This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft File: 125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json) Hash identifier: atAP5JfQyYKixzPuW77UUI+aD5NmMViiZDNA2jYk7Is= Subject key identifier: AB:73:37:B0:DE:45:D5:FD:F8:EA:C2:AD:36:5E:A4:5B:D1:D1:9A:DD Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29 Certificate issuer: /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29 Certificate serial: 0800 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft Manifest number: 0800 Signing time: Thu 04 Dec 2025 20:01:05 +0000 Manifest this update: Thu 04 Dec 2025 20:01:04 +0000 Manifest next update: Thu 11 Dec 2025 20:01:04 +0000 Files and hashes: 1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: k4y+ynQIexiBVsA9VYGNuJk52S+cjPAErAEIHSoIKaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2048 (0x800) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29 Validity Not Before: Dec 4 20:01:04 2025 GMT Not After : Dec 11 20:01:04 2025 GMT Subject: CN=6931e881-9a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:ad:4c:23:f4:c6:a9:67:d1:80:cb:54:d4: 0a:c3:5f:8e:8d:f8:a7:cc:b5:d2:d7:ce:0a:6d:65: 91:ec:ae:95:5b:4d:8b:78:46:41:da:05:3c:6e:1f: 23:da:d0:4d:88:cf:9c:b1:1e:c1:57:a3:59:f8:9a: 71:e4:82:4b:fe:a7:71:7f:b6:ef:ae:4f:eb:0b:8d: 6e:8b:70:19:4a:f0:4c:62:88:15:d2:c8:a7:e3:65: 2d:07:c8:b4:15:63:92:26:86:df:28:a2:8b:06:95: b2:76:5b:ce:3e:dc:00:d6:22:42:b1:ef:c2:52:66: c0:21:01:f6:0c:6c:73:e6:c6:30:6b:bf:f1:7c:ea: 34:67:11:9a:20:20:be:dc:26:27:37:4f:1d:04:24: 97:e2:e2:ea:4e:a8:91:9f:fa:8c:47:b7:61:a5:d0: 31:0e:66:bf:b6:dc:90:b7:79:57:15:46:09:04:21: 88:6b:5f:86:6f:b4:5c:71:dd:6e:9d:0c:fc:5f:52: c9:a5:2a:86:85:0b:dd:be:d3:58:6e:3a:57:6d:e4: 83:eb:33:44:d8:a0:d8:2c:2b:d3:df:7d:d8:4d:3b: ac:15:25:5f:b2:53:ba:da:b8:50:c9:04:ec:7e:8e: 32:01:93:88:21:91:a8:53:8a:58:a2:b1:79:f4:58: 6e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:73:37:B0:DE:45:D5:FD:F8:EA:C2:AD:36:5E:A4:5B:D1:D1:9A:DD X509v3 Authority Key Identifier: keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a3:3e:48:01:48:63:65:31:ae:e7:15:15:77:4e:1b:a0:e9: 4f:34:a6:76:5a:bf:f9:14:a3:13:2a:fb:e0:86:9b:5c:7e:7e: 4c:87:45:17:f7:36:bf:f2:d7:0f:70:7c:d2:1f:5a:a4:28:d2: 71:87:3b:b3:0c:3b:8e:00:34:c5:e2:7a:51:e4:16:67:38:f2: 74:42:32:98:8e:8a:d9:b3:aa:a1:ca:14:18:8c:9c:30:00:db: b2:10:0a:04:1d:42:f8:27:52:91:10:98:0d:88:a2:6f:75:30: e7:de:e5:b8:70:00:b3:b4:89:38:ba:83:f3:67:a1:a8:12:fd: 31:21:c3:fc:bf:c1:97:9e:66:03:a7:a7:2a:4c:18:cd:b2:78: c3:07:5f:a9:94:87:aa:d9:d2:6b:80:42:01:87:48:d1:4b:c6: de:99:e2:cf:13:a9:a7:c3:01:01:e1:9b:ce:82:3a:3a:ab:98: 7e:83:5c:f6:7a:6b:d2:ea:62:92:28:dd:c1:61:ca:ee:7e:7a: 28:dd:0e:07:6e:21:c1:01:ea:08:dc:54:43:ce:b1:59:a9:df: 75:9f:a5:89:c2:20:9a:00:50:f1:af:35:5d:1d:4d:8b:f1:2b: 46:ff:53:ca:b3:d8:b6:91:53:05:aa:ae:1a:85:c8:e7:fa:71: b1:7a:3f:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCNDExMTAvBgNVBAUTKEQ3NkU1NkQ5NTRDQzVDMDBGRTVENkVBREQ4REY1MDI3 MkE1QkRGMjkwHhcNMjUxMjA0MjAwMTA0WhcNMjUxMjExMjAwMTA0WjAYMRYwFAYD VQQDEw02OTMxZTg4MS05YTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuytTCP0xqln0YDLVNQKw1+OjfinzLXS184KbWWR7K6VW02LeEZB2gU8bh8j 2tBNiM+csR7BV6NZ+Jpx5IJL/qdxf7bvrk/rC41ui3AZSvBMYogV0sin42UtB8i0 FWOSJobfKKKLBpWydlvOPtwA1iJCse/CUmbAIQH2DGxz5sYwa7/xfOo0ZxGaICC+ 3CYnN08dBCSX4uLqTqiRn/qMR7dhpdAxDma/ttyQt3lXFUYJBCGIa1+Gb7Rccd1u nQz8X1LJpSqGhQvdvtNYbjpXbeSD6zNE2KDYLCvT333YTTusFSVfslO62rhQyQTs fo4yAZOIIZGoU4pYorF59FhuzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtzN7De RdX9+OrCrTZepFvR0ZrdMB8GA1UdIwQYMBaAFNduVtlUzFwA/l1urdjfUCcqW98p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI0MS8xNjBCODI0RTAy MDExMUVCOEU0N0I5NUNDNEY5QUUwMi8xMjVXMlZUTVhBRC1YVzZ0Mk45UUp5cGIz eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEyNVcyVlRNWEFELVhXNnQyTjlRSnlwYjN5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI0MS8xNjBCODI0RTAyMDExMUVCOEU0N0I5NUNDNEY5QUUwMi8xMjVXMlZUTVhB RC1YVzZ0Mk45UUp5cGIzeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOoz5IAUhjZTGu5xUVd04boOlPNKZ2Wr/5FKMTKvvghptcfn5Mh0UX 9za/8tcPcHzSH1qkKNJxhzuzDDuOADTF4npR5BZnOPJ0QjKYjorZs6qhyhQYjJww ANuyEAoEHUL4J1KREJgNiKJvdTDn3uW4cACztIk4uoPzZ6GoEv0xIcP8v8GXnmYD p6cqTBjNsnjDB1+plIeq2dJrgEIBh0jRS8bemeLPE6mnwwEB4ZvOgjo6q5h+g1z2 emvS6mKSKN3BYcrufnoo3Q4HbiHBAeoI3FRDzrFZqd91n6WJwiCaAFDxrzVdHU2L 8StG/1PKs9i2kVMFqq4ahcjn+nGxej9T -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:39 2025 by rpki-client