This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft File: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft (raw, json) Hash identifier: dBoU5cTfdjJY11zWqo6ZUSw1aj7lV+YaKpbasEQcei8= Subject key identifier: 49:7A:1F:DF:A2:7E:CB:EF:1F:7B:7A:FA:2F:EB:9C:0B:81:2E:2E:F8 Authority key identifier: D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 Certificate issuer: /CN=A91443DC/serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft Manifest number: 0110 Signing time: Fri 05 Dec 2025 02:57:14 +0000 Manifest this update: Fri 05 Dec 2025 02:57:14 +0000 Manifest next update: Fri 12 Dec 2025 02:57:14 +0000 Files and hashes: 1: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl (hash: MlL6QKKyksSpSu1jE+mb4HOnu5H6MoR1W7HkNFHmWww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC, serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Validity Not Before: Dec 5 02:57:14 2025 GMT Not After : Dec 12 02:57:14 2025 GMT Subject: CN=69324a0a-fd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:12:0e:e2:2a:05:12:0f:35:6b:ef:ff:a1:1e: a4:83:d3:6b:03:87:e4:f5:80:43:6e:89:1f:fc:f2: 43:4c:a8:c9:b9:94:1a:b4:96:59:d8:51:61:1c:3f: 2b:fa:e6:c2:e4:0e:68:23:f4:9b:72:66:46:69:33: 83:db:5c:97:0d:4b:11:6f:53:f4:a1:9b:32:09:6a: c3:f9:b5:d6:22:32:18:d6:61:52:fe:db:57:d0:cc: f8:93:bb:28:b4:5f:0e:fa:a4:23:1d:3c:fb:36:69: 2a:d3:22:34:55:ae:ea:eb:12:5a:63:f0:b7:31:96: 01:89:12:01:e9:e0:88:fc:85:6b:f3:f2:2e:80:2e: 62:5a:3f:2a:fb:69:ab:cf:8a:8b:5e:3a:5b:02:c9: d0:44:9d:8d:0e:35:b6:97:58:c4:d2:7b:c7:fe:d8: e0:4b:40:90:17:85:52:0e:d8:51:45:77:a5:4b:2e: ba:65:16:a3:a6:ac:a0:13:2b:74:3b:6c:41:73:bf: 9e:f8:30:05:9c:00:df:6c:4f:10:e8:10:38:72:c4: 33:77:0b:d9:8e:3b:f1:ec:99:c6:98:91:d8:d9:2f: eb:08:2e:bc:4d:75:c5:84:fa:ae:78:2e:85:b0:af: 9e:79:ef:f0:82:9a:d6:59:e9:a6:54:c2:d8:b2:f3: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7A:1F:DF:A2:7E:CB:EF:1F:7B:7A:FA:2F:EB:9C:0B:81:2E:2E:F8 X509v3 Authority Key Identifier: keyid:D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:18:72:63:b9:4c:8e:97:e0:c1:5a:8f:0c:66:b1:59:94:3c: 51:67:a5:06:13:87:d9:a7:ef:5a:41:1c:9f:2a:97:a8:f7:df: 81:16:b0:c9:b9:ec:db:5f:7b:2a:0d:0b:06:ac:73:e2:75:99: 75:e5:13:ea:7f:16:8e:4e:a0:c9:59:51:75:11:c0:9f:1f:b2: bd:da:ae:26:bc:7c:b7:a7:f7:dc:7e:0b:29:c0:ae:5e:3d:83: a0:cf:0a:ef:69:7d:71:20:a9:b7:26:6a:53:6d:92:76:16:fa: e3:84:dd:12:a1:75:ab:1a:8a:ed:7b:ca:15:fb:71:9b:ae:01: 20:98:a8:b6:88:d8:a6:fb:f7:3b:9a:99:5e:16:8d:74:c6:3e: a2:d5:dc:7a:17:43:7e:d8:78:03:2e:0e:2a:e5:c8:44:46:31: 12:77:e0:74:87:4c:eb:74:7c:99:0d:5d:e2:a3:c4:b8:3e:b8: 7c:7d:72:5c:be:44:fb:42:12:3f:1e:f7:64:9e:95:91:68:45: 13:64:9b:2d:96:89:25:bf:29:49:e5:a8:34:2b:21:05:7f:dd: 60:a9:9b:30:68:e7:68:4f:d0:2c:e3:02:c6:e7:cf:7b:70:5c: 63:0c:ef:fa:11:62:2d:cd:b0:8f:30:a7:38:32:b4:b4:b3:6f: e5:0a:1a:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzREMxMTAvBgNVBAUTKEQxOEZGQ0M1MDREMzY5M0Q3RjhBMzhEODZEQzEyRTg4 Q0Q5NjBFNTYwHhcNMjUxMjA1MDI1NzE0WhcNMjUxMjEyMDI1NzE0WjAYMRYwFAYD VQQDEw02OTMyNGEwYS1mZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxIO4ioFEg81a+//oR6kg9NrA4fk9YBDbokf/PJDTKjJuZQatJZZ2FFhHD8r +ubC5A5oI/SbcmZGaTOD21yXDUsRb1P0oZsyCWrD+bXWIjIY1mFS/ttX0Mz4k7so tF8O+qQjHTz7Nmkq0yI0Va7q6xJaY/C3MZYBiRIB6eCI/IVr8/IugC5iWj8q+2mr z4qLXjpbAsnQRJ2NDjW2l1jE0nvH/tjgS0CQF4VSDthRRXelSy66ZRajpqygEyt0 O2xBc7+e+DAFnADfbE8Q6BA4csQzdwvZjjvx7JnGmJHY2S/rCC68TXXFhPqueC6F sK+eee/wgprWWemmVMLYsvMIUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEl6H9+i fsvvH3t6+i/rnAuBLi74MB8GA1UdIwQYMBaAFNGP/MUE02k9f4o42G3BLojNlg5W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy9BMDY1RDFFQTMw NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFUMV9pampZYmNFdWlNMldE bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBZXzh4UVRUYVQxX2lqalliY0V1aU0yV0RsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy9BMDY1RDFFQTMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFU MV9pampZYmNFdWlNMldEbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsGHJjuUyOl+DBWo8MZrFZlDxRZ6UGE4fZp+9aQRyfKpeo99+BFrDJ uezbX3sqDQsGrHPidZl15RPqfxaOTqDJWVF1EcCfH7K92q4mvHy3p/fcfgspwK5e PYOgzwrvaX1xIKm3JmpTbZJ2FvrjhN0SoXWrGorte8oV+3GbrgEgmKi2iNim+/c7 mpleFo10xj6i1dx6F0N+2HgDLg4q5chERjESd+B0h0zrdHyZDV3io8S4Prh8fXJc vkT7QhI/HvdknpWRaEUTZJstloklvylJ5ag0KyEFf91gqZswaOdoT9As4wLG5897 cFxjDO/6EWItzbCPMKc4MrS0s2/lChrp -----END CERTIFICATE-----Generated at Sat Dec 6 19:09:28 2025 by rpki-client