This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft File: -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json) Hash identifier: aEzYv5v74AHqHZyyyQv2CwzAOB7x+1/X2vhAXC0EUOE= Subject key identifier: 33:CD:F6:DB:B5:2B:14:11:FC:69:2A:66:D7:A1:5D:BD:48:C2:86:B2 Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 Certificate issuer: /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft Manifest number: 68 Signing time: Fri 05 Dec 2025 04:50:53 +0000 Manifest this update: Fri 05 Dec 2025 04:50:53 +0000 Manifest next update: Fri 12 Dec 2025 04:50:53 +0000 Files and hashes: 1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: gl23DVDkaueQTA8qhoMX0NrHE1d7HjfNMGTXVO6unf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3 Validity Not Before: Dec 5 04:50:53 2025 GMT Not After : Dec 12 04:50:53 2025 GMT Subject: CN=693264ad-f14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fd:a8:48:cc:6a:08:aa:8c:65:5f:c4:a9:91: d2:18:31:9b:31:07:cc:37:6e:b3:09:32:8b:a7:2c: 78:13:6e:65:a7:23:bc:e2:26:af:fa:8d:0c:d9:92: d3:6d:7d:58:34:d4:30:0b:cc:a8:7c:e3:ab:0c:9e: 31:86:62:05:26:64:25:52:25:30:db:c0:b9:17:7d: 7e:c0:59:1a:02:da:a9:72:19:b1:e9:a4:10:fa:b6: a4:a4:8a:cf:87:fb:39:28:98:35:42:36:bd:2c:2d: 56:69:52:22:46:fc:ca:95:ce:65:79:35:01:06:6a: 00:50:13:10:00:f5:65:5f:c3:c4:18:91:17:20:df: c2:43:55:d7:54:f7:59:23:00:f1:c0:1f:16:76:fa: fd:72:86:25:fd:09:8f:5e:6e:75:dd:32:8e:1d:00: 3c:0e:e2:f5:22:2a:12:0a:40:6b:a3:b9:47:8e:3e: 82:07:38:7c:f7:c0:52:ab:88:05:88:3e:5c:fe:d1: 87:8d:6b:c1:a7:b1:7f:4e:c4:54:f9:29:34:31:52: 48:86:52:e6:58:24:a6:a0:ae:0f:55:c1:df:e7:6e: 51:67:04:4a:94:b6:e8:e8:4b:d0:8f:a2:36:fc:5f: 0a:87:8f:78:c6:d5:c0:6e:31:a0:1b:4a:89:56:d2: 98:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CD:F6:DB:B5:2B:14:11:FC:69:2A:66:D7:A1:5D:BD:48:C2:86:B2 X509v3 Authority Key Identifier: keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:7a:0c:af:dc:b4:0a:56:1f:25:52:e7:bc:14:0c:6c:cf:29: 3f:26:2c:bc:98:9e:90:50:eb:0f:89:fe:2f:15:83:97:c9:55: 1d:96:6d:7c:cd:41:4c:5c:45:ec:53:69:0d:09:50:89:92:80: a3:d0:6f:c3:e6:2d:15:e5:7f:8b:59:c3:79:b6:c9:b7:74:21: 17:75:3a:03:31:65:7a:14:66:1b:08:3c:f0:8e:bf:fa:5e:a4: c6:6e:e4:57:06:c3:5b:7b:f1:bb:13:5b:42:0f:64:f8:1e:33: 23:24:71:43:80:4a:78:3a:6b:56:0e:c2:bd:9c:1c:38:1c:2a: 0a:7f:d7:86:49:0e:e0:c7:61:f7:09:f3:e3:f6:d4:ae:ec:a1: c5:1a:ec:48:59:f9:e5:cf:d1:fe:c9:c7:5f:6a:fd:a0:56:b1: a3:de:78:a7:8d:ad:fd:4e:36:b5:8a:56:4e:6f:01:ee:f7:c1: e5:54:18:ed:47:78:10:fd:e4:63:4d:fa:88:1a:84:fd:6f:fc: 68:39:a7:fb:ff:52:ea:eb:42:8b:45:22:f4:56:c8:13:fd:ec: b3:7b:8a:e5:38:2b:ee:cc:f0:32:6e:33:9b:3e:99:e8:8d:b5: bf:a6:09:e0:6d:64:25:b3:97:8f:34:22:e1:7b:11:c9:f6:43: 29:25:70:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDIwNDExMC8GA1UEBRMoRkFDNDU1NUZCRTMxQTM4MDk2OTBFRTE4Nzg1RDdBQkJF MkE3MjdBMzAeFw0yNTEyMDUwNDUwNTNaFw0yNTEyMTIwNDUwNTNaMBgxFjAUBgNV BAMTDTY5MzI2NGFkLWYxNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC//ahIzGoIqoxlX8SpkdIYMZsxB8w3brMJMounLHgTbmWnI7ziJq/6jQzZktNt fVg01DALzKh846sMnjGGYgUmZCVSJTDbwLkXfX7AWRoC2qlyGbHppBD6tqSkis+H +zkomDVCNr0sLVZpUiJG/MqVzmV5NQEGagBQExAA9WVfw8QYkRcg38JDVddU91kj APHAHxZ2+v1yhiX9CY9ebnXdMo4dADwO4vUiKhIKQGujuUeOPoIHOHz3wFKriAWI Plz+0YeNa8GnsX9OxFT5KTQxUkiGUuZYJKagrg9Vwd/nblFnBEqUtujoS9CPojb8 XwqHj3jG1cBuMaAbSolW0phDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM83227Ur FBH8aSpm16FdvUjChrIwHwYDVR0jBBgwFoAU+sRVX74xo4CWkO4YeF16u+KnJ6Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MjA0LzRDNUQyRURFMzAw OTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRDV2tPNFllRjE2dS1Lbko2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXNSVlg3NHhvNENXa080WWVGMTZ1LUtuSjZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 MjA0LzRDNUQyRURFMzAwOTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRD V2tPNFllRjE2dS1Lbko2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAh6DK/ctApWHyVS57wUDGzPKT8mLLyYnpBQ6w+J/i8Vg5fJVR2WbXzN QUxcRexTaQ0JUImSgKPQb8PmLRXlf4tZw3m2ybd0IRd1OgMxZXoUZhsIPPCOv/pe pMZu5FcGw1t78bsTW0IPZPgeMyMkcUOASng6a1YOwr2cHDgcKgp/14ZJDuDHYfcJ 8+P21K7socUa7EhZ+eXP0f7Jx19q/aBWsaPeeKeNrf1ONrWKVk5vAe73weVUGO1H eBD95GNN+ogahP1v/Gg5p/v/UurrQotFIvRWyBP97LN7iuU4K+7M8DJuM5s+meiN tb+mCeBtZCWzl480IuF7Ecn2QyklcJA= -----END CERTIFICATE-----Generated at Sun Dec 7 03:40:19 2025 by rpki-client