This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft File: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json) Hash identifier: +mHA1Uh6jF8OWAdSHibeNkGft3w+16LI6f5D8VoR7i8= Subject key identifier: 5A:FE:50:C9:65:50:36:DC:2A:FB:16:D2:82:53:1D:0C:1F:C9:CD:07 Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 Certificate issuer: /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Certificate serial: 036B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft Manifest number: 036B Signing time: Mon 22 Dec 2025 23:54:19 +0000 Manifest this update: Mon 22 Dec 2025 23:54:19 +0000 Manifest next update: Mon 29 Dec 2025 23:54:19 +0000 Files and hashes: 1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: 4Vx4LXiXHiWrTKTEe5k3I0yg9kEiDBdAqQGZNaf7ZJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 875 (0x36b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Validity Not Before: Dec 22 23:54:19 2025 GMT Not After : Dec 29 23:54:19 2025 GMT Subject: CN=6949da2b-4cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e0:1a:b9:3e:73:b6:74:26:4a:b8:e4:58:fd: 95:de:94:c4:60:a7:b7:7e:f3:a5:b0:f5:71:33:14: af:a0:6c:af:8d:ae:eb:8c:98:02:ff:de:fb:31:03: 25:2f:56:1b:b8:c1:06:96:bc:15:59:ea:6c:26:04: 42:e4:14:80:25:1f:bd:53:92:47:8c:45:12:cf:fe: c6:81:1f:3b:62:9b:ba:f9:03:0a:e8:3d:2a:e9:3f: 68:9a:70:b5:87:be:07:5a:8f:9f:e3:50:c6:43:5c: 17:ba:eb:70:3d:7b:03:29:58:3c:00:e6:27:9a:84: 7f:7a:ab:b9:11:58:e9:ee:81:20:c8:e2:eb:cc:34: 2f:2a:6f:c6:94:06:5f:f8:a5:8e:fd:71:4e:e0:33: f7:e5:96:33:28:73:d0:19:ed:c3:09:a1:a1:87:b4: 4c:34:22:b5:81:0b:b9:7d:62:a4:d5:51:59:cf:e8: 88:7a:60:12:fa:8e:1d:32:c5:f4:d3:53:7e:e1:4a: c7:49:6c:a2:d8:c5:79:69:f1:7c:5e:84:de:aa:5f: 11:05:b8:05:fb:22:c6:3f:f3:d4:6f:b3:23:f5:c2: 7b:16:57:5a:78:3c:c3:6c:43:d4:61:52:e2:a9:ae: ad:75:b1:b6:c3:77:8e:d0:4c:c2:7f:99:04:a3:f9: c3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FE:50:C9:65:50:36:DC:2A:FB:16:D2:82:53:1D:0C:1F:C9:CD:07 X509v3 Authority Key Identifier: keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:37:e2:95:d5:fc:9b:aa:51:cc:5c:1c:59:cd:9b:00:ec:b8: 75:0b:70:86:49:df:43:2a:2a:8e:a7:2d:06:b4:02:1e:69:97: b9:8c:98:82:6f:35:0c:6d:d5:e0:8b:c3:8c:ee:28:5f:91:61: d3:c3:9b:18:43:73:dd:8a:7d:4d:bd:3d:ba:4c:bf:25:f6:66: 47:56:8d:68:3c:ae:92:1e:f8:ef:4e:3b:5c:ba:4f:f9:77:7d: 5c:e9:5e:d9:99:55:bc:35:13:81:32:f9:55:b6:3c:f4:53:65: 1c:8a:9f:34:a5:aa:0c:a8:39:8e:ef:72:7a:7b:d8:19:aa:0a: 27:33:66:a7:94:40:5f:fd:7f:4b:f2:79:da:1f:ab:60:9c:9b: ae:33:67:a6:62:0a:c1:62:14:67:f6:31:dd:d9:d2:6f:40:e6: 65:c0:5c:40:ee:de:1f:15:db:e4:f1:8a:c9:79:cd:23:93:b9: a9:1e:a1:27:a5:cb:27:3c:e7:83:4d:8a:40:17:ee:77:f6:e4: 67:6b:10:5f:ea:a0:ac:fc:3b:b2:9b:7d:77:57:79:6e:0e:b8: 24:14:13:c7:8f:1c:8a:a9:54:d8:0b:4c:df:a4:de:4f:2d:b7: 7e:54:0e:92:da:30:43:29:cf:3a:02:6a:f8:64:0b:ba:8b:e6: 59:e4:d8:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNGMjExMTAvBgNVBAUTKEY2N0RBOUYxNUU1RTkzNEQ5MEU0OEZFNTBFN0RDODU3 MUREOTM3QTUwHhcNMjUxMjIyMjM1NDE5WhcNMjUxMjI5MjM1NDE5WjAYMRYwFAYD VQQDDA02OTQ5ZGEyYi00Y2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOAauT5ztnQmSrjkWP2V3pTEYKe3fvOlsPVxMxSvoGyvja7rjJgC/977MQMl L1YbuMEGlrwVWepsJgRC5BSAJR+9U5JHjEUSz/7GgR87Ypu6+QMK6D0q6T9omnC1 h74HWo+f41DGQ1wXuutwPXsDKVg8AOYnmoR/equ5EVjp7oEgyOLrzDQvKm/GlAZf +KWO/XFO4DP35ZYzKHPQGe3DCaGhh7RMNCK1gQu5fWKk1VFZz+iIemAS+o4dMsX0 01N+4UrHSWyi2MV5afF8XoTeql8RBbgF+yLGP/PUb7Mj9cJ7FldaeDzDbEPUYVLi qa6tdbG2w3eO0EzCf5kEo/nDQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFr+UMll UDbcKvsW0oJTHQwfyc0HMB8GA1UdIwQYMBaAFPZ9qfFeXpNNkOSP5Q59yFcd2Tel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0YyMS9GMkVCRUIzNEQ1 MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWswMlE1SV9sRG4zSVZ4M1pO NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluMnA4VjVlazAyUTVJX2xEbjNJVngzWk42VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0YyMS9GMkVCRUIzNEQ1MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWsw MlE1SV9sRG4zSVZ4M1pONlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3N+KV1fybqlHMXBxZzZsA7Lh1C3CGSd9DKiqOpy0GtAIeaZe5jJiC bzUMbdXgi8OM7ihfkWHTw5sYQ3Pdin1NvT26TL8l9mZHVo1oPK6SHvjvTjtcuk/5 d31c6V7ZmVW8NROBMvlVtjz0U2Ucip80paoMqDmO73J6e9gZqgonM2anlEBf/X9L 8nnaH6tgnJuuM2emYgrBYhRn9jHd2dJvQOZlwFxA7t4fFdvk8YrJec0jk7mpHqEn pcsnPOeDTYpAF+539uRnaxBf6qCs/Duym313V3luDrgkFBPHjxyKqVTYC0zfpN5P Lbd+VA6S2jBDKc86Amr4ZAu6i+ZZ5NgP -----END CERTIFICATE-----Generated at Wed Dec 24 15:58:41 2025 by rpki-client