This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft File: 1u0VCduHw0xGCiZBoZt_SE5NxEU.mft (raw, json) Hash identifier: /IYWJjYyiTO5o2JAgfHzgs7xOanWXSDQbDcuB5Le6e0= Subject key identifier: C3:FE:76:D7:84:96:0D:8D:76:8B:EE:C2:D5:67:49:72:6F:D3:A1:E6 Authority key identifier: D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45 Certificate issuer: /CN=A91F5216/serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445 Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft Manifest number: 023B Signing time: Tue 23 Dec 2025 00:53:33 +0000 Manifest this update: Tue 23 Dec 2025 00:53:32 +0000 Manifest next update: Tue 30 Dec 2025 00:53:32 +0000 Files and hashes: 1: 1u0VCduHw0xGCiZBoZt_SE5NxEU.crl (hash: bjj7im4Q/WZ2gdYvcoeSl2l9jb4V/I4IQ57x/0YZGCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216, serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445 Validity Not Before: Dec 23 00:53:32 2025 GMT Not After : Dec 30 00:53:32 2025 GMT Subject: CN=6949e80d-3d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:78:8b:35:66:f8:30:2a:a7:5b:1d:1c:87:4a: 1d:6f:68:77:f1:ba:25:2f:93:f4:12:ee:09:6a:8a: 21:91:52:23:de:3b:e4:e3:a6:48:a1:6d:a6:58:c5: d5:68:2e:70:eb:7c:59:48:4a:64:21:ed:f6:17:b0: 3f:3d:95:ea:59:4f:ae:60:63:97:24:45:ca:c6:8f: 19:00:89:f0:e0:65:95:9d:a9:88:8f:1b:da:dc:50: b4:4a:15:76:9b:58:e6:fc:54:95:ea:24:de:3b:36: 90:15:f5:9c:d8:47:f7:1e:0b:1b:f1:5e:d8:5b:bd: 04:1f:66:69:54:ab:0d:ac:23:6c:47:d3:e3:19:d6: c9:97:8f:df:2d:54:64:7b:b9:bf:ae:3e:f5:72:d6: 3d:bf:f8:a3:0b:5e:88:c4:e9:66:56:d5:d6:01:53: 72:e0:62:1a:0e:a1:d1:f3:be:4e:2a:6e:73:c0:39: f4:70:18:ab:61:78:d0:67:b6:04:ac:ac:b2:02:93: 19:e2:b1:4a:0c:d3:73:1f:ca:3c:c1:42:6b:47:17: 19:c0:37:3a:1d:23:67:45:b2:70:95:da:6f:72:0c: a2:bf:09:2f:6e:ee:13:73:cd:25:7a:72:31:70:27: 89:0d:56:97:fe:d2:03:63:85:40:d7:16:5f:b8:77: 1c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FE:76:D7:84:96:0D:8D:76:8B:EE:C2:D5:67:49:72:6F:D3:A1:E6 X509v3 Authority Key Identifier: keyid:D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:cd:8b:29:2f:84:74:d1:92:4c:77:c1:a1:36:bf:7f:58:2d: 4b:86:a3:3e:94:39:97:0f:b2:61:5c:ea:52:bd:fa:48:f4:e4: 61:ca:41:34:87:db:26:10:a7:76:e3:bb:7c:55:8e:3c:81:50: dd:2a:a3:0e:14:8f:03:dc:0d:70:83:20:d3:f5:58:85:7e:b4: ec:6d:42:8d:cc:8b:71:4a:cc:2f:16:99:3e:c4:99:d4:5a:e1: 82:b5:0f:37:97:a8:14:84:44:88:3a:ee:87:85:f7:47:19:23: eb:ca:00:0a:38:e0:df:fc:eb:40:2f:be:31:2c:c9:da:42:15: 0a:96:82:4c:10:8d:cc:5e:33:d0:15:25:5c:b8:1e:9e:d6:50: a5:2e:19:f1:a1:e8:a6:3b:13:e0:85:28:0f:09:d2:f6:85:bf: 87:26:f5:a0:56:9c:cf:6b:c5:47:03:df:2b:b7:68:a8:b0:72: d7:ea:ba:1c:61:dd:58:99:13:f2:d7:b0:53:f2:07:dd:cb:b4: 3d:55:71:82:e8:e8:79:a5:4b:2c:3f:93:ec:47:79:2f:4e:c1: ae:ef:5f:03:da:53:97:c9:3a:d5:c3:af:b0:4c:d0:3d:a0:4b: 89:da:38:86:f7:01:74:d7:3c:cd:c1:e3:0c:03:04:32:0b:e0: a9:75:81:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEQ2RUQxNTA5REI4N0MzNEM0NjBBMjY0MUExOUI3RjQ4 NEU0REM0NDUwHhcNMjUxMjIzMDA1MzMyWhcNMjUxMjMwMDA1MzMyWjAYMRYwFAYD VQQDDA02OTQ5ZTgwZC0zZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HiLNWb4MCqnWx0ch0odb2h38bolL5P0Eu4JaoohkVIj3jvk46ZIoW2mWMXV aC5w63xZSEpkIe32F7A/PZXqWU+uYGOXJEXKxo8ZAInw4GWVnamIjxva3FC0ShV2 m1jm/FSV6iTeOzaQFfWc2Ef3Hgsb8V7YW70EH2ZpVKsNrCNsR9PjGdbJl4/fLVRk e7m/rj71ctY9v/ijC16IxOlmVtXWAVNy4GIaDqHR875OKm5zwDn0cBirYXjQZ7YE rKyyApMZ4rFKDNNzH8o8wUJrRxcZwDc6HSNnRbJwldpvcgyivwkvbu4Tc80lenIx cCeJDVaX/tIDY4VA1xZfuHccAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMP+dteE lg2NdovuwtVnSXJv06HmMB8GA1UdIwQYMBaAFNbtFQnbh8NMRgomQaGbf0hOTcRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi82NjQ1QUNBNjZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi8xdTBWQ2R1SHcweEdDaVpCb1p0X1NFNU54 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1MFZDZHVIdzB4R0NpWkJvWnRfU0U1TnhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi82NjQ1QUNBNjZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi8xdTBWQ2R1SHcw eEdDaVpCb1p0X1NFNU54RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmzYspL4R00ZJMd8GhNr9/WC1LhqM+lDmXD7JhXOpSvfpI9ORhykE0 h9smEKd247t8VY48gVDdKqMOFI8D3A1wgyDT9ViFfrTsbUKNzItxSswvFpk+xJnU WuGCtQ83l6gUhESIOu6HhfdHGSPrygAKOODf/OtAL74xLMnaQhUKloJMEI3MXjPQ FSVcuB6e1lClLhnxoeimOxPghSgPCdL2hb+HJvWgVpzPa8VHA98rt2iosHLX6roc Yd1YmRPy17BT8gfdy7Q9VXGC6Oh5pUssP5PsR3kvTsGu718D2lOXyTrVw6+wTNA9 oEuJ2jiG9wF01zzNweMMAwQyC+CpdYHO -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:09 2025 by rpki-client