This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json) Hash identifier: x4lOK2TLa72PD+37t+Oe9yUwcGATIMmj17x6TdFt/w8= Subject key identifier: 1E:B8:96:16:AF:52:6F:FC:6E:5C:E8:DD:91:06:E3:71:5B:2E:32:A3 Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft Manifest number: A3 Signing time: Tue 23 Dec 2025 05:12:34 +0000 Manifest this update: Tue 23 Dec 2025 05:12:34 +0000 Manifest next update: Tue 30 Dec 2025 05:12:34 +0000 Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: YHty2GI3Xz96QERZDJclvychEEKgTMlhwuDausvfj0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Validity Not Before: Dec 23 05:12:34 2025 GMT Not After : Dec 30 05:12:34 2025 GMT Subject: CN=694a24c2-7e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:10:4c:d3:72:5e:61:70:db:3a:cb:83:ce: d5:ad:35:c0:c4:d1:a6:60:8c:aa:8c:a1:ab:55:39: 10:e2:5e:29:1f:5c:af:09:84:e1:89:4b:04:47:24: c6:f1:0b:10:2b:3f:a8:5a:69:a8:60:b6:32:bb:48: 27:e0:82:25:93:76:9d:44:6e:f1:9e:45:92:da:07: 1b:a8:87:2e:09:dd:c1:12:e6:89:b3:4b:52:b0:40: 22:04:39:c3:80:5f:39:ae:ef:36:bc:36:07:7b:fe: 8e:79:91:08:9f:11:29:f5:19:ce:6b:e3:ce:6e:14: 6c:5f:f4:5a:3a:59:1f:2f:6c:08:63:2e:6b:c7:ac: 82:b1:bf:aa:a8:54:03:0b:76:d2:26:4c:d0:e5:65: 86:e6:0c:97:00:5e:00:5e:73:63:6f:66:e0:44:f5: 72:31:43:4e:bb:eb:6d:44:ce:6e:9e:b2:10:06:9d: 15:a1:0a:22:cf:6e:cd:95:97:ef:c2:99:c3:37:ce: 24:88:e4:5e:30:8c:f7:4e:f6:64:d9:a5:c5:aa:4c: fb:93:92:51:e8:5d:dc:32:d4:5d:0a:97:f8:09:cc: 4f:1a:5f:46:6f:03:a2:2c:2f:10:f3:48:69:bb:c7: 58:f1:70:29:36:5e:24:31:ea:c1:4b:f5:0e:31:9d: dc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B8:96:16:AF:52:6F:FC:6E:5C:E8:DD:91:06:E3:71:5B:2E:32:A3 X509v3 Authority Key Identifier: keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:9e:25:c3:8e:d5:6f:56:d1:96:22:01:3e:d6:2c:46:55:07: 4e:a4:97:1e:92:3e:f5:ba:f3:b2:ae:15:39:aa:5f:b5:30:b0: b3:f3:29:ef:43:b5:76:5a:fb:fd:63:2d:f4:c4:9d:60:c4:08: af:99:7c:03:18:81:1c:05:28:10:29:b7:22:e2:f0:2b:1f:cf: 15:1a:d6:0b:10:e8:e2:b7:7a:bf:1c:e6:77:4f:fd:03:5c:d2: 14:cc:c0:d5:e9:00:c1:75:a3:c5:00:42:b9:6f:3e:13:ec:60: 5c:14:76:24:41:ad:dc:dd:ce:52:23:e9:1b:82:e7:02:4e:6a: 74:07:26:8e:cc:59:27:46:47:5a:0c:70:9b:e8:20:c6:8a:1a: b1:fc:5e:27:d2:d4:05:84:6a:31:9a:c9:96:0f:6f:e5:89:be: c8:a5:5c:ac:6d:db:86:70:8c:18:8c:92:1a:6d:77:36:53:a9: 25:fd:f4:88:dd:87:31:4b:9c:e6:9c:68:63:dc:dc:67:6b:81: 5a:44:bc:e0:be:78:25:62:76:ac:6c:e1:02:3f:83:0a:69:aa: fc:ed:3b:96:a2:0e:1d:f5:87:57:52:fd:ea:f0:ec:2b:78:23: f4:98:9f:4d:3d:e2:6d:4e:00:f5:10:3b:be:b4:54:25:79:05: 0b:34:d3:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRBODAxMTAvBgNVBAUTKDNGRDdGNTU1RkM3RDZGQzIzNTM5QTNBNjIxRUYyRDA0 OEQ0QzdDQzcwHhcNMjUxMjIzMDUxMjM0WhcNMjUxMjMwMDUxMjM0WjAYMRYwFAYD VQQDDA02OTRhMjRjMi03ZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKQQTNNyXmFw2zrLg87VrTXAxNGmYIyqjKGrVTkQ4l4pH1yvCYThiUsERyTG 8QsQKz+oWmmoYLYyu0gn4IIlk3adRG7xnkWS2gcbqIcuCd3BEuaJs0tSsEAiBDnD gF85ru82vDYHe/6OeZEInxEp9RnOa+PObhRsX/RaOlkfL2wIYy5rx6yCsb+qqFQD C3bSJkzQ5WWG5gyXAF4AXnNjb2bgRPVyMUNOu+ttRM5unrIQBp0VoQoiz27NlZfv wpnDN84kiOReMIz3TvZk2aXFqkz7k5JR6F3cMtRdCpf4CcxPGl9GbwOiLC8Q80hp u8dY8XApNl4kMerBS/UOMZ3cQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB64lhav Um/8blzo3ZEG43FbLjKjMB8GA1UdIwQYMBaAFD/X9VX8fW/CNTmjpiHvLQSNTHzH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEE4MC8yOUVDNzNCQUU0 RUYxMUVGQjcxNEU1NkNDNEY5QUUwMi9QOWYxVmZ4OWI4STFPYU9tSWU4dEJJMU1m TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5ZjFWZng5YjhJMU9hT21JZTh0QkkxTWZNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEE4MC8yOUVDNzNCQUU0RUYxMUVGQjcxNEU1NkNDNEY5QUUwMi9QOWYxVmZ4OWI4 STFPYU9tSWU4dEJJMU1mTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlniXDjtVvVtGWIgE+1ixGVQdOpJcekj71uvOyrhU5ql+1MLCz8ynv Q7V2Wvv9Yy30xJ1gxAivmXwDGIEcBSgQKbci4vArH88VGtYLEOjit3q/HOZ3T/0D XNIUzMDV6QDBdaPFAEK5bz4T7GBcFHYkQa3c3c5SI+kbgucCTmp0ByaOzFknRkda DHCb6CDGihqx/F4n0tQFhGoxmsmWD2/lib7IpVysbduGcIwYjJIabXc2U6kl/fSI 3YcxS5zmnGhj3Nxna4FaRLzgvnglYnasbOECP4MKaar87TuWog4d9YdXUv3q8Owr eCP0mJ9NPeJtTgD1EDu+tFQleQULNNPT -----END CERTIFICATE-----Generated at Wed Dec 24 15:44:59 2025 by rpki-client