This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft File: f_xaKedfnr4HnQUkfw3_DPmH8cI.mft (raw, json) Hash identifier: lQ9OxEYcmw/5A8odbN8es8KAOggpsDPJW8nf2BihexY= Subject key identifier: 96:56:38:DB:72:46:87:9F:4F:50:A5:54:79:59:A0:67:92:D3:7C:60 Authority key identifier: 7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2 Certificate issuer: /CN=A91B4C67/serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2 Certificate serial: 34EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft Manifest number: 34EF Signing time: Mon 22 Dec 2025 14:59:33 +0000 Manifest this update: Mon 22 Dec 2025 14:59:32 +0000 Manifest next update: Mon 29 Dec 2025 14:59:32 +0000 Files and hashes: 1: f_xaKedfnr4HnQUkfw3_DPmH8cI.crl (hash: a1g9TpRqfVdx8l/ZZYSuiAqwOVLiTmkXlgIPUZ+yMHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C67, serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2 Validity Not Before: Dec 22 14:59:32 2025 GMT Not After : Dec 29 14:59:32 2025 GMT Subject: CN=69495cd5-c3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:99:d8:ab:22:9f:f8:7c:98:1c:a5:43:60:d1: c2:b5:ac:2e:3f:78:10:00:7e:ef:41:ce:85:45:46: 92:f1:5e:c2:ae:06:6d:ef:e3:e7:08:1b:2f:b5:12: e9:86:92:db:4d:bf:b4:60:d6:6f:70:8b:d5:38:27: fc:86:8d:86:95:bb:7a:17:5a:ea:73:37:f2:f0:43: 0e:31:eb:2d:ec:51:15:87:a8:07:42:86:f5:41:05: 0b:dd:41:4d:81:77:8c:47:24:3c:c6:63:89:a4:5b: e9:ba:f7:fc:6d:37:10:80:a6:a2:52:4b:1d:d5:52: 49:89:ec:72:88:28:d0:90:2b:a8:9f:02:3b:70:83: e7:ad:68:1c:ad:7e:5f:da:a6:a8:b5:71:f2:99:d1: af:f5:06:f5:79:5d:63:92:81:30:e0:c3:2b:be:7e: 75:5d:bb:51:6d:05:09:82:f9:dc:89:2f:10:cc:28: 51:c2:52:fc:7b:cb:6f:20:85:23:bc:3f:1d:12:8f: 5b:48:ad:d1:aa:28:fc:5a:f7:6a:c2:25:ff:d3:f5: 0b:13:fb:97:e1:72:59:a0:d8:fd:f2:a6:96:47:cb: 6e:ed:76:33:22:bd:2a:96:3c:98:a8:29:6c:39:e3: a8:7f:c7:c3:b1:20:27:81:09:34:6d:0b:e5:09:9a: ba:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:56:38:DB:72:46:87:9F:4F:50:A5:54:79:59:A0:67:92:D3:7C:60 X509v3 Authority Key Identifier: keyid:7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:ad:2d:16:e0:15:bc:c8:a4:2f:a5:3e:e1:13:74:60:e7:29: 76:12:90:74:b6:bc:f9:fd:59:35:56:2b:51:29:37:07:49:05: 5e:6a:3e:75:4d:ab:8f:af:e5:d3:42:97:de:dd:1e:09:70:fc: e7:16:88:7b:98:f3:e8:69:d3:bd:3f:7e:33:24:88:79:6b:6b: 72:6a:63:64:5f:ce:9b:01:1b:fd:c5:17:96:19:d3:ee:da:17: 6c:18:ee:20:5a:42:21:b4:27:7e:98:f6:10:54:46:03:c1:69: a9:25:76:95:04:db:df:b0:35:ec:47:15:64:2a:95:b2:5f:6a: 2a:cc:78:32:6c:c1:b9:76:eb:b0:b2:f4:76:08:f5:83:b3:fa: cd:8e:74:ef:19:4d:fa:fe:3d:bf:1e:8a:52:22:d1:6b:64:6b: 36:1f:9e:29:d2:79:5c:e9:e0:db:0b:68:ea:e8:c4:63:75:10: c3:08:69:10:2c:c4:98:50:50:67:57:9a:e0:0e:ae:46:55:dc: 50:ca:ca:29:b5:c4:5d:e9:aa:35:4e:91:77:61:d6:a6:96:7a: 08:c1:83:b9:0f:01:0a:e3:e6:fc:d8:e6:2e:d9:a7:ef:9c:8c: 21:58:25:bb:02:79:20:bc:39:2d:61:f7:82:28:7a:9b:e0:bb: c5:66:48:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDNjcxMTAvBgNVBAUTKDdGRkM1QTI5RTc1RjlFQkUwNzlEMDUyNDdGMERGRjBD Rjk4N0YxQzIwHhcNMjUxMjIyMTQ1OTMyWhcNMjUxMjI5MTQ1OTMyWjAYMRYwFAYD VQQDDA02OTQ5NWNkNS1jM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZnYqyKf+HyYHKVDYNHCtawuP3gQAH7vQc6FRUaS8V7CrgZt7+PnCBsvtRLp hpLbTb+0YNZvcIvVOCf8ho2Glbt6F1rqczfy8EMOMest7FEVh6gHQob1QQUL3UFN gXeMRyQ8xmOJpFvpuvf8bTcQgKaiUksd1VJJiexyiCjQkCuonwI7cIPnrWgcrX5f 2qaotXHymdGv9Qb1eV1jkoEw4MMrvn51XbtRbQUJgvnciS8QzChRwlL8e8tvIIUj vD8dEo9bSK3Rqij8WvdqwiX/0/ULE/uX4XJZoNj98qaWR8tu7XYzIr0qljyYqCls OeOof8fDsSAngQk0bQvlCZq6LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZWONty RoefT1ClVHlZoGeS03xgMB8GA1UdIwQYMBaAFH/8WinnX56+B50FJH8N/wz5h/HC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEM2Ny9CRjNGQzJGQTFE QTExMUUyQjNFQzFGOTQwOEIwMkNEMi9mX3hhS2VkZm5yNEhuUVVrZnczX0RQbUg4 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeGFLZWRmbnI0SG5RVWtmdzNfRFBtSDhjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEM2Ny9CRjNGQzJGQTFEQTExMUUyQjNFQzFGOTQwOEIwMkNEMi9mX3hhS2VkZm5y NEhuUVVrZnczX0RQbUg4Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWrS0W4BW8yKQvpT7hE3Rg5yl2EpB0trz5/Vk1VitRKTcHSQVeaj51 TauPr+XTQpfe3R4JcPznFoh7mPPoadO9P34zJIh5a2tyamNkX86bARv9xReWGdPu 2hdsGO4gWkIhtCd+mPYQVEYDwWmpJXaVBNvfsDXsRxVkKpWyX2oqzHgybMG5duuw svR2CPWDs/rNjnTvGU36/j2/HopSItFrZGs2H54p0nlc6eDbC2jq6MRjdRDDCGkQ LMSYUFBnV5rgDq5GVdxQysoptcRd6ao1TpF3YdamlnoIwYO5DwEK4+b82OYu2afv nIwhWCW7AnkgvDktYfeCKHqb4LvFZkj8 -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:35 2025 by rpki-client