This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft File: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json) Hash identifier: 0dPrCDsxHSTX0bd2B6jci8OtPhlYGKiBujs0rjEOhd4= Subject key identifier: 73:35:8A:EB:95:9C:78:0A:CA:6A:5F:F5:6A:73:51:EE:1C:99:4A:F5 Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Certificate serial: 34EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft Manifest number: 34EE Signing time: Mon 22 Dec 2025 14:36:46 +0000 Manifest this update: Mon 22 Dec 2025 14:36:45 +0000 Manifest next update: Mon 29 Dec 2025 14:36:45 +0000 Files and hashes: 1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: Pw5ebNshg8iXcxzs8bCp1jM47N8J1rnvHgcqY7BpM2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13550 (0x34ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Validity Not Before: Dec 22 14:36:45 2025 GMT Not After : Dec 29 14:36:45 2025 GMT Subject: CN=6949577e-89c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c6:3a:c6:9d:59:a1:28:10:42:d4:ef:20:e9: 84:74:2d:1f:66:2c:c9:e5:df:07:57:04:d4:b5:cb: 00:fc:86:08:a8:32:e8:60:74:b5:e4:f2:e8:41:71: 6c:eb:c6:19:c0:66:cd:69:ab:02:4f:c2:93:08:1d: 7d:0b:d0:e5:48:19:ca:b2:91:80:8c:7b:7a:19:28: d0:b0:3e:1c:a9:fc:e9:9a:b1:d9:dd:1b:66:e4:7c: 04:d3:03:d8:f5:ce:81:43:67:d7:f0:5b:47:14:64: 7a:c1:2a:53:d5:44:1f:44:12:02:70:97:aa:59:89: 61:3c:d2:03:ae:f2:9f:0d:e2:63:a7:c4:34:d9:92: 61:ab:06:21:70:f4:3f:5b:49:db:9d:2a:38:fa:08: a6:75:83:1b:d3:d7:16:b4:08:9b:00:cd:3f:b5:b3: 32:9a:35:90:d7:fd:b8:83:10:12:d8:b5:c7:52:8f: e7:e9:62:6a:95:66:79:4a:78:a9:01:f2:58:db:21: 8f:62:ab:c1:ef:92:fb:2e:64:ff:4d:b9:e4:df:5c: e4:fc:0c:35:90:ad:de:90:7c:c9:3d:73:d5:de:64: 5f:ad:65:c4:b5:b5:e8:33:52:12:59:09:f2:6f:a9: fa:76:5f:41:e1:ec:34:e1:3a:d5:c8:38:de:1f:c6: b8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:35:8A:EB:95:9C:78:0A:CA:6A:5F:F5:6A:73:51:EE:1C:99:4A:F5 X509v3 Authority Key Identifier: keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:51:c4:c9:4a:15:49:ac:21:81:8a:d7:c3:db:2b:a5:ef:68: 1b:a2:08:97:64:39:ab:e0:ba:c7:e9:6d:f5:5b:0d:5d:52:42: 0a:de:25:ff:93:8b:7d:6a:05:97:2b:ca:0f:d5:46:a7:55:87: a2:a0:02:37:5f:3d:c9:d8:c2:92:c5:13:6b:00:9a:fb:c8:26: 91:74:1c:18:c7:f5:29:28:21:5e:cb:2d:11:51:a0:38:c3:69: c0:3c:0a:c2:b1:83:cf:eb:e2:79:d1:0a:2d:05:eb:d7:52:74: f9:86:e5:66:c6:9a:58:f6:45:c1:5d:e6:b6:9c:61:d5:1f:e0: e2:c2:68:7b:d1:9a:e2:30:b1:46:80:75:ab:53:1a:28:39:9f: a8:63:0b:05:eb:32:77:e5:61:03:62:1f:87:7d:9b:a8:37:50: ff:0e:42:c7:95:78:6c:b9:a2:36:72:eb:0e:a4:f4:a1:f5:e7: a3:68:7c:e3:79:1d:eb:f9:e8:de:2d:41:4e:c2:4a:b5:9b:2b: cb:99:e5:8e:54:9c:c6:18:3b:4c:97:95:45:0e:99:c7:90:36: f0:9d:a0:26:95:60:0e:bd:da:be:3c:42:6c:04:75:8b:d0:ea: 5e:3a:97:ed:97:fe:65:f1:40:7c:4a:bb:fa:2f:c2:65:84:92: 15:42:f5:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDdDRDRBRUU0N0NCMjFEQUU5ODc3RUZGNDFGMDRCRTk1 RDk3MzY4NkQwHhcNMjUxMjIyMTQzNjQ1WhcNMjUxMjI5MTQzNjQ1WjAYMRYwFAYD VQQDDA02OTQ5NTc3ZS04OWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMY6xp1ZoSgQQtTvIOmEdC0fZizJ5d8HVwTUtcsA/IYIqDLoYHS15PLoQXFs 68YZwGbNaasCT8KTCB19C9DlSBnKspGAjHt6GSjQsD4cqfzpmrHZ3Rtm5HwE0wPY 9c6BQ2fX8FtHFGR6wSpT1UQfRBICcJeqWYlhPNIDrvKfDeJjp8Q02ZJhqwYhcPQ/ W0nbnSo4+gimdYMb09cWtAibAM0/tbMymjWQ1/24gxAS2LXHUo/n6WJqlWZ5Snip AfJY2yGPYqvB75L7LmT/Tbnk31zk/Aw1kK3ekHzJPXPV3mRfrWXEtbXoM1ISWQny b6n6dl9B4ew04TrVyDjeH8a43QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHM1iuuV nHgKympf9WpzUe4cmUr1MB8GA1UdIwQYMBaAFHzUruR8sh2umHfv9B8EvpXZc2ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84Nzk2ODQ5NjFE OEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhhNllkLV8wSHdTLWxkbHph RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZOU3U1SHl5SGE2WWQtXzBId1MtbGRsemFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84Nzk2ODQ5NjFEOEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhh NllkLV8wSHdTLWxkbHphRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3UcTJShVJrCGBitfD2yul72gbogiXZDmr4LrH6W31Ww1dUkIK3iX/ k4t9agWXK8oP1UanVYeioAI3Xz3J2MKSxRNrAJr7yCaRdBwYx/UpKCFeyy0RUaA4 w2nAPArCsYPP6+J50QotBevXUnT5huVmxppY9kXBXea2nGHVH+Diwmh70ZriMLFG gHWrUxooOZ+oYwsF6zJ35WEDYh+HfZuoN1D/DkLHlXhsuaI2cusOpPSh9eejaHzj eR3r+ejeLUFOwkq1myvLmeWOVJzGGDtMl5VFDpnHkDbwnaAmlWAOvdq+PEJsBHWL 0OpeOpftl/5l8UB8Srv6L8JlhJIVQvWW -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:02 2025 by rpki-client