This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft File: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft (raw, json) Hash identifier: h/cCPPE8AOjt7Db32hXhrh2JK6RV+BFmHXrZLAVFqUA= Subject key identifier: 84:D4:87:48:25:C9:5C:17:6D:88:2F:C9:FC:24:90:49:DF:E1:76:60 Authority key identifier: D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 Certificate issuer: /CN=A91C9019/serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Certificate serial: 0270 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft Manifest number: 0270 Signing time: Thu 04 Dec 2025 23:57:59 +0000 Manifest this update: Thu 04 Dec 2025 23:57:59 +0000 Manifest next update: Thu 11 Dec 2025 23:57:59 +0000 Files and hashes: 1: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl (hash: Ut6gd6i8VVKuOFGEwNArPph66BaS2ibiNNsy2dtJ38g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9019, serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Validity Not Before: Dec 4 23:57:59 2025 GMT Not After : Dec 11 23:57:59 2025 GMT Subject: CN=69322007-9d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:88:1f:48:a7:ff:e4:ce:9a:60:8e:c6:41:3e: 75:48:e7:a0:00:aa:a9:23:f7:77:85:93:c3:89:6d: db:07:e6:f4:20:0a:78:6b:7f:26:a8:5a:96:71:0b: c4:31:7a:b3:86:ca:6e:bc:f7:ad:5d:eb:10:db:56: 5c:08:31:cc:64:0e:27:cd:d6:a6:98:ca:89:ae:d7: 89:cd:54:f3:7d:e2:1a:69:f4:50:56:4f:0a:3e:69: 69:a4:34:df:4e:db:a6:88:5a:d9:1c:b9:1c:35:54: 0a:4a:27:0f:10:ba:25:b4:9a:74:e4:d8:7f:0d:55: 66:57:f4:9e:10:39:5c:4f:60:81:d9:14:ab:fa:f4: 6a:00:cc:32:df:d7:31:53:82:d7:28:97:39:4c:b4: 2c:20:5e:fc:99:56:0c:b3:7a:55:4a:5f:7e:68:74: e5:9e:7c:ff:b8:da:6c:22:bc:51:40:de:80:be:bf: cc:b1:12:5e:6f:ec:90:97:0a:56:c6:2a:ed:7d:24: 57:10:cc:9d:0d:90:84:51:31:8d:7c:07:2f:b2:64: ee:38:b9:85:d8:f9:dd:93:f4:5a:f1:54:3a:33:63: 20:39:0a:0d:a7:2f:99:09:3a:6b:34:80:91:cb:c5: 23:eb:ef:c4:9a:61:a0:a2:6d:1c:94:00:f4:0a:f4: 4a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D4:87:48:25:C9:5C:17:6D:88:2F:C9:FC:24:90:49:DF:E1:76:60 X509v3 Authority Key Identifier: keyid:D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:cf:92:eb:bb:7b:64:9c:60:0f:c9:79:aa:c4:97:3b:7d:a4: 4f:d7:a5:4d:63:8d:31:dd:e2:54:d1:f5:35:47:50:e4:a0:1f: 82:d5:4e:47:e9:07:69:aa:ca:34:b9:1a:89:42:ad:5d:ac:4f: 45:7b:00:67:6c:40:ce:c0:03:48:52:8a:4f:28:2e:3b:bd:6d: 8a:35:c5:bc:ac:b4:43:f7:48:9a:36:4b:9a:be:8f:dd:18:13: 6c:8c:c5:6d:03:b6:e2:d6:5d:87:33:bf:68:d7:fc:fa:17:bb: 08:cb:74:68:15:d2:63:0b:48:e0:39:3f:2d:c0:6e:84:15:d6: 43:52:d5:a3:b5:df:23:29:55:ed:30:ca:bd:86:98:b5:a7:17: 4d:e4:65:20:62:89:1c:86:6a:8e:ce:a8:b8:87:96:3a:14:65: 63:73:8a:f9:2f:60:a8:d5:7d:20:f7:0e:3d:af:ed:05:8f:b3: a2:be:df:44:74:1d:f4:ce:11:86:ac:4c:2d:05:71:83:36:a7: ad:2d:c2:a2:79:d0:b4:a3:cb:09:88:09:ca:27:6f:61:dc:71: e4:ee:1a:24:c8:ac:94:cb:b6:f5:06:e8:ee:94:b2:5d:4c:6a: 04:40:0b:a3:d4:02:16:41:3e:82:59:c8:f5:83:cd:de:02:ed: d5:41:dc:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwMTkxMTAvBgNVBAUTKEQwMDJBQkVBQTVCMkNEQzQ4RkVBMDk4M0IwNEE4RUMy ODYwQ0Y5MjkwHhcNMjUxMjA0MjM1NzU5WhcNMjUxMjExMjM1NzU5WjAYMRYwFAYD VQQDEw02OTMyMjAwNy05ZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14gfSKf/5M6aYI7GQT51SOegAKqpI/d3hZPDiW3bB+b0IAp4a38mqFqWcQvE MXqzhspuvPetXesQ21ZcCDHMZA4nzdammMqJrteJzVTzfeIaafRQVk8KPmlppDTf TtumiFrZHLkcNVQKSicPELoltJp05Nh/DVVmV/SeEDlcT2CB2RSr+vRqAMwy39cx U4LXKJc5TLQsIF78mVYMs3pVSl9+aHTlnnz/uNpsIrxRQN6Avr/MsRJeb+yQlwpW xirtfSRXEMydDZCEUTGNfAcvsmTuOLmF2Pndk/Ra8VQ6M2MgOQoNpy+ZCTprNICR y8Uj6+/EmmGgom0clAD0CvRKoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITUh0gl yVwXbYgvyfwkkEnf4XZgMB8GA1UdIwQYMBaAFNACq+qlss3Ej+oJg7BKjsKGDPkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTAxOS8yOEFFNDNEODM0 NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpjU1A2Z21Ec0VxT3dvWU0t U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBS3I2cVd5emNTUDZnbURzRXFPd29ZTS1Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTAxOS8yOEFFNDNEODM0NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpj U1A2Z21Ec0VxT3dvWU0tU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEz5Lru3tknGAPyXmqxJc7faRP16VNY40x3eJU0fU1R1DkoB+C1U5H 6Qdpqso0uRqJQq1drE9FewBnbEDOwANIUopPKC47vW2KNcW8rLRD90iaNkuavo/d GBNsjMVtA7bi1l2HM79o1/z6F7sIy3RoFdJjC0jgOT8twG6EFdZDUtWjtd8jKVXt MMq9hpi1pxdN5GUgYokchmqOzqi4h5Y6FGVjc4r5L2Co1X0g9w49r+0Fj7Oivt9E dB30zhGGrEwtBXGDNqetLcKiedC0o8sJiAnKJ29h3HHk7hokyKyUy7b1BujulLJd TGoEQAuj1AIWQT6CWcj1g83eAu3VQdyk -----END CERTIFICATE-----Generated at Sat Dec 6 22:08:01 2025 by rpki-client