This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft File: _M8p58OjX6g2yQkOaCx4DQI56VU.mft (raw, json) Hash identifier: oTg86zeSM5heiN8pJz4ZDP04YBPDLAEzy3OVQgCnjAc= Subject key identifier: 36:52:57:1D:35:A2:08:B0:D5:1D:5C:CC:53:C4:FA:C0:32:61:80:92 Authority key identifier: FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55 Certificate issuer: /CN=A91C0243/serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955 Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft Manifest number: 07F0 Signing time: Mon 22 Dec 2025 20:24:39 +0000 Manifest this update: Mon 22 Dec 2025 20:24:39 +0000 Manifest next update: Mon 29 Dec 2025 20:24:39 +0000 Files and hashes: 1: _M8p58OjX6g2yQkOaCx4DQI56VU.crl (hash: /Lge28v8RdSs280lii3UX1aEhn91KIXfzUoC/sa5mrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0243, serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955 Validity Not Before: Dec 22 20:24:39 2025 GMT Not After : Dec 29 20:24:39 2025 GMT Subject: CN=6949a907-34fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:28:b6:cc:6e:06:86:31:13:c7:36:62:e8: f7:cd:a0:c6:86:b2:bb:fe:96:ef:72:62:2c:e4:90: 4b:86:82:9e:af:74:67:21:d3:20:cc:e3:b5:54:5c: 3d:81:f9:1b:46:92:64:88:95:b0:9d:a8:b3:9b:fa: b6:64:ca:ae:2f:d5:e5:f2:78:cf:d0:29:86:e9:47: 50:14:8a:48:25:95:5b:a9:05:13:2d:7c:a1:cc:20: c0:86:2d:9b:36:3d:a5:f6:ef:5e:5a:97:c8:3f:b7: f8:8f:77:53:9a:61:83:97:a6:78:24:c6:a2:41:ea: b0:67:b7:9a:00:87:24:5c:67:49:41:6a:d3:44:8a: 0c:f5:6f:2d:8b:14:f1:3a:c1:32:ad:a5:ee:e2:d2: ab:79:81:cb:b1:92:8a:39:9a:aa:df:19:75:99:f2: 21:3d:58:5e:07:6d:1d:25:2c:82:74:86:4a:9a:fa: 99:c2:b9:30:9c:95:02:72:6f:6e:d0:0b:05:2e:16: dc:6e:4c:32:31:70:69:5f:33:21:c7:f8:32:57:c5: 1a:d5:43:5c:ce:c6:32:dd:13:a9:40:5e:93:c6:4d: 67:17:d7:a1:83:fa:29:af:28:c6:e1:86:9a:25:3e: cc:a9:b5:56:bb:a6:ad:62:0a:a8:96:d6:bf:62:01: 0a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:52:57:1D:35:A2:08:B0:D5:1D:5C:CC:53:C4:FA:C0:32:61:80:92 X509v3 Authority Key Identifier: keyid:FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:08:19:59:2a:3a:1c:a8:66:fb:31:d7:54:9b:7c:f7:72:56: 43:09:2a:af:6a:e3:af:8e:61:1d:58:03:0c:3c:7a:28:50:ba: 8b:6a:a3:f7:4e:a6:eb:ce:fd:a3:b3:7f:ed:a0:2c:3f:38:f7: d7:3f:77:22:e8:38:3d:06:be:bf:9e:9c:a4:fe:e6:79:98:88: de:b0:5a:fe:b1:45:69:3c:78:53:61:c0:65:0a:09:83:6e:8d: a6:63:3c:26:40:04:62:51:50:7e:38:53:ad:52:6c:b9:62:5c: 46:9a:5d:2d:65:3d:53:62:c7:db:db:03:4b:80:7d:b5:b3:3f: 13:29:0e:cf:93:6b:86:1e:75:1f:2a:c1:d3:13:cb:08:51:7f: 8e:61:46:65:94:8c:25:0a:32:a7:a8:9a:bd:d4:5a:fb:09:9d: 04:c9:b5:66:cd:49:31:39:22:0d:45:88:fb:f0:29:12:e6:e1: 7e:5b:c4:d8:1a:0c:7d:b5:12:2a:34:ef:41:8b:2e:b7:4b:d4: 64:a5:76:08:9f:cf:f4:82:36:71:e9:c3:1a:10:84:3c:fd:4b: e2:7b:0e:89:b6:d3:d0:21:80:01:b9:9a:d1:0e:fe:f1:bd:f3: 01:9d:ee:12:cb:dc:ca:fa:94:e2:11:76:1c:75:c9:7d:33:e3: fc:d0:80:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAyNDMxMTAvBgNVBAUTKEZDQ0YyOUU3QzNBMzVGQTgzNkM5MDkwRTY4MkM3ODBE MDIzOUU5NTUwHhcNMjUxMjIyMjAyNDM5WhcNMjUxMjI5MjAyNDM5WjAYMRYwFAYD VQQDDA02OTQ5YTkwNy0zNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlegotsxuBoYxE8c2Yuj3zaDGhrK7/pbvcmIs5JBLhoKer3RnIdMgzOO1VFw9 gfkbRpJkiJWwnaizm/q2ZMquL9Xl8njP0CmG6UdQFIpIJZVbqQUTLXyhzCDAhi2b Nj2l9u9eWpfIP7f4j3dTmmGDl6Z4JMaiQeqwZ7eaAIckXGdJQWrTRIoM9W8tixTx OsEyraXu4tKreYHLsZKKOZqq3xl1mfIhPVheB20dJSyCdIZKmvqZwrkwnJUCcm9u 0AsFLhbcbkwyMXBpXzMhx/gyV8Ua1UNczsYy3ROpQF6Txk1nF9ehg/opryjG4Yaa JT7MqbVWu6atYgqolta/YgEKfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZSVx01 ogiw1R1czFPE+sAyYYCSMB8GA1UdIwQYMBaAFPzPKefDo1+oNskJDmgseA0COelV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDI0My8wMTY2RkY2NDBE MUMxMUVCQjgyRjM1MzFDNEY5QUUwMi9fTThwNThPalg2ZzJ5UWtPYUN4NERRSTU2 VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19NOHA1OE9qWDZnMnlRa09hQ3g0RFFJNTZWVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDI0My8wMTY2RkY2NDBEMUMxMUVCQjgyRjM1MzFDNEY5QUUwMi9fTThwNThPalg2 ZzJ5UWtPYUN4NERRSTU2VlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGCBlZKjocqGb7MddUm3z3clZDCSqvauOvjmEdWAMMPHooULqLaqP3 Tqbrzv2js3/toCw/OPfXP3ci6Dg9Br6/npyk/uZ5mIjesFr+sUVpPHhTYcBlCgmD bo2mYzwmQARiUVB+OFOtUmy5YlxGml0tZT1TYsfb2wNLgH21sz8TKQ7Pk2uGHnUf KsHTE8sIUX+OYUZllIwlCjKnqJq91Fr7CZ0EybVmzUkxOSINRYj78CkS5uF+W8TY Ggx9tRIqNO9Biy63S9RkpXYIn8/0gjZx6cMaEIQ8/Uview6JttPQIYABuZrRDv7x vfMBne4Sy9zK+pTiEXYcdcl9M+P80ID1 -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:36 2025 by rpki-client