This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: XazQZqg6YY/59aKXxT64EDnyN/AuwCDE6Hui6OgdBho= Subject key identifier: 73:51:4C:16:53:96:90:20:0F:1D:FC:52:22:E1:39:C5:9E:92:B8:CE Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 34F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 34F1 Signing time: Mon 22 Dec 2025 14:30:48 +0000 Manifest this update: Mon 22 Dec 2025 14:30:48 +0000 Manifest next update: Mon 29 Dec 2025 14:30:48 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: 0GcoD7L+o3TQoCYIZYuTKcMNSwFJccFHc7oy9Pvxzm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13553 (0x34f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Validity Not Before: Dec 22 14:30:48 2025 GMT Not After : Dec 29 14:30:48 2025 GMT Subject: CN=69495618-4209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b3:ab:c5:fd:d5:c6:c7:68:cd:08:b4:b7:af: 21:90:ce:e5:37:f5:ab:c1:1d:82:14:ba:4e:ea:bc: 05:73:13:51:af:84:33:f7:f1:e3:f7:c0:57:ee:4c: d8:57:dc:4f:04:d2:ee:b7:53:e9:86:b2:20:78:d7: b3:ec:c1:97:50:4f:89:68:62:40:2d:36:c6:79:f2: 60:68:c2:cc:0f:00:3d:45:f7:a7:89:0a:94:08:1c: 45:86:11:37:f6:fd:be:0b:1f:30:05:3c:6c:44:8a: 3f:fd:ed:f0:14:20:68:82:c4:f0:22:b4:6c:5b:22: a0:ab:b5:3c:78:51:5b:67:33:ec:54:a7:c6:88:0e: f3:69:c5:d4:46:dc:56:11:ca:d8:fd:07:b6:67:d6: fe:a0:1a:ca:e7:10:c7:53:02:ae:5f:7a:5d:03:97: 8b:48:9c:87:30:2b:93:68:68:60:10:b6:ac:ac:4c: 5d:1a:2a:83:f1:d9:de:2e:c7:7a:cf:d1:02:78:2a: 13:d1:ad:82:b4:a5:31:1c:c1:14:6b:ca:63:42:22: 6d:88:6d:4f:95:15:5f:63:10:1e:4e:89:d9:dc:3d: f1:ca:09:81:d8:35:85:58:85:67:ed:0c:21:c8:36: 4a:83:94:b2:9f:63:0f:e6:c3:e2:64:bb:b6:bc:82: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:51:4C:16:53:96:90:20:0F:1D:FC:52:22:E1:39:C5:9E:92:B8:CE X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:75:59:f4:49:6a:bb:d6:68:75:23:e7:cb:e4:f1:b0:84:da: d1:d1:50:53:df:91:eb:aa:99:8b:31:67:7b:af:db:c3:e1:86: c7:a1:28:8b:80:3b:85:45:68:76:97:7a:c1:eb:73:fc:e7:a4: d4:54:5e:81:a8:75:ec:7a:fd:9b:e0:6f:c8:5d:f2:41:04:ae: 7b:fa:e7:cc:bc:9e:46:f7:39:21:12:81:ae:0e:14:7e:75:5c: 76:3e:2c:51:b8:4f:19:77:e4:11:cb:87:35:4d:2e:ba:fb:ea: 16:4e:af:c4:78:bd:61:59:06:d5:c0:4f:3e:1f:31:6d:29:03: d9:b6:3d:42:ff:9d:bd:aa:fd:72:eb:da:5a:4d:54:f5:4b:e0: 3c:f0:96:df:c1:50:f8:07:04:03:98:b7:42:32:e0:c0:e1:72: 6f:cc:1c:09:65:de:14:01:fb:93:d3:39:5b:27:20:2b:5d:f0: 4d:12:01:de:da:49:84:70:2a:42:6e:69:32:6d:38:9b:1d:8b: 37:6d:d5:85:3e:51:4d:2d:46:bd:d0:8d:19:20:84:db:fa:77: a7:aa:c1:7c:8f:e8:3e:25:4d:e5:31:08:97:51:24:16:32:6c: 8b:88:f1:e8:47:3c:96:67:2a:8b:bc:9c:7d:31:5d:9f:3c:d6: 1f:eb:40:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjUxMjIyMTQzMDQ4WhcNMjUxMjI5MTQzMDQ4WjAYMRYwFAYD VQQDDA02OTQ5NTYxOC00MjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmLOrxf3VxsdozQi0t68hkM7lN/WrwR2CFLpO6rwFcxNRr4Qz9/Hj98BX7kzY V9xPBNLut1PphrIgeNez7MGXUE+JaGJALTbGefJgaMLMDwA9RfeniQqUCBxFhhE3 9v2+Cx8wBTxsRIo//e3wFCBogsTwIrRsWyKgq7U8eFFbZzPsVKfGiA7zacXURtxW EcrY/Qe2Z9b+oBrK5xDHUwKuX3pdA5eLSJyHMCuTaGhgELasrExdGiqD8dneLsd6 z9ECeCoT0a2CtKUxHMEUa8pjQiJtiG1PlRVfYxAeTonZ3D3xygmB2DWFWIVn7Qwh yDZKg5Syn2MP5sPiZLu2vIJTuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNRTBZT lpAgDx38UiLhOcWekrjOMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/dVn0SWq71mh1I+fL5PGwhNrR0VBT35HrqpmLMWd7r9vD4YbHoSiL gDuFRWh2l3rB63P856TUVF6BqHXsev2b4G/IXfJBBK57+ufMvJ5G9zkhEoGuDhR+ dVx2PixRuE8Zd+QRy4c1TS66++oWTq/EeL1hWQbVwE8+HzFtKQPZtj1C/529qv1y 69paTVT1S+A88JbfwVD4BwQDmLdCMuDA4XJvzBwJZd4UAfuT0zlbJyArXfBNEgHe 2kmEcCpCbmkybTibHYs3bdWFPlFNLUa90I0ZIITb+nenqsF8j+g+JU3lMQiXUSQW MmyLiPHoRzyWZyqLvJx9MV2fPNYf60DQ -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:34 2025 by rpki-client