This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: K5gdlKTumIgPwxhsfmZFZgQfcM2zgkBSO4xDJ5USJhE= Subject key identifier: 95:BA:46:4E:12:1E:2A:3B:F5:C5:A7:EE:E3:43:BA:85:0E:96:E6:A5 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 188C525BB557068F4A5A17DE1A55F65A466CAE84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 07B6 Signing time: Fri 12 Dec 2025 00:00:01 +0000 Manifest this update: Thu 11 Dec 2025 23:55:01 +0000 Manifest next update: Sat 13 Dec 2025 01:51:01 +0000 Files and hashes: 1: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: odxXuw9t56FFIVWRF6USpgfH3EtxcqrQch+FND/pnf8=) 2: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: 2f17q/yXFdCT2L+3cvUBOaAyIHRSOVChjJcG9rpXoYE=) 3: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: iJslrlexITlgS4FCCsaTbAnZp8SVG8ScZLp31nLmvl8=) 4: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM=) 5: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: i3k7btMAhGgYuFeM+1u1fTFRv0VjkseVCLvNPnabQB0=) 6: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 5XqIjocwHFQ+WjUcCUmiu8K/arjV3qXNgA5X040przI=) 7: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 5imQlduqeaq1QvJMmjo0ae6fSl4CkZx6HlLkioO4Cbc=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 01:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:8c:52:5b:b5:57:06:8f:4a:5a:17:de:1a:55:f6:5a:46:6c:ae:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Dec 11 23:55:01 2025 GMT Not After : Dec 13 01:51:01 2025 GMT Subject: CN=95BA464E121E2A3BF5C5A7EEE343BA850E96E6A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:70:d6:25:c1:3e:2a:f9:a6:87:b6:18:5b:13: b8:d4:ac:53:9c:40:cf:3a:86:28:bc:d2:1a:97:3d: cc:42:66:7d:4a:27:a2:b3:6d:da:06:32:1d:12:4f: f6:d0:97:4a:49:2b:5d:f6:f4:76:0b:39:69:39:fd: 74:d2:9f:80:ca:7f:4c:47:f9:54:12:75:a1:d3:f2: 25:2f:33:55:7f:ae:f0:70:c8:a1:c6:1a:00:f8:88: 54:d6:c3:84:34:c0:c7:e9:4d:0f:e5:7c:0a:e8:43: 43:77:45:df:cc:a5:55:b2:40:d9:9c:bd:5c:e3:b1: f7:bb:0f:46:10:1a:fa:0c:0f:0a:9a:9a:42:22:ef: 7b:86:c4:52:f7:16:ed:67:44:60:6a:fc:d7:51:bb: c4:8b:13:d6:2d:42:e0:b4:39:ad:6d:16:ad:92:da: e6:1c:4a:c1:27:01:e2:a4:0c:c0:c0:0b:2f:7c:4d: 31:b9:91:65:44:5c:3f:a9:51:49:00:7f:90:d0:a9: 51:33:e0:de:13:80:4c:50:ca:06:6e:a3:cb:50:7a: 04:d7:82:30:3b:db:c9:ec:07:21:e2:35:45:40:0e: af:15:88:e2:7a:62:01:0e:e1:67:49:51:7a:05:d9: 68:7d:1c:99:84:81:c2:44:63:b7:c4:1f:68:9c:c4: 43:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BA:46:4E:12:1E:2A:3B:F5:C5:A7:EE:E3:43:BA:85:0E:96:E6:A5 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:97:75:bb:54:fa:d2:ac:e3:61:97:fb:ba:29:fe:a9:d1:fc: 63:29:cc:e1:6e:b4:a5:91:b9:b7:81:79:b1:1a:20:02:be:5a: c8:4e:cb:82:27:64:c1:89:9b:44:c1:f5:e5:87:0e:54:f9:f9: 2d:c8:82:7f:1c:42:dd:c6:ca:72:98:48:b2:d4:bb:e5:48:67: 8f:eb:e0:8c:30:e0:d4:46:58:4d:b6:a2:25:cf:e1:02:5e:3d: 68:63:99:1b:d2:bb:5d:25:b4:05:83:76:3a:38:5e:9d:d0:67: 3e:99:7e:dc:05:89:c9:65:2a:f4:ed:4a:db:f0:d6:5c:70:2a: a2:49:96:c2:d6:4c:c0:c8:7a:a9:22:b4:47:95:3c:cb:a5:79: 2f:01:48:8f:b0:12:9b:06:4e:b0:23:a8:92:e4:73:4c:c9:22: de:e4:91:55:25:cf:d7:55:2f:31:c5:aa:cf:14:0d:c2:90:ae: 46:b9:74:5f:73:e0:cb:c7:38:76:c6:3e:fa:da:f7:2a:62:2b: 37:38:0a:9b:87:37:ea:fc:44:96:28:b8:57:29:e2:22:82:5d: 1f:92:29:81:a2:ef:84:0c:90:85:28:3c:df:20:48:c2:6e:b8: ab:97:f7:7f:3b:23:53:82:ed:af:17:c3:37:9a:30:c4:64:8e: 17:28:52:c3 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUGIxSW7VXBo9KWhfeGlX2WkZsroQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MTIxMTIzNTUwMVoX DTI1MTIxMzAxNTEwMVowMzExMC8GA1UEAxMoOTVCQTQ2NEUxMjFFMkEzQkY1QzVB N0VFRTM0M0JBODUwRTk2RTZBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1w1iXBPir5poe2GFsTuNSsU5xAzzqGKLzSGpc9zEJmfUonorNt2gYyHRJP 9tCXSkkrXfb0dgs5aTn9dNKfgMp/TEf5VBJ1odPyJS8zVX+u8HDIocYaAPiIVNbD hDTAx+lND+V8CuhDQ3dF38ylVbJA2Zy9XOOx97sPRhAa+gwPCpqaQiLve4bEUvcW 7WdEYGr811G7xIsT1i1C4LQ5rW0WrZLa5hxKwScB4qQMwMALL3xNMbmRZURcP6lR SQB/kNCpUTPg3hOATFDKBm6jy1B6BNeCMDvbyewHIeI1RUAOrxWI4npiAQ7hZ0lR egXZaH0cmYSBwkRjt8QfaJzEQ8cCAwEAAaOCAhEwggINMB0GA1UdDgQWBBSVukZO Eh4qO/XFp+7jQ7qFDpbmpTAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAIl3W7VPrSrONhl/u6Kf6p0fxjKczhbrSlkbm3gXmxGiACvlrITsuCJ2TBiZtE wfXlhw5U+fktyIJ/HELdxspymEiy1LvlSGeP6+CMMODURlhNtqIlz+ECXj1oY5kb 0rtdJbQFg3Y6OF6d0Gc+mX7cBYnJZSr07Urb8NZccCqiSZbC1kzAyHqpIrRHlTzL pXkvAUiPsBKbBk6wI6iS5HNMySLe5JFVJc/XVS8xxarPFA3CkK5GuXRfc+DLxzh2 xj762vcqYis3OAqbhzfq/ESWKLhXKeIigl0fkimBou+EDJCFKDzfIEjCbrirl/d/ OyNTgu2vF8M3mjDEZI4XKFLD -----END CERTIFICATE-----Generated at Fri Dec 12 11:54:35 2025 by rpki-client