This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft File: -nL57HMUa01gWMiKYGr6AzMOA1E.mft (raw, json) Hash identifier: GJN/8OKo9RqBiGNV44qe5DFw9N4am+daJBlZuhvsbSU= Subject key identifier: C3:72:58:A4:51:D1:48:AD:E3:72:A5:ED:2E:CE:3E:0F:F1:C3:FC:3D Authority key identifier: FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51 Certificate issuer: /CN=A91B2D56/serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft Manifest number: 09 Signing time: Fri 05 Dec 2025 05:49:59 +0000 Manifest this update: Fri 05 Dec 2025 05:49:59 +0000 Manifest next update: Fri 12 Dec 2025 05:49:59 +0000 Files and hashes: 1: -nL57HMUa01gWMiKYGr6AzMOA1E.crl (hash: zA9C3tQ31MIj25akHmHmTBl5QhjaNA/k5sfDTd9Dj2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351 Validity Not Before: Dec 5 05:49:59 2025 GMT Not After : Dec 12 05:49:59 2025 GMT Subject: CN=69327287-d265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:30:01:4b:67:5d:60:da:09:10:87:a1:d0: 35:9b:86:57:b1:ae:50:88:37:05:57:5a:a5:d7:fd: c6:f2:6d:1a:a7:4e:0c:5b:54:1c:1a:92:54:e8:8d: b3:66:62:77:07:b0:1c:b0:4d:40:ab:b9:3b:eb:b9: 8f:42:0e:3a:76:7f:aa:99:4d:74:52:68:4b:34:c0: 20:c4:8b:ec:8f:55:a8:f3:fa:71:ec:be:10:f9:cb: 0c:6f:6a:b9:a5:2d:e4:61:24:da:93:34:71:b4:a3: 6b:37:9d:93:35:2d:e7:ac:30:33:b9:d9:06:97:31: ff:c6:9a:07:93:19:98:6a:c9:fc:ce:91:08:6a:46: a8:ae:9a:3d:48:b4:c8:8b:7f:85:3c:00:2e:60:ee: 81:d9:b9:71:2b:a4:51:f2:fa:7f:9a:bb:cd:ff:b7: 34:8e:70:ac:16:ad:cb:d1:58:60:ca:96:a9:06:f6: 92:7f:72:58:43:2e:f6:db:f4:a7:d9:57:a0:f1:e9: 9c:a8:76:2c:05:cb:44:3b:b2:3b:ff:86:99:4a:c3: 8d:95:01:d0:fb:37:f4:87:82:a0:81:42:77:b0:66: 28:ff:7d:88:76:b3:a8:fc:4e:5c:27:be:6e:f5:cf: 57:96:4f:93:5b:d1:73:9f:8e:37:ef:0a:37:d5:59: e9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:72:58:A4:51:D1:48:AD:E3:72:A5:ED:2E:CE:3E:0F:F1:C3:FC:3D X509v3 Authority Key Identifier: keyid:FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:e2:1e:3f:2a:3a:52:3f:14:63:08:58:44:50:63:dc:79:53: 77:77:a3:cd:50:a5:bf:22:e3:dd:7e:94:8e:8a:a0:95:a4:49: 5a:a6:a8:05:1a:b5:e4:26:14:81:04:1e:43:59:31:7f:3c:8f: fc:0e:75:00:91:65:8e:c6:ec:e4:94:eb:6b:2d:2c:8f:65:d6: 1f:17:33:5d:bb:bc:5a:6c:4f:f8:b8:75:d9:9d:7f:43:bc:cb: 5f:6c:7d:67:75:ff:8a:c4:e6:74:92:27:a3:1d:1d:78:80:a2: b3:7e:3c:23:23:05:91:c5:f2:17:b7:7f:65:83:0e:94:a1:3f: 7e:20:ad:3a:af:ff:cb:48:0c:61:c5:8a:28:90:9d:a6:f8:bc: c7:bc:e0:5b:84:3c:c8:6e:0c:3f:38:4d:33:9d:4b:69:49:19: 6e:92:c6:28:fd:a2:9d:23:f3:21:5f:44:9f:5d:c6:34:34:35: 83:b6:6f:ef:df:77:1c:4c:b0:25:3e:ee:53:16:d5:65:78:7d: 1b:41:e7:f9:12:c4:49:70:16:76:22:c1:b9:76:70:90:1f:49: 4e:6c:d2:c1:7c:6a:a6:14:96:7e:93:5a:1a:30:2f:8c:eb:71: 19:ce:d4:4c:87:ac:a3:fa:52:fd:a8:af:e6:01:2f:70:29:fa: a7:a7:61:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkQ1NjExMC8GA1UEBRMoRkE3MkY5RUM3MzE0NkI0RDYwNThDODhBNjA2QUZBMDMz MzBFMDM1MTAeFw0yNTEyMDUwNTQ5NTlaFw0yNTEyMTIwNTQ5NTlaMBgxFjAUBgNV BAMTDTY5MzI3Mjg3LWQyNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwNTABS2ddYNoJEIeh0DWbhlexrlCINwVXWqXX/cbybRqnTgxbVBwaklTojbNm YncHsBywTUCruTvruY9CDjp2f6qZTXRSaEs0wCDEi+yPVajz+nHsvhD5ywxvarml LeRhJNqTNHG0o2s3nZM1LeesMDO52QaXMf/GmgeTGZhqyfzOkQhqRqiumj1ItMiL f4U8AC5g7oHZuXErpFHy+n+au83/tzSOcKwWrcvRWGDKlqkG9pJ/clhDLvbb9KfZ V6Dx6ZyodiwFy0Q7sjv/hplKw42VAdD7N/SHgqCBQnewZij/fYh2s6j8Tlwnvm71 z1eWT5Nb0XOfjjfvCjfVWek9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw3JYpFHR SK3jcqXtLs4+D/HD/D0wHwYDVR0jBBgwFoAU+nL57HMUa01gWMiKYGr6AzMOA1Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDU2L0Y2OTIzNjdBQzUy MjExRjA5NUQxQjIxN0M0RjlBRTAyLy1uTDU3SE1VYTAxZ1dNaUtZR3I2QXpNT0Ex RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLW5MNTdITVVhMDFnV01pS1lHcjZBek1PQTFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RDU2L0Y2OTIzNjdBQzUyMjExRjA5NUQxQjIxN0M0RjlBRTAyLy1uTDU3SE1VYTAx Z1dNaUtZR3I2QXpNT0ExRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKbiHj8qOlI/FGMIWERQY9x5U3d3o81Qpb8i491+lI6KoJWkSVqmqAUa teQmFIEEHkNZMX88j/wOdQCRZY7G7OSU62stLI9l1h8XM127vFpsT/i4ddmdf0O8 y19sfWd1/4rE5nSSJ6MdHXiAorN+PCMjBZHF8he3f2WDDpShP34grTqv/8tIDGHF iiiQnab4vMe84FuEPMhuDD84TTOdS2lJGW6Sxij9op0j8yFfRJ9dxjQ0NYO2b+/f dxxMsCU+7lMW1WV4fRtB5/kSxElwFnYiwbl2cJAfSU5s0sF8aqYUln6TWhowL4zr cRnO1EyHrKP6Uv2or+YBL3Ap+qenYdI= -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:58 2025 by rpki-client