This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json) Hash identifier: Lp60VbZvl9vXgV2vahx1GWI41EVz1qwkqhZfQJ9OY8E= Subject key identifier: F5:ED:10:3C:A1:18:54:73:6C:24:85:5D:83:44:F2:F0:80:3F:E4:9A Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46 Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46 Certificate serial: 0418 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft Manifest number: 0540 Signing time: Mon 22 Dec 2025 23:26:40 +0000 Manifest this update: Mon 22 Dec 2025 23:26:40 +0000 Manifest next update: Mon 29 Dec 2025 23:26:40 +0000 Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: 06Z5iGzqTFmatt0ECPwMejEfQ9VU6siqMI/M0/W8sdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1048 (0x418) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46 Validity Not Before: Dec 22 23:26:40 2025 GMT Not After : Dec 29 23:26:40 2025 GMT Subject: CN=6949d3b0-c3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:68:3f:f5:e7:d5:36:8c:cb:c9:39:80:87:9f: 77:b0:2c:14:7e:b7:72:a4:08:60:03:d7:fe:0d:33: 1d:8c:a5:46:f5:5d:59:8d:89:b4:b9:68:e4:cf:23: bc:4b:46:da:bf:08:a3:8b:c9:86:b8:4e:98:d8:cd: 21:b6:d4:4e:29:af:25:da:5b:c1:e5:41:01:9a:8a: b1:07:db:14:7c:e0:72:1a:82:62:3d:56:ec:76:a5: 39:eb:25:34:b7:8e:cd:13:57:5e:88:26:32:07:51: e5:22:03:8d:30:79:c9:d2:dc:5a:1f:03:1d:37:2a: 19:73:68:04:20:00:22:e4:a4:d4:7e:99:f6:95:d9: d7:e9:27:49:4f:91:89:6b:ba:df:1b:8f:4f:77:75: 8d:52:e8:98:4c:3b:7b:b4:b3:52:75:2c:4f:98:6a: e6:23:3e:ed:f3:4c:c2:54:5e:ba:da:59:61:a8:8a: e9:7a:ff:ad:82:4c:31:30:5c:c0:d2:ed:71:f8:a7: 0f:bf:1b:64:a7:5c:bc:ad:bc:bc:88:b0:c0:3d:dc: 2e:c9:6b:d7:38:3a:78:19:54:64:81:5a:dc:f4:3c: 16:ed:4f:b4:d4:03:01:9c:83:69:e4:26:f9:ac:20: a5:f9:47:7f:99:b1:50:59:81:2e:63:8e:0b:a0:96: 16:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:ED:10:3C:A1:18:54:73:6C:24:85:5D:83:44:F2:F0:80:3F:E4:9A X509v3 Authority Key Identifier: keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a2:b5:2d:e6:e1:62:36:6e:d2:92:e1:29:88:ea:17:b7:66: c9:0f:2c:d6:d1:99:8c:ca:bd:2b:eb:e2:1c:39:17:18:6d:17: 44:b3:c9:70:8b:79:4d:df:a8:8d:88:68:00:c2:27:1b:46:c1: 47:f7:46:57:73:ee:b2:ca:66:ab:02:0e:06:03:20:09:1c:fe: 29:48:2e:57:4a:ca:a0:ad:73:d9:70:ec:8b:1b:5a:a4:9c:d4: 9d:ca:d4:6f:31:d8:f0:3a:8d:a8:3a:73:4c:12:fa:f9:df:93: 49:da:d5:a4:c1:e4:12:a1:82:be:9f:6c:d0:e4:5b:11:98:17: 72:39:5b:dc:50:51:2b:62:ff:20:87:9b:37:8a:57:1b:99:4d: c0:f5:c3:67:d6:c8:41:70:4e:98:13:2d:3c:15:78:e0:7c:96: f7:f6:69:d2:90:04:ec:75:95:a0:34:f2:36:79:10:35:97:13: e9:a7:53:8a:dc:0e:8f:40:91:64:15:66:4c:42:a2:bc:d7:7b: f1:69:5b:98:95:98:c6:88:e9:a7:b6:dc:93:9c:6b:52:dc:2a: 67:72:45:7d:44:ec:40:8d:6e:23:b4:f4:bd:ef:11:f1:ab:0d: 15:d6:ca:67:c6:40:b1:12:3c:4e:52:3a:96:cb:5b:68:e5:67: 91:77:4a:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDIzQzMxQjFDRDY4Q0NDNEQxQ0VCNUQzOTlBNTAxQjYw NTBGRDFENDYwHhcNMjUxMjIyMjMyNjQwWhcNMjUxMjI5MjMyNjQwWjAYMRYwFAYD VQQDDA02OTQ5ZDNiMC1jM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Gg/9efVNozLyTmAh593sCwUfrdypAhgA9f+DTMdjKVG9V1ZjYm0uWjkzyO8 S0bavwiji8mGuE6Y2M0httROKa8l2lvB5UEBmoqxB9sUfOByGoJiPVbsdqU56yU0 t47NE1deiCYyB1HlIgONMHnJ0txaHwMdNyoZc2gEIAAi5KTUfpn2ldnX6SdJT5GJ a7rfG49Pd3WNUuiYTDt7tLNSdSxPmGrmIz7t80zCVF662llhqIrpev+tgkwxMFzA 0u1x+KcPvxtkp1y8rby8iLDAPdwuyWvXODp4GVRkgVrc9DwW7U+01AMBnINp5Cb5 rCCl+Ud/mbFQWYEuY44LoJYWOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXtEDyh GFRzbCSFXYNE8vCAP+SaMB8GA1UdIwQYMBaAFCPDGxzWjMxNHOtdOZpQG2BQ/R1G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpFMGM2MTA1bWxBYllGRDlI VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4TWJITmFNekUwYzYxMDVtbEFiWUZEOUhVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpF MGM2MTA1bWxBYllGRDlIVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArorUt5uFiNm7SkuEpiOoXt2bJDyzW0ZmMyr0r6+IcORcYbRdEs8lw i3lN36iNiGgAwicbRsFH90ZXc+6yymarAg4GAyAJHP4pSC5XSsqgrXPZcOyLG1qk nNSdytRvMdjwOo2oOnNMEvr535NJ2tWkweQSoYK+n2zQ5FsRmBdyOVvcUFErYv8g h5s3ilcbmU3A9cNn1shBcE6YEy08FXjgfJb39mnSkATsdZWgNPI2eRA1lxPpp1OK 3A6PQJFkFWZMQqK813vxaVuYlZjGiOmnttyTnGtS3CpnckV9ROxAjW4jtPS97xHx qw0V1spnxkCxEjxOUjqWy1to5WeRd0pU -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:30 2025 by rpki-client