This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json) Hash identifier: fcvT9VBscEnhb9QcjDbM7vhgK0nfghPKkLvYfT6TVPY= Subject key identifier: A7:40:BF:A0:72:E1:07:E3:38:7C:C1:0F:54:97:48:F5:0C:45:06:71 Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Certificate serial: 34E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft Manifest number: 34E8 Signing time: Mon 22 Dec 2025 15:01:27 +0000 Manifest this update: Mon 22 Dec 2025 15:01:26 +0000 Manifest next update: Mon 29 Dec 2025 15:01:26 +0000 Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: BYtEjgJSmVCfgLEyCMjwM08fn63FTMCGRubM/Btkz0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13544 (0x34e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A96, serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Validity Not Before: Dec 22 15:01:26 2025 GMT Not After : Dec 29 15:01:26 2025 GMT Subject: CN=69495d47-cda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:0e:9e:61:76:0b:0c:f0:eb:24:f8:de:d8: 3a:00:21:0d:ec:19:2f:39:95:9e:8d:01:84:be:c9: 85:46:40:62:15:e9:b6:a3:35:d7:41:9c:57:22:ea: c1:01:26:09:b2:d9:55:55:e6:c4:15:2b:a5:d5:b7: 33:4d:ce:6f:d7:6c:5a:bf:f0:b8:6f:b6:5e:01:b2: 14:dd:36:04:a9:b5:0f:ba:78:97:44:b5:5d:3e:d4: 50:18:07:42:96:d6:0d:eb:a7:e8:e6:48:f5:77:8d: 9c:d8:54:95:24:3a:a2:99:14:c5:7c:8a:43:a3:38: a0:69:ad:f2:bf:88:6c:f9:96:99:8a:c1:b9:55:11: fa:d8:f9:dd:85:52:7a:d7:99:1d:63:5d:13:0f:a2: a0:42:b4:fa:80:2e:8a:db:2f:75:3c:4e:c1:81:a5: 8b:66:ed:be:90:41:35:83:7c:08:70:c1:08:71:c2: e8:46:9a:23:fd:fc:8d:76:68:86:d3:18:47:6a:de: ff:82:73:23:a6:42:25:b7:25:cb:1b:b9:4d:79:6b: 39:36:b1:c9:2f:dd:d0:eb:dd:52:b5:06:fd:5c:30: 97:6a:73:eb:50:53:db:fc:35:3e:4f:72:1b:31:83: 1b:91:8d:ff:0a:6c:31:a6:c5:95:c5:7b:21:bb:76: 68:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:40:BF:A0:72:E1:07:E3:38:7C:C1:0F:54:97:48:F5:0C:45:06:71 X509v3 Authority Key Identifier: keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:a1:a2:f3:fe:a2:8c:0b:ea:57:86:2f:1f:e0:e1:71:91:8d: 50:78:d3:16:d8:bc:a1:c6:60:c4:f7:a8:0c:48:08:cb:ba:81: f8:c4:91:e4:12:59:16:e3:1a:3d:8b:72:47:bf:fa:02:99:db: 4e:2a:11:0f:6e:3b:05:4b:19:16:e5:ed:70:c6:73:fc:4d:4c: ae:b9:75:a9:43:ac:df:62:aa:e1:3e:42:70:02:84:99:04:a0: ea:92:86:14:aa:0f:dd:ab:e0:f9:06:50:c1:7b:3b:81:38:81: 96:bf:80:62:ef:8c:21:56:da:db:ea:98:14:b4:29:b5:38:87: a1:67:82:d4:92:dd:ea:40:07:d2:09:d3:54:60:e0:e1:fa:e5: b4:de:b2:ec:dc:e6:05:c0:5f:e8:53:c9:52:ec:9c:ef:ba:42: 01:3b:2c:14:bc:2d:cb:76:e5:22:e0:46:af:3f:b3:57:fe:fa: a0:64:39:dc:2d:97:b8:03:8d:48:87:ec:0c:e9:0e:0f:59:e9: 32:1a:ba:d7:c5:49:ee:6e:a3:ce:e9:0f:11:6f:91:f6:1d:9e: 77:c3:0c:0a:80:94:13:3c:08:45:41:4f:47:7e:19:2e:e1:f5: 98:9e:04:23:a1:59:c4:7b:b4:d7:1d:72:9f:8a:96:29:89:73: 0c:8c:20:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBOTYxMTAvBgNVBAUTKDlBQ0E4QTVDMjQ3NEUyMEZGQTY3MzRGM0Y3MjU0QkZG RjE4NTEzRkUwHhcNMjUxMjIyMTUwMTI2WhcNMjUxMjI5MTUwMTI2WjAYMRYwFAYD VQQDDA02OTQ5NWQ0Ny1jZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswUOnmF2Cwzw6yT43tg6ACEN7BkvOZWejQGEvsmFRkBiFem2ozXXQZxXIurB ASYJstlVVebEFSul1bczTc5v12xav/C4b7ZeAbIU3TYEqbUPuniXRLVdPtRQGAdC ltYN66fo5kj1d42c2FSVJDqimRTFfIpDozigaa3yv4hs+ZaZisG5VRH62PndhVJ6 15kdY10TD6KgQrT6gC6K2y91PE7BgaWLZu2+kEE1g3wIcMEIccLoRpoj/fyNdmiG 0xhHat7/gnMjpkIltyXLG7lNeWs5NrHJL93Q691StQb9XDCXanPrUFPb/DU+T3Ib MYMbkY3/CmwxpsWVxXshu3ZoNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdAv6By 4QfjOHzBD1SXSPUMRQZxMB8GA1UdIwQYMBaAFJrKilwkdOIP+mc08/clS//xhRP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE5Ni85MDlENzQ5MDFE QTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRnXzZaelR6OXlWTF9fR0ZF XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zcUtYQ1IwNGdfNlp6VHo5eVZMX19HRkVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE5Ni85MDlENzQ5MDFEQTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRn XzZaelR6OXlWTF9fR0ZFXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIoaLz/qKMC+pXhi8f4OFxkY1QeNMW2LyhxmDE96gMSAjLuoH4xJHk ElkW4xo9i3JHv/oCmdtOKhEPbjsFSxkW5e1wxnP8TUyuuXWpQ6zfYqrhPkJwAoSZ BKDqkoYUqg/dq+D5BlDBezuBOIGWv4Bi74whVtrb6pgUtCm1OIehZ4LUkt3qQAfS CdNUYODh+uW03rLs3OYFwF/oU8lS7JzvukIBOywUvC3LduUi4EavP7NX/vqgZDnc LZe4A41Ih+wM6Q4PWekyGrrXxUnubqPO6Q8Rb5H2HZ53wwwKgJQTPAhFQU9Hfhku 4fWYngQjoVnEe7TXHXKfipYpiXMMjCCm -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:18 2025 by rpki-client