This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft File: 1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json) Hash identifier: vFa0JohuiXW6U6vJVjiBb2TQF4zvdpcCQQRL3zSyHGA= Subject key identifier: 22:3A:0E:B4:81:E7:E6:11:A3:F3:0F:F8:77:1C:D7:EC:22:F5:8B:EE Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C Certificate issuer: /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Certificate serial: 09DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft Manifest number: 09DF Signing time: Tue 02 Dec 2025 16:26:40 +0000 Manifest this update: Tue 02 Dec 2025 16:26:40 +0000 Manifest next update: Tue 09 Dec 2025 16:26:40 +0000 Files and hashes: 1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: Dh7s8Xu+NepRvfux2/+Voc8RrGBYBqQiC3a3CDzMUeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 16:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2527 (0x9df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Validity Not Before: Dec 2 16:26:40 2025 GMT Not After : Dec 9 16:26:40 2025 GMT Subject: CN=692f1340-f5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:61:81:c9:91:bc:f2:ed:14:25:bc:7b:aa: fc:55:13:a8:6e:ce:7f:bd:82:a8:05:3b:1a:0a:02: a5:45:ae:b2:74:22:06:90:6a:38:5c:c4:5e:41:e5: e1:4c:30:36:36:14:2f:ef:60:90:f4:87:af:2b:88: f2:7a:e5:af:6c:c1:e5:3a:8d:f9:68:4e:cf:4c:78: 19:2c:cd:16:3b:0f:6c:3a:fc:f8:a3:50:28:cd:8a: cf:80:5d:1d:c7:68:fc:eb:26:6e:6a:07:72:82:7c: 5b:17:95:6d:23:3b:9e:19:7a:6e:f5:15:71:50:7b: d6:cf:e7:35:7c:e8:cd:19:9a:54:ae:1a:01:6e:ec: c1:1d:f1:a3:8b:a1:0b:c7:ae:63:ad:8e:61:ec:37: cf:14:77:5c:b6:1a:17:01:6c:ba:93:57:bd:3f:ae: c2:12:f9:81:2e:6d:cb:17:b4:fb:ca:c6:42:50:09: a8:59:6a:03:92:7c:ba:53:6a:bb:a1:8b:5f:df:b5: 97:1d:b3:85:81:bc:4f:a7:79:f5:c1:52:db:ba:4c: 64:a5:eb:29:f8:64:28:41:ed:b2:c8:50:81:0e:27: f3:2f:59:ac:c5:b4:c7:15:a9:96:9e:de:f7:27:bd: 26:17:34:01:9b:61:49:03:17:d7:c3:c7:8c:19:dd: f4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3A:0E:B4:81:E7:E6:11:A3:F3:0F:F8:77:1C:D7:EC:22:F5:8B:EE X509v3 Authority Key Identifier: keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:63:25:2d:ad:b7:13:6a:c0:a7:0e:40:2d:78:5c:dd:5e:1d: 12:a3:2c:58:61:55:7b:ac:a5:44:fe:92:8d:29:23:33:e7:00: b8:91:b2:56:a4:7f:19:94:75:7e:8e:a3:4d:36:d8:cb:e1:3a: 32:b9:8a:54:6d:7b:7b:7f:eb:ab:52:d8:7d:61:77:e8:bc:34: 0a:a3:18:1b:11:c7:c7:3a:5e:94:65:00:a0:be:8f:49:10:79: be:7e:e3:19:50:4b:b3:9b:af:e3:ee:7f:66:9c:f8:47:ab:60: 92:60:e9:63:df:a1:1b:c1:53:9b:b3:3d:6e:10:b2:47:ec:d4: c6:1e:8f:e8:f0:6c:02:11:4d:f0:aa:6d:14:62:3a:d8:7b:a8: f8:2f:e9:1b:b1:48:e7:8a:8a:5f:ba:7d:74:52:9d:a6:9b:9c: 4a:40:8f:f7:44:83:b3:08:eb:78:f2:a3:fa:9c:bc:68:59:b8: 8b:0b:44:7d:79:c7:3f:b2:81:a0:61:2b:5b:c1:81:82:c5:5d: 89:46:e1:c3:bf:38:22:12:09:07:07:fa:fa:a7:db:6a:48:60: bd:68:6e:21:24:f9:d3:23:0a:28:44:1a:14:31:3a:0e:c0:e0: 6a:85:f0:aa:69:14:00:bd:6a:4a:43:04:52:78:79:ed:2e:45: fe:15:6f:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKEQ2NjkzRUUzNUM3MkVCQ0Y0MjYzQzY5ODQ1NkQ4MkY2 OEU3MTRGNUMwHhcNMjUxMjAyMTYyNjQwWhcNMjUxMjA5MTYyNjQwWjAYMRYwFAYD VQQDEw02OTJmMTM0MC1mNWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtz1hgcmRvPLtFCW8e6r8VROobs5/vYKoBTsaCgKlRa6ydCIGkGo4XMReQeXh TDA2NhQv72CQ9IevK4jyeuWvbMHlOo35aE7PTHgZLM0WOw9sOvz4o1AozYrPgF0d x2j86yZuagdygnxbF5VtIzueGXpu9RVxUHvWz+c1fOjNGZpUrhoBbuzBHfGji6EL x65jrY5h7DfPFHdcthoXAWy6k1e9P67CEvmBLm3LF7T7ysZCUAmoWWoDkny6U2q7 oYtf37WXHbOFgbxPp3n1wVLbukxkpesp+GQoQe2yyFCBDifzL1msxbTHFamWnt73 J70mFzQBm2FJAxfXw8eMGd30gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCI6DrSB 5+YRo/MP+Hcc1+wi9YvuMB8GA1UdIwQYMBaAFNZpPuNccuvPQmPGmEVtgvaOcU9c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS8yQ0U0OTRDMDhG OTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4OUNZOGFZUlcyQzlvNXhU MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFtay00MXh5Njg5Q1k4YVlSVzJDOW81eFQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS8yQ0U0OTRDMDhGOTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4 OUNZOGFZUlcyQzlvNXhUMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFYyUtrbcTasCnDkAteFzdXh0SoyxYYVV7rKVE/pKNKSMz5wC4kbJW pH8ZlHV+jqNNNtjL4ToyuYpUbXt7f+urUth9YXfovDQKoxgbEcfHOl6UZQCgvo9J EHm+fuMZUEuzm6/j7n9mnPhHq2CSYOlj36EbwVObsz1uELJH7NTGHo/o8GwCEU3w qm0UYjrYe6j4L+kbsUjniopfun10Up2mm5xKQI/3RIOzCOt48qP6nLxoWbiLC0R9 ecc/soGgYStbwYGCxV2JRuHDvzgiEgkHB/r6p9tqSGC9aG4hJPnTIwooRBoUMToO wOBqhfCqaRQAvWpKQwRSeHntLkX+FW/D -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:35 2025 by rpki-client