This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft File: CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json) Hash identifier: Zaf3zSP8MvF5YlFFXaL6j4IomFOa2R042xKWrFeFzlE= Subject key identifier: 18:AC:EB:95:BD:81:DA:23:39:2A:FD:5C:30:A3:B3:ED:12:57:A7:41 Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA Certificate issuer: /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft Manifest number: 68 Signing time: Tue 23 Dec 2025 05:52:03 +0000 Manifest this update: Tue 23 Dec 2025 05:52:02 +0000 Manifest next update: Tue 30 Dec 2025 05:52:02 +0000 Files and hashes: 1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: auTuuJ30xteuGpJFswvGmLm9w3xxD8MTZXDEVjTcNI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Validity Not Before: Dec 23 05:52:02 2025 GMT Not After : Dec 30 05:52:02 2025 GMT Subject: CN=694a2e02-8e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:21:b6:9e:a0:ec:ac:9e:aa:20:9e:f7:e8:4d: a6:e0:2d:95:df:4e:0a:39:62:a3:b9:33:81:9a:a9: de:1a:92:a8:4c:24:8a:b4:82:3d:9c:98:72:3a:29: db:c1:ae:f9:e8:84:15:7d:45:a3:32:71:dc:76:59: df:4d:b0:fb:7b:8c:33:34:cf:d5:b8:55:29:5f:56: 12:cb:d0:52:1f:ac:96:77:1c:69:7f:31:16:fd:e8: 72:11:03:b9:da:44:38:08:8d:3f:c6:fd:a6:57:4a: a5:95:1d:4b:5d:01:e4:06:73:e9:18:bc:24:91:f3: a8:c6:9b:7e:a5:49:a9:b8:02:1d:81:1e:bd:f5:96: ab:0d:23:45:a9:76:64:04:7a:8e:2e:88:b9:1c:96: c5:ee:c1:1d:fe:5c:b9:fe:c6:f3:c4:a3:9f:01:29: 08:51:31:de:54:7d:34:dd:b8:1d:0c:43:af:56:1a: 54:35:c0:93:c2:98:81:93:23:fe:ee:c0:fb:bd:88: ac:e0:e6:a0:3d:36:76:71:a2:91:26:23:f7:1f:13: 51:25:80:fe:8f:99:ca:d1:04:6c:ac:41:f7:d4:10: 14:ef:3a:65:cc:e8:75:36:52:10:53:92:95:7f:ab: 31:1e:85:c7:f3:e5:1e:f8:e3:45:cc:81:a6:0f:9d: 7a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AC:EB:95:BD:81:DA:23:39:2A:FD:5C:30:A3:B3:ED:12:57:A7:41 X509v3 Authority Key Identifier: keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:02:1a:97:2a:7b:53:6c:b2:2e:30:23:1d:95:ba:e2:38:c7: 63:08:e1:4e:f8:77:a1:ea:27:cf:27:09:d8:3a:55:cb:1f:d0: 6d:12:64:d0:dc:d0:f2:a4:8d:05:45:b1:83:c9:42:ea:f0:b6: ed:79:20:30:36:5e:ba:11:32:a9:6e:5f:18:3b:ab:cb:de:99: 53:3f:a4:e5:b1:e2:5c:e1:14:9e:e9:94:8e:12:be:bd:37:94: 73:38:65:ee:48:8a:c3:08:f5:57:51:4c:67:57:ec:27:8f:9d: e1:be:72:6d:38:16:f0:06:29:aa:90:be:20:34:26:95:55:23: 9a:5b:88:d6:78:c0:87:df:c8:00:d2:6d:7b:99:91:70:29:f9: 6c:76:50:db:63:04:ae:3b:b1:15:31:7a:ae:f4:2f:1c:5f:2b: b1:ba:8b:7e:4a:81:15:22:6a:1b:b2:69:cd:bc:90:64:75:aa: fd:7d:10:38:90:50:9f:fb:34:b4:1a:f7:a8:3a:b1:95:ae:72: 72:8d:48:47:ab:5f:05:25:2c:74:55:4d:6c:ae:5c:90:ae:42: fd:31:cb:55:88:60:0c:e9:96:0f:58:16:82:cf:34:0f:db:80: df:3f:d9:8e:05:a3:3d:59:55:74:78:aa:d2:66:d5:dc:28:5e: 87:f0:1f:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEM3QTExMC8GA1UEBRMoMDkxMTExNkZDMzhFOTVERjU5MTYzN0Q4QzY2NEI0NUZC MTZGNEJEQTAeFw0yNTEyMjMwNTUyMDJaFw0yNTEyMzAwNTUyMDJaMBgxFjAUBgNV BAMMDTY5NGEyZTAyLThlOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfIbaeoOysnqognvfoTabgLZXfTgo5YqO5M4Gaqd4akqhMJIq0gj2cmHI6KdvB rvnohBV9RaMycdx2Wd9NsPt7jDM0z9W4VSlfVhLL0FIfrJZ3HGl/MRb96HIRA7na RDgIjT/G/aZXSqWVHUtdAeQGc+kYvCSR86jGm36lSam4Ah2BHr31lqsNI0WpdmQE eo4uiLkclsXuwR3+XLn+xvPEo58BKQhRMd5UfTTduB0MQ69WGlQ1wJPCmIGTI/7u wPu9iKzg5qA9NnZxopEmI/cfE1ElgP6PmcrRBGysQffUEBTvOmXM6HU2UhBTkpV/ qzEehcfz5R7440XMgaYPnXqTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGKzrlb2B 2iM5Kv1cMKOz7RJXp0EwHwYDVR0jBBgwFoAUCRERb8OOld9ZFjfYxmS0X7FvS9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0QzdBLzRERjE2REQwNDA0 NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5WkZqZll4bVMwWDdGdlM5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1JFUmI4T09sZDlaRmpmWXhtUzBYN0Z2UzlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 QzdBLzRERjE2REQwNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5 WkZqZll4bVMwWDdGdlM5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACYCGpcqe1Nssi4wIx2VuuI4x2MI4U74d6HqJ88nCdg6Vcsf0G0SZNDc 0PKkjQVFsYPJQurwtu15IDA2XroRMqluXxg7q8vemVM/pOWx4lzhFJ7plI4Svr03 lHM4Ze5IisMI9VdRTGdX7CePneG+cm04FvAGKaqQviA0JpVVI5pbiNZ4wIffyADS bXuZkXAp+Wx2UNtjBK47sRUxeq70LxxfK7G6i35KgRUiahuyac28kGR1qv19EDiQ UJ/7NLQa96g6sZWucnKNSEerXwUlLHRVTWyuXJCuQv0xy1WIYAzplg9YFoLPNA/b gN8/2Y4Foz1ZVXR4qtJm1dwoXofwHyc= -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:24 2025 by rpki-client