This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json) Hash identifier: 3lMZWp2sBVMMG/HclWOdClV4awTokmMvh32H9islLu0= Subject key identifier: B3:94:F1:4D:65:07:5E:6F:5D:95:7D:BC:7A:A7:9E:95:E3:DE:D5:E4 Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Certificate serial: 1E8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft Manifest number: 1E06 Signing time: Wed 10 Dec 2025 15:45:53 +0000 Manifest this update: Wed 10 Dec 2025 15:45:52 +0000 Manifest next update: Wed 17 Dec 2025 15:45:52 +0000 Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: 8kaPUWs05fc19l29Xgmqq+h1I1SrvR2ZKiLOnfAOxOs=) 2: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: ErQUIZBQOuclNYifsKsmx5/Jnr/1hpU5xKibhIO600k=) 3: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: JDAGe4IksOtjrzlmQZ9zVBIzM1ZKwteeQYN9TBrAsPk=) 4: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: FW9NYXvHGiXVfFykPHyKhdOjK9fS+NAvHhqmtmC3mxY=) 5: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: KptRM9OhZOY+IAnuIj6dKpgRtL+UG95HSLHK6SbwluY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 15:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7820 (0x1e8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Validity Not Before: Dec 10 15:45:52 2025 GMT Not After : Dec 17 15:45:52 2025 GMT Subject: CN=693995b1-79fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:41:99:15:b8:55:52:ce:8a:dc:4a:13:78:dd: f9:a0:9c:3a:62:61:f4:5d:ec:19:fe:df:ca:20:06: 51:c5:7e:c3:7a:9a:fb:4f:9d:93:77:5d:fc:c3:5c: bc:48:72:42:bb:fb:57:a7:77:2c:5f:b3:98:62:63: 31:c2:6d:e4:48:d8:ad:0f:fa:98:02:a1:63:9e:6d: a8:38:4a:45:15:d1:63:8c:24:21:15:78:e1:1a:93: 6c:95:31:31:f8:06:51:94:d7:08:d5:f3:cc:89:57: 65:b9:83:87:34:f7:2b:b2:fd:ef:ce:18:41:3b:c9: 52:29:62:7b:49:f5:fb:99:fe:c0:c6:25:ac:aa:76: d5:74:2c:d1:5d:17:88:f5:d1:23:40:69:7c:49:ff: db:29:d8:7e:de:fd:a6:fb:c2:c0:ca:14:ac:0b:fa: 71:05:c8:f9:71:71:9b:0a:1e:4e:d4:e2:ce:d2:47: 44:85:0d:6e:b4:cd:e2:90:8d:d4:9a:28:8e:3a:47: dd:6e:64:de:f4:c8:1b:d7:b0:12:29:e2:cd:53:92: 81:e2:52:65:c9:5b:cf:f0:18:74:c7:d9:75:48:97: 9e:81:45:f8:55:d8:76:f6:b3:61:d0:dd:6c:09:2a: 82:58:f4:62:f7:6c:a7:9d:f4:eb:80:88:31:56:e5: ea:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:94:F1:4D:65:07:5E:6F:5D:95:7D:BC:7A:A7:9E:95:E3:DE:D5:E4 X509v3 Authority Key Identifier: keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:6b:ea:1b:d3:be:4c:2f:db:96:22:fe:13:d8:c6:30:44:1e: a3:e0:b9:f7:9f:85:56:3e:02:c8:2c:ea:fc:61:06:9a:e4:72: 7b:6d:29:25:71:3c:7e:58:0e:88:16:c9:58:ef:68:d3:b9:f0: bf:fd:0c:ad:69:a0:80:63:18:6f:e6:ee:78:85:8c:82:b4:f7: a3:3d:9e:76:12:99:42:af:c5:a3:46:3b:42:ca:c7:aa:71:d7: 08:09:5d:bd:f8:b6:23:9d:eb:66:43:4b:9a:34:a9:18:f8:8f: 1b:ee:67:e9:3a:9e:e0:a8:6c:ad:60:cb:1c:2f:e4:12:4c:0f: 8d:cd:2a:c8:f4:67:c1:c9:ea:24:7d:e9:f1:08:d7:e7:dd:c6: ac:5d:04:5a:67:65:39:9a:23:02:93:98:eb:28:f6:67:39:c2: 04:8c:3b:d1:30:0c:ef:af:3c:03:e8:2a:a1:dc:69:01:9b:80: 64:45:ab:45:f9:37:5c:31:6f:80:80:13:5a:be:82:05:5d:87: c1:ef:04:e9:17:c6:69:59:cc:a1:56:eb:2e:ae:aa:f6:3c:f2: e9:46:35:55:0c:b3:70:14:67:bc:f0:fc:b8:00:4d:db:74:12: 82:84:e4:2f:5b:8c:53:17:57:76:82:dc:f3:5e:46:02:df:24: 1e:3a:f2:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx NzA3N0U2MzIwHhcNMjUxMjEwMTU0NTUyWhcNMjUxMjE3MTU0NTUyWjAYMRYwFAYD VQQDEw02OTM5OTViMS03OWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUGZFbhVUs6K3EoTeN35oJw6YmH0XewZ/t/KIAZRxX7Depr7T52Td138w1y8 SHJCu/tXp3csX7OYYmMxwm3kSNitD/qYAqFjnm2oOEpFFdFjjCQhFXjhGpNslTEx +AZRlNcI1fPMiVdluYOHNPcrsv3vzhhBO8lSKWJ7SfX7mf7AxiWsqnbVdCzRXReI 9dEjQGl8Sf/bKdh+3v2m+8LAyhSsC/pxBcj5cXGbCh5O1OLO0kdEhQ1utM3ikI3U miiOOkfdbmTe9Mgb17ASKeLNU5KB4lJlyVvP8Bh0x9l1SJeegUX4Vdh29rNh0N1s CSqCWPRi92ynnfTrgIgxVuXq4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOU8U1l B15vXZV9vHqnnpXj3tXkMB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1 MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC9BRDYyOTIyMkI1MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFf QlJVbi1sTTlSNmtYQjM1akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCza+ob075ML9uWIv4T2MYwRB6j4Ln3n4VWPgLILOr8YQaa5HJ7bSkl cTx+WA6IFslY72jTufC//QytaaCAYxhv5u54hYyCtPejPZ52EplCr8WjRjtCyseq cdcICV29+LYjnetmQ0uaNKkY+I8b7mfpOp7gqGytYMscL+QSTA+NzSrI9GfByeok fenxCNfn3casXQRaZ2U5miMCk5jrKPZnOcIEjDvRMAzvrzwD6Cqh3GkBm4BkRatF +TdcMW+AgBNavoIFXYfB7wTpF8ZpWcyhVusurqr2PPLpRjVVDLNwFGe88Py4AE3b dBKChOQvW4xTF1d2gtzzXkYC3yQeOvJt -----END CERTIFICATE-----Generated at Fri Dec 12 13:15:03 2025 by rpki-client