This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft File: aBR3td5WajjZsBVtqHq6-p-vhb0.mft (raw, json) Hash identifier: 8uicMM44KnQPH/N/H1mk2R7whNd+bOrC3DSmPyBVfRY= Subject key identifier: 47:6C:29:94:1B:A7:AB:1B:2F:EC:12:1A:85:F2:71:80:4B:4B:38:A2 Authority key identifier: 68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD Certificate issuer: /CN=A91972DF/serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft Manifest number: EF Signing time: Sun 21 Dec 2025 04:34:02 +0000 Manifest this update: Sun 21 Dec 2025 04:34:01 +0000 Manifest next update: Sun 28 Dec 2025 04:34:01 +0000 Files and hashes: 1: aBR3td5WajjZsBVtqHq6-p-vhb0.crl (hash: 5Eqo8tNT3NolODpo+7W2CQ2DfGvnw3axQqHmST5Kp+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972DF, serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD Validity Not Before: Dec 21 04:34:01 2025 GMT Not After : Dec 28 04:34:01 2025 GMT Subject: CN=694778b9-1de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:a1:71:ac:7f:cf:1d:78:f1:52:31:2f:13: d4:c5:61:d4:3d:cd:61:92:13:f6:67:e1:86:56:29: 1f:fc:d2:60:af:24:c7:9b:3b:c3:8d:da:6c:e3:57: c5:bb:28:75:39:94:44:b7:cf:6d:b4:22:52:3c:b4: db:64:a3:a9:16:95:2e:8d:3b:bd:b3:9a:a1:f0:07: f1:be:a8:25:4c:26:b9:1f:a4:e4:27:57:12:2e:cf: 0d:95:45:13:06:a8:13:6d:be:77:25:f6:2b:f7:6b: 62:d1:c9:33:a0:67:ae:c4:93:ff:2c:5c:b0:2a:d1: b4:f5:84:8d:80:90:de:0e:cb:78:69:0e:f5:21:29: 59:ff:51:d4:81:e0:de:a7:82:29:7d:c9:45:21:01: 5d:cb:d4:0e:14:f9:81:1f:36:a4:46:f6:88:7a:c4: e8:50:95:52:c5:68:28:cf:62:0b:d2:ad:ee:60:8d: 3c:e1:17:6d:81:6b:e3:f0:a3:50:37:ce:2c:67:5f: 7a:5b:09:e8:03:1a:a7:18:6a:66:69:9a:2f:58:98: 90:ee:7f:a6:68:85:57:b0:39:c4:43:32:f7:d0:ff: 43:24:e0:84:b0:99:3f:fd:7e:75:c7:b4:19:ea:1a: 97:25:ba:ff:08:dd:4d:5a:dc:52:3e:8c:f7:1e:04: 1c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6C:29:94:1B:A7:AB:1B:2F:EC:12:1A:85:F2:71:80:4B:4B:38:A2 X509v3 Authority Key Identifier: keyid:68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:50:31:82:b5:38:36:92:f1:f5:90:12:2f:a7:4b:70:d1:39: bd:c9:6f:c1:6c:d5:ea:c1:5a:59:b4:28:74:6f:13:28:25:c5: d9:65:21:d0:8f:7d:df:1b:17:dc:a4:a3:af:9a:8f:90:b4:45: d7:d1:55:54:67:39:68:1a:73:a6:ba:f6:64:fa:eb:a4:17:5e: 7c:bb:88:fb:a5:97:63:cd:3f:76:0a:50:cb:a3:80:67:28:d0: 36:30:90:05:a0:40:49:be:ea:9c:91:b9:bc:47:1d:68:b5:c9: 5d:79:c6:81:15:b9:c7:d2:fc:87:c4:87:24:98:d2:1e:85:95: dc:ef:2d:9d:c6:2d:e9:62:93:95:15:6b:f3:a4:3c:22:14:cc: ee:ae:f9:a2:73:0b:bb:2b:fe:25:7c:98:26:a2:b6:12:6a:01: 8f:ff:8b:36:ff:be:91:39:1b:a6:6a:11:89:8f:05:3a:55:5a: fd:ab:19:6d:94:52:cf:35:ef:80:a9:31:24:bb:0c:6f:0e:3b: c6:c0:cf:fb:1f:b5:e4:8f:d7:2f:f8:fd:ca:14:90:a7:9c:a0: a1:e8:ce:c8:cf:05:0f:17:6c:aa:02:06:ef:11:3f:44:7d:fb: 08:4c:7b:a3:44:9c:93:42:d5:33:ef:f1:e8:a4:08:43:2b:68: f9:06:e7:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyREYxMTAvBgNVBAUTKDY4MTQ3N0I1REU1NjZBMzhEOUIwMTU2REE4N0FCQUZB OUZBRjg1QkQwHhcNMjUxMjIxMDQzNDAxWhcNMjUxMjI4MDQzNDAxWjAYMRYwFAYD VQQDDA02OTQ3NzhiOS0xZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAahcax/zx148VIxLxPUxWHUPc1hkhP2Z+GGVikf/NJgryTHmzvDjdps41fF uyh1OZREt89ttCJSPLTbZKOpFpUujTu9s5qh8AfxvqglTCa5H6TkJ1cSLs8NlUUT BqgTbb53JfYr92ti0ckzoGeuxJP/LFywKtG09YSNgJDeDst4aQ71ISlZ/1HUgeDe p4IpfclFIQFdy9QOFPmBHzakRvaIesToUJVSxWgoz2IL0q3uYI084RdtgWvj8KNQ N84sZ196WwnoAxqnGGpmaZovWJiQ7n+maIVXsDnEQzL30P9DJOCEsJk//X51x7QZ 6hqXJbr/CN1NWtxSPoz3HgQcqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdsKZQb p6sbL+wSGoXycYBLSziiMB8GA1UdIwQYMBaAFGgUd7XeVmo42bAVbah6uvqfr4W9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJERi9DQzc4Qjc2MjdD MEIxMUVGODk0QTI5MTlDNEY5QUUwMi9hQlIzdGQ1V2FqalpzQlZ0cUhxNi1wLXZo YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCUjN0ZDVXYWpqWnNCVnRxSHE2LXAtdmhiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJERi9DQzc4Qjc2MjdDMEIxMUVGODk0QTI5MTlDNEY5QUUwMi9hQlIzdGQ1V2Fq alpzQlZ0cUhxNi1wLXZoYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcUDGCtTg2kvH1kBIvp0tw0Tm9yW/BbNXqwVpZtCh0bxMoJcXZZSHQ j33fGxfcpKOvmo+QtEXX0VVUZzloGnOmuvZk+uukF158u4j7pZdjzT92ClDLo4Bn KNA2MJAFoEBJvuqckbm8Rx1otcldecaBFbnH0vyHxIckmNIehZXc7y2dxi3pYpOV FWvzpDwiFMzurvmicwu7K/4lfJgmorYSagGP/4s2/76RORumahGJjwU6VVr9qxlt lFLPNe+AqTEkuwxvDjvGwM/7H7Xkj9cv+P3KFJCnnKCh6M7IzwUPF2yqAgbvET9E ffsITHujRJyTQtUz7/HopAhDK2j5BueB -----END CERTIFICATE-----Generated at Sun Dec 21 22:05:47 2025 by rpki-client