This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft File: msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json) Hash identifier: /vX5j4ESTjQAmqTOP3VV6scbIqjbVS4aebYTqr7WZQs= Subject key identifier: 4B:8D:71:D2:E1:2E:EF:E9:ED:FD:4B:F4:BC:66:9B:62:34:CB:C9:6D Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft Manifest number: 0AE4 Signing time: Sat 20 Dec 2025 19:38:23 +0000 Manifest this update: Sat 20 Dec 2025 19:38:23 +0000 Manifest next update: Sat 27 Dec 2025 19:38:23 +0000 Files and hashes: 1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: olOTwXtWaIZBXKMxknD2ta4PRPCiePkx9lDmb81KY98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Validity Not Before: Dec 20 19:38:23 2025 GMT Not After : Dec 27 19:38:23 2025 GMT Subject: CN=6946fb2f-7718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:61:65:bb:50:ea:d8:c7:e7:ec:8b:35:cc: 89:0a:e7:a9:32:72:da:89:bf:d9:e4:56:10:a9:3c: 46:4c:52:f9:5f:9a:5d:8c:bd:39:a1:13:a1:ca:ca: e5:b2:ec:da:f3:1c:0a:9a:87:61:6a:70:9c:c9:56: 98:18:b1:dc:b6:e2:a9:3e:a6:2d:00:61:00:99:e4: 29:f6:b5:8e:3c:39:68:22:58:bb:1d:93:d9:87:86: 77:8e:e8:45:c0:01:bb:41:91:61:1c:ec:5d:32:7e: 1d:6d:6d:d6:21:6a:ec:c3:4e:69:dc:20:ed:a3:6b: af:9d:80:bf:b1:0e:d8:92:f3:24:ad:23:53:8f:80: d5:dc:3f:2a:cb:83:0d:d0:51:80:0c:40:ec:f0:d2: a5:1d:82:40:b9:c2:5a:8d:c8:a7:d9:37:ba:6e:b5: 8f:c1:ea:9a:65:34:0d:6b:a6:44:76:d7:2e:e6:68: ae:9f:7f:a8:46:ea:29:29:0e:57:0f:dc:ea:2e:84: 5d:7f:36:f7:4b:e9:55:5f:6c:4e:d8:ab:60:75:cb: 75:20:4a:dc:0b:62:fa:ab:7d:68:2c:3e:5d:92:59: 36:30:e5:d7:6d:8f:ff:a9:55:e6:35:c4:2d:aa:60: 3d:15:09:28:d5:2d:06:06:77:5a:ab:c2:f2:5a:6b: 73:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8D:71:D2:E1:2E:EF:E9:ED:FD:4B:F4:BC:66:9B:62:34:CB:C9:6D X509v3 Authority Key Identifier: keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a0:8c:5f:58:8b:e3:4e:99:b2:5d:ec:df:99:81:9b:48:74: b6:b8:55:93:c8:3b:58:17:64:bd:50:07:e6:4a:33:ab:6a:dc: 9a:00:23:78:22:29:72:af:9d:df:dc:95:e6:ca:de:b1:7e:cd: aa:61:a8:70:de:62:f1:6c:fa:5a:62:c1:0d:66:d0:d6:66:24: 7f:df:93:d0:cd:d9:0a:70:a1:46:1b:af:36:3b:cc:a3:22:6a: af:86:28:82:9e:b8:17:64:b6:ac:6f:24:80:6e:17:1e:21:87: 9d:0a:18:ab:1f:4e:83:12:43:ac:6a:71:f9:b9:40:e8:b2:6c: 65:58:2d:ae:48:2e:31:3f:52:9e:10:a7:34:32:68:42:44:4b: 9a:05:53:07:38:23:6d:96:59:f2:57:df:09:1a:75:65:fa:88: a6:55:6c:46:c0:c5:f7:46:43:9b:96:42:43:31:2c:16:05:64: 57:2c:67:9a:5f:10:3c:1c:a4:31:a3:4b:22:de:c1:d6:d1:aa: 18:b1:0c:93:ad:13:6a:a4:36:df:bc:24:74:f9:e7:61:8f:26: b9:34:79:97:97:61:82:50:2f:31:72:6f:06:5a:9d:b8:8c:d5: 4a:e7:14:61:f7:8c:d6:9c:3b:e2:02:c2:af:96:52:9f:5c:41: 15:d8:86:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKDlBQ0I4MDY2NjNGQjBGQ0Y2RUJDNDNDMDEwQjkzNUUw NTIxNEZDOUYwHhcNMjUxMjIwMTkzODIzWhcNMjUxMjI3MTkzODIzWjAYMRYwFAYD VQQDDA02OTQ2ZmIyZi03NzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGBhZbtQ6tjH5+yLNcyJCuepMnLaib/Z5FYQqTxGTFL5X5pdjL05oROhysrl suza8xwKmodhanCcyVaYGLHctuKpPqYtAGEAmeQp9rWOPDloIli7HZPZh4Z3juhF wAG7QZFhHOxdMn4dbW3WIWrsw05p3CDto2uvnYC/sQ7YkvMkrSNTj4DV3D8qy4MN 0FGADEDs8NKlHYJAucJajcin2Te6brWPweqaZTQNa6ZEdtcu5miun3+oRuopKQ5X D9zqLoRdfzb3S+lVX2xO2Ktgdct1IErcC2L6q31oLD5dklk2MOXXbY//qVXmNcQt qmA9FQko1S0GBndaq8LyWmtzpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuNcdLh Lu/p7f1L9Lxmm2I0y8ltMB8GA1UdIwQYMBaAFJrLgGZj+w/PbrxDwBC5NeBSFPyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4OXV2RVBBRUxrMTRGSVVf SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zdUFabVA3RDg5dXZFUEFFTGsxNEZJVV9KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4 OXV2RVBBRUxrMTRGSVVfSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOoIxfWIvjTpmyXezfmYGbSHS2uFWTyDtYF2S9UAfmSjOratyaACN4 Iilyr53f3JXmyt6xfs2qYahw3mLxbPpaYsENZtDWZiR/35PQzdkKcKFGG682O8yj ImqvhiiCnrgXZLasbySAbhceIYedChirH06DEkOsanH5uUDosmxlWC2uSC4xP1Ke EKc0MmhCREuaBVMHOCNtllnyV98JGnVl+oimVWxGwMX3RkOblkJDMSwWBWRXLGea XxA8HKQxo0si3sHW0aoYsQyTrRNqpDbfvCR0+edhjya5NHmXl2GCUC8xcm8GWp24 jNVK5xRh94zWnDviAsKvllKfXEEV2IYU -----END CERTIFICATE-----Generated at Sat Dec 20 23:59:11 2025 by rpki-client