This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft File: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft (raw, json) Hash identifier: fgT1W2XS++KEHJ+PR5s4NVD/wFS9PeX3MAXruipbbwA= Subject key identifier: 4B:35:FC:70:47:2A:61:C3:43:F2:81:47:83:1B:19:B1:D1:0F:09:83 Authority key identifier: D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 Certificate issuer: /CN=A91BB629/serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft Manifest number: 0102 Signing time: Fri 05 Dec 2025 03:07:58 +0000 Manifest this update: Fri 05 Dec 2025 03:07:58 +0000 Manifest next update: Fri 12 Dec 2025 03:07:58 +0000 Files and hashes: 1: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl (hash: Ik7D2XwNbQ0SGOKLgqvzLTNQhaKD9RFOJN0Atvd0LT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB629, serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Validity Not Before: Dec 5 03:07:58 2025 GMT Not After : Dec 12 03:07:58 2025 GMT Subject: CN=69324c8e-8661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:f9:0a:6e:3f:1d:98:2b:dd:33:08:21:db: 63:d3:d3:e2:4c:06:dd:8c:a2:f2:72:92:0f:63:95: 2c:85:bc:c2:e9:f9:85:b4:65:a9:b6:0e:09:6f:01: 76:35:0c:70:bb:3d:03:db:20:de:ef:6b:04:ea:e0: 69:c6:42:df:59:ba:15:93:73:5a:6f:46:c5:f6:8b: cd:53:99:88:e9:8a:bf:b6:e3:bb:c2:85:13:02:25: cd:98:1d:3d:e6:a7:28:b8:3d:78:2e:34:c4:44:a3: 74:f7:a6:87:45:a6:00:c0:72:dc:57:34:ab:9e:22: a0:81:14:e0:09:b4:22:6f:44:54:69:40:42:3d:66: d4:94:27:c4:42:a6:fe:f6:16:22:f7:25:e8:93:97: 50:3e:da:7a:22:a5:1d:47:67:8e:e9:b1:d3:94:4a: c6:c7:1b:e1:aa:1f:6e:71:df:f6:18:f9:52:5b:6c: c2:52:7a:50:5b:72:18:08:89:c3:36:85:30:c8:95: 71:ea:c0:05:8b:f4:39:10:92:ef:5d:7b:97:89:01: 67:dd:b9:d7:55:0c:98:d0:ca:f1:4d:c3:d2:a7:68: 38:07:ec:77:b3:a4:7f:e5:86:8c:6b:af:a9:f1:09: a8:6c:a7:72:37:e9:23:97:14:d9:c3:7a:49:8b:8f: 65:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:35:FC:70:47:2A:61:C3:43:F2:81:47:83:1B:19:B1:D1:0F:09:83 X509v3 Authority Key Identifier: keyid:D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5e:b4:1f:bb:42:b2:86:46:27:8a:be:84:84:aa:b4:64:44: 72:e3:c0:04:b1:68:43:b5:13:d1:77:04:48:4d:f4:42:08:b8: 64:82:48:bf:50:15:6f:a9:e4:8c:55:2f:f1:6a:de:fb:f1:5f: a5:cf:1e:73:c4:18:85:14:c7:c0:a4:ba:e7:49:fd:de:9e:43: f2:d3:a9:58:ca:02:ab:40:d9:9a:b8:21:17:bd:61:b1:94:c6: 88:83:82:6c:1f:1d:33:06:21:ba:78:92:ae:9b:79:cf:e4:c8: b2:07:4e:08:31:18:25:cc:08:d0:32:a2:e0:e0:30:cb:1f:2e: 8f:d0:42:67:3c:9f:e7:f6:e1:f4:df:75:4e:ca:20:4c:75:bc: 2f:0c:e3:66:24:da:6b:69:ac:7c:07:1f:08:f5:0b:a9:65:34: ab:94:4e:85:e0:ae:01:4e:7a:e0:7a:3e:b7:46:f8:1c:43:e7: e4:54:ce:83:1c:7c:16:94:5d:91:37:fe:17:54:00:54:6f:d0: 06:ac:49:57:8f:84:f1:fd:80:b8:db:92:b9:5e:e5:40:68:c6: 42:e7:15:20:ea:60:06:68:72:57:7d:7b:49:3e:f2:df:99:9f: b5:d4:45:88:3d:1a:53:73:2d:06:5b:51:c4:fb:37:44:6d:5f: 4c:b5:d6:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2MjkxMTAvBgNVBAUTKEQ2NjExQTM0MkUwNUU2RENEQzE5MjQzQkQ1MkY4OEQw MkIwNzg3RDIwHhcNMjUxMjA1MDMwNzU4WhcNMjUxMjEyMDMwNzU4WjAYMRYwFAYD VQQDEw02OTMyNGM4ZS04NjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxz/5Cm4/HZgr3TMIIdtj09PiTAbdjKLycpIPY5UshbzC6fmFtGWptg4JbwF2 NQxwuz0D2yDe72sE6uBpxkLfWboVk3Nab0bF9ovNU5mI6Yq/tuO7woUTAiXNmB09 5qcouD14LjTERKN096aHRaYAwHLcVzSrniKggRTgCbQib0RUaUBCPWbUlCfEQqb+ 9hYi9yXok5dQPtp6IqUdR2eO6bHTlErGxxvhqh9ucd/2GPlSW2zCUnpQW3IYCInD NoUwyJVx6sAFi/Q5EJLvXXuXiQFn3bnXVQyY0MrxTcPSp2g4B+x3s6R/5YaMa6+p 8QmobKdyN+kjlxTZw3pJi49lNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEs1/HBH KmHDQ/KBR4MbGbHRDwmDMB8GA1UdIwQYMBaAFNZhGjQuBebc3BkkO9UviNArB4fS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjYyOS9FQUZCQjU1MDQ1 QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0emNHU1E3MVMtSTBDc0ho OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtRWFOQzRGNXR6Y0dTUTcxUy1JMENzSGg5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjYyOS9FQUZCQjU1MDQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0 emNHU1E3MVMtSTBDc0hoOUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+XrQfu0KyhkYnir6EhKq0ZERy48AEsWhDtRPRdwRITfRCCLhkgki/ UBVvqeSMVS/xat778V+lzx5zxBiFFMfApLrnSf3enkPy06lYygKrQNmauCEXvWGx lMaIg4JsHx0zBiG6eJKum3nP5MiyB04IMRglzAjQMqLg4DDLHy6P0EJnPJ/n9uH0 33VOyiBMdbwvDONmJNpraax8Bx8I9QupZTSrlE6F4K4BTnrgej63RvgcQ+fkVM6D HHwWlF2RN/4XVABUb9AGrElXj4Tx/YC425K5XuVAaMZC5xUg6mAGaHJXfXtJPvLf mZ+11EWIPRpTcy0GW1HE+zdEbV9MtdZf -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:18 2025 by rpki-client