This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft File: 1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json) Hash identifier: 9/J3FHTHLKk+PMMHg9KCx88eb3u2w71K2G43YXab7zM= Subject key identifier: 34:F4:96:13:D1:B3:BE:6C:09:79:91:70:09:9E:8E:77:D8:DC:43:E5 Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C Certificate issuer: /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Certificate serial: 09E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft Manifest number: 09E1 Signing time: Sat 06 Dec 2025 16:16:04 +0000 Manifest this update: Sat 06 Dec 2025 16:16:03 +0000 Manifest next update: Sat 13 Dec 2025 16:16:03 +0000 Files and hashes: 1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: P8sZpBJ4nLIPbotOVMzNclIDZnsqRzT1hfS+xYXz4JE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2529 (0x9e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Validity Not Before: Dec 6 16:16:03 2025 GMT Not After : Dec 13 16:16:03 2025 GMT Subject: CN=693456c4-0f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ce:a6:5d:15:ca:27:09:e6:bb:a3:5e:89:ce: 5d:c4:6c:7e:b2:d7:73:36:b8:e9:77:d6:83:70:35: aa:52:fa:74:8b:7f:4b:3a:4b:94:51:96:d7:8d:b6: 8e:0b:08:7c:1e:de:a9:4a:de:66:06:17:d0:8a:52: 9b:0b:f8:9d:85:a1:78:d2:ba:44:dd:71:84:03:41: 84:d1:65:a0:7a:e2:11:57:23:94:17:45:b8:da:89: e7:14:85:7a:ec:dc:08:4b:96:9b:2b:30:13:8c:e8: b5:e1:a5:a5:3b:11:90:80:c2:f8:8d:b8:61:58:21: 77:6a:d6:82:c8:0a:60:c3:83:ac:80:72:91:59:9c: fb:04:5d:46:d8:6e:52:9a:32:43:41:72:13:f2:c8: 07:9f:96:e1:97:27:6b:6e:fc:a0:93:5a:37:92:e4: 09:6e:5a:6d:87:1a:11:42:aa:b4:ff:35:b2:be:d4: f8:ed:87:4c:d7:45:9c:b5:f8:61:3d:c4:af:95:29: f1:a2:60:4a:88:92:1e:89:da:3d:c5:fd:53:00:36: d9:f5:1c:4a:c1:ab:f3:af:a5:25:61:08:9a:ed:f0: 52:f3:0a:9c:d0:49:b6:63:7b:ab:57:29:89:e0:ff: ce:b3:6e:3a:f5:ba:f5:77:80:c0:f6:6b:db:f6:50: 8c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F4:96:13:D1:B3:BE:6C:09:79:91:70:09:9E:8E:77:D8:DC:43:E5 X509v3 Authority Key Identifier: keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f9:9b:af:36:29:55:6b:8a:05:98:02:b7:99:31:72:a1:a6: 88:6b:fa:ba:cb:e1:ba:ef:cb:f6:16:18:d6:6f:46:59:73:7f: 2c:b7:10:ce:37:f6:77:0b:b9:df:0b:73:26:3b:5a:ef:94:4c: 9a:77:c1:8e:80:86:e6:b3:9a:84:ea:48:ce:31:db:92:9c:f2: 80:b7:3a:4a:7f:90:6f:dd:7b:10:e2:a9:e6:a3:c0:11:7b:1a: 8c:2c:98:dc:b2:8a:4f:21:9e:94:69:af:a6:76:12:e5:ed:29: 5c:cb:c1:1a:af:59:28:c5:33:5f:b9:08:aa:be:4f:a9:53:e2: 55:3a:fb:ac:21:e2:84:df:11:1c:10:62:01:28:ad:7d:53:ec: 18:82:86:0e:7c:b1:60:d9:be:53:5a:a6:49:60:ac:51:c8:d6: 89:ae:39:da:4b:d7:a0:e5:88:a9:4c:75:ec:e2:e8:4c:49:98: dc:2e:a2:d5:60:16:63:d6:0e:70:3f:ed:2a:3f:11:7c:be:be: 2e:57:54:64:3d:a4:f8:3d:84:ba:a8:c1:c4:c6:b3:4a:6a:f5: 38:49:ea:1a:1f:4d:35:f0:5b:8a:c7:6c:37:d9:55:a6:7d:55: 02:a3:e8:d2:0b:3d:e0:49:af:0d:8d:3f:90:2c:b2:0f:71:8a: 08:88:a0:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKEQ2NjkzRUUzNUM3MkVCQ0Y0MjYzQzY5ODQ1NkQ4MkY2 OEU3MTRGNUMwHhcNMjUxMjA2MTYxNjAzWhcNMjUxMjEzMTYxNjAzWjAYMRYwFAYD VQQDEw02OTM0NTZjNC0wZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzM6mXRXKJwnmu6Neic5dxGx+stdzNrjpd9aDcDWqUvp0i39LOkuUUZbXjbaO Cwh8Ht6pSt5mBhfQilKbC/idhaF40rpE3XGEA0GE0WWgeuIRVyOUF0W42onnFIV6 7NwIS5abKzATjOi14aWlOxGQgML4jbhhWCF3ataCyApgw4OsgHKRWZz7BF1G2G5S mjJDQXIT8sgHn5bhlydrbvygk1o3kuQJblpthxoRQqq0/zWyvtT47YdM10Wctfhh PcSvlSnxomBKiJIeido9xf1TADbZ9RxKwavzr6UlYQia7fBS8wqc0Em2Y3urVymJ 4P/Os2469br1d4DA9mvb9lCMPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDT0lhPR s75sCXmRcAmejnfY3EPlMB8GA1UdIwQYMBaAFNZpPuNccuvPQmPGmEVtgvaOcU9c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS8yQ0U0OTRDMDhG OTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4OUNZOGFZUlcyQzlvNXhU MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFtay00MXh5Njg5Q1k4YVlSVzJDOW81eFQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS8yQ0U0OTRDMDhGOTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4 OUNZOGFZUlcyQzlvNXhUMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh+ZuvNilVa4oFmAK3mTFyoaaIa/q6y+G678v2FhjWb0ZZc38stxDO N/Z3C7nfC3MmO1rvlEyad8GOgIbms5qE6kjOMduSnPKAtzpKf5Bv3XsQ4qnmo8AR exqMLJjcsopPIZ6Uaa+mdhLl7Slcy8Ear1koxTNfuQiqvk+pU+JVOvusIeKE3xEc EGIBKK19U+wYgoYOfLFg2b5TWqZJYKxRyNaJrjnaS9eg5YipTHXs4uhMSZjcLqLV YBZj1g5wP+0qPxF8vr4uV1RkPaT4PYS6qMHExrNKavU4SeoaH0018FuKx2w32VWm fVUCo+jSCz3gSa8NjT+QLLIPcYoIiKDj -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:00 2025 by rpki-client