This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft File: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft (raw, json) Hash identifier: ZvUHFCeVOpgkN5e4gW0QsG5SAplKi8MrFAtyfaIxqZc= Subject key identifier: 71:AA:CA:83:95:36:C3:6B:B9:1C:06:D5:0E:4C:6B:D3:79:ED:DA:1C Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 Certificate issuer: /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft Manifest number: 01EF Signing time: Tue 02 Dec 2025 21:46:56 +0000 Manifest this update: Tue 02 Dec 2025 21:46:55 +0000 Manifest next update: Tue 09 Dec 2025 21:46:55 +0000 Files and hashes: 1: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl (hash: fNqVlOmtVrLcuev+Qxb9UNkSlMXMxfe5JGNw/56ho2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 21:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Validity Not Before: Dec 2 21:46:55 2025 GMT Not After : Dec 9 21:46:55 2025 GMT Subject: CN=692f5e50-e078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:e3:16:4b:a0:33:19:6c:73:c6:3a:bb:ad: 69:e5:76:3b:f0:a9:54:77:1d:6f:18:85:4f:6d:dd: 9e:a1:35:d8:5b:a2:11:b8:7c:89:70:6f:87:00:6c: 27:04:69:b5:a7:64:24:6d:3d:94:6a:4a:a5:2b:9a: b4:9f:1a:d4:77:24:0d:27:0a:79:fb:b5:d9:53:8c: 16:e7:42:d6:d3:bc:49:3a:27:ae:db:58:5f:c1:14: 46:c1:dd:3a:3b:fd:8f:28:cc:b2:30:ca:f4:30:ff: 8a:74:c7:12:30:68:40:ce:aa:af:47:bb:57:ef:c2: 27:1b:06:b2:70:e4:25:8b:fc:fa:99:74:70:bc:41: 21:47:bd:84:de:50:9b:53:e2:24:e4:dc:1a:ea:8e: 9f:64:93:5b:be:6b:6b:e6:60:76:f6:26:ca:d7:5c: ed:24:29:83:39:65:99:d1:c4:89:b0:8d:1e:6f:79: 97:52:0e:b4:31:c8:e6:45:5a:0a:6b:9b:92:95:e5: cf:c0:4f:1a:4e:ec:e7:97:ec:30:44:e8:a1:d3:f4: 0e:fb:71:50:61:9c:53:a6:e4:d5:d1:3b:f1:cb:9a: f2:56:e3:96:c1:ec:d4:cc:b4:09:01:24:cb:95:1e: 25:da:ea:c7:cb:b3:a4:05:1f:2c:db:3d:ab:83:45: 6f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AA:CA:83:95:36:C3:6B:B9:1C:06:D5:0E:4C:6B:D3:79:ED:DA:1C X509v3 Authority Key Identifier: keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:2c:74:a6:f2:03:c5:41:90:f8:bf:97:8c:9d:a6:b7:cb:63: 6c:28:b1:b1:bd:6d:04:4d:44:a0:18:b0:07:58:6d:9d:37:7a: 99:0a:b4:e2:33:c5:df:97:62:31:57:d7:eb:e5:84:1d:c9:d3: 6d:03:37:61:6f:e9:d2:78:c7:16:44:bd:ca:6e:0e:5e:82:6d: e4:52:36:f2:2d:63:3e:b3:7b:f2:0e:13:22:e1:7c:1e:3a:88: 40:02:bf:39:36:c6:3f:75:76:d7:0f:f6:47:26:17:c5:ff:9f: 46:fb:f2:85:51:08:44:11:ba:db:29:2a:5c:05:e6:22:0f:7a: a6:61:02:ba:64:fe:7d:b7:1e:23:ec:9f:70:0a:4b:03:c4:4d: f5:a8:1b:aa:af:42:75:74:43:ab:28:73:98:86:ab:ef:7d:be: 28:10:2d:95:4f:af:47:29:1a:ec:7f:f8:27:31:e8:9b:cc:7f: a9:23:b6:59:b4:f5:2d:22:89:3c:b0:be:29:8f:fd:cc:81:9f: 88:76:04:94:ca:40:ce:17:88:f6:c2:33:aa:b7:a2:2c:03:11: d3:0f:cb:0e:a4:57:25:9f:5c:89:31:b9:17:23:ab:75:c1:e8: ec:14:72:f4:f8:35:3c:ec:8d:cb:3b:ec:eb:87:37:83:de:94: 8c:64:12:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKDlGRTAwQzE5Q0UwQjhGOTZFQ0Y4OUEzNTdGN0QxQUY1 NThGOTZGRjUwHhcNMjUxMjAyMjE0NjU1WhcNMjUxMjA5MjE0NjU1WjAYMRYwFAYD VQQDEw02OTJmNWU1MC1lMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyavjFkugMxlsc8Y6u61p5XY78KlUdx1vGIVPbd2eoTXYW6IRuHyJcG+HAGwn BGm1p2QkbT2UakqlK5q0nxrUdyQNJwp5+7XZU4wW50LW07xJOieu21hfwRRGwd06 O/2PKMyyMMr0MP+KdMcSMGhAzqqvR7tX78InGwaycOQli/z6mXRwvEEhR72E3lCb U+Ik5Nwa6o6fZJNbvmtr5mB29ibK11ztJCmDOWWZ0cSJsI0eb3mXUg60McjmRVoK a5uSleXPwE8aTuznl+wwROih0/QO+3FQYZxTpuTV0Tvxy5ryVuOWwezUzLQJASTL lR4l2urHy7OkBR8s2z2rg0VvZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGqyoOV NsNruRwG1Q5Ma9N57docMB8GA1UdIwQYMBaAFJ/gDBnOC4+W7PiaNX99GvVY+W/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC82NzAwNThCNERG RjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1YnMtSm8xZjMwYTlWajVi X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24tQU1HYzRMajVicy1KbzFmMzBhOVZqNWJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC82NzAwNThCNERGRjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1 YnMtSm8xZjMwYTlWajViX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJLHSm8gPFQZD4v5eMnaa3y2NsKLGxvW0ETUSgGLAHWG2dN3qZCrTi M8Xfl2IxV9fr5YQdydNtAzdhb+nSeMcWRL3Kbg5egm3kUjbyLWM+s3vyDhMi4Xwe OohAAr85NsY/dXbXD/ZHJhfF/59G+/KFUQhEEbrbKSpcBeYiD3qmYQK6ZP59tx4j 7J9wCksDxE31qBuqr0J1dEOrKHOYhqvvfb4oEC2VT69HKRrsf/gnMeibzH+pI7ZZ tPUtIok8sL4pj/3MgZ+IdgSUykDOF4j2wjOqt6IsAxHTD8sOpFcln1yJMbkXI6t1 wejsFHL0+DU87I3LO+zrhzeD3pSMZBL2 -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:11 2025 by rpki-client