This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft File: 5c6UvYXPCPR6j97JcE8dztA4Bow.mft (raw, json) Hash identifier: ZfSxsoEoW5xgYuDEfMfB+b6hSkL7duPoqMljxlidxMM= Subject key identifier: EF:66:F5:D0:64:B7:C0:06:E7:CD:BA:02:45:D2:A9:B7:FB:95:35:BF Authority key identifier: E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C Certificate issuer: /CN=A91517A0/serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft Manifest number: D1 Signing time: Tue 23 Dec 2025 04:39:29 +0000 Manifest this update: Tue 23 Dec 2025 04:39:28 +0000 Manifest next update: Tue 30 Dec 2025 04:39:28 +0000 Files and hashes: 1: 5c6UvYXPCPR6j97JcE8dztA4Bow.crl (hash: t95OcEv/RYw6N+xoMIvE67nM4xuFdglVDXwlUjNiWbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91517A0, serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C Validity Not Before: Dec 23 04:39:28 2025 GMT Not After : Dec 30 04:39:28 2025 GMT Subject: CN=694a1d01-e851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:37:71:5c:94:80:41:a8:64:0b:00:87:f8:a4: c7:52:4a:6a:01:73:7a:7a:5e:e3:72:9c:01:ec:3b: 05:a5:9a:c2:3a:3f:61:79:10:3b:0a:3e:2c:2c:6e: 98:f2:b0:32:47:e5:2c:83:dc:29:ea:60:c2:79:12: c5:77:a6:82:33:83:c8:fa:e7:eb:77:91:f5:0a:c8: d0:27:e1:54:74:4a:73:25:a4:e6:b7:e2:55:66:f8: 9b:61:04:1f:c0:80:d1:ba:8c:0e:3e:2a:9b:59:c7: 38:e6:b1:e2:f6:6d:47:b6:64:98:da:97:06:b4:e3: ab:8b:93:fd:d2:49:57:d4:88:36:23:f5:79:07:b2: 76:6c:7f:1d:e1:18:83:d0:88:00:86:91:61:4e:02: 94:44:c1:08:a9:7c:66:47:2c:73:8c:ab:b9:29:de: ad:cf:55:7c:bb:43:16:86:f7:82:86:82:bd:39:e7: f7:b9:73:0e:9c:c0:5a:0d:d8:80:6f:45:4a:2c:18: 73:9d:dd:a6:de:b7:87:81:9f:91:d9:7c:c7:34:a0: 09:3b:38:fd:b2:01:c5:98:28:c7:e5:80:2e:e6:60: 08:57:84:65:eb:82:75:33:d8:ad:50:81:3f:f1:36: 80:00:9a:11:8a:d4:87:a6:a5:fe:bc:37:67:b9:08: 53:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:66:F5:D0:64:B7:C0:06:E7:CD:BA:02:45:D2:A9:B7:FB:95:35:BF X509v3 Authority Key Identifier: keyid:E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4d:fb:e3:fe:65:c0:6a:c0:72:a9:c9:ed:78:57:85:5f:d5: 59:07:3b:7e:6f:ac:c5:ab:08:38:8f:01:d1:0c:8f:85:c4:0d: 4a:de:71:dc:ac:96:a8:55:21:41:5d:23:83:9b:24:20:6f:c6: dd:7a:ab:1c:d3:d6:33:9c:f8:92:6b:6c:54:49:ed:d8:25:22: 09:a0:bb:87:42:3e:c5:39:52:bd:31:60:84:3c:7e:27:6d:fc: 99:b4:63:78:2f:b1:85:6b:bf:23:24:be:4d:12:7d:5f:02:1d: d4:e7:b1:a1:f0:82:d3:71:ac:cb:28:08:60:ce:88:ef:ba:8d: f6:b1:cb:73:10:36:bc:91:13:21:0a:ee:46:22:34:ed:2e:c2: d4:67:86:23:5d:e8:e8:8c:84:f3:39:04:75:76:7e:69:07:6e: 10:b9:98:00:99:a9:09:6f:85:64:20:41:83:a1:6e:88:06:84: ae:56:7d:23:0f:4f:62:be:84:03:4f:2e:ed:d7:56:5a:50:d2: 0c:f2:8c:f7:47:fe:fe:f7:fe:e6:dc:a7:e4:35:ec:29:71:d1: 38:2b:ec:09:9b:b1:3d:23:49:28:29:97:89:30:fa:df:f7:04: 7f:f1:bd:55:8c:07:23:6e:2f:e5:a7:c3:99:cc:ed:01:29:65: 3d:d2:fe:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE3QTAxMTAvBgNVBAUTKEU1Q0U5NEJEODVDRjA4RjQ3QThGREVDOTcwNEYxRENF RDAzODA2OEMwHhcNMjUxMjIzMDQzOTI4WhcNMjUxMjMwMDQzOTI4WjAYMRYwFAYD VQQDDA02OTRhMWQwMS1lODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjdxXJSAQahkCwCH+KTHUkpqAXN6el7jcpwB7DsFpZrCOj9heRA7Cj4sLG6Y 8rAyR+Usg9wp6mDCeRLFd6aCM4PI+ufrd5H1CsjQJ+FUdEpzJaTmt+JVZvibYQQf wIDRuowOPiqbWcc45rHi9m1HtmSY2pcGtOOri5P90klX1Ig2I/V5B7J2bH8d4RiD 0IgAhpFhTgKURMEIqXxmRyxzjKu5Kd6tz1V8u0MWhveChoK9Oef3uXMOnMBaDdiA b0VKLBhznd2m3reHgZ+R2XzHNKAJOzj9sgHFmCjH5YAu5mAIV4Rl64J1M9itUIE/ 8TaAAJoRitSHpqX+vDdnuQhTlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9m9dBk t8AG5826AkXSqbf7lTW/MB8GA1UdIwQYMBaAFOXOlL2Fzwj0eo/eyXBPHc7QOAaM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTdBMC85NTVGQTU1MjlG NjkxMUVGQTRGRUFGNjVDNEY5QUUwMi81YzZVdllYUENQUjZqOTdKY0U4ZHp0QTRC b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVjNlV2WVhQQ1BSNmo5N0pjRThkenRBNEJvdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTdBMC85NTVGQTU1MjlGNjkxMUVGQTRGRUFGNjVDNEY5QUUwMi81YzZVdllYUENQ UjZqOTdKY0U4ZHp0QTRCb3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMTfvj/mXAasByqcnteFeFX9VZBzt+b6zFqwg4jwHRDI+FxA1K3nHc rJaoVSFBXSODmyQgb8bdeqsc09YznPiSa2xUSe3YJSIJoLuHQj7FOVK9MWCEPH4n bfyZtGN4L7GFa78jJL5NEn1fAh3U57Gh8ILTcazLKAhgzojvuo32sctzEDa8kRMh Cu5GIjTtLsLUZ4YjXejojITzOQR1dn5pB24QuZgAmakJb4VkIEGDoW6IBoSuVn0j D09ivoQDTy7t11ZaUNIM8oz3R/7+9/7m3KfkNewpcdE4K+wJm7E9I0koKZeJMPrf 9wR/8b1VjAcjbi/lp8OZzO0BKWU90v4i -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:53 2025 by rpki-client