This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft File: AGzRlAGFL6t1v25TlZr665WsJfI.mft (raw, json) Hash identifier: gJ4Ueh1lm1E6NRF2IDxtU9JHYVizB9l36ZIvGx1jDB4= Subject key identifier: 0C:AE:76:E3:30:16:8F:5C:E2:24:1F:B6:0C:57:77:A5:C4:70:CC:1D Authority key identifier: 00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2 Certificate issuer: /CN=A919CE1D/serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft Manifest number: 52 Signing time: Tue 23 Dec 2025 06:07:50 +0000 Manifest this update: Tue 23 Dec 2025 06:07:50 +0000 Manifest next update: Tue 30 Dec 2025 06:07:50 +0000 Files and hashes: 1: AGzRlAGFL6t1v25TlZr665WsJfI.crl (hash: iaOUm7ZGJjeELlGltylVYtIZMB6ZQIaxVS5WBDBZRtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CE1D, serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2 Validity Not Before: Dec 23 06:07:50 2025 GMT Not After : Dec 30 06:07:50 2025 GMT Subject: CN=694a31b6-c272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0f:1a:24:b1:22:25:0c:4a:df:e1:27:23:c5: 83:a3:83:f9:09:80:fe:ed:cb:76:68:a8:c2:f3:d6: aa:13:9d:93:2f:79:48:17:b1:56:c3:86:66:28:5a: 15:0c:c2:e7:89:2e:95:fc:98:36:32:9b:ad:58:99: b5:b9:04:96:30:3f:8e:9c:92:f3:02:1c:3f:84:5a: e4:f1:bc:3a:95:68:a9:6f:eb:0e:c2:cc:16:17:be: 9a:9c:ec:a5:b4:5f:7e:8d:fd:8e:b6:d7:66:9d:de: 04:de:79:81:0f:00:a4:51:17:a3:f7:c7:1b:aa:bd: f1:4d:12:7f:b3:51:90:4a:37:e9:a0:87:b0:a1:92: 91:92:40:8f:44:fd:22:90:c3:72:a1:05:37:4e:09: cd:e5:bf:df:5c:34:a6:3b:05:9a:27:f1:11:c4:87: 01:cd:19:da:c2:9e:47:f5:ee:06:a5:a0:e4:7b:57: b1:4c:65:99:d4:9d:3e:61:5b:9e:7e:6b:30:41:f2: d5:34:4f:72:c8:7c:c9:b7:c5:f1:1a:22:cc:ef:47: 0c:c9:d2:35:4f:d0:7a:cf:99:c5:cf:77:f8:ba:dd: 24:d4:6a:5b:30:83:92:50:e6:19:0d:22:3f:68:f9: b8:12:c7:b6:88:77:ce:61:a6:bb:68:16:de:64:65: 66:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AE:76:E3:30:16:8F:5C:E2:24:1F:B6:0C:57:77:A5:C4:70:CC:1D X509v3 Authority Key Identifier: keyid:00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a5:fd:7f:50:44:c0:c6:79:77:0b:ef:fd:17:47:d6:26:3c: 25:12:f7:34:ea:ad:e2:61:c0:8a:a7:3c:3a:6a:bb:72:5d:75: a7:84:cb:de:4f:8d:1c:d5:1d:5a:52:b3:62:f1:84:2c:55:fe: aa:17:16:e8:8f:eb:d2:f8:bc:69:0f:11:00:31:d8:e7:88:8e: 4b:b5:7f:a2:4b:81:71:e9:01:70:4a:18:a1:53:22:1f:f6:e8: b9:68:a9:9e:44:58:af:9c:16:ad:26:57:f7:ff:f7:f8:68:a3: 6e:93:ea:0f:7e:a7:95:01:dc:58:29:f5:06:9d:a8:c9:95:0b: 9a:19:06:82:0c:7a:02:26:64:1d:ca:b5:13:4d:07:bd:a0:23: 75:99:72:20:3c:95:f1:0f:47:2d:9c:4c:a4:be:a0:b0:ab:da: 62:b3:c4:80:49:ca:07:cb:a2:f7:a1:0b:4b:03:31:5f:b0:f4: bf:91:73:a9:87:1a:e2:dd:f6:3b:b6:68:99:2d:2f:94:ca:8c: 5c:4b:06:dd:d0:06:d7:f5:87:98:0b:1a:fb:6c:9b:62:66:91: ae:25:ca:5a:d4:47:ec:b9:73:84:19:de:8c:9a:51:9d:da:6b: bc:9e:37:63:ce:5c:1e:49:5d:04:99:a1:ec:27:10:69:62:40: 99:7d:5c:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Q0UxRDExMC8GA1UEBRMoMDA2Q0QxOTQwMTg1MkZBQjc1QkY2RTUzOTU5QUZBRUI5 NUFDMjVGMjAeFw0yNTEyMjMwNjA3NTBaFw0yNTEyMzAwNjA3NTBaMBgxFjAUBgNV BAMMDTY5NGEzMWI2LWMyNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkDxoksSIlDErf4ScjxYOjg/kJgP7ty3ZoqMLz1qoTnZMveUgXsVbDhmYoWhUM wueJLpX8mDYym61YmbW5BJYwP46ckvMCHD+EWuTxvDqVaKlv6w7CzBYXvpqc7KW0 X36N/Y6212ad3gTeeYEPAKRRF6P3xxuqvfFNEn+zUZBKN+mgh7ChkpGSQI9E/SKQ w3KhBTdOCc3lv99cNKY7BZon8RHEhwHNGdrCnkf17galoOR7V7FMZZnUnT5hW55+ azBB8tU0T3LIfMm3xfEaIszvRwzJ0jVP0HrPmcXPd/i63STUalswg5JQ5hkNIj9o +bgSx7aId85hprtoFt5kZWa9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDK524zAW j1ziJB+2DFd3pcRwzB0wHwYDVR0jBBgwFoAUAGzRlAGFL6t1v25TlZr665WsJfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDRTFEL0JGRjI0QjE0NjJE RjExRjBBMUUzN0UwRUM0RjlBRTAyL0FHelJsQUdGTDZ0MXYyNVRsWnI2NjVXc0pm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUd6UmxBR0ZMNnQxdjI1VGxacjY2NVdzSmZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD RTFEL0JGRjI0QjE0NjJERjExRjBBMUUzN0UwRUM0RjlBRTAyL0FHelJsQUdGTDZ0 MXYyNVRsWnI2NjVXc0pmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH2l/X9QRMDGeXcL7/0XR9YmPCUS9zTqreJhwIqnPDpqu3JddaeEy95P jRzVHVpSs2LxhCxV/qoXFuiP69L4vGkPEQAx2OeIjku1f6JLgXHpAXBKGKFTIh/2 6LloqZ5EWK+cFq0mV/f/9/hoo26T6g9+p5UB3Fgp9QadqMmVC5oZBoIMegImZB3K tRNNB72gI3WZciA8lfEPRy2cTKS+oLCr2mKzxIBJygfLovehC0sDMV+w9L+Rc6mH GuLd9ju2aJktL5TKjFxLBt3QBtf1h5gLGvtsm2Jmka4lylrUR+y5c4QZ3oyaUZ3a a7yeN2POXB5JXQSZoewnEGliQJl9XNo= -----END CERTIFICATE-----Generated at Wed Dec 24 21:23:55 2025 by rpki-client