This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json) Hash identifier: 8oDCfvZaPl337dgdtQA9Gdtw+LiPUnHf6+zVN9jiV08= Subject key identifier: C1:F9:EE:84:5A:58:44:D2:D0:FE:33:C2:7F:20:4A:6A:3B:8F:B1:4B Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Certificate serial: 34E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft Manifest number: 34E0 Signing time: Sat 06 Dec 2025 14:59:43 +0000 Manifest this update: Sat 06 Dec 2025 14:59:42 +0000 Manifest next update: Sat 13 Dec 2025 14:59:42 +0000 Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: YXDBszfdr6yUNKCQdmvoO5LoHnVw5fqnMHKxf73zAHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13536 (0x34e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A96, serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Validity Not Before: Dec 6 14:59:42 2025 GMT Not After : Dec 13 14:59:42 2025 GMT Subject: CN=693444de-2f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:31:36:1c:60:0f:77:eb:98:35:28:58:b8:6b: 78:5e:ab:9e:c7:93:56:13:8e:fc:1c:89:1b:c2:aa: d3:95:67:3a:0c:c8:4d:e5:a7:80:da:e4:80:de:35: cd:0c:58:52:e4:75:05:27:1b:69:19:0f:ef:9b:8f: 76:9b:0b:9a:36:7c:e9:7e:f4:d7:f4:93:86:20:01: f5:77:79:6c:1f:be:c6:da:24:4c:fa:04:8c:07:34: 82:6c:16:f1:64:ae:14:c7:66:4e:12:f9:57:ec:18: 34:b3:95:56:97:36:a4:3a:8d:6c:cf:cd:d5:ba:73: 49:05:35:7a:bb:aa:90:6b:ed:e8:17:ff:7f:ff:ec: b2:6f:3e:89:61:13:6d:fd:b9:40:f4:f6:b4:a7:29: 88:5b:9c:3e:3a:4a:e1:5c:09:6c:a3:91:80:37:ec: b0:f9:60:b0:e7:e4:80:ab:02:db:aa:5a:4f:c4:80: 4a:a4:4e:be:5e:8a:56:3d:45:9d:9f:e9:3b:ea:ec: b1:8c:4a:26:17:dc:21:43:b0:9c:a7:1b:0f:8f:0e: c1:f4:13:e9:3b:ad:e6:4f:28:42:68:47:f6:80:29: ca:2c:7f:d5:c4:f7:b8:89:68:ed:16:c5:85:85:c5: 4b:10:53:92:18:51:8d:f9:99:c2:66:6d:a3:c6:e2: 6e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F9:EE:84:5A:58:44:D2:D0:FE:33:C2:7F:20:4A:6A:3B:8F:B1:4B X509v3 Authority Key Identifier: keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b2:5f:d1:b8:51:54:d9:64:0f:9f:1b:c4:39:f5:8e:ab:7f: 2b:c5:e9:85:75:34:36:7b:c0:48:4b:bf:17:e3:cf:2f:fa:ad: f7:c3:d2:bb:21:83:bf:e4:1f:4d:d0:44:f5:9a:d2:8e:a5:a6: c4:e4:73:2b:eb:11:98:77:4d:7c:b4:43:85:01:62:fa:81:20: e0:65:31:83:91:2e:b2:3f:21:6b:4d:f0:a7:44:3d:47:d8:12: 32:99:62:32:60:d2:60:8b:b0:a0:9e:6f:e8:f4:69:e8:19:a7: 80:e8:ab:da:1a:e4:bd:73:22:ee:d4:f7:fa:aa:0e:f3:46:4f: 50:69:ec:df:53:3f:ab:6e:06:26:89:e0:34:c3:e9:db:6b:b5: 7a:68:db:d3:c8:c4:23:7a:97:03:a5:b1:8b:07:87:6f:d2:4b: 04:96:8e:b3:fb:35:5a:16:15:72:b4:b0:97:a5:09:db:f9:26: 7f:c7:ae:93:94:65:aa:6e:85:60:bc:85:0b:8a:e8:45:3f:fe: a6:ed:84:13:be:d7:9c:94:ba:72:0b:cd:8b:54:db:c0:72:b7: de:43:62:ed:3b:b1:50:49:41:17:62:d2:68:f3:90:94:9b:18: ff:fe:0c:ee:bb:31:b8:4d:54:ee:f2:51:be:18:5b:b2:05:ec: 1d:72:9d:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBOTYxMTAvBgNVBAUTKDlBQ0E4QTVDMjQ3NEUyMEZGQTY3MzRGM0Y3MjU0QkZG RjE4NTEzRkUwHhcNMjUxMjA2MTQ1OTQyWhcNMjUxMjEzMTQ1OTQyWjAYMRYwFAYD VQQDEw02OTM0NDRkZS0yZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzE2HGAPd+uYNShYuGt4Xquex5NWE478HIkbwqrTlWc6DMhN5aeA2uSA3jXN DFhS5HUFJxtpGQ/vm492mwuaNnzpfvTX9JOGIAH1d3lsH77G2iRM+gSMBzSCbBbx ZK4Ux2ZOEvlX7Bg0s5VWlzakOo1sz83VunNJBTV6u6qQa+3oF/9//+yybz6JYRNt /blA9Pa0pymIW5w+OkrhXAlso5GAN+yw+WCw5+SAqwLbqlpPxIBKpE6+XopWPUWd n+k76uyxjEomF9whQ7CcpxsPjw7B9BPpO63mTyhCaEf2gCnKLH/VxPe4iWjtFsWF hcVLEFOSGFGN+ZnCZm2jxuJu0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMH57oRa WETS0P4zwn8gSmo7j7FLMB8GA1UdIwQYMBaAFJrKilwkdOIP+mc08/clS//xhRP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE5Ni85MDlENzQ5MDFE QTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRnXzZaelR6OXlWTF9fR0ZF XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zcUtYQ1IwNGdfNlp6VHo5eVZMX19HRkVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE5Ni85MDlENzQ5MDFEQTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRn XzZaelR6OXlWTF9fR0ZFXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzsl/RuFFU2WQPnxvEOfWOq38rxemFdTQ2e8BIS78X488v+q33w9K7 IYO/5B9N0ET1mtKOpabE5HMr6xGYd018tEOFAWL6gSDgZTGDkS6yPyFrTfCnRD1H 2BIymWIyYNJgi7Cgnm/o9GnoGaeA6KvaGuS9cyLu1Pf6qg7zRk9QaezfUz+rbgYm ieA0w+nba7V6aNvTyMQjepcDpbGLB4dv0ksElo6z+zVaFhVytLCXpQnb+SZ/x66T lGWqboVgvIULiuhFP/6m7YQTvteclLpyC82LVNvAcrfeQ2LtO7FQSUEXYtJo85CU mxj//gzuuzG4TVTu8lG+GFuyBewdcp2j -----END CERTIFICATE-----Generated at Sun Dec 7 03:17:59 2025 by rpki-client