This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft File: Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft (raw, json) Hash identifier: vikceG3x2OQYIQb70OrRyzcchmSmFKNzvh83BWsItO0= Subject key identifier: AF:72:5E:65:BA:78:D5:52:CC:A5:4F:82:EE:9A:95:1D:87:8E:1D:08 Authority key identifier: 56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 Certificate issuer: /CN=A91BB246/serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft Manifest number: 62 Signing time: Wed 03 Dec 2025 05:17:45 +0000 Manifest this update: Wed 03 Dec 2025 05:17:44 +0000 Manifest next update: Wed 10 Dec 2025 05:17:44 +0000 Files and hashes: 1: Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl (hash: /hnbdRyl2Fbxp0RF2L1xwBZ+NSInl4IP2GkrfYOtD+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB246, serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Validity Not Before: Dec 3 05:17:44 2025 GMT Not After : Dec 10 05:17:44 2025 GMT Subject: CN=692fc7f8-e966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:a1:5a:3a:e2:87:85:5f:66:d8:1e:5f:5d: 19:dc:d5:36:89:ad:43:29:02:3e:06:6d:61:6e:80: 6f:d0:a1:96:64:29:93:70:80:43:dd:30:25:a2:9f: a4:29:5b:3f:65:90:a0:0e:71:0c:43:6f:b3:42:4c: ed:8f:47:a5:5e:0b:21:40:dd:76:ce:74:7d:ac:9b: b8:81:ca:6c:b0:40:85:22:0b:c8:95:12:08:29:e1: 63:78:92:3a:c5:43:d3:9d:7b:5b:db:ac:a4:37:31: 42:62:d2:24:45:76:6f:3f:37:f7:28:22:38:be:f5: 5b:19:f2:47:60:58:77:3a:ef:69:1a:43:e8:d2:0a: de:12:ab:8b:ad:57:cf:84:68:87:82:db:78:5e:67: fb:53:22:f4:f3:19:cc:ef:31:94:6e:05:d3:e0:1a: ae:9f:bd:df:4b:b0:ac:50:ef:45:1a:75:11:2d:fc: cc:86:2b:42:78:b6:c3:6d:5e:aa:45:c6:46:4a:25: 2e:89:c4:18:41:37:10:00:cb:e7:42:f7:4c:34:9b: 21:07:68:50:79:75:df:45:d7:7c:ee:41:77:70:e5: 9c:46:ba:05:ff:b5:62:d8:17:31:ce:d5:13:07:4a: f2:23:a1:bd:8a:c0:b0:c1:d6:41:22:1e:1f:52:61: 6f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:72:5E:65:BA:78:D5:52:CC:A5:4F:82:EE:9A:95:1D:87:8E:1D:08 X509v3 Authority Key Identifier: keyid:56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a3:6a:bb:99:9b:60:35:e2:87:bb:8a:94:ce:ed:01:ff:35: 80:fb:87:b1:8c:ef:43:2e:7f:8d:62:f9:87:b1:44:da:48:d5: d8:67:3a:b1:e7:6c:29:14:d4:2d:4b:ad:77:d0:e7:82:1d:b1: fe:e2:08:55:3d:6f:c0:5e:4e:68:bf:96:81:71:67:19:c8:16: dd:18:35:db:bb:bd:9b:7a:9c:ed:ee:c5:93:6b:41:e8:5f:3d: 2c:cf:d0:ae:1e:94:b8:69:05:3b:76:e9:99:6f:e0:ac:57:1d: 22:3d:f1:e5:d5:b5:de:9e:16:26:e8:7e:f3:b6:cd:b6:1a:cd: 38:b2:e6:0e:3d:6e:e5:01:fd:70:53:9b:ba:89:b8:c7:7f:f5: 4d:cc:ae:b9:66:f2:86:80:e1:b9:a5:01:9f:89:79:6d:bb:83: 39:e6:9d:56:ca:86:d2:f4:0e:36:5c:d3:d5:e9:3c:f4:ad:e8: 94:4a:a9:06:02:5c:56:1e:20:ea:f8:7d:e1:72:0f:83:de:fc: 60:cd:2a:ce:9d:43:b9:82:d4:e4:08:cb:22:c6:83:4c:dc:cb: 44:3a:74:b8:7b:9b:25:0c:31:18:98:05:8c:4a:26:3e:1e:5b: 87:26:f2:83:64:83:44:09:12:1b:df:bd:31:6c:f2:69:dc:71: 3f:48:58:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjI0NjExMC8GA1UEBRMoNTY3RTMyMURBRjRBRjc0NDNCMEQ3OUUzMkFDMDMwNzk3 NTI3RjFEOTAeFw0yNTEyMDMwNTE3NDRaFw0yNTEyMTAwNTE3NDRaMBgxFjAUBgNV BAMTDTY5MmZjN2Y4LWU5NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkiKFaOuKHhV9m2B5fXRnc1TaJrUMpAj4GbWFugG/QoZZkKZNwgEPdMCWin6Qp Wz9lkKAOcQxDb7NCTO2PR6VeCyFA3XbOdH2sm7iBymywQIUiC8iVEggp4WN4kjrF Q9Ode1vbrKQ3MUJi0iRFdm8/N/coIji+9VsZ8kdgWHc672kaQ+jSCt4Sq4utV8+E aIeC23heZ/tTIvTzGczvMZRuBdPgGq6fvd9LsKxQ70UadREt/MyGK0J4tsNtXqpF xkZKJS6JxBhBNxAAy+dC90w0myEHaFB5dd9F13zuQXdw5ZxGugX/tWLYFzHO1RMH SvIjob2KwLDB1kEiHh9SYW+ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr3JeZbp4 1VLMpU+C7pqVHYeOHQgwHwYDVR0jBBgwFoAUVn4yHa9K90Q7DXnjKsAweXUn8dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjQ2L0YxQzVDOTUyM0Mw RDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBRN0RYbmpLc0F3ZVhVbjhk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVm40eUhhOUs5MFE3RFhuaktzQXdlWFVuOGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjQ2L0YxQzVDOTUyM0MwRDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBR N0RYbmpLc0F3ZVhVbjhkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE6jaruZm2A14oe7ipTO7QH/NYD7h7GM70Muf41i+YexRNpI1dhnOrHn bCkU1C1LrXfQ54Idsf7iCFU9b8BeTmi/loFxZxnIFt0YNdu7vZt6nO3uxZNrQehf PSzP0K4elLhpBTt26Zlv4KxXHSI98eXVtd6eFibofvO2zbYazTiy5g49buUB/XBT m7qJuMd/9U3Mrrlm8oaA4bmlAZ+JeW27gznmnVbKhtL0DjZc09XpPPSt6JRKqQYC XFYeIOr4feFyD4Pe/GDNKs6dQ7mC1OQIyyLGg0zcy0Q6dLh7myUMMRiYBYxKJj4e W4cm8oNkg0QJEhvfvTFs8mnccT9IWIs= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:13 2025 by rpki-client