This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json) Hash identifier: YhnKElDcfiL7Sp1ZUkzi8YxhGmyGvVktkPKTV/6Vk7U= Subject key identifier: E0:36:8F:8D:CC:23:B8:F3:B8:19:B1:CF:1E:B2:E8:90:EF:99:8F:1E Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Certificate serial: 34F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft Manifest number: 34F6 Signing time: Wed 24 Dec 2025 14:38:25 +0000 Manifest this update: Wed 24 Dec 2025 14:38:25 +0000 Manifest next update: Wed 31 Dec 2025 14:38:25 +0000 Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: R13Qyb5JC9Lgu8mfbyBevyH8tiO7vQ8HhJLesE/8G/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 14:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13558 (0x34f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Validity Not Before: Dec 24 14:38:25 2025 GMT Not After : Dec 31 14:38:25 2025 GMT Subject: CN=694bfae1-ced5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c4:4a:39:2b:15:77:fc:a3:4c:b6:44:a7:1b: 9d:30:5e:4e:06:32:4a:a7:61:64:44:fb:1d:b5:dd: 07:a9:81:a8:57:de:29:9f:59:ca:55:e5:68:6f:93: 3c:66:97:cd:09:ad:43:c6:03:ae:a7:85:cf:0f:0e: 05:61:15:69:08:9d:af:eb:a6:24:0d:b7:10:ef:4e: fc:4c:15:9c:5a:c7:cb:33:02:b3:1a:cd:c9:64:9e: 57:2a:cb:4d:80:83:5b:c4:d1:62:44:91:31:3c:9c: 96:c7:4e:e4:15:9e:a7:5b:49:1b:da:72:4d:3d:61: 0f:55:18:c4:17:99:04:b5:d2:9e:65:b8:97:38:05: d3:24:49:d5:b4:be:f1:1d:9e:0e:d2:6a:bc:db:a4: 00:a6:af:0b:7d:04:63:16:47:ac:4d:c2:8c:43:a9: 88:70:04:92:57:e8:68:25:b9:62:43:03:b8:ac:37: 50:76:9c:9c:d3:92:29:b8:bb:25:31:53:0c:39:0f: 8d:b7:f6:8f:8c:78:7f:5d:f8:ae:57:c7:d9:fc:8d: 36:6e:79:a7:4f:1e:2f:7d:ea:ed:ef:cd:25:70:b6: aa:ae:6b:81:bf:c6:ce:98:05:76:72:f7:33:e3:7e: fe:44:3f:bf:a7:16:1d:a7:21:03:72:fa:1e:79:7d: 15:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:36:8F:8D:CC:23:B8:F3:B8:19:B1:CF:1E:B2:E8:90:EF:99:8F:1E X509v3 Authority Key Identifier: keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:79:76:d1:5e:88:d7:87:29:a4:11:11:1a:6d:5d:a9:8c:5e: 66:b4:cf:5a:66:f0:a9:29:df:8a:f5:a6:21:37:76:61:18:80: c3:21:14:2c:9b:aa:c3:66:14:6d:9b:55:14:2a:e7:7d:db:9a: c7:c9:43:c6:9b:73:fa:a2:ed:1a:d6:e3:f2:72:84:81:72:d7: 3d:9f:02:05:9b:f6:1c:9f:ca:fe:d2:2a:31:65:bc:6f:e3:ab: 72:68:38:07:0e:ce:5a:a1:be:a2:c7:39:f6:36:43:5c:19:00: f1:0f:cd:b5:6b:96:2d:cd:24:30:f8:bb:df:fc:4a:97:59:f0: 66:b0:43:78:9a:1b:6d:7a:f8:c4:b5:77:90:54:ac:93:f5:54: fc:ce:d3:a8:97:5b:42:63:8b:de:e3:97:14:80:d9:d6:d0:ab: 8f:0f:18:b7:2f:ae:65:7a:69:b1:94:f6:90:cd:ee:fb:ce:d8: 9c:84:65:83:9a:1c:5e:3a:30:b2:4b:e0:a4:7e:de:e0:8d:70: e0:8f:5c:d5:78:63:65:5a:04:ef:cf:76:25:59:89:ad:da:82: 36:78:10:78:80:5a:c0:4c:4d:8f:1d:d4:4b:fc:e1:5a:2b:3c: 5c:e4:eb:b6:20:78:e1:ca:a0:67:ce:c9:90:50:41:f0:5b:ec: 50:57:c8:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFFMjgxMTAvBgNVBAUTKEFDMTlDNjZCQzRCMzFDRUI5MzBCQTZBRTBENkVCNzQ3 QjEwQUI2MDYwHhcNMjUxMjI0MTQzODI1WhcNMjUxMjMxMTQzODI1WjAYMRYwFAYD VQQDDA02OTRiZmFlMS1jZWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusRKOSsVd/yjTLZEpxudMF5OBjJKp2FkRPsdtd0HqYGoV94pn1nKVeVob5M8 ZpfNCa1DxgOup4XPDw4FYRVpCJ2v66YkDbcQ7078TBWcWsfLMwKzGs3JZJ5XKstN gINbxNFiRJExPJyWx07kFZ6nW0kb2nJNPWEPVRjEF5kEtdKeZbiXOAXTJEnVtL7x HZ4O0mq826QApq8LfQRjFkesTcKMQ6mIcASSV+hoJbliQwO4rDdQdpyc05IpuLsl MVMMOQ+Nt/aPjHh/XfiuV8fZ/I02bnmnTx4vfert780lcLaqrmuBv8bOmAV2cvcz 437+RD+/pxYdpyEDcvoeeX0VHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOA2j43M I7jzuBmxzx6y6JDvmY8eMB8GA1UdIwQYMBaAFKwZxmvEsxzrkwumrg1ut0exCrYG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUUyOC84NDU4QjkxMDFE OEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhPdVRDNmF1RFc2M1I3RUt0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JCbkdhOFN6SE91VEM2YXVEVzYzUjdFS3RnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUUyOC84NDU4QjkxMDFEOEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhP dVRDNmF1RFc2M1I3RUt0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFeXbRXojXhymkEREabV2pjF5mtM9aZvCpKd+K9aYhN3ZhGIDDIRQs m6rDZhRtm1UUKud925rHyUPGm3P6ou0a1uPycoSBctc9nwIFm/Ycn8r+0ioxZbxv 46tyaDgHDs5aob6ixzn2NkNcGQDxD821a5YtzSQw+Lvf/EqXWfBmsEN4mhttevjE tXeQVKyT9VT8ztOol1tCY4ve45cUgNnW0KuPDxi3L65lemmxlPaQze77ztichGWD mhxeOjCyS+Ckft7gjXDgj1zVeGNlWgTvz3YlWYmt2oI2eBB4gFrATE2PHdRL/OFa Kzxc5Ou2IHjhyqBnzsmQUEHwW+xQV8jG -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:30 2025 by rpki-client