This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft File: datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json) Hash identifier: 1gAkqUI8Bwdr6lGmBLtvzscKY3HgybMP7B1hRzdRHHQ= Subject key identifier: EC:9C:11:72:BA:A6:48:7F:A8:7C:A9:A1:15:2F:7F:11:85:65:A1:71 Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A Certificate issuer: /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft Manifest number: 01CD Signing time: Fri 05 Dec 2025 01:06:06 +0000 Manifest this update: Fri 05 Dec 2025 01:06:06 +0000 Manifest next update: Fri 12 Dec 2025 01:06:06 +0000 Files and hashes: 1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: JYCUAUVBl/WtzfdRgQ3a05zg+u7e6tK7au6ohaa8s1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Validity Not Before: Dec 5 01:06:06 2025 GMT Not After : Dec 12 01:06:06 2025 GMT Subject: CN=69322ffe-be01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:56:92:60:d3:75:d6:fe:75:c5:7a:69:a8: 1e:07:6d:69:20:bc:a5:ea:75:2d:7d:70:75:db:48: a7:c7:78:06:c0:5e:1b:a7:25:f4:55:56:1e:37:b7: 59:9f:9d:3e:82:dc:63:39:7d:d5:9b:25:08:23:85: 49:f4:b4:94:a4:23:b0:78:7e:2e:e8:56:29:67:9d: f8:9b:d0:c3:40:cc:d9:cb:0e:51:38:43:8a:bc:4c: 86:28:10:d7:57:94:c6:e7:07:5f:a2:e6:fa:69:b8: 8f:34:95:1f:d1:a1:e0:f2:9f:f2:c1:c6:2c:52:37: a9:46:03:f5:81:44:82:fc:bc:31:e4:5c:e1:8f:b7: d6:9c:35:b2:e6:2a:fe:ab:fa:c6:a2:8d:ee:9c:8b: 34:39:af:58:62:e3:fd:cc:2b:75:32:6a:0e:1a:c1: ba:40:d0:57:b7:58:ee:08:a8:0f:ee:ab:4d:1d:8c: 94:47:f4:7a:8d:f6:64:51:83:bd:51:f6:35:14:c2: 93:fb:fe:53:3e:0e:50:39:be:e4:5a:83:4b:15:a6: 32:71:62:27:a4:58:8c:a0:48:ab:40:40:66:6a:77: 2a:9d:bd:c7:7f:6f:52:76:df:64:e2:5f:60:32:99: 3f:27:3d:a7:1a:15:47:c2:1e:25:cb:bd:71:73:12: b1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9C:11:72:BA:A6:48:7F:A8:7C:A9:A1:15:2F:7F:11:85:65:A1:71 X509v3 Authority Key Identifier: keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:27:7c:53:90:51:69:6c:01:e4:4b:f9:50:3b:ec:b3:a6:6a: 05:3a:de:d5:72:9a:9f:9a:ff:d4:ee:86:95:b5:b3:0e:a6:f4: d6:e0:65:87:2e:79:bb:69:4f:19:fd:06:16:47:8f:dc:c5:01: 06:d5:49:fc:70:bc:9a:df:0b:b4:86:22:85:11:87:73:27:b6: e5:10:74:f1:bf:41:b3:04:7f:88:8b:bb:4a:5e:d1:04:7e:28: 3d:f7:fa:cc:1b:22:75:f7:d4:24:a1:09:0e:b3:8a:1b:d2:41: 02:29:4e:1f:ac:d5:81:a0:6c:49:64:e0:05:f9:df:2e:f7:92: 9b:91:b9:81:58:55:44:e5:42:71:99:23:35:67:74:41:0d:09: ef:8c:5e:60:a0:bb:bf:47:b7:9b:c9:9a:87:d2:60:07:dd:08: 1a:44:41:b9:21:77:35:1a:14:82:72:a2:93:b0:07:05:f4:7f: 5d:85:a1:72:c0:fb:a9:d3:a4:1c:6c:56:43:15:fc:c4:f9:5a: f3:63:74:14:a9:3f:21:76:23:4e:d2:62:5d:e3:52:d9:a2:0b: 14:7a:7d:62:14:19:18:64:5e:8e:27:c9:49:22:51:94:43:7a: d0:b5:9f:71:16:4d:1e:4d:a3:70:6f:c7:b8:d5:01:0a:b5:78: e8:b0:5f:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDMxMTAvBgNVBAUTKDc1QUI0QjhEQjMwMTUzQkQ3MjZDRjlGOTYyNTBCRTA0 MDREODhCMUEwHhcNMjUxMjA1MDEwNjA2WhcNMjUxMjEyMDEwNjA2WjAYMRYwFAYD VQQDEw02OTMyMmZmZS1iZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLxWkmDTddb+dcV6aageB21pILyl6nUtfXB120inx3gGwF4bpyX0VVYeN7dZ n50+gtxjOX3VmyUII4VJ9LSUpCOweH4u6FYpZ534m9DDQMzZyw5ROEOKvEyGKBDX V5TG5wdfoub6abiPNJUf0aHg8p/ywcYsUjepRgP1gUSC/Lwx5Fzhj7fWnDWy5ir+ q/rGoo3unIs0Oa9YYuP9zCt1MmoOGsG6QNBXt1juCKgP7qtNHYyUR/R6jfZkUYO9 UfY1FMKT+/5TPg5QOb7kWoNLFaYycWInpFiMoEirQEBmancqnb3Hf29Sdt9k4l9g Mpk/Jz2nGhVHwh4ly71xcxKxQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOycEXK6 pkh/qHypoRUvfxGFZaFxMB8GA1UdIwQYMBaAFHWrS42zAVO9cmz5+WJQvgQE2Isa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENEMy83RjYwMEVDQTA4 RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3MXliUG41WWxDLUJBVFlp eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhdExqYk1CVTcxeWJQbjVZbEMtQkFUWWl4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENEMy83RjYwMEVDQTA4RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3 MXliUG41WWxDLUJBVFlpeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuJ3xTkFFpbAHkS/lQO+yzpmoFOt7Vcpqfmv/U7oaVtbMOpvTW4GWH Lnm7aU8Z/QYWR4/cxQEG1Un8cLya3wu0hiKFEYdzJ7blEHTxv0GzBH+Ii7tKXtEE fig99/rMGyJ199QkoQkOs4ob0kECKU4frNWBoGxJZOAF+d8u95KbkbmBWFVE5UJx mSM1Z3RBDQnvjF5goLu/R7ebyZqH0mAH3QgaREG5IXc1GhSCcqKTsAcF9H9dhaFy wPup06QcbFZDFfzE+VrzY3QUqT8hdiNO0mJd41LZogsUen1iFBkYZF6OJ8lJIlGU Q3rQtZ9xFk0eTaNwb8e41QEKtXjosF9q -----END CERTIFICATE-----Generated at Sat Dec 6 19:41:00 2025 by rpki-client