This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json) Hash identifier: 2rdDtuxXJRzL6bhE/0FcxdqfQdymKPRHi+Nr0gNZ/0Y= Subject key identifier: 81:E5:5A:2D:CA:A4:77:59:D5:10:E4:1F:C3:0E:C3:3B:6A:75:6E:86 Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Certificate serial: 34E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft Manifest number: 34E7 Signing time: Sat 20 Dec 2025 15:02:16 +0000 Manifest this update: Sat 20 Dec 2025 15:02:15 +0000 Manifest next update: Sat 27 Dec 2025 15:02:15 +0000 Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: 4VqmXfunE+h0clmA0NTP6A5Gww5VHVjaYqIamqsmYBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13543 (0x34e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A96, serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Validity Not Before: Dec 20 15:02:15 2025 GMT Not After : Dec 27 15:02:15 2025 GMT Subject: CN=6946ba78-2246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:64:54:7a:00:03:6d:8e:26:c0:e6:60:54: 04:e0:03:84:1b:be:83:8b:c2:f9:3e:e7:07:14:e3: 89:9f:a7:dc:ad:a4:07:37:10:d2:ad:cc:50:ca:41: 33:b5:4f:d0:ca:94:a5:6b:2f:a4:f5:5a:18:82:88: 17:c9:b0:51:82:c0:fd:d5:61:08:ed:a2:c0:ef:94: 39:1e:a6:1b:ed:68:89:23:c0:3c:1e:d7:48:d9:d9: 60:d0:5c:02:a4:93:f6:0d:19:39:84:c8:40:27:0d: 6c:29:23:c9:c9:17:fb:8b:5d:1b:18:d5:3f:55:c5: 41:8f:54:ab:8c:73:99:83:93:38:62:2c:82:b4:d5: 63:3d:36:9c:1c:9b:65:08:78:4c:1c:a6:a9:a0:6b: 54:ce:c7:42:86:eb:4c:a8:63:43:f5:54:e2:46:38: 1f:67:f5:25:13:21:e1:ae:b0:17:91:c0:6c:69:5f: 4e:0c:a1:1a:b8:e5:34:5e:38:9b:a6:16:43:d7:4c: 67:d7:b8:46:78:96:25:c7:12:a3:e3:47:ee:8c:59: fc:ac:50:ff:2f:d7:fb:62:d4:04:e8:30:95:83:0c: 32:b3:e7:7c:af:a6:98:4c:9c:f7:0b:7a:75:2b:94: 0d:c1:28:c0:d3:ce:f6:f0:dd:b7:84:84:a4:4d:da: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E5:5A:2D:CA:A4:77:59:D5:10:E4:1F:C3:0E:C3:3B:6A:75:6E:86 X509v3 Authority Key Identifier: keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:d4:86:11:22:0f:e1:f4:51:1f:5e:e7:e1:63:83:bb:39:3b: f4:6a:c7:71:08:d3:e6:75:df:3e:6b:5a:6d:12:b9:d3:0c:eb: a4:ea:0f:2f:f3:16:6c:1f:fd:ef:04:0f:67:47:14:61:81:12: 05:dd:b0:50:03:98:56:26:b0:ce:fe:b1:5d:40:ff:5a:06:01: d9:3a:af:c8:df:ef:dc:b7:d0:f9:c5:1d:53:92:93:00:42:91: fd:74:7c:a3:fd:8a:21:71:a2:31:6b:10:9a:fd:76:64:71:3f: 44:cd:c8:b2:d5:4e:9b:77:c0:34:ef:83:e8:50:28:65:96:24: b9:e9:60:19:f6:01:46:47:62:1e:54:21:ea:62:3c:04:77:a3: 6b:40:54:63:57:31:d3:85:6b:98:19:d8:70:c3:d9:60:9c:04: 7f:a1:88:95:a7:4c:b4:13:63:dc:90:17:01:f7:0f:ee:ae:03: ff:63:17:57:63:01:c4:9b:76:20:f3:2b:03:b5:d3:28:99:a4: 5b:7b:9c:35:b4:ec:a2:43:cf:5a:cb:5c:0d:5c:18:74:8b:3b: 8f:23:01:8a:d7:9e:6f:31:e4:fb:e2:dd:32:1c:b7:0d:bd:03: c9:a5:1b:6f:e4:54:0e:ac:8c:63:5e:10:6c:9e:ca:1b:e5:30: 47:30:de:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBOTYxMTAvBgNVBAUTKDlBQ0E4QTVDMjQ3NEUyMEZGQTY3MzRGM0Y3MjU0QkZG RjE4NTEzRkUwHhcNMjUxMjIwMTUwMjE1WhcNMjUxMjI3MTUwMjE1WjAYMRYwFAYD VQQDDA02OTQ2YmE3OC0yMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzxkVHoAA22OJsDmYFQE4AOEG76Di8L5PucHFOOJn6fcraQHNxDSrcxQykEz tU/QypSlay+k9VoYgogXybBRgsD91WEI7aLA75Q5HqYb7WiJI8A8HtdI2dlg0FwC pJP2DRk5hMhAJw1sKSPJyRf7i10bGNU/VcVBj1SrjHOZg5M4YiyCtNVjPTacHJtl CHhMHKapoGtUzsdChutMqGND9VTiRjgfZ/UlEyHhrrAXkcBsaV9ODKEauOU0Xjib phZD10xn17hGeJYlxxKj40fujFn8rFD/L9f7YtQE6DCVgwwys+d8r6aYTJz3C3p1 K5QNwSjA08728N23hISkTdoWKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHlWi3K pHdZ1RDkH8MOwztqdW6GMB8GA1UdIwQYMBaAFJrKilwkdOIP+mc08/clS//xhRP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE5Ni85MDlENzQ5MDFE QTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRnXzZaelR6OXlWTF9fR0ZF XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zcUtYQ1IwNGdfNlp6VHo5eVZMX19HRkVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE5Ni85MDlENzQ5MDFEQTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRn XzZaelR6OXlWTF9fR0ZFXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG1IYRIg/h9FEfXufhY4O7OTv0asdxCNPmdd8+a1ptErnTDOuk6g8v 8xZsH/3vBA9nRxRhgRIF3bBQA5hWJrDO/rFdQP9aBgHZOq/I3+/ct9D5xR1TkpMA QpH9dHyj/YohcaIxaxCa/XZkcT9Ezciy1U6bd8A074PoUChlliS56WAZ9gFGR2Ie VCHqYjwEd6NrQFRjVzHThWuYGdhww9lgnAR/oYiVp0y0E2PckBcB9w/urgP/YxdX YwHEm3Yg8ysDtdMomaRbe5w1tOyiQ89ay1wNXBh0izuPIwGK155vMeT74t0yHLcN vQPJpRtv5FQOrIxjXhBsnsob5TBHMN5c -----END CERTIFICATE-----Generated at Sat Dec 20 20:28:46 2025 by rpki-client