This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft File: -L4s6ssxJNZg8w-KJzgGZIr0PIc.mft (raw, json) Hash identifier: I5Y8/wYa2vDhlH9FL1xZkW/lFTel0JHQtJ02kLC9bNo= Subject key identifier: C0:F8:E8:77:6C:2E:62:85:54:1C:01:15:7A:A5:29:CC:29:F1:29:CE Authority key identifier: F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87 Certificate issuer: /CN=A91AFAAC/serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft Manifest number: 65 Signing time: Fri 05 Dec 2025 04:53:31 +0000 Manifest this update: Fri 05 Dec 2025 04:53:31 +0000 Manifest next update: Fri 12 Dec 2025 04:53:31 +0000 Files and hashes: 1: -L4s6ssxJNZg8w-KJzgGZIr0PIc.crl (hash: l4iT4MHtOIU15zWqSBaLtXU5f5u/9VJuXi6KgK7Rn7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFAAC, serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87 Validity Not Before: Dec 5 04:53:31 2025 GMT Not After : Dec 12 04:53:31 2025 GMT Subject: CN=6932654b-b80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1a:ce:d2:cc:9c:58:2d:17:8a:90:09:1a:09: b9:14:bc:00:a0:b1:d3:25:f1:37:85:c1:5a:07:b2: 44:b5:e5:0c:51:15:46:8b:cc:7a:37:f9:2f:fa:f9: 11:10:61:06:cf:99:e3:69:b1:8e:bf:ba:a5:70:f1: 7f:8c:b7:9e:66:d8:e4:99:69:22:d3:0f:79:b6:4f: fd:35:6a:aa:35:28:f0:9b:46:a4:f7:cc:60:30:7a: d7:6d:bf:ef:c8:4c:dd:8a:07:74:1e:90:bd:eb:bb: 55:73:3b:c2:d3:99:83:2a:84:c0:c8:23:22:87:41: 53:b7:75:55:92:44:16:95:72:21:ec:1a:2c:68:77: f3:cd:21:41:76:70:44:27:ca:48:34:0e:29:39:35: 70:94:7f:67:2a:9b:2c:09:3d:7c:05:ba:c7:f3:96: 71:18:33:41:44:4c:7c:da:e1:f7:ac:7b:a3:7d:dc: 25:c9:1c:c4:a6:d5:49:38:ef:48:86:39:0b:4c:f9: 95:c1:7f:f6:ed:d0:7d:46:69:bd:cf:98:b1:46:e8: f2:c2:17:05:d1:0e:b7:c6:e6:e5:3f:99:b8:fc:ff: e8:28:ad:db:56:93:d9:8e:91:7c:2e:ef:00:ef:4c: d8:01:fc:bc:32:b4:db:c8:54:4d:03:40:9e:f3:1a: c2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F8:E8:77:6C:2E:62:85:54:1C:01:15:7A:A5:29:CC:29:F1:29:CE X509v3 Authority Key Identifier: keyid:F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bb:9e:bd:85:db:0b:49:11:90:79:02:0e:10:0d:9e:02:83: 4f:aa:77:64:4d:2f:3d:1a:60:04:d7:0c:20:e4:da:aa:4e:12: 7b:3d:29:89:d1:7c:50:49:e6:7e:15:5d:a0:34:9b:0b:2d:64: ad:0a:6a:54:ad:b4:e1:3f:82:e6:c1:89:7d:35:7f:6a:d3:52: 36:fb:d2:bb:d0:52:e5:99:82:af:70:d8:e2:e6:4a:d0:d5:69: 03:b0:af:35:70:bb:9d:b8:6f:bc:f2:67:38:a8:8f:de:a3:19: 86:c6:9f:7d:fe:cc:3c:4e:2c:ae:96:d9:99:76:e0:b4:3f:9a: 4b:5d:90:4e:b0:ef:1a:5b:ca:f4:58:86:2a:89:11:df:ff:a6: 19:bc:11:3e:a7:d6:b2:cb:c7:b9:b8:6e:d5:9f:94:41:e2:ab: bd:08:78:b7:19:e6:94:f7:10:4b:74:2d:87:f9:1b:d3:5c:b1: 04:72:71:b6:b9:98:55:41:74:88:85:b9:b4:99:80:ea:0f:7d: 5c:b7:6b:f8:cf:b5:10:3a:cc:b3:36:f9:4c:72:cf:4f:99:b0: 57:91:9c:87:f0:d5:73:52:e5:52:24:41:4f:1c:db:df:9a:79: 6a:2a:96:a4:05:7b:32:db:f1:fc:03:4e:15:7d:b2:9d:1d:6f: 9d:d7:2b:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkFBQzExMC8GA1UEBRMoRjhCRTJDRUFDQjMxMjRENjYwRjMwRjhBMjczODA2NjQ4 QUY0M0M4NzAeFw0yNTEyMDUwNDUzMzFaFw0yNTEyMTIwNDUzMzFaMBgxFjAUBgNV BAMTDTY5MzI2NTRiLWI4MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNGs7SzJxYLReKkAkaCbkUvACgsdMl8TeFwVoHskS15QxRFUaLzHo3+S/6+REQ YQbPmeNpsY6/uqVw8X+Mt55m2OSZaSLTD3m2T/01aqo1KPCbRqT3zGAwetdtv+/I TN2KB3QekL3ru1VzO8LTmYMqhMDIIyKHQVO3dVWSRBaVciHsGixod/PNIUF2cEQn ykg0Dik5NXCUf2cqmywJPXwFusfzlnEYM0FETHza4fese6N93CXJHMSm1Uk470iG OQtM+ZXBf/bt0H1Gab3PmLFG6PLCFwXRDrfG5uU/mbj8/+gordtWk9mOkXwu7wDv TNgB/LwytNvIVE0DQJ7zGsLhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwPjod2wu YoVUHAEVeqUpzCnxKc4wHwYDVR0jBBgwFoAU+L4s6ssxJNZg8w+KJzgGZIr0PIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQUFDLzUzRDU1Q0Q2MzU0 QTExRjBCQTc2NkU0Q0M0RjlBRTAyLy1MNHM2c3N4Sk5aZzh3LUtKemdHWklyMFBJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLUw0czZzc3hKTlpnOHctS0p6Z0daSXIwUEljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QUFDLzUzRDU1Q0Q2MzU0QTExRjBCQTc2NkU0Q0M0RjlBRTAyLy1MNHM2c3N4Sk5a Zzh3LUtKemdHWklyMFBJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAy7nr2F2wtJEZB5Ag4QDZ4Cg0+qd2RNLz0aYATXDCDk2qpOEns9KYnR fFBJ5n4VXaA0mwstZK0KalSttOE/gubBiX01f2rTUjb70rvQUuWZgq9w2OLmStDV aQOwrzVwu524b7zyZzioj96jGYbGn33+zDxOLK6W2Zl24LQ/mktdkE6w7xpbyvRY hiqJEd//phm8ET6n1rLLx7m4btWflEHiq70IeLcZ5pT3EEt0LYf5G9NcsQRycba5 mFVBdIiFubSZgOoPfVy3a/jPtRA6zLM2+Uxyz0+ZsFeRnIfw1XNS5VIkQU8c29+a eWoqlqQFezLb8fwDThV9sp0db53XK2w= -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:51 2025 by rpki-client