This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: avI4Weg+gSX4vre9GB0tv150tL79/XUFxvzrwC1OVx8= Subject key identifier: 3A:47:C4:70:35:66:6F:71:7B:0B:1D:BB:45:37:E0:4F:3D:46:82:D9 Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 34E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 34E3 Signing time: Sat 06 Dec 2025 15:00:23 +0000 Manifest this update: Sat 06 Dec 2025 15:00:22 +0000 Manifest next update: Sat 13 Dec 2025 15:00:22 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: eJ5/JIfLMD/zmJbpe3q6fcRmUZ3XpMj8zZePu/EeZTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13539 (0x34e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: Dec 6 15:00:22 2025 GMT Not After : Dec 13 15:00:22 2025 GMT Subject: CN=69344507-7452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:85:4b:8a:b1:36:b4:fb:58:5c:2a:23:1e:18: 9e:22:77:9f:74:10:13:0f:b8:63:b4:4c:88:64:e1: 68:95:ea:de:16:e7:42:a5:d0:b4:06:d0:43:18:1c: 0b:78:3f:f4:3f:68:ea:59:c9:37:4c:9c:ae:c9:41: 42:ec:e2:b7:27:bf:5a:b2:75:24:e8:6a:3c:71:f0: e4:5d:db:dc:f1:17:60:ac:40:2a:86:c6:06:37:82: b3:1d:57:eb:4f:31:3c:fe:71:e5:14:47:b2:9d:0c: 9f:b1:43:38:3b:02:14:1b:27:3d:fd:66:5f:dc:b7: 61:b0:01:23:0d:5d:14:f8:c1:f3:d5:8a:75:5f:e9: be:95:ac:40:e5:a6:68:3b:03:2c:4e:63:91:ff:cc: 07:e1:22:64:18:97:84:5f:c8:7e:18:4c:75:64:30: 29:b2:7f:63:40:9b:cf:d4:4f:1f:cb:a5:e7:7a:cb: 2e:f4:3b:d4:4f:20:bf:25:bf:3b:e3:0c:82:6b:23: 76:46:63:59:72:6c:5c:1e:ae:03:f6:97:02:c0:01: 27:43:3a:e3:a2:95:4a:f2:72:b3:66:ad:1e:2f:45: f8:6f:96:62:f7:ff:94:8b:2c:63:fd:0d:17:3f:89: 02:8a:c8:45:9e:4f:1d:9d:29:3b:4d:f3:52:da:cf: a0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:47:C4:70:35:66:6F:71:7B:0B:1D:BB:45:37:E0:4F:3D:46:82:D9 X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:0a:57:fa:98:0f:ec:ae:aa:75:d6:82:8c:b0:57:9b:7a:34: 32:a2:87:3b:9f:e4:d8:6b:d7:23:f3:37:c8:c0:ee:21:7a:d5: 09:cb:4e:00:63:76:11:5a:0a:4a:84:76:c3:41:ac:15:0a:5e: 98:e3:16:08:b8:f1:04:22:7c:0b:c4:99:fc:ac:a1:51:41:cc: ac:29:0c:9f:e8:31:19:8b:85:bc:f9:75:28:9c:21:c7:17:a2: 68:ba:ad:42:c2:95:95:8a:a9:7d:ea:c3:a4:7d:9f:17:74:4c: 8a:df:58:f2:58:f5:80:7c:17:6b:f7:7a:34:19:05:8f:ab:7e: 14:c4:61:e8:a7:36:84:ac:8c:fa:c7:ad:0b:0c:f9:3b:ae:26: 8d:bd:55:d6:19:9f:b4:d5:98:d8:c6:26:e3:20:9f:32:65:6d: 09:8d:5e:6e:59:1a:0c:af:c5:93:02:ff:2a:6c:7e:7f:31:fa: e4:1e:e5:2f:85:a9:9d:f1:c4:8b:03:68:b4:b7:20:ba:6b:d2: 98:6b:63:d5:de:64:ec:23:bb:86:59:37:1a:b8:14:1b:e1:dc: 65:8b:49:63:1d:21:40:13:7b:a9:8c:c7:f1:b3:03:6f:f7:f6: af:48:69:fb:3f:6a:71:e9:bb:70:67:f0:ed:cf:e1:12:dc:c0: e2:2a:0f:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjUxMjA2MTUwMDIyWhcNMjUxMjEzMTUwMDIyWjAYMRYwFAYD VQQDEw02OTM0NDUwNy03NDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4VLirE2tPtYXCojHhieInefdBATD7hjtEyIZOFolereFudCpdC0BtBDGBwL eD/0P2jqWck3TJyuyUFC7OK3J79asnUk6Go8cfDkXdvc8RdgrEAqhsYGN4KzHVfr TzE8/nHlFEeynQyfsUM4OwIUGyc9/WZf3LdhsAEjDV0U+MHz1Yp1X+m+laxA5aZo OwMsTmOR/8wH4SJkGJeEX8h+GEx1ZDApsn9jQJvP1E8fy6Xnessu9DvUTyC/Jb87 4wyCayN2RmNZcmxcHq4D9pcCwAEnQzrjopVK8nKzZq0eL0X4b5Zi9/+Uiyxj/Q0X P4kCishFnk8dnSk7TfNS2s+gswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpHxHA1 Zm9xewsdu0U34E89RoLZMB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHClf6mA/srqp11oKMsFebejQyooc7n+TYa9cj8zfIwO4hetUJy04A Y3YRWgpKhHbDQawVCl6Y4xYIuPEEInwLxJn8rKFRQcysKQyf6DEZi4W8+XUonCHH F6Jouq1CwpWViql96sOkfZ8XdEyK31jyWPWAfBdr93o0GQWPq34UxGHopzaErIz6 x60LDPk7riaNvVXWGZ+01ZjYxibjIJ8yZW0JjV5uWRoMr8WTAv8qbH5/MfrkHuUv hamd8cSLA2i0tyC6a9KYa2PV3mTsI7uGWTcauBQb4dxli0ljHSFAE3upjMfxswNv 9/avSGn7P2px6btwZ/Dtz+ES3MDiKg9V -----END CERTIFICATE-----Generated at Sat Dec 6 19:33:37 2025 by rpki-client