This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft File: -nL57HMUa01gWMiKYGr6AzMOA1E.mft (raw, json) Hash identifier: xv0vlljlwF6A1BB1nQtJzAd74lGN7Y2fvedrnCWrP+8= Subject key identifier: 35:CC:0C:FE:64:28:A7:05:26:EC:60:9B:82:26:57:A0:E4:B5:32:A0 Authority key identifier: FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51 Certificate issuer: /CN=A91B2D56/serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft Manifest number: 12 Signing time: Tue 23 Dec 2025 06:45:10 +0000 Manifest this update: Tue 23 Dec 2025 06:45:10 +0000 Manifest next update: Tue 30 Dec 2025 06:45:10 +0000 Files and hashes: 1: -nL57HMUa01gWMiKYGr6AzMOA1E.crl (hash: xrVYgnBMo4DlHCSaaiGimQYR4QSpG/DNVwp8xKzfpxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351 Validity Not Before: Dec 23 06:45:10 2025 GMT Not After : Dec 30 06:45:10 2025 GMT Subject: CN=694a3a76-b7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:80:0a:25:7a:d7:61:37:96:6b:c7:1d:aa: 4a:99:f0:c7:b9:b9:7b:12:4d:f1:4b:77:75:eb:a3: d1:98:2f:69:d0:aa:44:e2:34:b8:62:99:42:50:ea: a1:2d:40:15:98:01:fe:62:a9:81:78:24:7e:c4:5e: ac:c5:70:9e:9a:bf:b1:9e:65:51:fe:55:5b:66:c8: 0c:f0:9b:71:1e:a0:42:2c:41:b6:b8:a5:c0:f3:0a: af:1c:65:b9:6b:6a:54:c4:72:a0:4c:cb:dd:2c:3c: b2:83:39:96:09:b5:17:15:5d:05:61:b5:f8:07:7d: 11:2e:0f:95:50:f2:88:97:cd:f8:8f:1a:0a:6c:b8: 02:3e:10:85:4a:29:d8:e6:23:41:fe:17:56:6e:7f: 3a:b9:0c:8b:39:c1:be:6b:c7:c3:6f:f4:3b:45:f2: 92:ef:f3:64:95:24:2c:70:c9:18:e9:59:06:51:9a: 0d:7f:e2:ca:d8:b2:90:01:14:a6:30:28:10:40:a6: 86:95:aa:32:42:a4:d9:0f:6b:9e:d3:51:4c:d4:4a: 55:d0:74:b8:9a:ba:f7:24:0a:a6:91:66:6e:81:79: a0:71:ea:68:4f:65:3b:de:92:30:0f:bf:be:be:39: 7c:90:9c:aa:ba:53:9a:82:ee:8f:e4:cd:b7:8c:0e: 97:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CC:0C:FE:64:28:A7:05:26:EC:60:9B:82:26:57:A0:E4:B5:32:A0 X509v3 Authority Key Identifier: keyid:FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:94:42:5d:35:e8:44:75:2d:85:9c:e2:51:13:c0:9f:72:0b: 06:89:a1:e7:70:07:e0:65:89:a8:9a:ea:bb:3e:60:74:4e:8e: b3:d3:9f:eb:e4:77:e6:0b:6e:4e:d2:02:8d:25:a1:59:81:58: a6:25:dd:84:4c:59:37:00:1e:86:03:3f:0e:10:de:d7:98:fc: 1f:31:2e:56:0a:c8:18:44:cb:c9:80:82:ae:44:96:27:b2:9a: 92:9c:f1:9d:86:a2:61:6a:01:13:0f:73:74:6e:ab:f4:62:92: 97:9a:3f:1d:13:02:7f:a8:92:43:e5:f2:9e:4d:86:9e:1e:fb: cc:07:e7:9c:56:5e:77:e9:21:a2:bf:a6:15:ee:3c:4a:5d:e1: a9:35:d5:2f:28:57:b8:c6:83:ba:39:9e:e2:e0:23:c0:48:17: d5:8e:75:37:3c:4b:74:12:0b:ba:f2:2a:b9:28:9c:d7:f1:4f: fb:8f:cc:e9:4c:6f:ac:12:af:18:6c:fa:48:23:e5:2f:1b:41: 28:8b:25:bc:7c:08:34:7a:98:b5:c0:86:39:e9:ec:1e:ba:0e: 4c:55:dd:82:a9:11:45:87:61:47:2b:ea:8b:8a:e1:33:a5:26: dd:5a:37:22:99:92:bf:60:30:75:49:32:58:19:3a:4b:00:1a: 32:ff:9b:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkQ1NjExMC8GA1UEBRMoRkE3MkY5RUM3MzE0NkI0RDYwNThDODhBNjA2QUZBMDMz MzBFMDM1MTAeFw0yNTEyMjMwNjQ1MTBaFw0yNTEyMzAwNjQ1MTBaMBgxFjAUBgNV BAMMDTY5NGEzYTc2LWI3ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXOIAKJXrXYTeWa8cdqkqZ8Me5uXsSTfFLd3Xro9GYL2nQqkTiNLhimUJQ6qEt QBWYAf5iqYF4JH7EXqzFcJ6av7GeZVH+VVtmyAzwm3EeoEIsQba4pcDzCq8cZblr alTEcqBMy90sPLKDOZYJtRcVXQVhtfgHfREuD5VQ8oiXzfiPGgpsuAI+EIVKKdjm I0H+F1Zufzq5DIs5wb5rx8Nv9DtF8pLv82SVJCxwyRjpWQZRmg1/4srYspABFKYw KBBApoaVqjJCpNkPa57TUUzUSlXQdLiauvckCqaRZm6BeaBx6mhPZTvekjAPv76+ OXyQnKq6U5qC7o/kzbeMDpdrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNcwM/mQo pwUm7GCbgiZXoOS1MqAwHwYDVR0jBBgwFoAU+nL57HMUa01gWMiKYGr6AzMOA1Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDU2L0Y2OTIzNjdBQzUy MjExRjA5NUQxQjIxN0M0RjlBRTAyLy1uTDU3SE1VYTAxZ1dNaUtZR3I2QXpNT0Ex RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLW5MNTdITVVhMDFnV01pS1lHcjZBek1PQTFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RDU2L0Y2OTIzNjdBQzUyMjExRjA5NUQxQjIxN0M0RjlBRTAyLy1uTDU3SE1VYTAx Z1dNaUtZR3I2QXpNT0ExRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACaUQl016ER1LYWc4lETwJ9yCwaJoedwB+Bliaia6rs+YHROjrPTn+vk d+YLbk7SAo0loVmBWKYl3YRMWTcAHoYDPw4Q3teY/B8xLlYKyBhEy8mAgq5Eliey mpKc8Z2GomFqARMPc3Ruq/RikpeaPx0TAn+okkPl8p5Nhp4e+8wH55xWXnfpIaK/ phXuPEpd4ak11S8oV7jGg7o5nuLgI8BIF9WOdTc8S3QSC7ryKrkonNfxT/uPzOlM b6wSrxhs+kgj5S8bQSiLJbx8CDR6mLXAhjnp7B66DkxV3YKpEUWHYUcr6ouK4TOl Jt1aNyKZkr9gMHVJMlgZOksAGjL/m4c= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:24 2025 by rpki-client