This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft File: j5ZyrK2aUfA9SLxDtjOpVzSY494.mft (raw, json) Hash identifier: c7WdebwU5Zx4fWKFO9hv1sR9mhclrwRUkcTxljT9PYU= Subject key identifier: C9:A1:53:95:99:33:10:54:4F:8A:40:BC:56:A7:9C:C4:FF:39:04:89 Authority key identifier: 8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE Certificate issuer: /CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft Manifest number: 029C Signing time: Tue 23 Dec 2025 00:30:00 +0000 Manifest this update: Tue 23 Dec 2025 00:30:00 +0000 Manifest next update: Tue 30 Dec 2025 00:30:00 +0000 Files and hashes: 1: j5ZyrK2aUfA9SLxDtjOpVzSY494.crl (hash: +/FpK3vN/aqmNyCQo+ZPAVCpxcDZfkELxyYuekODxMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC1DE, serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE Validity Not Before: Dec 23 00:30:00 2025 GMT Not After : Dec 30 00:30:00 2025 GMT Subject: CN=6949e288-7923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:36:49:73:d1:50:01:88:3d:09:1f:9d:19:b4: ef:ea:5c:44:c6:07:43:8f:2b:c3:13:9c:b2:b3:74: 81:bc:34:db:39:6b:0e:83:9b:17:55:57:3e:12:8f: 9f:87:b7:e1:7a:44:40:14:97:34:34:d3:36:e8:4a: c9:5e:07:2f:a8:d2:cf:a7:69:cc:65:84:81:24:cf: 6c:91:3d:5a:26:dd:d4:e9:08:b4:90:34:f2:c9:14: 7d:ce:da:6a:8a:59:d6:ab:75:90:96:94:cd:da:ce: 56:21:26:cb:0e:48:e2:35:93:1c:62:7f:38:96:5d: 6e:f3:a0:de:56:a2:35:4e:0d:7f:b1:69:ee:a7:37: cd:c2:02:8f:d3:18:08:10:4f:f8:b2:5e:65:b0:64: 13:3e:f1:bc:78:77:fa:a3:2d:37:55:e4:72:e4:d7: ef:50:8f:24:e4:4a:c2:1d:dc:28:ad:1c:c7:c2:2d: 85:e2:d8:d0:dd:84:aa:99:34:f8:dd:ae:23:d3:2b: de:58:d4:b5:ae:4d:d6:57:2b:96:1a:ba:b7:2c:4b: 36:7e:b3:45:05:6e:1d:d2:93:0e:37:ea:c3:88:37: f3:d8:b2:fa:8c:61:54:f5:9c:d2:ee:e7:b0:08:8a: 90:a1:cc:cd:be:ef:bb:40:14:1b:d4:18:20:fa:29: 1e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A1:53:95:99:33:10:54:4F:8A:40:BC:56:A7:9C:C4:FF:39:04:89 X509v3 Authority Key Identifier: keyid:8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f1:7a:87:71:d8:89:e9:ab:45:7b:ab:0a:c4:eb:c3:e0:02: 5b:ef:ad:af:18:4f:ed:4b:0d:62:89:e5:13:44:8b:f8:7b:f2: f7:7f:5b:cf:ed:fd:e6:a5:9f:3b:9b:43:5a:9e:43:c5:bb:6f: 81:13:25:ae:77:29:0e:65:40:0e:24:2d:50:28:c7:39:29:9f: fd:b5:8d:ca:46:5e:ae:00:f0:29:b6:dd:55:1f:6e:f9:23:a1: f7:3c:25:12:5c:1a:b4:59:05:8f:10:d7:1a:6f:5c:86:7b:4b: 97:9d:01:61:b3:d4:6c:90:b9:dc:5d:40:49:40:16:a3:ef:77: 2c:ba:c5:a7:97:86:d2:9a:c5:5a:4c:07:23:72:c7:37:05:86: d9:3a:81:21:9f:58:38:d1:03:1e:fd:a5:95:e4:95:41:aa:b6: 64:38:aa:85:96:04:f8:6f:49:61:ca:2e:ad:6b:27:6b:16:61: d6:88:d7:53:ba:51:b9:47:fa:c9:0a:b1:f3:ad:5e:e5:85:d2: ce:38:47:91:8c:fb:46:27:00:e7:81:d0:da:29:01:18:ed:a6: cb:9a:1a:e7:38:9b:4c:05:4e:4d:c9:c8:ba:b2:cb:85:38:68: f2:7c:87:b2:fe:20:37:0d:c7:86:69:c0:13:20:b8:b5:c3:a4: e8:8d:e5:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMxREUxMTAvBgNVBAUTKDhGOTY3MkFDQUQ5QTUxRjAzRDQ4QkM0M0I2MzNBOTU3 MzQ5OEUzREUwHhcNMjUxMjIzMDAzMDAwWhcNMjUxMjMwMDAzMDAwWjAYMRYwFAYD VQQDDA02OTQ5ZTI4OC03OTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTZJc9FQAYg9CR+dGbTv6lxExgdDjyvDE5yys3SBvDTbOWsOg5sXVVc+Eo+f h7fhekRAFJc0NNM26ErJXgcvqNLPp2nMZYSBJM9skT1aJt3U6Qi0kDTyyRR9ztpq ilnWq3WQlpTN2s5WISbLDkjiNZMcYn84ll1u86DeVqI1Tg1/sWnupzfNwgKP0xgI EE/4sl5lsGQTPvG8eHf6oy03VeRy5NfvUI8k5ErCHdworRzHwi2F4tjQ3YSqmTT4 3a4j0yveWNS1rk3WVyuWGrq3LEs2frNFBW4d0pMON+rDiDfz2LL6jGFU9ZzS7uew CIqQoczNvu+7QBQb1Bgg+ikeQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmhU5WZ MxBUT4pAvFannMT/OQSJMB8GA1UdIwQYMBaAFI+WcqytmlHwPUi8Q7YzqVc0mOPe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFERS83MzJENjlCNjI3 NzkxMUVEOUQ0OEY0MjNDNEY5QUUwMi9qNVp5cksyYVVmQTlTTHhEdGpPcFZ6U1k0 OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1WnlySzJhVWZBOVNMeER0ak9wVnpTWTQ5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzFERS83MzJENjlCNjI3NzkxMUVEOUQ0OEY0MjNDNEY5QUUwMi9qNVp5cksyYVVm QTlTTHhEdGpPcFZ6U1k0OTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO8XqHcdiJ6atFe6sKxOvD4AJb762vGE/tSw1iieUTRIv4e/L3f1vP 7f3mpZ87m0NankPFu2+BEyWudykOZUAOJC1QKMc5KZ/9tY3KRl6uAPAptt1VH275 I6H3PCUSXBq0WQWPENcab1yGe0uXnQFhs9RskLncXUBJQBaj73csusWnl4bSmsVa TAcjcsc3BYbZOoEhn1g40QMe/aWV5JVBqrZkOKqFlgT4b0lhyi6taydrFmHWiNdT ulG5R/rJCrHzrV7lhdLOOEeRjPtGJwDngdDaKQEY7abLmhrnOJtMBU5Nyci6ssuF OGjyfIey/iA3DceGacATILi1w6TojeXQ -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:41 2025 by rpki-client