This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft File: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft (raw, json) Hash identifier: aDFfCbK+af/buAWU6Ij45y8OpzoHrPzydCutZHST0Ew= Subject key identifier: 35:2B:3E:67:DF:61:8F:52:EB:8F:62:2A:43:F9:21:20:8F:6C:E3:49 Authority key identifier: 09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF Certificate issuer: /CN=A91E9D0C/serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF Certificate serial: 0556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft Manifest number: 054F Signing time: Mon 22 Dec 2025 22:32:36 +0000 Manifest this update: Mon 22 Dec 2025 22:32:35 +0000 Manifest next update: Mon 29 Dec 2025 22:32:35 +0000 Files and hashes: 1: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl (hash: Hgbcek/NhbHkITibUA6ZDGPu6CJ04w4mIT00nxoKLDo=) 2: 630BCB6E1A1D11EC99B84C20C4F9AE02.roa (hash: KLbn4axyWFCDHHukPbRuTMga6xjQIaRTiqnBj5WTC3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1366 (0x556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D0C, serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF Validity Not Before: Dec 22 22:32:35 2025 GMT Not After : Dec 29 22:32:35 2025 GMT Subject: CN=6949c704-f9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:62:73:6c:09:58:b6:d7:c2:67:16:d7:26: 7f:36:a0:7a:16:47:22:d7:0f:75:eb:4c:69:98:3d: b9:d9:ed:e4:e6:3e:96:d7:2a:34:b2:a5:e7:28:fb: 4a:79:d3:db:98:2f:ed:9b:62:76:00:4e:bd:4d:3d: 7e:fb:70:66:96:d2:b6:4e:eb:6a:ba:e2:c5:9a:54: 44:33:67:76:aa:84:56:90:37:7f:c5:5d:40:1a:e5: 33:03:d8:d6:0e:a3:0d:60:22:15:69:63:7b:c8:76: ff:e2:ac:36:a0:77:4e:b6:49:65:93:1d:72:2e:da: dd:44:67:03:8c:48:3b:62:01:49:7c:86:38:e1:1d: 18:d3:c5:a0:30:52:e1:b6:ad:1a:b7:49:2e:ba:93: 09:f4:7c:c7:1a:16:31:b7:fa:8f:15:c2:6c:f1:9c: 94:8c:a6:ba:2a:ae:4c:38:80:91:0e:e1:b1:0b:9c: c9:5f:33:d2:6d:f7:88:cf:6d:f8:f9:21:94:39:95: 84:f1:9a:4c:04:34:cb:1b:ef:67:7c:58:0c:17:de: 47:6a:5a:16:7b:d3:1c:58:7c:fb:ae:e6:bb:c5:09: 24:b3:62:cb:1f:af:8c:20:ec:b6:b1:1f:9b:af:11: 09:4c:57:34:9a:cb:56:44:b4:1b:91:89:1a:f7:11: aa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:3E:67:DF:61:8F:52:EB:8F:62:2A:43:F9:21:20:8F:6C:E3:49 X509v3 Authority Key Identifier: keyid:09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:e9:2d:6c:1a:ea:4a:d0:cf:53:b7:61:09:5e:6a:37:52:c3: 18:fb:ed:04:af:d4:bd:02:a1:57:ef:c4:f8:a0:32:f0:d6:a4: a4:4d:53:24:d0:29:ff:c3:81:92:b6:1d:f8:1f:02:bf:51:2c: 63:9e:f8:ca:4c:ab:0a:00:14:12:d2:08:73:fb:26:1d:e4:dd: 0e:da:61:82:c9:62:21:4b:bf:c6:bd:ff:33:00:3c:be:97:71: 8e:30:59:04:f0:48:2e:bc:dc:c4:87:db:9c:b6:e4:01:e7:73: 60:71:30:1f:5e:86:41:35:c1:47:7e:03:d4:36:de:19:9a:51: e5:92:f0:40:f3:0d:9d:9d:d7:41:e1:9b:0e:b9:8a:b1:a8:75: 46:35:7c:11:fb:fa:f4:cd:7b:65:d3:fc:bc:62:01:0e:43:9c: 7b:5b:4c:9c:61:7d:cc:e6:3e:67:18:6f:36:3f:03:ba:65:2e: d8:84:bf:79:6d:67:5e:62:56:bb:c3:ad:50:74:63:12:c7:b3: f7:75:c1:ac:73:8c:dc:14:89:69:36:b5:45:af:e5:c9:a6:95: cd:28:d8:32:9e:3d:c6:f1:3a:05:ca:13:eb:ee:ac:c4:62:e8: 01:89:d8:8a:1a:d6:b7:ce:93:ec:58:a0:eb:03:c3:93:c2:5a: 9c:c0:0f:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlEMEMxMTAvBgNVBAUTKDA5REUxOTY3RTk1MkVFOEUxQjJERDYwRjg4RjYzQkEy NjA1NzUzRUYwHhcNMjUxMjIyMjIzMjM1WhcNMjUxMjI5MjIzMjM1WjAYMRYwFAYD VQQDDA02OTQ5YzcwNC1mOWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3pic2wJWLbXwmcW1yZ/NqB6Fkci1w9160xpmD252e3k5j6W1yo0sqXnKPtK edPbmC/tm2J2AE69TT1++3BmltK2TutquuLFmlREM2d2qoRWkDd/xV1AGuUzA9jW DqMNYCIVaWN7yHb/4qw2oHdOtkllkx1yLtrdRGcDjEg7YgFJfIY44R0Y08WgMFLh tq0at0kuupMJ9HzHGhYxt/qPFcJs8ZyUjKa6Kq5MOICRDuGxC5zJXzPSbfeIz234 +SGUOZWE8ZpMBDTLG+9nfFgMF95HaloWe9McWHz7rua7xQkks2LLH6+MIOy2sR+b rxEJTFc0mstWRLQbkYka9xGqPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUrPmff YY9S649iKkP5ISCPbONJMB8GA1UdIwQYMBaAFAneGWfpUu6OGy3WD4j2O6JgV1Pv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQwQy84MTRGNkQwNDFB MUExMUVDOUQxQ0RGMUVDNEY5QUUwMi9DZDRaWi1sUzdvNGJMZFlQaVBZN29tQlhV LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkNFpaLWxTN280YkxkWVBpUFk3b21CWFUtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQwQy84MTRGNkQwNDFBMUExMUVDOUQxQ0RGMUVDNEY5QUUwMi9DZDRaWi1sUzdv NGJMZFlQaVBZN29tQlhVLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC16S1sGupK0M9Tt2EJXmo3UsMY++0Er9S9AqFX78T4oDLw1qSkTVMk 0Cn/w4GSth34HwK/USxjnvjKTKsKABQS0ghz+yYd5N0O2mGCyWIhS7/Gvf8zADy+ l3GOMFkE8EguvNzEh9uctuQB53NgcTAfXoZBNcFHfgPUNt4ZmlHlkvBA8w2dnddB 4ZsOuYqxqHVGNXwR+/r0zXtl0/y8YgEOQ5x7W0ycYX3M5j5nGG82PwO6ZS7YhL95 bWdeYla7w61QdGMSx7P3dcGsc4zcFIlpNrVFr+XJppXNKNgynj3G8ToFyhPr7qzE YugBidiKGta3zpPsWKDrA8OTwlqcwA/y -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:34 2025 by rpki-client