This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft File: MfrsXjAsGCKfmftHpyPypHmHF6w.mft (raw, json) Hash identifier: BudBeMDtyt7/hSGaMhK1nJhgdS0vRJt62eaJDNR/lOE= Subject key identifier: B6:E5:38:8B:A9:21:DD:BA:8C:F7:DA:34:CB:3A:1F:03:9F:7F:31:0A Authority key identifier: 31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC Certificate issuer: /CN=A91417B0/serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft Manifest number: A2 Signing time: Fri 05 Dec 2025 04:16:32 +0000 Manifest this update: Fri 05 Dec 2025 04:16:31 +0000 Manifest next update: Fri 12 Dec 2025 04:16:31 +0000 Files and hashes: 1: MfrsXjAsGCKfmftHpyPypHmHF6w.crl (hash: U9Fy48uHrU8wWxRQkNRSjPUcj/+BriZeQD0niUGyl/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Validity Not Before: Dec 5 04:16:31 2025 GMT Not After : Dec 12 04:16:31 2025 GMT Subject: CN=69325ca0-9026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:0f:0c:24:9d:b8:05:53:2c:a7:3a:27:c3: a4:71:12:7a:a5:dc:7a:63:23:21:cf:66:c5:93:bf: 5b:d2:29:74:7c:03:cd:70:fc:66:7a:80:53:dc:32: 8a:1d:2c:35:5f:54:44:9e:cb:0f:19:bb:c5:fc:88: d3:6f:3b:73:a1:f4:ce:4c:3f:2d:68:10:40:61:6e: 1a:e3:f3:98:b6:02:4b:cf:df:51:c7:f3:ff:9e:19: 3f:5c:11:15:18:43:7e:1f:24:43:a3:1a:53:92:c4: 0f:cc:51:04:4d:2c:99:ba:13:ee:da:53:32:4b:61: 67:99:e5:7f:d3:35:61:7d:7e:62:6f:0f:25:c7:53: e0:5d:1a:a1:11:b3:dd:51:35:e7:7e:6d:1c:62:e8: 53:1d:fd:4e:f7:1e:ae:d9:79:23:b4:0d:e9:19:c8: b1:df:24:63:30:99:76:21:5e:f1:63:ba:18:25:6d: b5:19:61:14:68:02:9c:b1:c2:9b:7a:d1:f6:19:32: a3:bc:07:5b:d4:a8:fe:c8:ae:c6:16:03:04:d6:a8: 81:8a:e4:a2:c7:35:fb:f9:92:02:38:bc:4d:62:d8: 17:ba:a9:62:8d:01:6a:82:c5:49:4c:49:50:78:0a: 64:c4:72:5b:9f:bd:8e:db:6e:2b:ad:93:d8:0e:20: c0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E5:38:8B:A9:21:DD:BA:8C:F7:DA:34:CB:3A:1F:03:9F:7F:31:0A X509v3 Authority Key Identifier: keyid:31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ae:e2:de:5a:a9:b4:ec:d5:40:d3:2d:50:3d:cb:8f:89:63: 5c:23:87:14:38:f3:44:5e:9f:86:0f:96:b2:3d:53:9e:9e:88: e7:9d:3f:bf:f3:7c:3c:1e:82:6d:3d:6c:6a:24:28:10:82:9f: 6e:e0:2d:d6:cf:8a:1b:e0:c4:e9:63:6f:73:00:08:eb:1c:21: 65:82:b2:f3:e8:6e:87:13:de:e3:f1:9d:0f:49:14:9a:e2:c7: 39:6e:18:32:1d:52:58:b2:68:ad:5e:a1:11:41:f4:1f:b7:eb: db:5a:69:e7:6d:82:c9:00:36:46:31:2d:19:5c:3e:e9:3d:d5: 85:d1:db:f6:1f:9c:62:91:a4:ff:8c:18:41:51:53:1f:18:1c: f5:eb:b0:f4:0d:8b:3b:b2:fa:bd:04:ce:41:58:de:1f:38:b6: 2e:e1:1e:35:90:d2:86:79:a6:a9:b5:a3:2a:44:d4:97:ea:25: 38:a0:34:39:28:c7:6a:65:a5:87:8a:18:34:94:cc:8e:26:90: 84:18:d6:69:a2:ed:cf:b7:db:e4:7a:67:43:8a:a5:ad:91:96: ea:b6:b6:22:a0:3c:66:1a:d6:b9:fa:97:67:50:6e:cc:19:24: 61:5d:7b:cd:f2:f7:68:e8:24:25:fd:ed:18:ae:a9:b7:11:64: 62:4d:de:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE3QjAxMTAvBgNVBAUTKDMxRkFFQzVFMzAyQzE4MjI5Rjk5RkI0N0E3MjNGMkE0 Nzk4NzE3QUMwHhcNMjUxMjA1MDQxNjMxWhcNMjUxMjEyMDQxNjMxWjAYMRYwFAYD VQQDEw02OTMyNWNhMC05MDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQgPDCSduAVTLKc6J8OkcRJ6pdx6YyMhz2bFk79b0il0fAPNcPxmeoBT3DKK HSw1X1REnssPGbvF/IjTbztzofTOTD8taBBAYW4a4/OYtgJLz99Rx/P/nhk/XBEV GEN+HyRDoxpTksQPzFEETSyZuhPu2lMyS2FnmeV/0zVhfX5ibw8lx1PgXRqhEbPd UTXnfm0cYuhTHf1O9x6u2XkjtA3pGcix3yRjMJl2IV7xY7oYJW21GWEUaAKcscKb etH2GTKjvAdb1Kj+yK7GFgME1qiBiuSixzX7+ZICOLxNYtgXuqlijQFqgsVJTElQ eApkxHJbn72O224rrZPYDiDAYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLblOIup Id26jPfaNMs6HwOffzEKMB8GA1UdIwQYMBaAFDH67F4wLBgin5n7R6cj8qR5hxes MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTdCMC9FQjA4MjQ3MkQ4 ODMxMUVGOTU0QTNENzBDNEY5QUUwMi9NZnJzWGpBc0dDS2ZtZnRIcHlQeXBIbUhG NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mcnNYakFzR0NLZm1mdEhweVB5cEhtSEY2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTdCMC9FQjA4MjQ3MkQ4ODMxMUVGOTU0QTNENzBDNEY5QUUwMi9NZnJzWGpBc0dD S2ZtZnRIcHlQeXBIbUhGNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsruLeWqm07NVA0y1QPcuPiWNcI4cUOPNEXp+GD5ayPVOenojnnT+/ 83w8HoJtPWxqJCgQgp9u4C3Wz4ob4MTpY29zAAjrHCFlgrLz6G6HE97j8Z0PSRSa 4sc5bhgyHVJYsmitXqERQfQft+vbWmnnbYLJADZGMS0ZXD7pPdWF0dv2H5xikaT/ jBhBUVMfGBz167D0DYs7svq9BM5BWN4fOLYu4R41kNKGeaaptaMqRNSX6iU4oDQ5 KMdqZaWHihg0lMyOJpCEGNZpou3Pt9vkemdDiqWtkZbqtrYioDxmGta5+pdnUG7M GSRhXXvN8vdo6CQl/e0Yrqm3EWRiTd7B -----END CERTIFICATE-----Generated at Sun Dec 7 00:59:07 2025 by rpki-client