This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft File: mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json) Hash identifier: YLQLMLmmBYSJjEmjAwDEMHI+hvEwMCZslV9/Uu4Xmwg= Subject key identifier: 22:36:E8:50:6A:12:38:68:3F:26:78:52:52:F3:A0:C2:92:67:82:AC Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 Certificate issuer: /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Certificate serial: 25A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft Manifest number: A0E9 Signing time: Wed 24 Dec 2025 14:29:10 +0000 Manifest this update: Wed 24 Dec 2025 14:29:10 +0000 Manifest next update: Wed 31 Dec 2025 14:29:10 +0000 Files and hashes: 1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: hePdiKVkICsOQ9fETbcPaE8VouvrCPMsoMqLKzutlF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 14:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9635 (0x25a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Validity Not Before: Dec 24 14:29:10 2025 GMT Not After : Dec 31 14:29:10 2025 GMT Subject: CN=694bf8b6-e6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4d:c0:b2:d5:a0:0a:74:27:6f:2e:c5:32:58: 60:d1:11:8a:61:09:10:22:19:8f:de:60:e9:e3:b5: 89:33:f2:7f:3a:63:9b:fe:27:14:33:86:85:cf:ca: 0c:fd:e6:0a:6d:39:09:1d:31:6c:9f:75:85:f4:b3: 72:ae:35:69:bf:ce:4c:4c:fb:55:17:ed:cd:4d:11: 63:5c:41:a2:69:87:22:8e:1a:ee:20:a7:c7:bf:8f: f1:2b:6e:b1:91:d4:15:0f:e3:df:59:f4:4a:fa:f8: ba:f4:66:c6:d6:8a:7a:74:8a:6b:40:40:4e:aa:00: 25:7e:93:6b:f2:bb:17:c5:73:95:4d:72:cd:06:17: fe:54:25:08:8a:bf:cd:e0:f4:e7:a2:b9:f6:8b:c1: 83:7b:0b:b8:0b:16:5c:03:c5:81:33:63:29:8a:94: 3b:10:3d:34:00:56:c1:fd:c6:2f:34:c7:56:62:71: 4a:ed:c3:07:22:b4:26:37:94:31:e2:11:d5:d8:74: 62:7c:42:68:9e:52:5a:b0:51:41:f2:83:52:f3:62: e3:98:28:6c:5f:81:0e:79:05:8a:d0:4d:ef:d3:7f: d3:d7:bd:3b:5d:4b:9a:10:ed:8d:8b:77:27:da:90: 8e:7c:2c:cd:6a:61:a5:91:22:3a:28:e9:04:e9:ed: 7e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:36:E8:50:6A:12:38:68:3F:26:78:52:52:F3:A0:C2:92:67:82:AC X509v3 Authority Key Identifier: keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:e0:26:6d:b1:0a:2c:68:ee:99:ca:6f:6b:23:a8:aa:d0:59: 96:17:9e:c6:16:5d:e3:62:dd:76:2b:95:05:3e:f0:7c:b5:53: 51:9c:af:98:1e:42:13:32:99:89:db:f3:4b:ef:c9:96:59:18: a3:73:99:c4:4b:e9:01:42:e2:5e:da:90:65:ce:9c:86:5a:06: f1:5d:90:04:e0:9b:fd:c0:9b:2a:c5:14:43:49:f1:fb:93:bc: 3c:ce:53:4d:77:2e:53:07:e3:11:c5:33:ef:de:7d:30:72:67: 02:c5:85:38:b9:a2:b2:b5:d0:03:58:2c:38:71:50:7c:f5:ee: 16:b0:47:ce:f2:a4:95:7d:a8:ff:f5:cb:3b:1b:34:b2:a1:64: 0c:d5:56:57:71:8d:e2:3a:9d:50:89:5c:c9:44:69:6a:25:fb: 09:f6:4f:9c:4d:32:ab:9c:db:83:1b:b3:f5:c9:9b:22:05:72: cc:e1:3f:6b:96:0c:56:eb:ae:a1:49:9c:de:45:3b:fe:7e:fe: 0b:99:45:05:3c:85:d7:35:0b:3d:f1:2e:e8:56:21:0a:de:4f: 53:51:f8:2e:db:0e:48:08:cc:1d:d4:08:25:16:8e:32:45:0b: 30:06:4d:d3:81:22:0e:2b:50:2a:3d:34:58:0e:ad:9d:f1:14: 64:6b:b7:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDk4NUE2NjVBOUNGQjRGNUNBMDBFQ0E4QkZFQjgwNjMw QkY0RjQ4MTYwHhcNMjUxMjI0MTQyOTEwWhcNMjUxMjMxMTQyOTEwWjAYMRYwFAYD VQQDDA02OTRiZjhiNi1lNmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4E3AstWgCnQnby7FMlhg0RGKYQkQIhmP3mDp47WJM/J/OmOb/icUM4aFz8oM /eYKbTkJHTFsn3WF9LNyrjVpv85MTPtVF+3NTRFjXEGiaYcijhruIKfHv4/xK26x kdQVD+PfWfRK+vi69GbG1op6dIprQEBOqgAlfpNr8rsXxXOVTXLNBhf+VCUIir/N 4PTnorn2i8GDewu4CxZcA8WBM2MpipQ7ED00AFbB/cYvNMdWYnFK7cMHIrQmN5Qx 4hHV2HRifEJonlJasFFB8oNS82LjmChsX4EOeQWK0E3v03/T1707XUuaEO2Ni3cn 2pCOfCzNamGlkSI6KOkE6e1+LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCI26FBq EjhoPyZ4UlLzoMKSZ4KsMB8GA1UdIwQYMBaAFJhaZlqc+09coA7Ki/64BjC/T0gW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1QxeWdEc3FMX3JnR01MOVBT QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21GcG1XcHo3VDF5Z0RzcUxfcmdHTUw5UFNCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1Qx eWdEc3FMX3JnR01MOVBTQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZ4CZtsQosaO6Zym9rI6iq0FmWF57GFl3jYt12K5UFPvB8tVNRnK+Y HkITMpmJ2/NL78mWWRijc5nES+kBQuJe2pBlzpyGWgbxXZAE4Jv9wJsqxRRDSfH7 k7w8zlNNdy5TB+MRxTPv3n0wcmcCxYU4uaKytdADWCw4cVB89e4WsEfO8qSVfaj/ 9cs7GzSyoWQM1VZXcY3iOp1QiVzJRGlqJfsJ9k+cTTKrnNuDG7P1yZsiBXLM4T9r lgxW666hSZzeRTv+fv4LmUUFPIXXNQs98S7oViEK3k9TUfgu2w5ICMwd1AglFo4y RQswBk3TgSIOK1AqPTRYDq2d8RRka7cI -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:01 2025 by rpki-client