This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft File: m2fIchTtmWVAcRkL688LjZ-hr04.mft (raw, json) Hash identifier: 4y+Ns7Ggbce0isDI06SGzNNBO00ARvG0svUkJQVjsP4= Subject key identifier: 14:45:0E:81:53:C4:1E:0D:29:11:E5:11:18:61:EE:44:C4:E6:2A:B5 Authority key identifier: 9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E Certificate issuer: /CN=A91CBDC8/serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E Certificate serial: 0C6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft Manifest number: 0C55 Signing time: Thu 04 Dec 2025 18:04:45 +0000 Manifest this update: Thu 04 Dec 2025 18:04:44 +0000 Manifest next update: Thu 11 Dec 2025 18:04:44 +0000 Files and hashes: 1: m2fIchTtmWVAcRkL688LjZ-hr04.crl (hash: l8hmZk8p4M8Ep7tD5qavq3TDCSicH0bC+UXBKx0EOGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3181 (0xc6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBDC8, serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E Validity Not Before: Dec 4 18:04:44 2025 GMT Not After : Dec 11 18:04:44 2025 GMT Subject: CN=6931cd3d-f6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d9:10:1f:ad:4c:f7:74:2d:eb:b9:56:74:01: d3:79:57:ab:dc:36:91:b8:d1:a0:d2:2f:36:2b:32: a4:68:48:71:79:10:bf:9c:6e:96:44:37:37:b5:85: 6a:cb:f1:ae:c3:44:15:26:b3:3d:9d:dd:58:63:bb: 8c:44:bb:b7:c9:e3:52:81:94:0d:2b:dd:39:79:01: 5a:dd:f0:41:63:66:c5:c6:f2:53:07:8a:e1:06:b8: 8f:95:48:36:dc:ae:46:9f:f8:5d:1b:7b:00:91:24: ef:6a:56:3a:cf:71:96:2c:b1:b8:a0:05:d1:03:13: 8e:c9:81:d3:04:12:73:da:5c:0d:23:bd:b8:4a:28: 44:5f:f5:31:51:7d:fd:25:fd:80:4e:b6:ea:b5:27: a9:c3:c4:d8:41:9c:77:7d:75:94:f7:2c:73:5e:c1: 87:f1:22:33:9f:78:27:2e:4d:7a:86:9e:3e:d2:36: 30:20:02:69:79:37:9f:59:38:ee:b7:d0:16:2b:5b: 0b:3f:65:06:12:00:04:b7:fa:9c:41:fa:2d:31:4c: d9:5c:6f:2f:92:99:8e:35:6d:39:3e:95:06:07:55: 8a:81:4a:11:16:ce:71:f7:5e:af:68:c8:ec:e2:04: 4e:b1:3a:f7:70:06:ed:42:7e:b3:7c:21:09:97:66: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:45:0E:81:53:C4:1E:0D:29:11:E5:11:18:61:EE:44:C4:E6:2A:B5 X509v3 Authority Key Identifier: keyid:9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:6c:da:ed:66:15:10:f1:58:af:31:fa:3b:4d:6e:a0:e8:b1: 49:de:22:30:82:6a:d7:5b:9d:d7:be:0c:1e:1c:e0:39:0e:86: a9:a5:6a:59:d6:07:9e:59:32:41:f9:94:7f:62:62:c2:bf:b5: 92:cb:0a:1f:82:5f:9e:8b:fe:41:c8:48:01:84:48:d7:fa:37: c5:5b:2c:9c:21:b2:94:bd:2f:e1:ac:5f:9f:e8:45:34:85:4e: 3d:f1:12:5b:ec:2d:ac:6e:ae:b5:75:7d:7f:13:c6:01:a0:46: cc:a7:16:66:74:0f:c1:3e:86:61:a9:0c:06:8d:3c:f8:a4:21: 9e:86:dd:69:ae:bf:4f:5c:23:ba:dd:ac:65:41:8b:35:44:da: 28:26:f6:e3:50:dd:2d:6e:3a:e5:46:e1:e9:10:6b:a0:75:d9: e8:b9:76:ac:6c:84:17:ca:88:b1:45:2e:fa:0d:36:f6:6d:e1: a7:50:8c:18:ac:39:cc:ca:d2:24:e4:85:67:fd:bc:8d:4c:e6: 56:e6:b1:f5:1f:6d:42:83:c2:6b:06:f0:e5:35:0e:97:ce:94: 1a:80:1f:8a:2d:ce:08:60:1e:d6:97:f8:d7:dc:e0:a5:3a:eb: a9:5e:e4:63:d4:6d:cf:03:43:30:e0:cf:84:a3:2f:49:d7:c1: 70:fd:9d:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JEQzgxMTAvBgNVBAUTKDlCNjdDODcyMTRFRDk5NjU0MDcxMTkwQkVCQ0YwQjhE OUZBMUFGNEUwHhcNMjUxMjA0MTgwNDQ0WhcNMjUxMjExMTgwNDQ0WjAYMRYwFAYD VQQDEw02OTMxY2QzZC1mNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tkQH61M93Qt67lWdAHTeVer3DaRuNGg0i82KzKkaEhxeRC/nG6WRDc3tYVq y/Guw0QVJrM9nd1YY7uMRLu3yeNSgZQNK905eQFa3fBBY2bFxvJTB4rhBriPlUg2 3K5Gn/hdG3sAkSTvalY6z3GWLLG4oAXRAxOOyYHTBBJz2lwNI724SihEX/UxUX39 Jf2ATrbqtSepw8TYQZx3fXWU9yxzXsGH8SIzn3gnLk16hp4+0jYwIAJpeTefWTju t9AWK1sLP2UGEgAEt/qcQfotMUzZXG8vkpmONW05PpUGB1WKgUoRFs5x916vaMjs 4gROsTr3cAbtQn6zfCEJl2ZJVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRFDoFT xB4NKRHlERhh7kTE5iq1MB8GA1UdIwQYMBaAFJtnyHIU7ZllQHEZC+vPC42foa9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkRDOC82Njk3NjNGMDE4 RTAxMUVBQTBDMzhFN0JDNEY5QUUwMi9tMmZJY2hUdG1XVkFjUmtMNjg4TGpaLWhy MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20yZkljaFR0bVdWQWNSa0w2ODhMalotaHIwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkRDOC82Njk3NjNGMDE4RTAxMUVBQTBDMzhFN0JDNEY5QUUwMi9tMmZJY2hUdG1X VkFjUmtMNjg4TGpaLWhyMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmbNrtZhUQ8VivMfo7TW6g6LFJ3iIwgmrXW53XvgweHOA5DoappWpZ 1geeWTJB+ZR/YmLCv7WSywofgl+ei/5ByEgBhEjX+jfFWyycIbKUvS/hrF+f6EU0 hU498RJb7C2sbq61dX1/E8YBoEbMpxZmdA/BPoZhqQwGjTz4pCGeht1prr9PXCO6 3axlQYs1RNooJvbjUN0tbjrlRuHpEGugddnouXasbIQXyoixRS76DTb2beGnUIwY rDnMytIk5IVn/byNTOZW5rH1H21Cg8JrBvDlNQ6XzpQagB+KLc4IYB7Wl/jX3OCl OuupXuRj1G3PA0Mw4M+Eoy9J18Fw/Z0q -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:42 2025 by rpki-client