This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: 3oU0D8OpSksPHgWtlFymeC+WwMPboMm0D2RVt3IEsBM= Subject key identifier: 55:19:3A:91:66:10:0D:6F:B4:7F:1A:0B:EC:F4:97:10:FC:7C:F9:5D Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 0328 Signing time: Tue 23 Dec 2025 01:17:08 +0000 Manifest this update: Tue 23 Dec 2025 01:17:08 +0000 Manifest next update: Tue 30 Dec 2025 01:17:08 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: 1YRmKl52XnhcNyqcnfFBXb2c5Uoi9AmLRm0Yx+tuffw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: Dec 23 01:17:08 2025 GMT Not After : Dec 30 01:17:08 2025 GMT Subject: CN=6949ed94-9744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:24:0d:90:e0:77:32:0a:c9:4d:40:1b:fe:cb: f5:51:8c:9c:c6:fe:4c:a7:1c:c9:65:f0:d6:12:08: 45:5a:bf:23:22:52:2b:ff:bc:63:ac:26:88:b3:81: 34:fd:54:a3:5d:3f:12:96:31:41:1f:58:1e:76:bc: 20:39:56:e4:b2:d4:de:04:c3:91:17:20:83:f6:fe: 69:5e:43:e3:01:49:98:e6:dc:66:44:9d:55:ad:64: 52:e9:26:71:43:54:d4:1e:f7:5f:4e:27:42:5c:6f: 7c:44:9c:d5:7b:0a:22:3d:bf:4c:03:b3:6d:00:59: 55:ca:be:60:e2:92:c9:35:b8:b2:50:07:e7:88:d5: 85:f7:be:60:db:77:a1:76:0d:d1:75:73:69:b1:3c: ff:9e:a5:e9:93:69:85:ff:66:d5:5f:b7:e4:90:d1: b0:99:9e:9f:6c:8f:fc:33:63:d5:e2:39:07:ef:88: b0:4c:c0:f4:fb:9c:e6:7e:fd:49:64:87:a6:ec:92: f2:99:6f:2e:d0:b5:4f:ac:7c:35:5b:48:a8:5f:06: 15:02:bf:14:a4:ed:e7:45:66:d1:72:f0:7a:a4:c2: fa:3e:1d:5b:60:62:eb:aa:f6:54:bf:28:a8:98:c3: a7:f9:01:61:65:ad:53:bf:67:a7:16:ea:7b:d1:24: 59:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:19:3A:91:66:10:0D:6F:B4:7F:1A:0B:EC:F4:97:10:FC:7C:F9:5D X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:bb:bd:ef:90:b7:c9:9b:8d:af:09:2d:6c:0a:2c:0e:f1:39: 59:35:77:6a:60:dc:be:db:3e:fc:58:5f:39:b0:fa:f4:6f:cd: 89:99:d3:31:9e:ca:47:a9:68:bf:ca:bd:e0:4a:c4:8a:3e:9d: a6:4e:e2:98:62:96:d7:63:24:af:9b:ce:24:96:7c:57:a4:be: e9:6d:4e:98:ce:86:b0:69:b1:ad:09:a5:de:bf:e3:58:64:ae: c6:4a:09:e2:57:9f:57:56:81:11:ee:c9:12:60:08:62:29:2e: aa:a5:b1:fc:96:f4:01:aa:30:da:2e:00:d7:9e:48:12:68:d7: 47:d3:49:b6:06:0d:32:a2:13:47:23:04:26:23:74:0c:0f:1b: bf:a6:25:5c:fd:3f:8e:7b:05:7a:21:2c:f3:77:80:1a:3d:70: 78:df:fa:5c:84:3c:35:6d:e4:82:88:c3:d5:0d:e4:32:c6:c8: 5c:00:27:fb:32:2a:cb:a0:8f:cf:fc:96:c3:04:cb:89:dd:57: 7a:cf:99:8d:8a:2a:0d:ae:04:bd:a2:c7:08:11:db:53:fc:da: b4:75:cf:d6:05:7a:00:86:c2:5d:a5:0e:09:41:bf:37:de:67: f0:b5:5c:30:10:d3:42:8b:31:6f:4c:16:1c:3c:e6:77:cb:e8: 8a:a3:66:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjUxMjIzMDExNzA4WhcNMjUxMjMwMDExNzA4WjAYMRYwFAYD VQQDDA02OTQ5ZWQ5NC05NzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SQNkOB3MgrJTUAb/sv1UYycxv5MpxzJZfDWEghFWr8jIlIr/7xjrCaIs4E0 /VSjXT8SljFBH1gedrwgOVbkstTeBMORFyCD9v5pXkPjAUmY5txmRJ1VrWRS6SZx Q1TUHvdfTidCXG98RJzVewoiPb9MA7NtAFlVyr5g4pLJNbiyUAfniNWF975g23eh dg3RdXNpsTz/nqXpk2mF/2bVX7fkkNGwmZ6fbI/8M2PV4jkH74iwTMD0+5zmfv1J ZIem7JLymW8u0LVPrHw1W0ioXwYVAr8UpO3nRWbRcvB6pML6Ph1bYGLrqvZUvyio mMOn+QFhZa1Tv2enFup70SRZLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUZOpFm EA1vtH8aC+z0lxD8fPldMB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVu73vkLfJm42vCS1sCiwO8TlZNXdqYNy+2z78WF85sPr0b82JmdMx nspHqWi/yr3gSsSKPp2mTuKYYpbXYySvm84klnxXpL7pbU6YzoawabGtCaXev+NY ZK7GSgniV59XVoER7skSYAhiKS6qpbH8lvQBqjDaLgDXnkgSaNdH00m2Bg0yohNH IwQmI3QMDxu/piVc/T+OewV6ISzzd4AaPXB43/pchDw1beSCiMPVDeQyxshcACf7 MirLoI/P/JbDBMuJ3Vd6z5mNiioNrgS9oscIEdtT/Nq0dc/WBXoAhsJdpQ4JQb83 3mfwtVwwENNCizFvTBYcPOZ3y+iKo2Z/ -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:22 2025 by rpki-client