This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft File: 67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json) Hash identifier: mKSDbxD6Pb/Oghw05uOCAFXohN1otnVwyNVS/qZdw78= Subject key identifier: 72:F8:E7:9D:75:27:6A:C7:0D:74:B5:74:52:D5:8D:E7:3F:25:1B:6E Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Certificate serial: 07FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft Manifest number: 083B Signing time: Mon 22 Dec 2025 20:27:33 +0000 Manifest this update: Mon 22 Dec 2025 20:27:33 +0000 Manifest next update: Mon 29 Dec 2025 20:27:33 +0000 Files and hashes: 1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: kLTPPVWx6GNyVRBXR+T9myAqSVPgHA07YR6vfsKlHn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2045 (0x7fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Validity Not Before: Dec 22 20:27:33 2025 GMT Not After : Dec 29 20:27:33 2025 GMT Subject: CN=6949a9b5-ec2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:40:73:cf:8c:d9:e8:ff:76:67:28:f0:c7:5f: c4:ae:f6:d6:0e:d4:25:75:50:fc:28:0b:58:c0:28: b3:7a:d5:41:13:c6:75:0d:6e:06:26:81:f4:5e:5b: 22:b5:30:ae:e1:ee:50:3f:c2:f6:cd:cc:12:0a:33: 3c:0c:70:18:16:22:fd:3c:8b:5c:b9:7b:43:40:17: 34:17:b0:ff:90:d6:ef:44:5e:02:65:e1:54:9f:7b: 8e:fa:54:12:86:bd:9a:e5:a5:17:5e:ae:df:7d:3f: 5d:72:61:48:7d:87:0f:84:a6:d7:71:91:87:54:4b: 5c:9e:43:86:60:f0:2f:8d:22:d8:ef:ba:09:62:db: 09:fd:f3:c7:57:f7:43:26:e0:66:aa:ad:5b:f0:dc: 36:29:ed:fb:d1:a8:5e:35:58:20:24:82:ea:f5:08: c2:7b:2e:8d:1f:0a:3f:f0:e4:08:14:bb:c5:e5:2e: 57:5a:50:e7:26:a6:1a:da:ec:b1:23:0a:5c:25:d6: e1:16:b1:45:29:c0:e9:c3:2f:70:94:e7:57:56:d3: 22:2a:2b:b9:8a:74:48:fc:1b:f2:0e:94:ee:a1:d8: f0:93:51:9f:8f:d8:53:92:81:96:d4:99:7c:03:73: 2f:43:b2:5e:82:cb:eb:e7:c5:5c:e7:89:2c:90:a0: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F8:E7:9D:75:27:6A:C7:0D:74:B5:74:52:D5:8D:E7:3F:25:1B:6E X509v3 Authority Key Identifier: keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:23:6b:5f:b2:fa:68:7c:ba:d4:1b:b4:56:35:97:9c:df:80: da:5d:28:f8:b8:58:5b:73:8b:d7:45:d9:b2:9c:92:63:48:c9: 02:00:3a:f9:06:35:55:a8:37:06:16:4d:e7:3e:d2:41:ca:5f: a5:11:2f:41:34:39:d5:b4:40:6a:5a:89:d2:ae:de:db:93:9c: 0d:ed:c1:2e:35:77:a0:35:fc:0e:4d:c7:85:4a:59:4e:67:31: a3:fb:e0:f3:73:2d:13:e2:eb:8f:f5:be:af:36:93:f2:68:75: 92:02:75:81:38:e3:d1:bf:f3:33:08:ea:74:9e:90:bc:8b:e1: fb:52:81:6d:7f:af:5a:fc:3a:b4:3c:e5:48:d9:6e:3d:a8:08: b3:69:6c:31:15:f6:76:47:14:a5:0f:32:f7:e3:35:7c:3f:c4: 9d:37:37:ab:9a:47:5c:64:f2:14:8b:da:61:82:c8:25:31:04: 39:41:4d:0d:8c:c2:45:09:6a:b9:1f:44:cd:9c:94:d9:06:5e: 37:28:65:6f:3b:0a:d5:1b:35:29:4c:03:77:63:49:38:63:5c: 4b:55:c4:75:f1:ba:fe:f5:b4:3f:12:e2:b1:69:7a:51:97:07: 80:05:13:46:52:1c:b8:e7:1e:18:c2:b1:0d:df:0c:7b:05:e7: 0b:66:4e:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKEVCQkI0NzNEMTcwQjZCODMwNkQxRTE2QzhCOTUyMzM0 QURENDBGMTAwHhcNMjUxMjIyMjAyNzMzWhcNMjUxMjI5MjAyNzMzWjAYMRYwFAYD VQQDDA02OTQ5YTliNS1lYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUBzz4zZ6P92Zyjwx1/ErvbWDtQldVD8KAtYwCizetVBE8Z1DW4GJoH0Xlsi tTCu4e5QP8L2zcwSCjM8DHAYFiL9PItcuXtDQBc0F7D/kNbvRF4CZeFUn3uO+lQS hr2a5aUXXq7ffT9dcmFIfYcPhKbXcZGHVEtcnkOGYPAvjSLY77oJYtsJ/fPHV/dD JuBmqq1b8Nw2Ke370aheNVggJILq9QjCey6NHwo/8OQIFLvF5S5XWlDnJqYa2uyx IwpcJdbhFrFFKcDpwy9wlOdXVtMiKiu5inRI/BvyDpTuodjwk1Gfj9hTkoGW1Jl8 A3MvQ7Jegsvr58Vc54kskKAZDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL45511 J2rHDXS1dFLVjec/JRtuMB8GA1UdIwQYMBaAFOu7Rz0XC2uDBtHhbIuVIzSt1A8Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0TUcwZUZzaTVVak5LM1VE eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dEhQUmNMYTRNRzBlRnNpNVVqTkszVUR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUY1QS8wODk4QjIzQTExQkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0 TUcwZUZzaTVVak5LM1VEeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaI2tfsvpofLrUG7RWNZec34DaXSj4uFhbc4vXRdmynJJjSMkCADr5 BjVVqDcGFk3nPtJByl+lES9BNDnVtEBqWonSrt7bk5wN7cEuNXegNfwOTceFSllO ZzGj++Dzcy0T4uuP9b6vNpPyaHWSAnWBOOPRv/MzCOp0npC8i+H7UoFtf69a/Dq0 POVI2W49qAizaWwxFfZ2RxSlDzL34zV8P8SdNzermkdcZPIUi9phgsglMQQ5QU0N jMJFCWq5H0TNnJTZBl43KGVvOwrVGzUpTAN3Y0k4Y1xLVcR18br+9bQ/EuKxaXpR lweABRNGUhy45x4YwrEN3wx7BecLZk7Y -----END CERTIFICATE-----Generated at Wed Dec 24 17:35:01 2025 by rpki-client