This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft File: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft (raw, json) Hash identifier: 9003m7yrj/aywvXX9WOHOx4lTwINbsTYJ4SJFHJ5Hm0= Subject key identifier: A8:07:EB:ED:02:BA:7A:B5:93:01:D5:F9:50:17:C1:53:0E:81:B3:11 Authority key identifier: D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 Certificate issuer: /CN=A91BB629/serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft Manifest number: 010B Signing time: Tue 23 Dec 2025 03:58:20 +0000 Manifest this update: Tue 23 Dec 2025 03:58:20 +0000 Manifest next update: Tue 30 Dec 2025 03:58:20 +0000 Files and hashes: 1: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl (hash: F1sD0I3FVPGCTtDX6yTaWy+DEcK8nIt3l0/CPVMPsj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB629, serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Validity Not Before: Dec 23 03:58:20 2025 GMT Not After : Dec 30 03:58:20 2025 GMT Subject: CN=694a135c-1684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:b6:e0:d2:18:8b:5c:53:69:98:45:7e:97: 43:00:39:98:3d:b5:44:f7:94:11:ac:63:2d:a9:be: 86:52:e8:ee:ca:26:73:75:d8:89:29:9b:55:22:cd: 50:7a:54:e3:e1:02:8d:6e:70:bb:b7:d0:9e:e9:b8: e7:28:97:c0:19:93:c9:f2:7a:61:0f:8b:b3:bd:d9: b7:4d:f2:c0:06:a9:a3:46:ad:b9:ce:10:ba:a8:e9: 02:69:ea:da:91:95:de:ce:40:c9:db:f4:91:75:1f: 02:46:df:dc:34:d5:7c:f6:67:4b:ca:4f:85:d6:62: 6c:7e:57:1b:c8:64:ad:6f:d5:bd:a6:8d:97:3a:49: c2:5f:0d:60:f9:b7:b4:59:13:0b:a7:24:70:ff:1a: 0f:1d:af:99:de:5d:ea:84:42:01:37:79:e7:83:93: f7:11:3d:43:0c:2e:45:c1:04:16:2d:77:4c:04:e0: 8e:42:91:89:a6:7e:a9:47:65:7f:9a:73:1b:06:9d: 66:2d:e5:bf:11:a6:05:a1:53:88:ba:71:14:ae:63: e4:6c:01:d9:47:d0:20:f1:cb:be:1a:77:39:b1:9a: f8:43:86:e3:82:99:9c:2c:9c:33:24:66:6d:91:68: 7a:1a:42:18:85:30:ea:52:b4:31:a8:66:6a:f3:87: f8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:07:EB:ED:02:BA:7A:B5:93:01:D5:F9:50:17:C1:53:0E:81:B3:11 X509v3 Authority Key Identifier: keyid:D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:8b:b3:c3:b7:d6:cc:f6:55:4d:b3:51:c9:84:78:f7:33:e9: 4b:e5:18:45:bc:a4:64:27:c6:b4:f7:70:69:02:70:5b:24:41: 7b:12:60:8c:e9:28:15:d3:f6:1a:02:cb:95:a3:29:5d:4d:7a: 19:74:fb:0e:ef:06:94:e1:f4:76:f7:d8:7e:73:1b:19:0c:95: 4f:f8:66:6b:f9:e9:4f:14:a3:36:8a:e5:e4:3a:92:9e:73:19: 5a:c1:f4:29:d3:25:3c:da:32:25:4a:33:80:c1:13:8a:74:ad: 5c:d6:b7:69:2a:63:15:7b:77:8f:f7:42:81:57:66:7a:e1:d0: b5:7f:c1:44:a5:8e:2f:b5:be:68:83:3f:59:19:47:e3:d6:3a: 57:eb:67:52:04:9e:20:3d:86:fd:be:4f:f7:af:f8:b1:9f:e9: 12:fd:06:cf:8d:0f:9b:56:c0:45:4c:3f:d2:97:dc:bd:a8:da: b1:ac:c4:0c:03:e1:b8:50:00:94:62:8f:bd:99:08:c8:57:6f: 66:1b:d6:1c:5b:3a:f1:2f:67:33:2b:12:dd:2b:3c:16:48:c8: 39:1a:42:ab:b2:bb:bf:a5:dd:28:a5:58:72:68:26:25:b4:de: d4:84:41:2c:15:5a:e9:d5:ec:ef:33:e8:8e:00:b8:7f:7c:f4: 57:d9:77:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2MjkxMTAvBgNVBAUTKEQ2NjExQTM0MkUwNUU2RENEQzE5MjQzQkQ1MkY4OEQw MkIwNzg3RDIwHhcNMjUxMjIzMDM1ODIwWhcNMjUxMjMwMDM1ODIwWjAYMRYwFAYD VQQDDA02OTRhMTM1Yy0xNjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4i24NIYi1xTaZhFfpdDADmYPbVE95QRrGMtqb6GUujuyiZzddiJKZtVIs1Q elTj4QKNbnC7t9Ce6bjnKJfAGZPJ8nphD4uzvdm3TfLABqmjRq25zhC6qOkCaera kZXezkDJ2/SRdR8CRt/cNNV89mdLyk+F1mJsflcbyGStb9W9po2XOknCXw1g+be0 WRMLpyRw/xoPHa+Z3l3qhEIBN3nng5P3ET1DDC5FwQQWLXdMBOCOQpGJpn6pR2V/ mnMbBp1mLeW/EaYFoVOIunEUrmPkbAHZR9Ag8cu+Gnc5sZr4Q4bjgpmcLJwzJGZt kWh6GkIYhTDqUrQxqGZq84f4zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgH6+0C unq1kwHV+VAXwVMOgbMRMB8GA1UdIwQYMBaAFNZhGjQuBebc3BkkO9UviNArB4fS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjYyOS9FQUZCQjU1MDQ1 QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0emNHU1E3MVMtSTBDc0ho OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtRWFOQzRGNXR6Y0dTUTcxUy1JMENzSGg5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjYyOS9FQUZCQjU1MDQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0 emNHU1E3MVMtSTBDc0hoOUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOi7PDt9bM9lVNs1HJhHj3M+lL5RhFvKRkJ8a093BpAnBbJEF7EmCM 6SgV0/YaAsuVoyldTXoZdPsO7waU4fR299h+cxsZDJVP+GZr+elPFKM2iuXkOpKe cxlawfQp0yU82jIlSjOAwROKdK1c1rdpKmMVe3eP90KBV2Z64dC1f8FEpY4vtb5o gz9ZGUfj1jpX62dSBJ4gPYb9vk/3r/ixn+kS/QbPjQ+bVsBFTD/Sl9y9qNqxrMQM A+G4UACUYo+9mQjIV29mG9YcWzrxL2czKxLdKzwWSMg5GkKrsru/pd0opVhyaCYl tN7UhEEsFVrp1ezvM+iOALh/fPRX2Xf9 -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:23 2025 by rpki-client