This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft File: 0xR9jSeprR3LgjR_FEsIVeBV4aA.mft (raw, json) Hash identifier: JO2GpyBw4LS3YFqHKjX8K8SzXR2cKyAynnJYJFdVOl4= Subject key identifier: D9:1D:69:4F:C1:EF:F8:0E:EE:C4:EF:00:15:6C:04:ED:63:9F:96:49 Authority key identifier: D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 Certificate issuer: /CN=A91402E0/serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft Manifest number: 01C3 Signing time: Tue 23 Dec 2025 01:58:03 +0000 Manifest this update: Tue 23 Dec 2025 01:58:02 +0000 Manifest next update: Tue 30 Dec 2025 01:58:02 +0000 Files and hashes: 1: 0xR9jSeprR3LgjR_FEsIVeBV4aA.crl (hash: kh+nWX+3zgE9d6hQDup+7pyp/ILO9WmqJcFGphP8Yac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91402E0, serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Validity Not Before: Dec 23 01:58:02 2025 GMT Not After : Dec 30 01:58:02 2025 GMT Subject: CN=6949f72b-3ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:e3:ea:58:45:7c:8c:88:4b:4e:8f:6d:5f: 61:d0:ad:ed:77:51:5f:17:92:17:ff:6e:ac:76:44: a6:62:7b:79:28:93:a9:0e:e0:a4:e3:cb:19:95:a7: 40:7a:b1:55:73:c1:87:60:91:e1:56:9e:7b:e7:1b: 8e:1e:10:f5:1c:3f:11:d5:e7:b7:fd:15:a7:a3:da: 9d:53:ea:84:0f:69:c9:70:06:87:0d:d1:b5:38:00: 35:a4:4e:b7:c6:39:d2:3d:e7:96:0e:1f:82:40:ea: 96:5b:22:fe:22:03:d6:03:27:52:1f:b2:9e:b0:1b: 69:f9:48:73:4c:f4:a1:d5:4c:54:08:b6:21:a5:e5: 2b:5c:cc:6c:09:8d:22:ba:65:35:5f:ac:4a:d7:db: 73:75:de:c0:bf:ec:63:22:5a:14:80:22:1b:e9:2b: f9:2a:5d:33:95:31:67:79:d8:3b:8b:13:84:d5:8c: 4a:ec:51:c2:0b:82:93:e6:23:d4:f1:3d:60:51:f4: c0:72:d4:88:0d:47:40:7f:46:e7:47:76:07:c1:c3: 08:78:b5:ae:5e:48:f4:59:7c:04:c9:08:d7:81:1b: fa:e9:5c:bb:08:79:97:9f:ad:7c:5f:f2:b3:7d:8c: 87:3a:7c:eb:ae:f8:0a:e9:b2:d0:03:e9:09:e8:ca: 90:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1D:69:4F:C1:EF:F8:0E:EE:C4:EF:00:15:6C:04:ED:63:9F:96:49 X509v3 Authority Key Identifier: keyid:D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:46:eb:08:dc:53:3f:7b:d7:66:68:76:c5:eb:a0:8f:93:2f: 9f:04:8b:4b:91:df:46:90:84:d1:e2:0d:08:0d:df:eb:90:66: f2:7c:ba:a5:fd:72:a8:ef:07:f9:1c:bd:b7:0d:47:c8:14:cb: b5:29:69:80:f5:02:53:9b:37:fd:f8:eb:e4:94:79:0e:3a:bd: f0:77:cd:93:fc:7b:be:d8:bd:95:bb:b5:03:08:06:c0:5a:1b: 5d:f4:eb:62:c7:af:43:d0:b9:fd:2b:c0:3e:32:71:6c:49:30: 69:d4:2a:76:9c:d7:8b:5f:70:4e:03:77:40:96:8b:79:12:05: de:c2:6f:f2:eb:6f:d5:50:c9:69:1b:51:fd:f2:e9:a0:2a:91: b4:85:f9:94:2f:fd:13:be:f1:fd:d7:bd:44:d3:d9:1f:50:33: f1:87:cb:12:4a:73:13:53:c6:57:bc:45:1b:e8:26:38:e6:0b: a2:9c:ca:1e:1d:cd:57:f5:a3:34:c4:a4:f9:3b:cb:41:71:a3: 5c:c8:fa:45:70:e5:2c:4f:59:3c:81:7c:3a:83:24:01:a4:b9: 9b:8e:79:82:e0:d1:a0:11:e8:da:48:4e:66:21:d1:ae:fc:b1: 6d:7a:a4:47:7d:1e:63:f2:89:a2:65:c3:2b:e3:b4:4b:97:c1: e0:6e:e3:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyRTAxMTAvBgNVBAUTKEQzMTQ3RDhEMjdBOUFEMURDQjgyMzQ3RjE0NEIwODU1 RTA1NUUxQTAwHhcNMjUxMjIzMDE1ODAyWhcNMjUxMjMwMDE1ODAyWjAYMRYwFAYD VQQDDA02OTQ5ZjcyYi0zZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbjj6lhFfIyIS06PbV9h0K3td1FfF5IX/26sdkSmYnt5KJOpDuCk48sZladA erFVc8GHYJHhVp575xuOHhD1HD8R1ee3/RWno9qdU+qED2nJcAaHDdG1OAA1pE63 xjnSPeeWDh+CQOqWWyL+IgPWAydSH7KesBtp+UhzTPSh1UxUCLYhpeUrXMxsCY0i umU1X6xK19tzdd7Av+xjIloUgCIb6Sv5Kl0zlTFnedg7ixOE1YxK7FHCC4KT5iPU 8T1gUfTActSIDUdAf0bnR3YHwcMIeLWuXkj0WXwEyQjXgRv66Vy7CHmXn618X/Kz fYyHOnzrrvgK6bLQA+kJ6MqQ4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkdaU/B 7/gO7sTvABVsBO1jn5ZJMB8GA1UdIwQYMBaAFNMUfY0nqa0dy4I0fxRLCFXgVeGg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJFMC9BQTZCRjQ0MDJC NTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJSM0xnalJfRkVzSVZlQlY0 YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4UjlqU2VwclIzTGdqUl9GRXNJVmVCVjRhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDJFMC9BQTZCRjQ0MDJCNTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJS M0xnalJfRkVzSVZlQlY0YUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSRusI3FM/e9dmaHbF66CPky+fBItLkd9GkITR4g0IDd/rkGbyfLql /XKo7wf5HL23DUfIFMu1KWmA9QJTmzf9+OvklHkOOr3wd82T/Hu+2L2Vu7UDCAbA Whtd9Otix69D0Ln9K8A+MnFsSTBp1Cp2nNeLX3BOA3dAlot5EgXewm/y62/VUMlp G1H98umgKpG0hfmUL/0TvvH9171E09kfUDPxh8sSSnMTU8ZXvEUb6CY45guinMoe Hc1X9aM0xKT5O8tBcaNcyPpFcOUsT1k8gXw6gyQBpLmbjnmC4NGgEejaSE5mIdGu /LFteqRHfR5j8omiZcMr47RLl8HgbuO7 -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:23 2025 by rpki-client