This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft File: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft (raw, json) Hash identifier: 7jKiJsyLajUwEHqzQkgCgcofu0ji0y1pA9yUMN8PM4Q= Subject key identifier: 2C:D2:F9:93:8E:E7:C5:34:84:62:24:3F:D4:B5:D0:69:B8:F3:A2:AF Authority key identifier: F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 Certificate issuer: /CN=A91C9916/serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft Manifest number: 0241 Signing time: Tue 23 Dec 2025 00:48:15 +0000 Manifest this update: Tue 23 Dec 2025 00:48:15 +0000 Manifest next update: Tue 30 Dec 2025 00:48:15 +0000 Files and hashes: 1: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl (hash: STw3elCOczq2lj7J4+dwAI18i4MGQW4HaWnDuVuH3Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9916, serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07 Validity Not Before: Dec 23 00:48:15 2025 GMT Not After : Dec 30 00:48:15 2025 GMT Subject: CN=6949e6cf-8127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:73:7c:04:69:d1:a2:69:7f:ba:e4:ab:4b: 3c:e3:3c:78:6b:22:bc:33:0c:7a:b6:47:97:9d:eb: 0a:87:d5:ba:27:ee:b4:64:ef:aa:3c:a4:6d:81:3a: 4f:5f:06:62:6a:90:2d:f2:93:5d:5d:6c:4e:b1:a9: eb:84:4a:7e:21:83:82:85:3e:33:92:fe:20:c0:56: 90:9f:63:8e:60:91:ca:80:fd:54:4f:58:79:34:c1: 5c:90:42:7c:13:98:3b:49:3a:eb:5d:08:78:af:ff: ac:43:b4:24:ec:22:ec:c8:10:90:fc:66:30:e9:fd: d5:3d:0b:e4:4d:6a:4a:86:71:ee:04:a7:c3:e5:af: 40:e7:65:fb:fc:eb:bc:3d:38:a5:1b:08:14:fc:27: 22:26:ff:90:28:da:19:99:7f:10:60:13:7e:1b:30: 99:c4:d8:7c:35:98:2e:f0:a6:43:89:dd:f2:30:1c: 88:f3:9e:9b:e8:40:98:3f:00:e9:41:ef:6a:c7:00: c5:14:93:0b:15:c5:23:76:19:f9:f8:b0:25:b9:f5: 5f:36:c4:ff:f7:79:e5:e1:bf:df:00:94:20:c6:aa: 0e:b0:a7:d3:94:ef:d5:8c:04:08:c3:a2:9a:98:be: 6d:f6:19:5a:e6:19:59:dc:a7:7b:3b:b1:a0:c2:4e: d4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D2:F9:93:8E:E7:C5:34:84:62:24:3F:D4:B5:D0:69:B8:F3:A2:AF X509v3 Authority Key Identifier: keyid:F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:35:97:2b:65:f3:f9:20:e7:b4:d2:bd:f8:27:09:ee:e2:30: 57:b2:d0:69:7c:aa:98:6c:01:50:2e:71:66:a6:a0:f9:32:09: 97:1f:7f:22:00:26:bf:d7:9e:2b:a4:4b:c9:a3:e6:f9:96:01: eb:12:b5:d2:3d:68:4f:78:12:f2:c6:75:e0:63:60:a5:25:d8: 13:89:75:c8:72:b5:c2:67:c3:8e:7b:bb:fa:f8:e0:6f:cb:66: 01:e9:22:be:fa:7b:f2:57:8a:da:89:73:46:7e:5b:dd:70:24: f4:bc:96:f9:15:1f:bc:ab:f2:b8:65:ec:3b:4c:83:24:8a:69: 39:5e:b2:56:15:8e:ce:64:ea:0e:d6:39:d5:a4:88:1e:0b:ba: 10:36:cf:57:95:29:a7:76:a8:51:fa:96:67:36:4b:bd:a5:03: 64:94:9d:fc:f5:b8:1d:1b:e2:a1:a7:d1:48:4d:6c:d8:a4:87: e3:a8:01:63:bf:f5:fe:1a:6f:4a:8a:d9:05:13:6e:ab:f3:ae: c6:d7:69:2b:82:25:6a:ad:f1:f3:17:f2:49:de:25:31:b9:1e: 2b:34:77:55:89:d0:46:94:38:14:44:49:af:76:25:de:41:75: d1:53:c3:9a:2e:b5:21:6a:ee:a8:22:e1:0b:4d:2b:fc:a8:8f: a7:30:d9:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5MTYxMTAvBgNVBAUTKEYyRTQ2NTdGQjBCMTUxNDI3M0M1MEVFQkY5MEY0NDE2 RkRBNTRCMDcwHhcNMjUxMjIzMDA0ODE1WhcNMjUxMjMwMDA0ODE1WjAYMRYwFAYD VQQDDA02OTQ5ZTZjZi04MTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8RzfARp0aJpf7rkq0s84zx4ayK8Mwx6tkeXnesKh9W6J+60ZO+qPKRtgTpP XwZiapAt8pNdXWxOsanrhEp+IYOChT4zkv4gwFaQn2OOYJHKgP1UT1h5NMFckEJ8 E5g7STrrXQh4r/+sQ7Qk7CLsyBCQ/GYw6f3VPQvkTWpKhnHuBKfD5a9A52X7/Ou8 PTilGwgU/CciJv+QKNoZmX8QYBN+GzCZxNh8NZgu8KZDid3yMByI856b6ECYPwDp Qe9qxwDFFJMLFcUjdhn5+LAlufVfNsT/93nl4b/fAJQgxqoOsKfTlO/VjAQIw6Ka mL5t9hla5hlZ3Kd7O7Ggwk7UDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzS+ZOO 58U0hGIkP9S10Gm486KvMB8GA1UdIwQYMBaAFPLkZX+wsVFCc8UO6/kPRBb9pUsH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTkxNi8yMzlEQzQyNjYx OEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVVSnp4UTdyLVE5RUZ2MmxT d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1UmxmN0N4VVVKenhRN3ItUTlFRnYybFN3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTkxNi8yMzlEQzQyNjYxOEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVV Snp4UTdyLVE5RUZ2MmxTd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCONZcrZfP5IOe00r34Jwnu4jBXstBpfKqYbAFQLnFmpqD5MgmXH38i ACa/154rpEvJo+b5lgHrErXSPWhPeBLyxnXgY2ClJdgTiXXIcrXCZ8OOe7v6+OBv y2YB6SK++nvyV4raiXNGflvdcCT0vJb5FR+8q/K4Zew7TIMkimk5XrJWFY7OZOoO 1jnVpIgeC7oQNs9XlSmndqhR+pZnNku9pQNklJ389bgdG+Khp9FITWzYpIfjqAFj v/X+Gm9KitkFE26r867G12krgiVqrfHzF/JJ3iUxuR4rNHdVidBGlDgUREmvdiXe QXXRU8OaLrUhau6oIuELTSv8qI+nMNnx -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:03 2025 by rpki-client