This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft File: MAKFsSjLjblfHkH_vS68Io1FPvw.mft (raw, json) Hash identifier: VitMotSI6RAbmtZ4r5NEgcLo29CeJoMvR3BJnxhh5fI= Subject key identifier: D5:2C:AF:1B:9D:A4:27:9F:97:97:8D:16:00:1C:C6:54:67:FC:BB:56 Authority key identifier: 30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC Certificate issuer: /CN=A91CD39D/serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC Certificate serial: 04C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft Manifest number: 04C3 Signing time: Thu 04 Dec 2025 22:24:26 +0000 Manifest this update: Thu 04 Dec 2025 22:24:26 +0000 Manifest next update: Thu 11 Dec 2025 22:24:26 +0000 Files and hashes: 1: MAKFsSjLjblfHkH_vS68Io1FPvw.crl (hash: MSFGocAbqA9GhF49Zn238zvCYJnBNcnzMOzKlY5IAow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1219 (0x4c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC Validity Not Before: Dec 4 22:24:26 2025 GMT Not After : Dec 11 22:24:26 2025 GMT Subject: CN=69320a1a-4020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:aa:dd:7f:87:c7:ec:99:f0:11:f6:d5:31: 4f:1f:c9:58:f5:f1:cd:93:e3:1a:72:36:c7:ba:df: 4f:f3:2a:18:9d:85:c9:53:77:8d:ba:d7:43:58:c8: 64:0c:0a:e5:29:4a:08:13:e6:96:fd:ee:b7:3b:2b: dc:c4:e4:82:d3:40:8b:14:84:cd:56:6f:92:1d:78: 33:a5:42:7c:4b:d4:03:4d:45:e8:85:5c:47:c6:61: 7e:a8:8d:d3:4f:e4:96:f9:e9:9d:21:c1:20:aa:4f: c2:58:76:5b:8a:c2:a3:e5:d3:da:2a:1e:39:e9:21: e3:2b:dc:d8:e7:06:3d:f5:cd:55:43:1c:fb:ef:b5: d7:b8:5c:29:0b:1b:d5:13:70:d6:66:b6:dd:d1:3f: 43:49:1d:ea:6c:25:5e:3c:ac:af:08:24:a1:bf:1c: 8e:d8:e1:1f:15:aa:29:7c:7c:d5:da:2d:d0:ea:23: 53:ca:77:1b:86:04:04:a9:f9:8f:4d:d1:f5:aa:ab: 47:53:cf:8c:a2:82:47:b4:12:fe:93:7a:e6:e8:f8: 6f:44:25:55:d0:2b:f4:26:6e:fa:fe:84:64:67:1c: 76:b6:c7:20:c2:32:d2:34:ea:fb:9b:86:eb:93:62: d1:21:bb:02:90:e6:2b:1a:e6:3b:ca:c8:0a:22:39: d3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2C:AF:1B:9D:A4:27:9F:97:97:8D:16:00:1C:C6:54:67:FC:BB:56 X509v3 Authority Key Identifier: keyid:30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:27:24:0c:70:25:9f:11:56:17:2f:fd:3f:fe:54:1a:99:d3: 70:15:43:2b:54:6d:f8:52:72:51:74:c9:23:4d:ff:93:72:2d: 84:f2:21:fe:06:30:f5:f4:78:ec:d8:5a:bd:d8:2a:3b:80:d8: 13:25:c5:76:07:88:79:09:fa:40:f1:c5:39:a1:5f:cf:eb:a0: be:52:32:21:79:cd:51:94:f8:67:19:42:56:ed:70:5e:15:54: 33:86:26:a8:1a:da:44:af:a3:3b:63:d4:d4:f2:7d:76:63:1c: cf:60:86:9b:ce:63:f4:8e:8c:9e:25:07:a0:0e:d2:82:31:0a: c7:b3:19:df:4f:06:fc:f5:70:ab:b0:d6:cb:4d:6f:fe:b5:5f: 1d:f0:a7:a1:f4:35:f3:63:98:f5:27:f6:cc:fb:b1:41:f2:6d: a7:eb:6e:13:8e:44:2c:48:32:53:86:76:4b:62:f7:c9:0d:0d: de:ef:b9:72:68:2c:62:bd:35:8f:a2:f0:eb:48:df:65:bb:00: eb:44:42:2b:68:29:68:ae:f0:58:72:2b:66:e1:10:3d:b7:ef: cc:ec:82:ed:9a:f9:db:91:39:fe:1a:be:9c:38:72:51:90:35: 26:83:0e:1f:a2:e9:31:5e:8e:5e:23:0d:db:a2:34:3a:c9:61: fc:a7:50:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDMwMDI4NUIxMjhDQjhEQjk1RjFFNDFGRkJEMkVCQzIy OEQ0NTNFRkMwHhcNMjUxMjA0MjIyNDI2WhcNMjUxMjExMjIyNDI2WjAYMRYwFAYD VQQDEw02OTMyMGExYS00MDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoOq3X+Hx+yZ8BH21TFPH8lY9fHNk+MacjbHut9P8yoYnYXJU3eNutdDWMhk DArlKUoIE+aW/e63OyvcxOSC00CLFITNVm+SHXgzpUJ8S9QDTUXohVxHxmF+qI3T T+SW+emdIcEgqk/CWHZbisKj5dPaKh456SHjK9zY5wY99c1VQxz777XXuFwpCxvV E3DWZrbd0T9DSR3qbCVePKyvCCShvxyO2OEfFaopfHzV2i3Q6iNTyncbhgQEqfmP TdH1qqtHU8+MooJHtBL+k3rm6PhvRCVV0Cv0Jm76/oRkZxx2tscgwjLSNOr7m4br k2LRIbsCkOYrGuY7ysgKIjnTLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUsrxud pCefl5eNFgAcxlRn/LtWMB8GA1UdIwQYMBaAFDAChbEoy425Xx5B/70uvCKNRT78 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ENDRFMzZEMDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9NQUtGc1NqTGpibGZIa0hfdlM2OElvMUZQ dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01BS0ZzU2pMamJsZkhrSF92UzY4SW8xRlB2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ENDRFMzZEMDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9NQUtGc1NqTGpi bGZIa0hfdlM2OElvMUZQdncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoJyQMcCWfEVYXL/0//lQamdNwFUMrVG34UnJRdMkjTf+Tci2E8iH+ BjD19Hjs2Fq92Co7gNgTJcV2B4h5CfpA8cU5oV/P66C+UjIhec1RlPhnGUJW7XBe FVQzhiaoGtpEr6M7Y9TU8n12YxzPYIabzmP0joyeJQegDtKCMQrHsxnfTwb89XCr sNbLTW/+tV8d8Keh9DXzY5j1J/bM+7FB8m2n624TjkQsSDJThnZLYvfJDQ3e77ly aCxivTWPovDrSN9luwDrREIraClorvBYcitm4RA9t+/M7ILtmvnbkTn+Gr6cOHJR kDUmgw4foukxXo5eIw3bojQ6yWH8p1Dy -----END CERTIFICATE-----Generated at Sat Dec 6 15:14:55 2025 by rpki-client