This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft File: MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json) Hash identifier: i4mUGG/XD7gVd6bWhHXNT96AiMFVjg2mP/u58kBXGhQ= Subject key identifier: 03:AA:73:80:AE:99:03:51:57:4B:FD:F5:E2:16:BF:1A:43:17:58:76 Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E Certificate issuer: /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft Manifest number: F2 Signing time: Fri 05 Dec 2025 03:18:18 +0000 Manifest this update: Fri 05 Dec 2025 03:18:18 +0000 Manifest next update: Fri 12 Dec 2025 03:18:18 +0000 Files and hashes: 1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: hr5jjUsZ3ixoPxuDckqq4VDxkcmsyDHSHaiuDdp8z58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E Validity Not Before: Dec 5 03:18:18 2025 GMT Not After : Dec 12 03:18:18 2025 GMT Subject: CN=69324efa-e94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:89:74:c5:05:12:ac:c8:02:db:1e:29:0a:00: b9:56:63:5c:89:26:41:52:70:09:7a:56:37:90:55: 1f:9e:34:8a:10:34:33:f0:1f:d2:ec:d6:23:fe:83: 92:09:38:6b:c7:13:55:46:f0:c3:30:d7:0b:01:27: 32:3d:bb:b9:41:de:3d:0e:a7:55:ae:d1:99:c2:1f: 13:bb:d6:6e:31:4a:6d:96:a0:6f:e0:78:f7:51:67: 22:bb:98:7d:41:2b:09:e1:05:60:de:86:56:91:46: 80:58:e1:51:42:8b:f5:71:02:97:da:33:f6:b0:6a: 5e:0b:22:ee:b6:01:49:4a:23:2a:31:b4:24:37:72: c8:17:21:d4:2a:f5:ab:15:31:d4:45:29:84:0c:2c: 3d:94:28:60:da:84:20:11:b6:3d:b5:09:2e:c7:5c: 84:3b:a2:1a:5d:5d:d1:7a:4a:77:fc:e6:b1:c7:1f: a0:51:78:44:36:f8:5e:d7:ee:9a:c6:5e:04:67:54: 8b:00:37:48:2d:de:f5:e7:42:29:54:be:2d:fd:18: f9:d4:53:bc:76:a1:2e:52:81:8e:70:75:34:60:9a: 0c:6a:82:1b:aa:cc:79:4c:9b:8b:d8:17:bf:08:38: d3:6b:ed:7d:97:81:e7:8c:de:95:c4:13:0c:ea:d0: 10:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AA:73:80:AE:99:03:51:57:4B:FD:F5:E2:16:BF:1A:43:17:58:76 X509v3 Authority Key Identifier: keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:07:ee:20:fc:a6:4b:37:a1:51:3b:26:88:18:1a:c0:dc:28: 39:7b:a9:d2:e8:13:be:08:60:fd:e3:53:50:67:6d:b3:d4:d0: 47:32:34:1a:1c:e8:6b:07:e7:46:19:ea:4e:0b:c2:46:1d:eb: 1d:8a:89:32:9f:01:8d:a9:72:81:7e:07:ca:c1:f6:4a:13:a7: 00:5a:ee:8a:a4:46:ab:24:46:0d:76:3e:2b:ed:46:e6:3f:60: d1:dc:b6:bc:fe:cc:0c:3d:42:34:ba:61:91:1e:6d:a5:35:c4: 72:95:fe:db:3c:7e:fb:0a:33:82:aa:0b:30:37:ab:09:63:45: 66:47:66:d0:09:7a:9f:06:2a:a5:6f:6b:4c:8c:3a:3f:a5:23: 29:ff:d4:65:50:7a:af:2d:c6:ee:86:67:0d:d8:07:f1:98:73: b7:ac:e5:6f:11:d9:3b:3b:9c:72:5d:4a:c3:92:12:9b:7d:ed: 7e:4d:68:20:6c:19:9c:02:b1:f6:a9:f9:4d:1a:70:76:29:18: 0b:59:24:fc:f8:1c:26:65:92:2d:00:7a:1f:3f:df:dc:15:2e: a1:98:2c:a4:b6:b7:e6:1a:cc:94:85:b0:96:e2:1b:0b:c3:c1: 8b:c6:dc:ee:91:23:4c:03:9d:6c:62:c2:30:40:e1:4b:29:60: 97:a3:52:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgzRDMxMTAvBgNVBAUTKDMxN0E3MjdGRjYzRTI3QzI5Q0MwMUNCNjc5OTNFMkM2 MUYwODA0MUUwHhcNMjUxMjA1MDMxODE4WhcNMjUxMjEyMDMxODE4WjAYMRYwFAYD VQQDEw02OTMyNGVmYS1lOTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYl0xQUSrMgC2x4pCgC5VmNciSZBUnAJelY3kFUfnjSKEDQz8B/S7NYj/oOS CThrxxNVRvDDMNcLAScyPbu5Qd49DqdVrtGZwh8Tu9ZuMUptlqBv4Hj3UWciu5h9 QSsJ4QVg3oZWkUaAWOFRQov1cQKX2jP2sGpeCyLutgFJSiMqMbQkN3LIFyHUKvWr FTHURSmEDCw9lChg2oQgEbY9tQkux1yEO6IaXV3Rekp3/Oaxxx+gUXhENvhe1+6a xl4EZ1SLADdILd7150IpVL4t/Rj51FO8dqEuUoGOcHU0YJoMaoIbqsx5TJuL2Be/ CDjTa+19l4HnjN6VxBMM6tAQ6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOqc4Cu mQNRV0v99eIWvxpDF1h2MB8GA1UdIwQYMBaAFDF6cn/2PifCnMActnmT4sYfCAQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy85NTc2MDE2ODVF MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4S2N3QnkyZVpQaXhoOElC QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01YcHlmX1ktSjhLY3dCeTJlWlBpeGg4SUJCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODNEMy85NTc2MDE2ODVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4 S2N3QnkyZVpQaXhoOElCQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgB+4g/KZLN6FROyaIGBrA3Cg5e6nS6BO+CGD941NQZ22z1NBHMjQa HOhrB+dGGepOC8JGHesdiokynwGNqXKBfgfKwfZKE6cAWu6KpEarJEYNdj4r7Ubm P2DR3La8/swMPUI0umGRHm2lNcRylf7bPH77CjOCqgswN6sJY0VmR2bQCXqfBiql b2tMjDo/pSMp/9RlUHqvLcbuhmcN2AfxmHO3rOVvEdk7O5xyXUrDkhKbfe1+TWgg bBmcArH2qflNGnB2KRgLWST8+BwmZZItAHofP9/cFS6hmCyktrfmGsyUhbCW4hsL w8GLxtzukSNMA51sYsIwQOFLKWCXo1J/ -----END CERTIFICATE-----Generated at Sun Dec 7 05:19:43 2025 by rpki-client