This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json) Hash identifier: MweDAohyjtnRqaKY0MpdTEKplYx3y2qC8yWOrIPQGEk= Subject key identifier: 54:AB:22:3D:D3:04:3C:FF:45:CC:AB:45:7C:67:00:3B:26:AF:0B:F4 Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Certificate serial: 087D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft Manifest number: 0BCC Signing time: Mon 22 Dec 2025 19:55:42 +0000 Manifest this update: Mon 22 Dec 2025 19:55:41 +0000 Manifest next update: Mon 29 Dec 2025 19:55:41 +0000 Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: oqotkt4RZSwjn9BFOH5emr5HeORdWhWokXbbUVrNvek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2173 (0x87d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D Validity Not Before: Dec 22 19:55:41 2025 GMT Not After : Dec 29 19:55:41 2025 GMT Subject: CN=6949a23e-cf37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:a5:05:a8:59:7c:01:21:dc:38:64:a5:ab: 07:9b:40:94:d2:61:4d:8e:88:b0:19:39:f9:e8:c2: 31:19:76:5a:75:63:c9:bc:7f:db:70:06:63:9a:c1: 6a:21:e6:f6:0b:e4:cc:85:a9:56:8f:3c:5e:b5:ce: 06:d7:d9:ca:f2:bf:d2:ed:f8:a5:78:63:22:bb:73: 80:c8:dd:e3:07:0e:e7:06:69:f7:2a:8f:5e:02:93: 84:a6:70:d3:fe:0e:54:54:e5:51:ac:18:4a:3a:81: b8:29:89:a5:72:e4:8e:68:29:f5:55:12:d3:b2:f6: 1a:98:e9:ea:f7:30:c3:7b:6c:d6:bc:97:7a:eb:3f: 96:14:96:df:af:c4:5a:89:fc:2f:58:0d:af:7b:b5: 22:03:1d:9b:21:36:00:3d:06:67:4c:5a:43:86:8b: 7a:21:d3:5e:66:54:d8:7c:dd:56:02:db:48:80:22: 75:99:7a:7e:49:10:bf:6d:f8:03:d7:8e:9c:9b:38: 76:97:96:e1:bf:57:b7:eb:7f:dd:c8:65:34:8a:54: 6b:1f:da:4f:6d:13:26:3d:d8:4b:55:0f:5e:92:36: 72:9b:3a:ee:e1:a4:4a:b9:a0:37:fc:53:3d:4e:49: 52:bd:12:8b:6c:ce:52:34:72:0d:ef:46:c9:84:c3: 1a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AB:22:3D:D3:04:3C:FF:45:CC:AB:45:7C:67:00:3B:26:AF:0B:F4 X509v3 Authority Key Identifier: keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:af:aa:b4:f8:27:0e:cf:52:0a:36:63:10:11:f0:9b:5c:80: f7:26:6e:09:05:d5:83:95:d0:b1:46:bf:3e:ef:71:93:89:11: 40:7d:52:76:46:f2:52:6f:32:2e:ad:59:0e:43:d6:6a:24:f9: 40:c4:34:e0:64:6f:ec:cf:f9:37:8c:8f:a0:f4:45:f0:0b:f2: 08:39:70:33:f3:24:94:40:16:e7:7d:0f:3a:7a:2b:82:09:a1: 57:77:f6:c7:00:a7:28:c8:da:66:41:a8:18:d5:ee:ec:70:a5: 37:31:0c:be:9e:cc:16:26:02:3f:87:2d:4d:fe:a6:a1:5d:6e: bd:80:79:75:1d:c6:79:cc:36:14:7c:f0:32:81:83:3e:5f:d6: 98:0e:7a:c9:5e:f9:fa:58:ab:b2:3c:02:66:e4:f8:eb:0c:bc: 01:4f:d1:31:a8:9f:80:51:2a:f5:e3:82:ed:cc:b5:dd:fe:f7: a1:05:bc:8c:d2:f2:23:07:95:06:86:fb:42:22:17:11:08:fa: e2:99:de:32:6c:60:db:ad:67:ed:e0:45:9b:3c:a5:b1:3b:da: 87:47:66:f9:b7:f5:e4:34:45:ec:82:29:22:dc:91:c8:ff:31: e1:29:1d:78:21:b5:10:98:50:e7:97:d6:51:96:8e:68:57:db: df:77:63:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2 ODUzQjg0MUQwHhcNMjUxMjIyMTk1NTQxWhcNMjUxMjI5MTk1NTQxWjAYMRYwFAYD VQQDDA02OTQ5YTIzZS1jZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlL2lBahZfAEh3DhkpasHm0CU0mFNjoiwGTn56MIxGXZadWPJvH/bcAZjmsFq Ieb2C+TMhalWjzxetc4G19nK8r/S7fileGMiu3OAyN3jBw7nBmn3Ko9eApOEpnDT /g5UVOVRrBhKOoG4KYmlcuSOaCn1VRLTsvYamOnq9zDDe2zWvJd66z+WFJbfr8Ra ifwvWA2ve7UiAx2bITYAPQZnTFpDhot6IdNeZlTYfN1WAttIgCJ1mXp+SRC/bfgD 146cmzh2l5bhv1e363/dyGU0ilRrH9pPbRMmPdhLVQ9ekjZymzru4aRKuaA3/FM9 TklSvRKLbM5SNHIN70bJhMMa/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSrIj3T BDz/RcyrRXxnADsmrwv0MB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq ekZoa1NLcDFLM1JvVTdoQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARr6q0+CcOz1IKNmMQEfCbXID3Jm4JBdWDldCxRr8+73GTiRFAfVJ2 RvJSbzIurVkOQ9ZqJPlAxDTgZG/sz/k3jI+g9EXwC/IIOXAz8ySUQBbnfQ86eiuC CaFXd/bHAKcoyNpmQagY1e7scKU3MQy+nswWJgI/hy1N/qahXW69gHl1HcZ5zDYU fPAygYM+X9aYDnrJXvn6WKuyPAJm5PjrDLwBT9ExqJ+AUSr144LtzLXd/vehBbyM 0vIjB5UGhvtCIhcRCPrimd4ybGDbrWft4EWbPKWxO9qHR2b5t/XkNEXsgiki3JHI /zHhKR14IbUQmFDnl9ZRlo5oV9vfd2OH -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:03 2025 by rpki-client