This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft File: c5C6Rl4CIu4xQH5VCebenj-pENs.mft (raw, json) Hash identifier: DW6Ck8Px3kizZKxBRflKMW4Mfv8KA2gCrTN58YgKRxM= Subject key identifier: C9:98:51:47:97:B3:02:E9:CA:03:AA:11:A2:F8:DD:A5:75:F2:5E:99 Authority key identifier: 73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB Certificate issuer: /CN=A91CA6E6/serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft Manifest number: 0316 Signing time: Tue 23 Dec 2025 01:38:27 +0000 Manifest this update: Tue 23 Dec 2025 01:38:26 +0000 Manifest next update: Tue 30 Dec 2025 01:38:26 +0000 Files and hashes: 1: c5C6Rl4CIu4xQH5VCebenj-pENs.crl (hash: 7MWgVHK4NE/ZHT1yeTckZoK6UQL2tCxKzlGCxfoHIaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6, serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Validity Not Before: Dec 23 01:38:26 2025 GMT Not After : Dec 30 01:38:26 2025 GMT Subject: CN=6949f292-56ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:0f:d8:33:d7:e7:80:81:f1:af:2b:fc:7d: 12:2e:0d:af:9e:bd:d6:98:c9:d5:53:1c:eb:cb:35: 94:53:2f:2e:1b:bf:56:f1:40:19:28:15:f9:d1:50: c0:69:33:07:06:f7:f1:56:41:4b:57:49:f7:5b:a7: ee:82:4f:99:2f:09:3f:c5:9e:2a:20:48:b0:55:5d: d5:a5:d2:c6:e2:07:72:c5:cc:b8:6b:70:4e:7c:a8: 16:9d:34:ca:2f:e1:77:f5:4f:9d:3b:32:d9:d9:c1: be:b5:92:07:c2:95:90:76:37:7e:16:78:e0:e2:4a: 8c:1b:71:bf:66:82:06:17:95:08:90:a9:d9:4b:a5: 4b:7f:a9:60:8b:da:fa:27:29:d0:21:14:2d:15:79: 6d:3e:99:0c:0f:ae:3a:75:76:c9:f6:8d:7a:fb:37: 52:0d:f9:eb:52:81:3a:c5:c9:99:af:05:06:0d:8d: 26:03:9c:c8:8f:96:41:87:99:1e:74:4d:06:73:38: 53:d1:80:1b:fd:79:fd:81:f0:c6:63:14:b3:2c:91: 2f:74:99:d8:c3:8d:13:fb:54:5e:e9:aa:ff:e3:50: 89:d2:b9:ff:e7:ec:c1:2c:9b:a9:eb:35:c4:88:2a: f9:31:d5:a6:51:00:db:91:08:ad:88:76:28:5b:93: a6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:98:51:47:97:B3:02:E9:CA:03:AA:11:A2:F8:DD:A5:75:F2:5E:99 X509v3 Authority Key Identifier: keyid:73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:61:38:01:01:94:76:41:46:eb:ca:25:27:b1:80:84:3c:08: 88:f9:60:04:55:6c:c1:a0:b7:de:78:a8:11:46:45:a1:03:71: c3:13:bb:7b:f5:0c:d6:10:83:b1:4d:17:52:d5:c4:29:ce:92: 32:2e:39:94:f2:55:a3:53:cc:c3:63:93:11:01:ea:8e:8d:bd: 7d:81:14:0a:50:19:dc:74:47:0b:7d:be:29:c2:08:a1:9b:64: 0d:d3:9f:b8:92:03:6a:dd:b7:e6:9c:c8:7f:8f:15:04:95:a5: d7:e4:5d:ac:f4:3b:7a:88:34:c5:a7:81:5d:f0:13:3a:60:be: 73:30:5a:29:75:20:0e:eb:ef:5d:0a:55:19:cb:d7:37:95:0d: 8e:66:62:34:2e:a2:1a:aa:1d:03:df:0e:4c:00:01:37:11:e4: 5b:3e:86:a3:57:74:38:cd:08:93:57:c7:ec:5f:10:e0:59:15: 5a:27:3c:39:49:ea:8a:63:8e:5c:f6:17:a4:7d:c0:5b:e6:c1: c9:58:7b:92:b8:78:b2:f8:b0:b4:7e:43:d2:d4:24:9e:24:a8: 59:dc:32:57:52:6c:df:ec:c1:c9:2e:ee:9d:85:b6:b7:e0:6e: 33:18:15:86:72:bf:b0:21:86:6a:3e:38:87:ca:1d:cd:0c:96: d6:9a:70:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E2RTYxMTAvBgNVBAUTKDczOTBCQTQ2NUUwMjIyRUUzMTQwN0U1NTA5RTZERTlF M0ZBOTEwREIwHhcNMjUxMjIzMDEzODI2WhcNMjUxMjMwMDEzODI2WjAYMRYwFAYD VQQDDA02OTQ5ZjI5Mi01NmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujkP2DPX54CB8a8r/H0SLg2vnr3WmMnVUxzryzWUUy8uG79W8UAZKBX50VDA aTMHBvfxVkFLV0n3W6fugk+ZLwk/xZ4qIEiwVV3VpdLG4gdyxcy4a3BOfKgWnTTK L+F39U+dOzLZ2cG+tZIHwpWQdjd+Fnjg4kqMG3G/ZoIGF5UIkKnZS6VLf6lgi9r6 JynQIRQtFXltPpkMD646dXbJ9o16+zdSDfnrUoE6xcmZrwUGDY0mA5zIj5ZBh5ke dE0GczhT0YAb/Xn9gfDGYxSzLJEvdJnYw40T+1Re6ar/41CJ0rn/5+zBLJup6zXE iCr5MdWmUQDbkQitiHYoW5OmewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmYUUeX swLpygOqEaL43aV18l6ZMB8GA1UdIwQYMBaAFHOQukZeAiLuMUB+VQnm3p4/qRDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9jNUM2Umw0Q0l1NHhRSDVWQ2ViZW5qLXBF TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1QzZSbDRDSXU0eFFINVZDZWJlbmotcEVOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9jNUM2Umw0Q0l1 NHhRSDVWQ2ViZW5qLXBFTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVYTgBAZR2QUbryiUnsYCEPAiI+WAEVWzBoLfeeKgRRkWhA3HDE7t7 9QzWEIOxTRdS1cQpzpIyLjmU8lWjU8zDY5MRAeqOjb19gRQKUBncdEcLfb4pwgih m2QN05+4kgNq3bfmnMh/jxUElaXX5F2s9Dt6iDTFp4Fd8BM6YL5zMFopdSAO6+9d ClUZy9c3lQ2OZmI0LqIaqh0D3w5MAAE3EeRbPoajV3Q4zQiTV8fsXxDgWRVaJzw5 SeqKY45c9hekfcBb5sHJWHuSuHiy+LC0fkPS1CSeJKhZ3DJXUmzf7MHJLu6dhba3 4G4zGBWGcr+wIYZqPjiHyh3NDJbWmnBD -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:17 2025 by rpki-client