This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft File: 1ex0z8jA_QV81Og74-tX8GHcWPg.mft (raw, json) Hash identifier: PrY0DXEXKabVoYEbc0IEfKMLSJw2COmoOVkzXSZCTxs= Subject key identifier: A4:66:64:D6:5B:4E:9C:FA:75:C5:E3:51:8D:2F:71:FF:47:56:4E:AC Authority key identifier: D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 Certificate issuer: /CN=A91D313B/serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft Manifest number: 0109 Signing time: Tue 23 Dec 2025 03:59:33 +0000 Manifest this update: Tue 23 Dec 2025 03:59:33 +0000 Manifest next update: Tue 30 Dec 2025 03:59:33 +0000 Files and hashes: 1: 1ex0z8jA_QV81Og74-tX8GHcWPg.crl (hash: Qlyg7FbcCc51iLcQOpWLcwNf0M/+ioU2BNdKKaabCYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D313B, serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Validity Not Before: Dec 23 03:59:33 2025 GMT Not After : Dec 30 03:59:33 2025 GMT Subject: CN=694a13a5-f5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:63:18:a4:27:c5:b6:6f:3a:6c:01:e2:82:c0: 94:40:71:36:09:14:87:25:84:69:3b:77:ad:86:04: f8:92:1f:e5:fa:91:9e:12:09:6c:c4:89:7c:19:5e: 4a:cd:be:75:af:ec:00:d2:aa:98:da:01:fd:77:f7: 6a:6b:4f:7d:e9:4a:54:9f:7c:c5:7b:fa:1d:f7:07: b7:b6:54:19:cd:42:67:6f:55:66:40:57:8d:4b:b0: 39:72:78:6d:e3:cc:1a:a4:02:d7:ee:ca:5f:d1:08: f0:8c:06:38:e7:34:9b:7f:f2:8f:b7:e3:fe:79:89: 2c:d4:7c:b2:47:9d:b4:de:56:48:41:f8:0d:d5:f2: 35:15:da:fd:39:35:d4:ac:59:6c:60:fc:3f:84:91: b6:44:7b:21:17:8d:de:9a:0d:f7:b1:96:5d:9f:93: 9a:81:87:49:c2:d6:19:5d:26:14:a9:07:23:6c:07: b3:8f:dc:09:81:fa:c2:7f:11:4d:40:64:ad:46:00: 65:ff:1b:8b:0f:cc:95:07:dd:94:f3:ed:ff:42:97: 23:fc:d0:10:73:16:c6:9e:0b:7c:c3:5d:32:53:b8: ec:f4:0b:98:fc:59:94:9a:3f:6a:76:0b:f5:45:1a: 99:87:90:9d:e0:b7:9a:f0:ca:53:1f:bc:01:19:29: 9e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:66:64:D6:5B:4E:9C:FA:75:C5:E3:51:8D:2F:71:FF:47:56:4E:AC X509v3 Authority Key Identifier: keyid:D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:12:35:a0:d7:b9:5d:4c:88:9c:92:68:20:57:10:26:79:08: 29:29:e7:aa:6c:d5:9a:ce:8e:6e:69:8f:94:59:17:fc:25:35: fd:ea:e0:c2:ec:e4:2b:34:64:12:38:e1:7b:d7:00:ec:ad:9a: f0:ce:20:06:61:1a:ab:ef:f2:21:49:53:10:ea:2f:7b:b5:67: f4:04:5f:01:77:58:6f:16:3b:3b:25:b6:d8:07:b1:e1:94:6e: d5:cb:43:58:0f:8d:f7:fc:ad:76:7a:81:8e:62:03:47:ea:aa: c0:9f:30:1e:66:13:87:11:88:4a:74:16:71:5f:38:9b:a0:86: 98:35:c4:29:5c:9b:c4:86:f2:97:20:76:e3:07:4e:4b:b3:f4: 7b:50:8f:c5:b9:09:24:bc:fe:d8:a3:94:55:e2:3c:98:4c:1f: 36:a0:90:d6:26:04:45:28:1a:51:ac:be:33:a6:9a:2c:1a:51: ac:4c:c8:97:2f:fb:65:66:b5:f5:f1:52:a4:60:4c:c2:58:d5: 64:8d:25:36:51:83:89:30:65:da:8b:8d:5f:b0:18:c2:e4:af: f8:08:3c:b7:88:07:cd:99:9a:83:95:cd:9a:9f:c0:fb:8e:d8: 4c:30:8f:5e:4d:6d:c0:c7:19:8b:e3:9c:07:a9:0b:0a:6e:12: 11:c0:4e:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxM0IxMTAvBgNVBAUTKEQ1RUM3NENGQzhDMEZEMDU3Q0Q0RTgzQkUzRUI1N0Yw NjFEQzU4RjgwHhcNMjUxMjIzMDM1OTMzWhcNMjUxMjMwMDM1OTMzWjAYMRYwFAYD VQQDDA02OTRhMTNhNS1mNWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GMYpCfFtm86bAHigsCUQHE2CRSHJYRpO3ethgT4kh/l+pGeEglsxIl8GV5K zb51r+wA0qqY2gH9d/dqa0996UpUn3zFe/od9we3tlQZzUJnb1VmQFeNS7A5cnht 48wapALX7spf0QjwjAY45zSbf/KPt+P+eYks1HyyR5203lZIQfgN1fI1Fdr9OTXU rFlsYPw/hJG2RHshF43emg33sZZdn5OagYdJwtYZXSYUqQcjbAezj9wJgfrCfxFN QGStRgBl/xuLD8yVB92U8+3/Qpcj/NAQcxbGngt8w10yU7js9AuY/FmUmj9qdgv1 RRqZh5Cd4Lea8MpTH7wBGSme2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRmZNZb Tpz6dcXjUY0vcf9HVk6sMB8GA1UdIwQYMBaAFNXsdM/IwP0FfNToO+PrV/Bh3Fj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEzQi9ENUJGRUMxNDQ3 REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9RVjgxT2c3NC10WDhHSGNX UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFleDB6OGpBX1FWODFPZzc0LXRYOEdIY1dQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzEzQi9ENUJGRUMxNDQ3REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9R VjgxT2c3NC10WDhHSGNXUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiEjWg17ldTIickmggVxAmeQgpKeeqbNWazo5uaY+UWRf8JTX96uDC 7OQrNGQSOOF71wDsrZrwziAGYRqr7/IhSVMQ6i97tWf0BF8Bd1hvFjs7JbbYB7Hh lG7Vy0NYD433/K12eoGOYgNH6qrAnzAeZhOHEYhKdBZxXziboIaYNcQpXJvEhvKX IHbjB05Ls/R7UI/FuQkkvP7Yo5RV4jyYTB82oJDWJgRFKBpRrL4zpposGlGsTMiX L/tlZrX18VKkYEzCWNVkjSU2UYOJMGXai41fsBjC5K/4CDy3iAfNmZqDlc2an8D7 jthMMI9eTW3AxxmL45wHqQsKbhIRwE7w -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:33 2025 by rpki-client