This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft File: mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft (raw, json) Hash identifier: lrRCJz0DRVylXa6wcN0CZWQxJzUtHUjiDhkL29lg0y4= Subject key identifier: 86:79:23:84:10:7F:99:7B:A8:3C:F0:3D:8D:38:07:09:06:87:16:3E Authority key identifier: 9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 Certificate issuer: /CN=A919E68B/serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft Manifest number: 7B Signing time: Fri 19 Dec 2025 05:45:58 +0000 Manifest this update: Fri 19 Dec 2025 05:45:57 +0000 Manifest next update: Fri 26 Dec 2025 05:45:57 +0000 Files and hashes: 1: mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl (hash: c9zvkkQgUivPjNcL8gxN9RqkJAAXGz9lGRB++5uUevc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E68B, serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Validity Not Before: Dec 19 05:45:57 2025 GMT Not After : Dec 26 05:45:57 2025 GMT Subject: CN=6944e695-0bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:c7:f3:df:65:6f:2e:45:ae:f8:6a:84:80: 5f:23:3c:cd:09:10:5a:aa:8c:a3:96:60:f5:6d:64: 45:e0:b4:9f:d6:6b:97:47:55:07:76:43:d9:1d:39: e8:f0:27:52:e7:a8:9f:1b:66:a5:be:17:f5:bd:bd: 6d:a5:d8:e1:d0:3e:60:af:57:6e:ce:97:95:f4:12: 30:49:5f:26:62:41:c2:c2:14:d3:b0:0f:b1:da:3b: 8b:77:97:55:1d:f2:e6:25:26:4d:93:1b:73:a8:f7: 67:0e:9b:90:9b:de:64:61:07:83:11:61:04:02:c4: 3a:08:ac:d1:2d:32:7d:51:57:20:07:4f:a9:12:1e: 5d:f4:02:71:c8:9d:17:9e:6a:49:08:8c:7b:e7:e0: 68:1b:3b:ed:8e:92:b0:69:61:f4:f5:da:a7:ab:81: 7a:52:db:73:b6:44:c0:e7:1d:81:45:d1:4a:95:5b: 7b:b7:60:b0:ba:06:ba:a8:78:72:73:00:71:4a:2a: cc:dc:bc:b4:9d:6f:13:bb:86:c6:d3:f6:2f:0f:46: c5:69:26:fd:0d:d6:6f:c6:a5:a9:8b:3d:90:80:c5: 6f:fd:f0:5e:4e:00:d7:5d:a6:10:ac:4f:a2:f3:7e: dc:fb:a9:f0:68:23:e0:42:4e:94:e3:13:61:c5:aa: d1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:79:23:84:10:7F:99:7B:A8:3C:F0:3D:8D:38:07:09:06:87:16:3E X509v3 Authority Key Identifier: keyid:9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:7a:a9:e5:54:d8:34:05:2e:c3:01:ca:22:2d:7b:78:99:cd: 1b:bc:cd:4b:4a:c9:98:82:21:61:d9:7b:cf:bd:cd:a9:38:88: 39:95:d4:36:8f:94:6f:1a:33:01:af:7a:b1:47:2d:1d:e0:9a: 46:b0:3e:8f:f3:54:0f:f2:f1:0f:93:3b:07:92:83:78:40:28: a3:f1:ca:36:e5:5e:14:cb:c5:bb:3a:39:3a:9f:7a:e8:a2:db: 26:aa:a7:e1:41:9e:f2:ab:86:bd:06:ed:48:51:ec:86:5f:59: 43:8c:8d:aa:d2:2f:2f:a8:c5:5f:65:55:54:9f:8d:bc:b2:22: 99:95:8b:f0:db:56:40:df:b2:db:58:b3:1a:c2:57:d5:64:75: 7c:c0:72:04:ef:a1:eb:e9:12:87:3d:a1:f2:35:3e:7b:be:dc: c5:9f:00:ad:38:72:37:e1:1e:04:6c:60:fe:31:a9:76:14:d6: 41:10:9f:9d:80:92:2f:db:bf:a6:45:62:04:1b:5d:97:9d:0d: 4d:3e:4f:32:ad:5e:ea:40:47:51:6b:0a:cf:72:63:17:9f:53: 2b:1d:5d:97:98:9e:cf:6d:2a:c6:3c:29:da:19:a7:3e:92:fd: 50:bc:67:d7:25:71:e5:87:4b:7e:4a:e2:27:1a:17:30:ed:97: 48:fd:33:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTY4QjExMC8GA1UEBRMoOUFENEM4MDUzMjhDRURDRjUxOTAzNDA0ODk2NDc0RDZE RTQ4Njc0ODAeFw0yNTEyMTkwNTQ1NTdaFw0yNTEyMjYwNTQ1NTdaMBgxFjAUBgNV BAMMDTY5NDRlNjk1LTBiY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnrMfz32VvLkWu+GqEgF8jPM0JEFqqjKOWYPVtZEXgtJ/Wa5dHVQd2Q9kdOejw J1LnqJ8bZqW+F/W9vW2l2OHQPmCvV27Ol5X0EjBJXyZiQcLCFNOwD7HaO4t3l1Ud 8uYlJk2TG3Oo92cOm5Cb3mRhB4MRYQQCxDoIrNEtMn1RVyAHT6kSHl30AnHInRee akkIjHvn4GgbO+2OkrBpYfT12qergXpS23O2RMDnHYFF0UqVW3u3YLC6BrqoeHJz AHFKKszcvLSdbxO7hsbT9i8PRsVpJv0N1m/GpamLPZCAxW/98F5OANddphCsT6Lz ftz7qfBoI+BCTpTjE2HFqtGNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhnkjhBB/ mXuoPPA9jTgHCQaHFj4wHwYDVR0jBBgwFoAUmtTIBTKM7c9RkDQEiWR01t5IZ0gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFNjhCLzE2QTkwQzQ0MUNG MDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5UmtEUUVpV1IwMXQ1SVow Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXRUSUJUS003YzlSa0RRRWlXUjAxdDVJWjBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF NjhCLzE2QTkwQzQ0MUNGMDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5 UmtEUUVpV1IwMXQ1SVowZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAB6qeVU2DQFLsMByiIte3iZzRu8zUtKyZiCIWHZe8+9zak4iDmV1DaP lG8aMwGverFHLR3gmkawPo/zVA/y8Q+TOweSg3hAKKPxyjblXhTLxbs6OTqfeuii 2yaqp+FBnvKrhr0G7UhR7IZfWUOMjarSLy+oxV9lVVSfjbyyIpmVi/DbVkDfsttY sxrCV9VkdXzAcgTvoevpEoc9ofI1Pnu+3MWfAK04cjfhHgRsYP4xqXYU1kEQn52A ki/bv6ZFYgQbXZedDU0+TzKtXupAR1FrCs9yYxefUysdXZeYns9tKsY8KdoZpz6S /VC8Z9clceWHS35K4icaFzDtl0j9M5s= -----END CERTIFICATE-----Generated at Sat Dec 20 15:09:36 2025 by rpki-client