This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft File: -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json) Hash identifier: mMuX9FMY9G1RytCgWk/WsqfS50gH6jnHdrNgVbhz+so= Subject key identifier: 25:D3:C4:B2:4B:73:A7:65:E5:8C:06:CD:36:E1:0F:B3:EC:C5:74:F6 Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 Certificate issuer: /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft Manifest number: 71 Signing time: Tue 23 Dec 2025 05:44:50 +0000 Manifest this update: Tue 23 Dec 2025 05:44:49 +0000 Manifest next update: Tue 30 Dec 2025 05:44:49 +0000 Files and hashes: 1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: 8zdmK7RWFgvKnrlhEGRV2cOUg6FQHgmblIkdcG/q9Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Validity Not Before: Dec 23 05:44:49 2025 GMT Not After : Dec 30 05:44:49 2025 GMT Subject: CN=694a2c51-e767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bf:c8:30:8e:9b:1f:36:47:5e:89:4a:31:28: 0b:a2:ab:ea:ad:be:2c:1b:97:f2:32:03:f6:0d:bc: 8d:1e:9d:f7:6f:bc:57:7a:86:49:4d:ed:e2:bb:9a: f6:e8:ff:81:50:0d:d9:d0:61:34:b9:5f:e1:45:a8: 79:c8:17:d9:93:50:69:be:dd:51:f3:d0:36:04:f8: 77:43:28:7c:5f:aa:0f:04:6d:01:d7:8f:63:bd:40: 33:34:30:8c:0b:ea:69:0e:35:96:42:cb:86:9a:29: 6f:89:57:c0:43:9c:c4:47:2a:dd:1c:00:05:13:44: f4:d5:25:a7:00:c0:9b:bf:87:ce:34:79:72:92:79: be:7a:3f:13:79:06:ee:c9:26:5b:af:93:df:27:0b: 5d:10:26:ed:b7:54:28:29:d8:31:d1:c7:1b:41:26: b4:5b:3c:b0:8f:f4:08:88:b9:a3:89:7c:61:89:12: e4:a8:8b:fd:cf:d8:1f:b9:5d:3a:7b:bc:f3:88:2b: 5e:77:11:2e:40:5e:55:aa:6c:77:f6:77:7b:d8:9b: c6:a2:78:85:aa:d8:6e:19:3d:e8:09:18:00:9b:c5: 57:ba:39:30:02:bb:4c:fc:48:5b:61:77:b1:e7:a5: d0:79:48:c7:13:5e:83:b7:fe:1a:d8:46:ca:31:c3: ed:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D3:C4:B2:4B:73:A7:65:E5:8C:06:CD:36:E1:0F:B3:EC:C5:74:F6 X509v3 Authority Key Identifier: keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0e:95:fb:25:06:2d:71:c5:f2:ab:53:6c:e8:7e:cf:3b:0f: 04:85:3e:fe:30:7d:0b:d7:52:11:b5:28:e8:b1:4e:a8:59:6e: 67:cf:f1:59:5a:62:81:c3:e0:7a:a0:5e:b3:f8:6a:e2:b0:8f: ff:32:37:52:1f:04:64:d2:8c:59:2e:bd:3a:ce:40:26:9d:2c: 9a:69:5c:65:7d:ff:6a:2c:51:0d:26:a3:5d:0e:bc:ce:60:bd: a5:85:d3:f5:7c:6b:cf:32:15:83:76:14:81:db:b9:29:fa:c4: 9c:21:b5:ae:55:e1:29:91:b1:7a:2e:52:50:2f:df:da:9b:6b: c2:3b:53:06:37:95:0c:5d:f4:35:57:f9:73:42:bc:4e:99:7f: 2e:f1:19:d6:be:37:8b:7c:3f:a8:9a:1a:a6:a7:0f:0d:d5:43: 7d:0b:60:70:50:5d:2e:7a:2d:9c:5a:77:0c:26:9c:4d:bb:25: bf:32:d5:fb:d6:b4:e0:7e:5f:8e:ac:a0:a3:d4:c7:fc:b1:18: 72:95:e3:6a:e8:b0:9b:39:d1:31:6f:ab:9d:9e:7a:88:9e:58: 33:0e:18:0d:e6:69:bf:fe:74:3f:ad:4a:65:a5:28:9d:d0:fe: 98:a4:68:ba:fe:8a:62:7c:b5:c2:ca:ea:01:1a:40:2e:da:8e: 5c:17:e6:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDIwNDExMC8GA1UEBRMoRkFDNDU1NUZCRTMxQTM4MDk2OTBFRTE4Nzg1RDdBQkJF MkE3MjdBMzAeFw0yNTEyMjMwNTQ0NDlaFw0yNTEyMzAwNTQ0NDlaMBgxFjAUBgNV BAMMDTY5NGEyYzUxLWU3NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiv8gwjpsfNkdeiUoxKAuiq+qtviwbl/IyA/YNvI0enfdvvFd6hklN7eK7mvbo /4FQDdnQYTS5X+FFqHnIF9mTUGm+3VHz0DYE+HdDKHxfqg8EbQHXj2O9QDM0MIwL 6mkONZZCy4aaKW+JV8BDnMRHKt0cAAUTRPTVJacAwJu/h840eXKSeb56PxN5Bu7J Jluvk98nC10QJu23VCgp2DHRxxtBJrRbPLCP9AiIuaOJfGGJEuSoi/3P2B+5XTp7 vPOIK153ES5AXlWqbHf2d3vYm8aieIWq2G4ZPegJGACbxVe6OTACu0z8SFthd7Hn pdB5SMcTXoO3/hrYRsoxw+3jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJdPEsktz p2XljAbNNuEPs+zFdPYwHwYDVR0jBBgwFoAU+sRVX74xo4CWkO4YeF16u+KnJ6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MjA0LzRDNUQyRURFMzAw OTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRDV2tPNFllRjE2dS1Lbko2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXNSVlg3NHhvNENXa080WWVGMTZ1LUtuSjZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 MjA0LzRDNUQyRURFMzAwOTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRD V2tPNFllRjE2dS1Lbko2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACwOlfslBi1xxfKrU2zofs87DwSFPv4wfQvXUhG1KOixTqhZbmfP8Vla YoHD4HqgXrP4auKwj/8yN1IfBGTSjFkuvTrOQCadLJppXGV9/2osUQ0mo10OvM5g vaWF0/V8a88yFYN2FIHbuSn6xJwhta5V4SmRsXouUlAv39qba8I7UwY3lQxd9DVX +XNCvE6Zfy7xGda+N4t8P6iaGqanDw3VQ30LYHBQXS56LZxadwwmnE27Jb8y1fvW tOB+X46soKPUx/yxGHKV42rosJs50TFvq52eeoieWDMOGA3mab/+dD+tSmWlKJ3Q /pikaLr+imJ8tcLK6gEaQC7ajlwX5rY= -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:16 2025 by rpki-client