This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft File: vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft (raw, json) Hash identifier: wZ5licWcogNjyoJ9PndWdVC3kUO5mtSAhwuyfCxZZ/4= Subject key identifier: 92:41:81:11:DA:DF:09:52:E6:3B:0B:31:8D:D8:B8:F7:62:EE:2E:1A Authority key identifier: BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 Certificate issuer: /CN=A91EC3C9/serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft Manifest number: 73 Signing time: Tue 23 Dec 2025 05:45:54 +0000 Manifest this update: Tue 23 Dec 2025 05:45:53 +0000 Manifest next update: Tue 30 Dec 2025 05:45:53 +0000 Files and hashes: 1: vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl (hash: ZGWcwWoSHv94l+e2K5z1TSmgss7LGBGeTmSIoOcDx4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Validity Not Before: Dec 23 05:45:53 2025 GMT Not After : Dec 30 05:45:53 2025 GMT Subject: CN=694a2c92-9342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:2b:65:b0:af:4e:50:ff:6a:6b:73:57:0b: ee:0e:9b:f2:9b:cf:eb:b6:a9:8e:c7:d9:e3:c7:e6: 91:c9:77:7f:cb:ae:7d:f0:56:4e:ec:04:69:dc:44: 2e:58:fc:4e:21:c8:0f:c1:19:ed:47:16:d7:78:ca: 1b:8c:c7:5a:ad:b7:37:5f:b4:10:b4:ab:bb:5c:b9: 70:6a:54:5e:86:3c:1e:ae:1d:27:02:b6:ab:28:70: 5b:75:08:af:81:55:1b:28:45:8b:61:38:a3:ce:da: 92:81:32:42:7a:67:89:04:fe:de:c7:8c:8e:ec:e2: 37:91:6d:f7:eb:2d:b7:3a:6b:8b:e9:59:c0:94:78: 06:e8:b9:fe:f6:f5:d1:58:f7:1a:e0:82:e9:7d:a2: 4b:28:5c:51:8f:8f:90:cf:6d:07:c0:21:24:7f:75: 5f:aa:85:eb:5f:18:25:2b:1b:42:20:54:ca:a2:16: 34:51:ca:d9:85:33:00:db:79:a5:97:24:93:bd:b3: 9b:d7:1c:66:07:8e:82:3e:2a:38:81:25:73:34:08: 19:84:e5:4c:f2:d9:b8:e4:ad:7d:67:91:53:ab:6a: a1:a1:4f:4f:c8:28:eb:e5:ad:03:da:ff:b5:c6:2e: 24:ce:4c:fa:8a:ea:14:48:c0:a6:2d:2d:2e:42:ad: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:41:81:11:DA:DF:09:52:E6:3B:0B:31:8D:D8:B8:F7:62:EE:2E:1A X509v3 Authority Key Identifier: keyid:BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f9:7e:59:1f:a6:3b:17:42:88:c8:fa:b6:c3:93:45:31:66: db:3a:55:57:ae:59:12:c3:61:2b:92:a6:34:62:ad:59:a1:38: bb:33:ee:a7:c2:ba:96:1f:fc:dd:c6:43:a5:af:ac:9a:ce:8d: 84:2f:ad:ba:96:eb:68:2b:74:24:f7:db:58:30:30:2b:f8:a3: 54:ec:e2:64:88:3d:91:82:5e:e2:fc:02:06:0b:fd:54:a6:1c: 05:1a:7b:cb:6d:30:01:fd:e6:0f:1b:74:a6:ca:a9:02:65:eb: 62:1c:94:4e:78:07:6e:de:b7:e1:e9:6a:d7:17:8d:bb:a2:19: 74:cd:e9:f6:17:d9:da:07:43:a0:8b:0f:41:04:ee:fd:7a:b8: f5:66:31:bc:c8:f3:67:d7:98:e4:e6:62:05:cb:86:6f:0e:67: 24:16:d5:27:4e:5e:8b:94:26:1a:5d:83:b7:7b:cd:c6:b9:19: 2f:61:11:a0:a3:3d:7c:bb:68:5e:de:86:39:59:d6:77:53:fb: cb:64:e5:85:f5:be:41:63:f8:96:b5:1f:7e:4a:52:0b:1b:f6: 34:7f:09:a7:a7:4a:18:86:9c:c2:d7:00:09:c9:85:84:2f:42: db:3b:ee:b5:b1:0e:cb:1b:98:23:01:9e:47:5d:4f:37:9f:c7: 22:21:9b:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoQkNFOUZBNkMzNzdDOTQzNEIxMkM3N0JFRkNERDQyQTVC NzAzNEZGMjAeFw0yNTEyMjMwNTQ1NTNaFw0yNTEyMzAwNTQ1NTNaMBgxFjAUBgNV BAMMDTY5NGEyYzkyLTkzNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC28CtlsK9OUP9qa3NXC+4Om/Kbz+u2qY7H2ePH5pHJd3/Lrn3wVk7sBGncRC5Y /E4hyA/BGe1HFtd4yhuMx1qttzdftBC0q7tcuXBqVF6GPB6uHScCtqsocFt1CK+B VRsoRYthOKPO2pKBMkJ6Z4kE/t7HjI7s4jeRbffrLbc6a4vpWcCUeAbouf729dFY 9xrggul9oksoXFGPj5DPbQfAISR/dV+qhetfGCUrG0IgVMqiFjRRytmFMwDbeaWX JJO9s5vXHGYHjoI+KjiBJXM0CBmE5Uzy2bjkrX1nkVOraqGhT0/IKOvlrQPa/7XG LiTOTPqK6hRIwKYtLS5CrW69AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkkGBEdrf CVLmOwsxjdi492LuLhowHwYDVR0jBBgwFoAUvOn6bDd8lDSxLHe+/N1CpbcDT/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5L0MxMkNEQUU0MzE4 RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERTeExIZS1fTjFDcGJjRFRf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdk9uNmJEZDhsRFN4TEhlLV9OMUNwYmNEVF9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5L0MxMkNEQUU0MzE4RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERT eExIZS1fTjFDcGJjRFRfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFz5flkfpjsXQojI+rbDk0UxZts6VVeuWRLDYSuSpjRirVmhOLsz7qfC upYf/N3GQ6WvrJrOjYQvrbqW62grdCT321gwMCv4o1Ts4mSIPZGCXuL8AgYL/VSm HAUae8ttMAH95g8bdKbKqQJl62IclE54B27et+HpatcXjbuiGXTN6fYX2doHQ6CL D0EE7v16uPVmMbzI82fXmOTmYgXLhm8OZyQW1SdOXouUJhpdg7d7zca5GS9hEaCj PXy7aF7ehjlZ1ndT+8tk5YX1vkFj+Ja1H35KUgsb9jR/CaenShiGnMLXAAnJhYQv Qts77rWxDssbmCMBnkddTzefxyIhm8Q= -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:09 2025 by rpki-client