This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft File: F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json) Hash identifier: M1OUpsecdla7qnyvnHPrO5cEaA6wNl4jx8fExvQrwdU= Subject key identifier: 7A:D8:B4:5B:3A:71:04:C9:6F:0E:B7:64:90:80:FA:00:48:B1:B6:F7 Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B Certificate issuer: /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft Manifest number: A5 Signing time: Sun 21 Dec 2025 05:20:35 +0000 Manifest this update: Sun 21 Dec 2025 05:20:35 +0000 Manifest next update: Sun 28 Dec 2025 05:20:35 +0000 Files and hashes: 1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: MPxUCgRlhkQxeS0PqGnWnTXu429H1LLyVKzvJTHJm8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B Validity Not Before: Dec 21 05:20:35 2025 GMT Not After : Dec 28 05:20:35 2025 GMT Subject: CN=694783a3-6f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:d4:de:7c:ac:58:a2:98:39:01:6f:df:9f: 41:7f:a3:b4:f2:a0:86:65:44:69:5b:cc:c3:c4:c1: 9b:aa:1d:83:52:e7:ee:c1:3b:f5:26:82:0b:c9:df: 6e:9a:d0:ec:b5:4a:5f:64:d8:7e:58:5b:08:c6:b1: ff:b8:70:91:b5:6e:12:f4:33:21:d2:ad:fa:34:30: eb:bf:e9:54:dc:08:12:30:68:4b:44:d5:68:f1:9a: e6:63:ef:39:98:1e:19:f6:f8:3e:19:10:12:a2:dd: 51:fd:3e:b4:d2:95:05:b1:79:4c:65:b9:09:cb:07: 10:86:29:bd:47:97:60:2a:59:b1:81:d8:48:4d:b8: ce:41:0e:3f:1d:07:df:6e:9e:c1:bf:9e:46:59:79: 4c:cb:c5:4f:87:0b:0a:c0:25:c2:29:eb:77:4b:95: a7:22:e8:80:ff:56:ce:ab:35:19:30:18:f1:66:41: dc:3e:4d:3b:b5:77:32:39:1f:2e:73:28:e6:67:f7: 4b:d4:2c:08:6c:87:81:3d:cd:ad:dc:16:e4:d7:1f: 17:3b:df:ab:f6:3c:68:90:ec:81:f5:2c:6f:f4:61: b7:55:40:13:d1:37:35:f5:a3:6d:2e:fb:d7:3f:c9: ae:bd:c8:fe:26:03:95:3d:84:87:9b:42:a5:c9:53: 72:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D8:B4:5B:3A:71:04:C9:6F:0E:B7:64:90:80:FA:00:48:B1:B6:F7 X509v3 Authority Key Identifier: keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:7c:b4:11:5d:45:40:7a:15:34:d2:5c:68:0f:d9:c4:2c:de: e8:d2:77:d1:ba:76:18:6f:5b:b7:39:53:cd:a3:cb:77:bf:9b: 0b:5c:b4:6c:96:da:d6:43:0d:01:1d:42:ac:e0:ed:84:b1:c5: 99:a5:0c:0e:f6:4e:d0:b0:6a:f3:90:c0:cc:2f:37:80:d9:32: e9:29:81:8c:90:10:6f:fb:5a:80:a3:56:40:f3:e0:f1:53:b4: c9:57:2a:7b:a2:67:26:c6:be:57:fa:02:c5:41:0d:91:1f:13: 88:2c:15:35:1c:fe:fd:c7:e1:a1:99:e1:95:cf:6b:1f:31:a6: 7b:ea:e5:58:b8:aa:f7:ce:11:2c:0b:f8:bb:a1:54:12:13:34: 26:b6:aa:67:34:8f:64:7d:3a:a2:58:46:44:0a:6d:7f:18:ca: 3c:26:fa:fe:4b:28:10:02:43:47:68:53:97:ee:00:09:b2:a2: 96:e3:4e:e6:fb:c2:4f:88:b9:42:7f:ea:16:55:26:c9:a0:a6: 11:47:10:63:0e:d7:86:a2:c2:39:8e:65:96:ff:07:e7:36:19: f6:65:85:e9:20:bd:11:39:dc:d3:8e:2e:12:85:3a:f8:ec:03: 92:a4:01:9b:6b:43:de:f9:34:5f:59:1e:66:b9:99:49:d2:8b: 19:85:af:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5RjUxMTAvBgNVBAUTKDE3OEM2QkI0NzZCMzdDNUYxNUU2RTk1M0FCRTRDQkNG MDg2MTA4MkIwHhcNMjUxMjIxMDUyMDM1WhcNMjUxMjI4MDUyMDM1WjAYMRYwFAYD VQQDDA02OTQ3ODNhMy02ZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl3vU3nysWKKYOQFv359Bf6O08qCGZURpW8zDxMGbqh2DUufuwTv1JoILyd9u mtDstUpfZNh+WFsIxrH/uHCRtW4S9DMh0q36NDDrv+lU3AgSMGhLRNVo8ZrmY+85 mB4Z9vg+GRASot1R/T600pUFsXlMZbkJywcQhim9R5dgKlmxgdhITbjOQQ4/HQff bp7Bv55GWXlMy8VPhwsKwCXCKet3S5WnIuiA/1bOqzUZMBjxZkHcPk07tXcyOR8u cyjmZ/dL1CwIbIeBPc2t3Bbk1x8XO9+r9jxokOyB9Sxv9GG3VUAT0Tc19aNtLvvX P8muvcj+JgOVPYSHm0KlyVNyPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrYtFs6 cQTJbw63ZJCA+gBIsbb3MB8GA1UdIwQYMBaAFBeMa7R2s3xfFebpU6vky88IYQgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zQTgyOTBFOERG REExMUVGOEI0Nzg2MjRDNEY5QUUwMi9GNHhydEhhemZGOFY1dWxUcS1UTHp3aGhD Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0eHJ0SGF6ZkY4VjV1bFRxLVRMendoaENDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlGNS8zQTgyOTBFOERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi9GNHhydEhhemZG OFY1dWxUcS1UTHp3aGhDQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIfLQRXUVAehU00lxoD9nELN7o0nfRunYYb1u3OVPNo8t3v5sLXLRs ltrWQw0BHUKs4O2EscWZpQwO9k7QsGrzkMDMLzeA2TLpKYGMkBBv+1qAo1ZA8+Dx U7TJVyp7omcmxr5X+gLFQQ2RHxOILBU1HP79x+GhmeGVz2sfMaZ76uVYuKr3zhEs C/i7oVQSEzQmtqpnNI9kfTqiWEZECm1/GMo8Jvr+SygQAkNHaFOX7gAJsqKW407m +8JPiLlCf+oWVSbJoKYRRxBjDteGosI5jmWW/wfnNhn2ZYXpIL0ROdzTji4ShTr4 7AOSpAGba0Pe+TRfWR5muZlJ0osZha/3 -----END CERTIFICATE-----Generated at Mon Dec 22 22:36:29 2025 by rpki-client