This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft File: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft (raw, json) Hash identifier: 5rVmPEa2UqXV5f+8GXKJAI6FhHcAA6etGFqYNzpLPnI= Subject key identifier: 5A:8F:DF:92:2C:07:CA:C7:C6:DD:70:D3:F0:21:D6:1F:33:F0:88:FF Authority key identifier: 71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F Certificate issuer: /CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Certificate serial: 069B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft Manifest number: 0694 Signing time: Mon 22 Dec 2025 21:38:17 +0000 Manifest this update: Mon 22 Dec 2025 21:38:17 +0000 Manifest next update: Mon 29 Dec 2025 21:38:17 +0000 Files and hashes: 1: cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl (hash: 0L/hBkd9L9TsrCLf9WOsGGMODXIt6lXsuEXoYQ0Rwe8=) 2: 2F320256981611EB904AF150C4F9AE02.roa (hash: E4TUFKJ6pvq2MnnX/Fp4K5QwjuZ8zkimayyU0Jn+DJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1691 (0x69b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF84F, serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Validity Not Before: Dec 22 21:38:17 2025 GMT Not After : Dec 29 21:38:17 2025 GMT Subject: CN=6949ba49-4f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:39:05:b5:4c:8a:74:86:a0:20:8e:d8:f2: 4e:1f:dc:45:86:e8:83:f5:80:92:74:65:d7:19:8a: 13:9d:96:33:b3:34:cd:2a:06:c4:23:61:c5:3c:3d: 5f:e8:de:df:4c:7e:c1:60:bf:ec:a4:e0:94:69:51: 8b:1f:e9:f4:21:e1:26:d0:0f:16:3b:a8:d1:a6:89: 2b:40:df:9e:bb:6d:32:d9:e6:8f:ac:01:a7:97:08: ad:fd:0d:de:be:cc:3c:dc:d3:c7:a9:6a:0e:b6:8e: 8b:65:74:33:6a:71:d5:15:67:84:83:fd:78:29:e7: a2:41:ce:b0:32:eb:15:86:40:69:81:5a:53:9e:87: 65:28:a5:d9:25:dc:94:7f:01:20:1a:f2:8b:29:83: 5e:7f:6e:81:37:15:07:14:c9:4b:9c:56:be:3e:e5: 33:ec:06:ef:63:47:26:16:3b:98:ed:bc:3e:3d:92: c1:19:f3:af:00:97:ce:f8:92:bc:35:4f:f8:cb:dc: b7:9a:e8:26:1a:7f:06:29:9b:45:88:50:fb:93:bd: 16:2c:f7:9e:ef:13:b9:04:dc:83:31:3f:82:6d:a3: 61:34:e1:ab:6a:a0:d2:c0:d7:87:f5:e3:22:d5:af: f9:2c:78:e9:50:13:75:89:c2:5b:1f:d5:09:14:d7: fa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8F:DF:92:2C:07:CA:C7:C6:DD:70:D3:F0:21:D6:1F:33:F0:88:FF X509v3 Authority Key Identifier: keyid:71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:9d:a9:5e:6c:88:8e:46:bf:0e:1b:e4:b7:40:e2:93:db:7f: e9:d0:23:d2:55:5f:2d:f8:c8:6c:b5:af:6e:da:5f:c8:f5:58: 2c:10:54:12:d5:c4:98:24:4f:4d:a1:1a:c8:a3:ce:6d:86:70: a6:77:6a:56:ac:f2:9c:98:73:85:cb:68:c1:e0:29:25:91:2d: 3d:34:31:76:1f:ac:c9:ef:0f:8b:4a:b9:90:77:eb:f3:c7:77: e1:ce:ff:da:ac:a6:92:1e:9f:55:e9:8e:45:85:05:ff:63:e1: f6:4c:11:ef:5f:ca:fe:5d:32:9c:77:fc:a3:6d:a0:3a:37:2a: 2d:71:e8:74:23:f9:60:58:27:6f:7a:0d:c5:61:ea:c6:65:a3: f1:c1:e2:8f:76:9c:a3:c3:24:63:68:f2:04:6c:cb:26:f7:05: 4d:9e:53:ad:ae:a6:4b:66:9a:08:95:2f:70:12:c4:5d:82:08: c1:1b:a8:2b:d4:26:a6:8b:e5:48:59:94:72:82:9c:d9:94:c3: 5b:9a:75:c3:3d:05:7e:f8:88:20:87:91:56:dd:bb:f7:c3:36: 7a:cb:de:4c:8f:4b:0d:85:5d:1c:e5:7b:69:27:dd:c6:94:a2: ab:34:bc:7b:fa:71:67:f0:80:ef:f3:12:0e:1b:8b:ec:09:23: 6c:d6:7c:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY4NEYxMTAvBgNVBAUTKDcxNDFDMzE5QkI0NEJGQkNERTMzODJCM0JCNjkxMjY1 Rjk1RDMwOUYwHhcNMjUxMjIyMjEzODE3WhcNMjUxMjI5MjEzODE3WjAYMRYwFAYD VQQDDA02OTQ5YmE0OS00ZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wc5BbVMinSGoCCO2PJOH9xFhuiD9YCSdGXXGYoTnZYzszTNKgbEI2HFPD1f 6N7fTH7BYL/spOCUaVGLH+n0IeEm0A8WO6jRpokrQN+eu20y2eaPrAGnlwit/Q3e vsw83NPHqWoOto6LZXQzanHVFWeEg/14KeeiQc6wMusVhkBpgVpTnodlKKXZJdyU fwEgGvKLKYNef26BNxUHFMlLnFa+PuUz7AbvY0cmFjuY7bw+PZLBGfOvAJfO+JK8 NU/4y9y3mugmGn8GKZtFiFD7k70WLPee7xO5BNyDMT+CbaNhNOGraqDSwNeH9eMi 1a/5LHjpUBN1icJbH9UJFNf67wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqP35Is B8rHxt1w0/Ah1h8z8Ij/MB8GA1UdIwQYMBaAFHFBwxm7RL+83jOCs7tpEmX5XTCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjg0Ri9ERDQ4N0E1Qzk4 MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3emVNNEt6dTJrU1pmbGRN SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NVSERHYnRFdjd6ZU00S3p1MmtTWmZsZE1KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjg0Ri9ERDQ4N0E1Qzk4MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3 emVNNEt6dTJrU1pmbGRNSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKnalebIiORr8OG+S3QOKT23/p0CPSVV8t+Mhsta9u2l/I9VgsEFQS 1cSYJE9NoRrIo85thnCmd2pWrPKcmHOFy2jB4CklkS09NDF2H6zJ7w+LSrmQd+vz x3fhzv/arKaSHp9V6Y5FhQX/Y+H2TBHvX8r+XTKcd/yjbaA6Nyotceh0I/lgWCdv eg3FYerGZaPxweKPdpyjwyRjaPIEbMsm9wVNnlOtrqZLZpoIlS9wEsRdggjBG6gr 1Cami+VIWZRygpzZlMNbmnXDPQV++Iggh5FW3bv3wzZ6y95Mj0sNhV0c5XtpJ93G lKKrNLx7+nFn8IDv8xIOG4vsCSNs1nxJ -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:33 2025 by rpki-client