This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft File: kS3Nd84XYnPZShzEJZKtBclnamI.mft (raw, json) Hash identifier: maTd3EGnUALbrS3NASfAWixBmLU6+JxDy4FWwRBv7Ck= Subject key identifier: D4:31:69:B7:17:32:09:36:A9:9C:6B:E0:CD:59:AE:BD:C2:2F:32:AF Authority key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 Certificate issuer: /CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft Manifest number: 0313 Signing time: Sun 21 Dec 2025 01:52:21 +0000 Manifest this update: Sun 21 Dec 2025 01:52:21 +0000 Manifest next update: Sun 28 Dec 2025 01:52:21 +0000 Files and hashes: 1: kS3Nd84XYnPZShzEJZKtBclnamI.crl (hash: WY+/TIukbwAEd0Ka2kunL4hmBLseFIFBtUU0hhSw4f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6, serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Validity Not Before: Dec 21 01:52:21 2025 GMT Not After : Dec 28 01:52:21 2025 GMT Subject: CN=694752d5-1c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:d1:3b:d3:7c:b5:9f:34:09:56:32:d6:99: 90:84:1c:3e:c8:a3:45:26:00:a5:f6:dd:d2:06:17: cf:b9:94:1e:78:a6:62:41:6d:88:03:f1:f4:4e:8f: 9b:3c:a9:9e:4d:31:c9:7d:51:e0:6c:31:ac:52:64: 81:e3:2b:85:d1:9f:74:fb:f2:25:30:72:e9:0b:8e: 8e:11:db:c5:c3:8e:b3:f3:6a:61:cb:e8:bd:8c:62: 44:ac:e8:f5:a0:80:6b:96:58:e8:aa:7a:47:82:7e: 28:e2:3a:9d:8f:b1:47:71:52:79:c2:c4:18:4f:12: 95:2a:b1:ef:c3:6d:b0:e0:bf:6c:11:09:e1:5e:14: 2f:81:07:e8:05:cc:22:1d:07:56:f8:35:5f:50:46: d0:0f:81:ae:fa:e5:46:de:41:c4:a8:62:9c:91:37: 12:70:e5:87:04:5e:0f:03:bb:1b:26:e3:19:95:8c: ed:ee:be:b1:b6:8a:39:de:ec:9a:b7:37:21:7e:4d: f1:58:0b:bb:3a:43:c3:15:da:8f:01:b9:ba:8f:a6: e2:61:11:0c:47:46:86:2d:d5:ad:4d:a4:b0:10:f1: 62:81:12:a7:29:e0:c4:25:0b:c7:94:d4:68:39:94: b0:23:b3:e1:07:95:72:3f:a6:3c:57:96:0c:23:16: 03:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:31:69:B7:17:32:09:36:A9:9C:6B:E0:CD:59:AE:BD:C2:2F:32:AF X509v3 Authority Key Identifier: keyid:91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:32:da:47:7a:02:b1:76:c8:d2:42:98:a4:1f:51:08:32:a5: cd:49:cd:58:d2:59:95:e9:a2:f0:5c:23:c3:bb:82:f1:3b:47: 1f:1d:50:9f:34:d4:1b:a0:62:f8:68:14:d4:ec:b4:e5:3b:f4: 79:f1:38:37:c3:e6:fb:b1:f6:e9:99:17:71:23:53:5d:7d:89: 96:64:89:5c:65:c0:82:3c:b8:4c:69:bf:37:3a:d8:26:26:f5: ba:3f:7a:4a:54:95:c0:8f:e7:87:66:aa:89:aa:c9:dc:a1:0c: a3:e7:71:20:4e:43:74:8c:44:0b:76:42:70:4d:78:c8:59:40: 8b:e4:d2:48:72:f0:10:6f:19:c2:45:25:8c:10:48:28:db:52: b6:d3:c8:4a:38:4f:87:8b:9f:6c:8f:42:dc:33:c5:80:5f:34: 33:a8:7c:bf:cd:fa:a0:8a:ed:0b:70:31:50:a4:4e:bc:f8:b6: b8:9c:3d:32:24:00:fc:0c:8d:5b:76:c6:b2:19:80:88:1b:d9: 7a:20:be:a1:0d:bf:6c:24:bd:78:d5:34:64:86:77:72:73:fe: bc:ff:9c:d6:1a:e5:90:d1:fb:e8:77:9d:62:6a:6b:a8:c2:f6: 69:69:84:c8:03:81:1e:43:fa:62:7a:26:d6:c6:6a:c2:d2:57: f2:1f:b5:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E2RTYxMTAvBgNVBAUTKDkxMkRDRDc3Q0UxNzYyNzNEOTRBMUNDNDI1OTJBRDA1 Qzk2NzZBNjIwHhcNMjUxMjIxMDE1MjIxWhcNMjUxMjI4MDE1MjIxWjAYMRYwFAYD VQQDDA02OTQ3NTJkNS0xYzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7vRO9N8tZ80CVYy1pmQhBw+yKNFJgCl9t3SBhfPuZQeeKZiQW2IA/H0To+b PKmeTTHJfVHgbDGsUmSB4yuF0Z90+/IlMHLpC46OEdvFw46z82phy+i9jGJErOj1 oIBrlljoqnpHgn4o4jqdj7FHcVJ5wsQYTxKVKrHvw22w4L9sEQnhXhQvgQfoBcwi HQdW+DVfUEbQD4Gu+uVG3kHEqGKckTcScOWHBF4PA7sbJuMZlYzt7r6xtoo53uya tzchfk3xWAu7OkPDFdqPAbm6j6biYREMR0aGLdWtTaSwEPFigRKnKeDEJQvHlNRo OZSwI7PhB5VyP6Y8V5YMIxYDCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQxabcX Mgk2qZxr4M1Zrr3CLzKvMB8GA1UdIwQYMBaAFJEtzXfOF2Jz2UocxCWSrQXJZ2pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFluUFpTaHpFSlpLdEJjbG5h bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTM05kODRYWW5QWlNoekVKWkt0QmNsbmFtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFlu UFpTaHpFSlpLdEJjbG5hbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4MtpHegKxdsjSQpikH1EIMqXNSc1Y0lmV6aLwXCPDu4LxO0cfHVCf NNQboGL4aBTU7LTlO/R58Tg3w+b7sfbpmRdxI1NdfYmWZIlcZcCCPLhMab83Otgm JvW6P3pKVJXAj+eHZqqJqsncoQyj53EgTkN0jEQLdkJwTXjIWUCL5NJIcvAQbxnC RSWMEEgo21K208hKOE+Hi59sj0LcM8WAXzQzqHy/zfqgiu0LcDFQpE68+La4nD0y JAD8DI1bdsayGYCIG9l6IL6hDb9sJL141TRkhndyc/68/5zWGuWQ0fvod51iamuo wvZpaYTIA4EeQ/pieibWxmrC0lfyH7X4 -----END CERTIFICATE-----Generated at Tue Dec 23 00:05:03 2025 by rpki-client