This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft File: iS3iAjP9DGSOLnuflZUPOpaBfL8.mft (raw, json) Hash identifier: iZjmA+Mu9vPxZJrAJ4mjUWHxsgXOdW4o0d28siWMPpo= Subject key identifier: 5D:2E:1E:34:EB:D9:D9:C1:B2:A3:63:0D:BC:F8:B1:0F:D4:04:75:BA Authority key identifier: 89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF Certificate issuer: /CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft Manifest number: EE Signing time: Fri 05 Dec 2025 03:23:07 +0000 Manifest this update: Fri 05 Dec 2025 03:23:06 +0000 Manifest next update: Fri 12 Dec 2025 03:23:06 +0000 Files and hashes: 1: iS3iAjP9DGSOLnuflZUPOpaBfL8.crl (hash: I/ZGCFT8szmR56WOn3CHV4wQrblG+6gORYWxaJEL2uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Validity Not Before: Dec 5 03:23:06 2025 GMT Not After : Dec 12 03:23:06 2025 GMT Subject: CN=6932501a-299d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5e:c1:05:6f:3e:4a:64:55:62:21:70:53:a6: 92:67:37:da:c1:d8:e3:09:c4:39:72:ad:68:a5:ad: 1e:27:1d:ed:9f:1c:4a:e4:71:40:19:6f:d2:20:88: 28:50:c1:cf:be:59:8e:3e:af:91:d2:e9:3b:1b:7d: d6:fe:3f:6c:dd:81:1d:d4:9e:c8:43:2d:96:58:b7: 69:2f:99:09:07:9f:6b:b9:1a:7a:81:13:ea:99:f5: 26:77:1b:5b:79:82:2b:6f:b4:63:63:09:f6:12:ec: db:eb:2f:cc:39:e1:c2:27:77:e7:02:0c:d4:34:1e: 84:b9:05:c4:e2:0d:12:4b:db:c9:48:e3:97:a5:96: 21:1c:4c:78:9a:03:85:0a:7d:c7:6e:34:0b:97:c5: b4:b0:fc:90:7c:89:f5:2c:f4:c8:90:8b:14:f8:9e: e2:f0:2d:b2:ae:ce:57:c8:cd:ad:2e:d3:ec:8b:da: 6c:4f:eb:de:e9:07:83:71:a0:41:e8:23:51:95:b1: b3:85:70:aa:49:de:8a:3f:05:5a:f1:77:28:cd:be: 2e:87:98:6c:a6:e5:9f:c5:f4:34:45:87:5e:fc:f5: 74:64:87:b2:5a:e6:1b:6b:c0:7d:49:b6:89:8d:16: 0e:7f:e7:e4:04:3a:8d:a2:9a:fa:b8:38:f9:42:cd: ff:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2E:1E:34:EB:D9:D9:C1:B2:A3:63:0D:BC:F8:B1:0F:D4:04:75:BA X509v3 Authority Key Identifier: keyid:89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:d3:b2:01:2c:5f:33:f2:53:82:1c:91:33:88:d1:b3:eb:03: 13:dc:c8:b1:30:cd:8f:24:32:f8:d9:27:d3:58:11:4a:fb:0a: 52:9c:2e:d4:a2:ae:be:39:81:cd:23:66:71:e0:e6:61:c1:ef: 38:e4:97:4d:2d:26:7b:b3:9c:4a:0c:d0:6e:da:67:16:2a:69: cc:f5:e2:fb:f8:23:bb:98:7c:ff:ae:d4:b7:a4:15:e2:8d:58: ed:fd:f4:43:b3:9f:df:bb:7f:8b:ac:3a:b0:f0:83:a8:09:06: 89:9e:85:86:27:31:29:ef:92:c5:58:fb:a9:02:2f:66:dd:28: e0:8a:12:51:32:db:ba:8c:78:c1:bb:17:d6:d2:2f:31:0d:1d: 12:35:a3:b4:59:18:e4:79:4a:ea:2d:5c:97:25:74:51:69:a4: 39:c6:aa:6e:b5:f0:31:68:3b:34:91:94:50:54:94:93:9f:38: 24:93:eb:6b:1a:45:6b:1e:ce:a3:75:de:a5:4f:3e:63:7d:3b: 83:ad:a7:1b:45:07:bc:ff:8a:91:59:a9:6f:b8:d4:1c:21:a4: bf:f6:b6:58:c3:b9:10:77:c5:ff:6f:f1:df:50:80:46:51:65: c1:27:0f:0c:78:96:cb:c2:32:6d:32:8c:cb:4d:de:34:e5:61: 06:75:42:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDg5MkRFMjAyMzNGRDBDNjQ4RTJFN0I5Rjk1OTUwRjNB OTY4MTdDQkYwHhcNMjUxMjA1MDMyMzA2WhcNMjUxMjEyMDMyMzA2WjAYMRYwFAYD VQQDEw02OTMyNTAxYS0yOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlV7BBW8+SmRVYiFwU6aSZzfawdjjCcQ5cq1opa0eJx3tnxxK5HFAGW/SIIgo UMHPvlmOPq+R0uk7G33W/j9s3YEd1J7IQy2WWLdpL5kJB59ruRp6gRPqmfUmdxtb eYIrb7RjYwn2Euzb6y/MOeHCJ3fnAgzUNB6EuQXE4g0SS9vJSOOXpZYhHEx4mgOF Cn3HbjQLl8W0sPyQfIn1LPTIkIsU+J7i8C2yrs5XyM2tLtPsi9psT+ve6QeDcaBB 6CNRlbGzhXCqSd6KPwVa8Xcozb4uh5hspuWfxfQ0RYde/PV0ZIeyWuYba8B9SbaJ jRYOf+fkBDqNopr6uDj5Qs3/FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0uHjTr 2dnBsqNjDbz4sQ/UBHW6MB8GA1UdIwQYMBaAFIkt4gIz/Qxkji57n5WVDzqWgXy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9GMjJCOUNDQTY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9pUzNpQWpQOURHU09MbnVmbFpVUE9wYUJm TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lTM2lBalA5REdTT0xudWZsWlVQT3BhQmZMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9GMjJCOUNDQTY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9pUzNpQWpQOURH U09MbnVmbFpVUE9wYUJmTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn07IBLF8z8lOCHJEziNGz6wMT3MixMM2PJDL42SfTWBFK+wpSnC7U oq6+OYHNI2Zx4OZhwe845JdNLSZ7s5xKDNBu2mcWKmnM9eL7+CO7mHz/rtS3pBXi jVjt/fRDs5/fu3+LrDqw8IOoCQaJnoWGJzEp75LFWPupAi9m3SjgihJRMtu6jHjB uxfW0i8xDR0SNaO0WRjkeUrqLVyXJXRRaaQ5xqputfAxaDs0kZRQVJSTnzgkk+tr GkVrHs6jdd6lTz5jfTuDracbRQe8/4qRWalvuNQcIaS/9rZYw7kQd8X/b/HfUIBG UWXBJw8MeJbLwjJtMozLTd405WEGdUKk -----END CERTIFICATE-----Generated at Sat Dec 6 13:28:06 2025 by rpki-client