGUOqHEFSeD9iAm595YzWFMzp2ijD2UyEZeC2lsln656783XCzcIkCBCx13Ibv B9RsE9leiQ+k82iaxDprML7y/90vYwS0byGN821QQ5DbsCtIdS7S/xsJ3GmijATM o0iwoyGXDXdw2/mmcGfBGGXW1RoFxw+RzmuLMAfxRXV9WAcU8tLA566avlVbppRC xf2MmGit9YB7NJ/rZDNM7+w1Ct/ehEYRzBTG1XFSYYvCCVhdaxScI/r4jD8FgYc5 /lu7vD3qkbwh7LD5ltZs/fFXqT99OXs= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:33 2025 by rpki-client