This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft File: x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json) Hash identifier: D1u3EWMN2HnwiCc0lP2cI8txoCyHlSWTYLPs5b/sBM4= Subject key identifier: A8:F9:03:65:9A:EC:0D:03:8E:F2:7A:77:DE:6B:7A:B6:A2:19:8E:5E Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 Certificate issuer: /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Certificate serial: 071B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft Manifest number: 13FC Signing time: Sat 06 Dec 2025 17:49:49 +0000 Manifest this update: Sat 06 Dec 2025 17:49:49 +0000 Manifest next update: Sat 13 Dec 2025 17:49:49 +0000 Files and hashes: 1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: NzF6nx5mLyU+ZWhIuTk6NvALN9TmiP3x591/kWNz6Ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1819 (0x71b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Validity Not Before: Dec 6 17:49:49 2025 GMT Not After : Dec 13 17:49:49 2025 GMT Subject: CN=69346cbd-3878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0e:84:0f:d9:45:39:da:a7:a7:83:f9:d5:55: 95:41:e2:b5:4d:2b:6e:b4:96:bf:85:33:5a:c7:0c: d2:5f:0c:8d:0f:76:c5:0b:ab:d5:bf:07:7f:83:17: 69:12:02:59:9b:02:a2:37:df:fe:59:39:ab:8b:c0: db:88:10:8f:95:8a:2b:76:d2:9a:5c:8f:9b:33:3a: 9c:80:9c:bd:c0:5e:e8:1e:4e:e6:1d:fc:cb:72:60: f9:87:67:6a:0f:78:fb:47:7d:3a:48:ce:14:fa:0a: b7:b5:be:2e:90:c5:ce:80:70:84:3e:22:7a:b7:0e: 91:b6:b2:ab:16:9e:1e:23:30:25:b2:3d:c7:a9:d5: 66:50:96:16:79:47:81:b1:76:41:ab:fa:ff:e1:3b: ae:27:fa:bd:c9:e4:10:c7:66:06:d8:7e:dc:12:2a: c3:4a:89:70:4b:4f:cf:67:43:2a:44:6e:0b:42:cf: a2:66:ca:4d:9e:a5:c3:e7:79:25:71:2b:9f:1d:70: c1:19:3d:5a:f2:e2:98:a4:97:de:96:d1:b4:26:d4: 64:15:10:aa:64:49:2a:e8:1a:0b:24:74:47:d9:b5: 5c:77:a8:38:97:64:61:e2:eb:cc:80:f5:f4:0b:d3: 48:e0:fc:87:ca:a7:e4:6a:06:eb:dd:6e:dd:b1:fc: 4d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F9:03:65:9A:EC:0D:03:8E:F2:7A:77:DE:6B:7A:B6:A2:19:8E:5E X509v3 Authority Key Identifier: keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:80:5e:8a:56:d9:44:0b:76:da:df:76:a6:7d:13:fb:e2:bd: 7e:8b:ee:2c:9c:b4:40:cb:82:cd:91:f5:52:66:85:ab:70:91: bb:d9:6f:ca:75:96:c6:65:b4:da:b3:17:fc:e0:89:4a:b2:12: 78:0c:68:59:54:46:b2:cf:c8:8b:f9:f3:87:0e:cf:99:8c:87: 60:05:25:5e:a5:f2:22:cc:8e:16:04:3f:27:4a:a8:17:c4:5d: 3c:95:26:88:3a:f3:31:d4:b6:8f:fa:14:c6:be:d3:ba:19:40: 72:77:bd:17:9d:8b:6a:d9:91:3b:59:dd:e7:8c:80:8c:04:51: 80:68:b1:08:b0:f0:f6:eb:82:7f:e2:d7:3f:ab:56:17:8f:99: ab:f7:2b:01:f3:ca:29:e9:7a:90:d1:4f:8f:79:2b:7d:4e:8c: d4:93:49:9c:61:c4:20:a7:da:51:d8:3c:a8:f7:6e:92:01:03: 43:bf:dd:3b:3e:ae:e5:b8:1b:2c:63:e7:89:ea:8f:b3:e7:5c: d4:10:28:ee:be:1c:60:e8:51:a3:c8:8b:88:23:0b:3b:bb:40: c7:bf:a6:20:ec:ef:92:59:9d:2a:93:69:9d:70:e8:f2:b6:bb: df:2b:b3:af:b6:a4:fe:b9:52:db:8d:08:f5:70:68:d1:ea:03: 73:af:96:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKEM3QUVDMEMxMUI2REYxMjk4QjEyNTA5ODMxQTRDQzAy NDREQURDRjIwHhcNMjUxMjA2MTc0OTQ5WhcNMjUxMjEzMTc0OTQ5WjAYMRYwFAYD VQQDEw02OTM0NmNiZC0zODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0A6ED9lFOdqnp4P51VWVQeK1TStutJa/hTNaxwzSXwyND3bFC6vVvwd/gxdp EgJZmwKiN9/+WTmri8DbiBCPlYordtKaXI+bMzqcgJy9wF7oHk7mHfzLcmD5h2dq D3j7R306SM4U+gq3tb4ukMXOgHCEPiJ6tw6RtrKrFp4eIzAlsj3HqdVmUJYWeUeB sXZBq/r/4TuuJ/q9yeQQx2YG2H7cEirDSolwS0/PZ0MqRG4LQs+iZspNnqXD53kl cSufHXDBGT1a8uKYpJfeltG0JtRkFRCqZEkq6BoLJHRH2bVcd6g4l2Rh4uvMgPX0 C9NI4PyHyqfkagbr3W7dsfxNbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj5A2Wa 7A0DjvJ6d95reraiGY5eMB8GA1UdIwQYMBaAFMeuwMEbbfEpixJQmDGkzAJE2tzy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhTbUxFbENZTWFUTUFrVGEz UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2N0F3UnR0OFNtTEVsQ1lNYVRNQWtUYTNQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhT bUxFbENZTWFUTUFrVGEzUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIgF6KVtlEC3ba33amfRP74r1+i+4snLRAy4LNkfVSZoWrcJG72W/K dZbGZbTasxf84IlKshJ4DGhZVEayz8iL+fOHDs+ZjIdgBSVepfIizI4WBD8nSqgX xF08lSaIOvMx1LaP+hTGvtO6GUByd70XnYtq2ZE7Wd3njICMBFGAaLEIsPD264J/ 4tc/q1YXj5mr9ysB88op6XqQ0U+PeSt9TozUk0mcYcQgp9pR2Dyo926SAQNDv907 Pq7luBssY+eJ6o+z51zUECjuvhxg6FGjyIuIIws7u0DHv6Yg7O+SWZ0qk2mdcOjy trvfK7OvtqT+uVLbjQj1cGjR6gNzr5Zx -----END CERTIFICATE-----Generated at Sat Dec 6 22:22:58 2025 by rpki-client