This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json) Hash identifier: 4gWgVHg7K09klivRiUTxtFfKBiF9uEtk5Q93T2EXXBo= Subject key identifier: B4:23:F8:AB:AB:6B:AB:A7:7F:93:07:43:8C:2D:0E:C2:93:21:DF:D6 Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Certificate serial: 10F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft Manifest number: 19F9 Signing time: Sat 06 Dec 2025 16:48:12 +0000 Manifest this update: Sat 06 Dec 2025 16:48:12 +0000 Manifest next update: Sat 13 Dec 2025 16:48:12 +0000 Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: AiC4ZmKhHIpHQr8shIyrV4l+wmX3gCWqnxFFhDoqdSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4339 (0x10f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Validity Not Before: Dec 6 16:48:12 2025 GMT Not After : Dec 13 16:48:12 2025 GMT Subject: CN=69345e4c-a6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:c6:21:08:c9:87:00:b2:ab:54:18:ae:c0: eb:ad:be:5f:da:31:1f:f9:1c:16:06:a1:2e:db:53: 09:e9:c9:cb:67:8a:44:fb:b4:32:42:c7:82:74:8b: 95:2b:6d:66:f8:a7:4f:81:ac:49:54:64:b6:1c:bf: ae:7f:76:37:50:e4:0b:5c:94:e4:83:7f:2e:df:53: e8:bb:f5:3f:b3:37:3b:69:d0:40:d4:7f:83:7f:50: 97:f7:f4:6e:64:78:56:e8:2e:b8:5f:9a:97:40:69: d2:b7:bb:1b:6a:80:81:96:b9:30:48:6a:7d:96:1b: 78:01:69:0a:e7:6a:6c:83:ef:44:e3:54:3b:45:7b: d0:83:de:e7:f3:89:39:19:8d:22:69:35:05:fa:9b: 40:87:18:96:45:15:82:7f:11:28:f0:37:60:07:ee: 80:78:0a:3c:d8:6e:a4:12:fc:fc:75:ae:ae:b7:85: 16:e3:c9:94:74:16:f1:73:d4:67:e3:57:e7:d2:d7: 63:96:b1:a3:89:6a:a1:2c:51:d1:5d:8d:a2:06:8d: 37:94:16:22:2b:27:55:93:ee:44:64:19:db:0e:cf: 8e:80:2d:6e:cb:ca:94:fb:80:33:c5:5d:2e:47:df: f6:ce:41:fc:18:ba:e4:77:79:6a:e1:27:ec:58:70: 3a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:23:F8:AB:AB:6B:AB:A7:7F:93:07:43:8C:2D:0E:C2:93:21:DF:D6 X509v3 Authority Key Identifier: keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f5:ea:ef:e5:b0:48:07:e4:9d:7c:64:3f:df:31:5e:78:4d: 81:eb:28:1f:a9:10:7d:bb:71:8e:3e:16:d6:7c:45:e4:4d:52: 7e:be:db:21:f8:89:73:b4:45:68:6d:47:74:10:bd:1b:41:3f: 85:7b:13:74:c9:18:f9:15:d6:e1:7e:ae:01:53:75:fc:9b:f7: 9c:3c:4f:b2:d0:6f:d0:fc:1b:a0:4f:29:b8:62:b9:3c:05:b0: 53:bb:57:ae:9c:95:5e:be:68:a1:fd:14:2b:f8:e9:d6:1b:16: 6e:f1:a4:ec:91:cd:29:1e:8a:3f:a8:33:68:bd:fc:13:e8:fc: d9:63:94:42:2a:31:7a:0c:d9:0e:c0:ac:81:1e:a6:5e:24:a1: f6:1a:11:ac:95:75:29:a4:b9:7b:eb:39:f2:b0:7b:8a:6d:47: 98:41:4a:dd:60:e3:b0:15:83:ab:84:76:8b:7a:40:35:d8:41: 80:9e:ea:84:ac:28:fa:55:67:0a:24:90:d3:89:3e:b5:e1:ed: 7d:4f:8c:29:79:26:15:57:7c:84:ca:be:03:4c:33:8d:ef:cc: 44:6c:3a:67:a4:95:c6:e6:a6:09:7d:dc:52:95:da:f8:a3:16: 65:68:c4:f3:c3:a9:63:db:98:32:9e:f8:75:26:37:1a:29:cc: 6f:64:22:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKEY5Q0YwNDk3Q0ZCNjdFMTYyNzI5MTA5OEYxMUYxNzg2 RUI4OUZGNTAwHhcNMjUxMjA2MTY0ODEyWhcNMjUxMjEzMTY0ODEyWjAYMRYwFAYD VQQDEw02OTM0NWU0Yy1hNmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulzGIQjJhwCyq1QYrsDrrb5f2jEf+RwWBqEu21MJ6cnLZ4pE+7QyQseCdIuV K21m+KdPgaxJVGS2HL+uf3Y3UOQLXJTkg38u31Pou/U/szc7adBA1H+Df1CX9/Ru ZHhW6C64X5qXQGnSt7sbaoCBlrkwSGp9lht4AWkK52psg+9E41Q7RXvQg97n84k5 GY0iaTUF+ptAhxiWRRWCfxEo8DdgB+6AeAo82G6kEvz8da6ut4UW48mUdBbxc9Rn 41fn0tdjlrGjiWqhLFHRXY2iBo03lBYiKydVk+5EZBnbDs+OgC1uy8qU+4AzxV0u R9/2zkH8GLrkd3lq4SfsWHA6kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQj+Kur a6unf5MHQ4wtDsKTId/WMB8GA1UdIwQYMBaAFPnPBJfPtn4WJykQmPEfF4brif9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZoWW5LUkNZOFI4WGh1dUpf MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jOEVsOC0yZmhZbktSQ1k4UjhYaHV1Sl8xQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZo WW5LUkNZOFI4WGh1dUpfMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo9erv5bBIB+SdfGQ/3zFeeE2B6ygfqRB9u3GOPhbWfEXkTVJ+vtsh +IlztEVobUd0EL0bQT+FexN0yRj5Fdbhfq4BU3X8m/ecPE+y0G/Q/BugTym4Yrk8 BbBTu1eunJVevmih/RQr+OnWGxZu8aTskc0pHoo/qDNovfwT6PzZY5RCKjF6DNkO wKyBHqZeJKH2GhGslXUppLl76znysHuKbUeYQUrdYOOwFYOrhHaLekA12EGAnuqE rCj6VWcKJJDTiT614e19T4wpeSYVV3yEyr4DTDON78xEbDpnpJXG5qYJfdxSldr4 oxZlaMTzw6lj25gynvh1JjcaKcxvZCLG -----END CERTIFICATE-----Generated at Sun Dec 7 10:31:31 2025 by rpki-client