This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft File: E72mTG8bWiwzOUc2NU6ejmvK4lY.mft (raw, json) Hash identifier: HaUo+6Rb6uBLQzUY+Gyioc4hK7eHIHumxVZdTpvV1n8= Subject key identifier: 5F:9B:00:9B:BC:43:FF:FA:C1:C0:6C:FE:0C:D2:D8:0F:C4:67:52:95 Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Certificate serial: 0875 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft Manifest number: 086A Signing time: Thu 18 Dec 2025 20:09:34 +0000 Manifest this update: Thu 18 Dec 2025 20:09:33 +0000 Manifest next update: Thu 25 Dec 2025 20:09:33 +0000 Files and hashes: 1: E72mTG8bWiwzOUc2NU6ejmvK4lY.crl (hash: FaPFs5uLEIfkPLC8Eo3IWMxvPunbFylTJjAYxhMn4lY=) 2: FA870AFA94E011EDB701A974C4F9AE02.roa (hash: y//kTgBCu8ds1cgaGUUv5fTwfVuBn5T3llDXWqV3GRs=) 3: F8C3E4EA94E011EDB701A974C4F9AE02.roa (hash: Koez5aai5hyPFgaFmxx5YzeOBoMBdmjCYKXC5XMX7bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2165 (0x875) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C8C, serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Validity Not Before: Dec 18 20:09:33 2025 GMT Not After : Dec 25 20:09:33 2025 GMT Subject: CN=69445f7e-6dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:a0:a1:21:5d:ef:ff:09:aa:fa:82:9c:ab: 02:b0:c9:c3:c1:97:70:69:41:d7:ba:4b:47:a7:f7: 4e:10:13:f2:91:4f:43:9c:6f:71:59:9e:98:15:58: 7e:a3:b4:9d:4a:6c:cf:44:cb:b2:6b:1b:9f:73:23: 52:55:d7:52:7d:6a:63:42:8f:18:89:3e:ce:c1:7e: 9d:57:94:9e:b9:07:a3:90:f1:58:d1:cb:95:9f:5f: 9d:74:7b:72:f7:86:89:eb:0f:33:44:e0:d2:0a:ad: d5:a9:94:22:2c:e9:e4:86:71:e2:77:f5:c9:f2:92: 63:85:96:eb:de:f1:6e:ad:b8:05:a9:7e:dd:14:4e: 97:94:37:23:02:bd:ce:52:24:26:00:64:50:fd:29: 6a:ef:65:a5:a9:c4:86:65:5c:ef:9d:2b:dd:9d:65: 04:70:68:c0:3b:9f:8d:99:6a:c2:a8:ef:d0:c3:48: d5:e9:9d:45:13:78:f8:8b:b8:ab:6d:39:4e:86:8c: 4d:9e:6f:11:cb:a7:c8:0b:c5:9b:38:12:cf:29:b8: 0a:5e:da:a0:33:7b:ee:c9:f1:46:81:8f:2f:bb:58: d5:8e:bf:d3:ea:35:7f:75:89:4b:b3:93:00:a6:d9: 5e:b7:56:30:5b:2b:0f:88:19:4f:6b:a9:3e:96:06: 44:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9B:00:9B:BC:43:FF:FA:C1:C0:6C:FE:0C:D2:D8:0F:C4:67:52:95 X509v3 Authority Key Identifier: keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:84:72:f6:ad:72:67:5a:ea:b6:71:c3:36:0f:c9:44:08:81: 71:a2:28:e6:d3:4d:d5:b9:b5:d4:c7:01:70:d2:31:9b:30:ca: d4:56:02:ac:a1:43:04:85:7f:22:13:f6:18:ec:46:91:b4:92: 40:22:78:63:00:9b:b7:fe:2e:42:8b:63:7b:8e:d5:ed:f8:b2: e3:99:cd:c2:cb:01:8e:27:5f:95:94:29:2e:cc:1e:45:08:3b: e2:cb:2b:8b:c1:f2:2a:5e:12:dd:1f:2d:1b:29:24:90:7b:69: 79:cf:80:a3:17:1f:88:31:55:7b:3f:19:32:d5:4c:2c:81:7f: 1b:6c:e8:b9:69:36:5d:ba:40:18:34:26:3e:56:f3:51:71:45: 72:bb:b5:8b:69:96:bb:94:59:e9:6a:7b:42:16:e6:72:6d:dc: 11:00:a4:52:74:1e:30:38:46:e0:6c:83:7f:6f:76:0a:db:5c: c2:19:58:cc:43:a6:f4:c8:e0:58:40:da:9d:0b:fe:91:83:d8: 49:a9:b5:d7:2b:f0:d9:fa:0e:55:34:eb:31:84:81:0a:51:6b: d3:ba:7c:75:b3:57:22:8a:01:79:e8:69:f7:b0:e1:bb:8d:6d: 52:df:0b:f8:22:02:c0:84:9a:e4:6e:83:5c:12:cb:13:4f:0d: 9c:41:9d:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDOEMxMTAvBgNVBAUTKDEzQkRBNjRDNkYxQjVBMkMzMzM5NDczNjM1NEU5RThF NkJDQUUyNTYwHhcNMjUxMjE4MjAwOTMzWhcNMjUxMjI1MjAwOTMzWjAYMRYwFAYD VQQDDA02OTQ0NWY3ZS02ZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXOgoSFd7/8JqvqCnKsCsMnDwZdwaUHXuktHp/dOEBPykU9DnG9xWZ6YFVh+ o7SdSmzPRMuyaxufcyNSVddSfWpjQo8YiT7OwX6dV5SeuQejkPFY0cuVn1+ddHty 94aJ6w8zRODSCq3VqZQiLOnkhnHid/XJ8pJjhZbr3vFurbgFqX7dFE6XlDcjAr3O UiQmAGRQ/Slq72WlqcSGZVzvnSvdnWUEcGjAO5+NmWrCqO/Qw0jV6Z1FE3j4i7ir bTlOhoxNnm8Ry6fIC8WbOBLPKbgKXtqgM3vuyfFGgY8vu1jVjr/T6jV/dYlLs5MA ptlet1YwWysPiBlPa6k+lgZEtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+bAJu8 Q//6wcBs/gzS2A/EZ1KVMB8GA1UdIwQYMBaAFBO9pkxvG1osMzlHNjVOno5ryuJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM4Qy8yM0U1RDVERURG OTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldpd3pPVWMyTlU2ZWptdks0 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Mm1URzhiV2l3ek9VYzJOVTZlam12SzRsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUM4Qy8yM0U1RDVERURGOTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldp d3pPVWMyTlU2ZWptdks0bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5hHL2rXJnWuq2ccM2D8lECIFxoijm003VubXUxwFw0jGbMMrUVgKs oUMEhX8iE/YY7EaRtJJAInhjAJu3/i5Ci2N7jtXt+LLjmc3CywGOJ1+VlCkuzB5F CDviyyuLwfIqXhLdHy0bKSSQe2l5z4CjFx+IMVV7Pxky1UwsgX8bbOi5aTZdukAY NCY+VvNRcUVyu7WLaZa7lFnpantCFuZybdwRAKRSdB4wOEbgbIN/b3YK21zCGVjM Q6b0yOBYQNqdC/6Rg9hJqbXXK/DZ+g5VNOsxhIEKUWvTunx1s1ciigF56Gn3sOG7 jW1S3wv4IgLAhJrkboNcEssTTw2cQZ2S -----END CERTIFICATE-----Generated at Fri Dec 19 22:51:10 2025 by rpki-client