This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft File: -BaXnSqJmynqWV8rVO6jmQokNvk.mft (raw, json) Hash identifier: K7kv1MQkFC2F4GP4bmqVoJAxxBbzC3VMgRhbiJEiO1Y= Subject key identifier: D6:D0:B5:66:95:62:2E:CC:CA:32:AB:69:BB:76:3F:AF:4E:4F:73:79 Authority key identifier: F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 Certificate issuer: /CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Certificate serial: 1655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft Manifest number: 1655 Signing time: Sat 06 Dec 2025 16:17:57 +0000 Manifest this update: Sat 06 Dec 2025 16:17:57 +0000 Manifest next update: Sat 13 Dec 2025 16:17:57 +0000 Files and hashes: 1: -BaXnSqJmynqWV8rVO6jmQokNvk.crl (hash: rq5hOIt7DocmUxR8E9Iipt9UZ6+RlEY478LdSIwYORM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5717 (0x1655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5DB6, serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Validity Not Before: Dec 6 16:17:57 2025 GMT Not After : Dec 13 16:17:57 2025 GMT Subject: CN=69345735-252a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c1:1c:37:97:58:7b:d0:50:04:62:b1:fa:f9: 30:96:aa:0b:7d:b7:26:3e:9a:12:37:a6:53:9b:a5: a5:dd:13:3f:20:97:1c:1c:7c:f6:5a:bf:e1:f3:e3: 6f:63:3b:ce:c8:05:16:d3:5f:d9:21:8e:ad:0a:3e: b5:a0:49:c7:4a:00:22:ae:aa:52:cb:d1:3b:b3:3c: 55:ec:81:b2:4f:06:ae:1f:28:0b:92:31:29:3c:ba: a3:83:48:ec:34:2b:b7:dd:33:8e:09:05:b2:06:30: 43:61:fd:3c:23:df:1c:cb:7c:4a:ef:39:2f:b4:a4: 63:34:7f:dc:0d:1f:f8:84:06:ba:57:dd:0d:f6:10: 29:7e:1e:5d:e1:c1:6e:b4:5d:c7:8d:53:49:5f:39: 1f:7f:fa:d9:69:d1:15:21:cf:1c:2f:14:0d:62:41: 72:f1:d1:32:50:75:4d:46:68:7c:6e:df:ea:1d:6b: 80:95:37:12:49:a8:58:72:7c:bc:77:f4:11:83:4d: f1:3a:f4:2a:52:8e:1a:db:b3:e0:bf:3c:70:34:67: ba:98:15:3e:22:05:eb:d2:49:7a:a0:16:0e:4a:96: 7d:a5:e6:1b:cc:af:b7:db:ef:57:fb:39:05:33:62: 8d:a1:45:35:72:c8:f3:3b:81:eb:4d:54:e2:b3:10: 19:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D0:B5:66:95:62:2E:CC:CA:32:AB:69:BB:76:3F:AF:4E:4F:73:79 X509v3 Authority Key Identifier: keyid:F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:c1:70:6b:2c:ce:63:b3:5f:1a:89:c1:7a:47:04:8f:61:b0: 82:83:06:ac:b2:21:9b:05:73:80:a4:e8:c3:7c:63:f0:43:47: 55:23:e7:66:08:55:3b:9a:14:15:63:71:9e:04:78:b4:72:9f: 29:53:d0:e8:61:81:19:b1:d3:6c:08:99:2e:f5:e7:f9:c7:a7: 1d:63:31:ad:59:44:5b:a2:f6:f7:aa:7d:61:23:2c:48:b1:c6: 0e:a9:a2:18:07:45:66:0a:3d:46:ea:58:9d:25:53:3d:b2:fa: cc:0b:a2:2a:75:5e:2b:a9:13:19:88:75:6f:d6:84:e6:fd:48: 1e:25:b2:db:0b:c3:96:26:44:82:4a:f8:4f:1e:f2:63:cb:ce: f4:0f:97:2c:fd:e9:92:b8:6b:be:79:2d:46:97:5e:d9:77:a0: 9b:c0:05:1e:37:e4:46:6e:24:f6:0c:41:41:d7:c6:c0:f9:12: 11:b4:d3:0d:27:59:88:4f:e3:1a:13:27:fe:7e:a9:0c:7f:d8: e9:67:1a:a1:7e:90:d5:d8:92:20:d0:f0:f9:f4:89:f8:1c:c5: 0e:06:3b:16:64:ef:80:0a:15:c9:d7:21:99:92:c1:37:e7:19: da:b4:26:d2:b7:a9:89:d0:51:9d:67:98:c7:0a:88:48:87:ba: 36:c2:3a:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEQjYxMTAvBgNVBAUTKEY4MTY5NzlEMkE4OTlCMjlFQTU5NUYyQjU0RUVBMzk5 MEEyNDM2RjkwHhcNMjUxMjA2MTYxNzU3WhcNMjUxMjEzMTYxNzU3WjAYMRYwFAYD VQQDEw02OTM0NTczNS0yNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MEcN5dYe9BQBGKx+vkwlqoLfbcmPpoSN6ZTm6Wl3RM/IJccHHz2Wr/h8+Nv YzvOyAUW01/ZIY6tCj61oEnHSgAirqpSy9E7szxV7IGyTwauHygLkjEpPLqjg0js NCu33TOOCQWyBjBDYf08I98cy3xK7zkvtKRjNH/cDR/4hAa6V90N9hApfh5d4cFu tF3HjVNJXzkff/rZadEVIc8cLxQNYkFy8dEyUHVNRmh8bt/qHWuAlTcSSahYcny8 d/QRg03xOvQqUo4a27PgvzxwNGe6mBU+IgXr0kl6oBYOSpZ9peYbzK+32+9X+zkF M2KNoUU1csjzO4HrTVTisxAZlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbQtWaV Yi7MyjKrabt2P69OT3N5MB8GA1UdIwQYMBaAFPgWl50qiZsp6llfK1Tuo5kKJDb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENURCNi8xM0Y5NkI4MjE4 NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15bnFXVjhyVk82am1Rb2tO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CYVhuU3FKbXlucVdWOHJWTzZqbVFva052ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NURCNi8xM0Y5NkI4MjE4NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15 bnFXVjhyVk82am1Rb2tOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQwXBrLM5js18aicF6RwSPYbCCgwassiGbBXOApOjDfGPwQ0dVI+dm CFU7mhQVY3GeBHi0cp8pU9DoYYEZsdNsCJku9ef5x6cdYzGtWURbovb3qn1hIyxI scYOqaIYB0VmCj1G6lidJVM9svrMC6IqdV4rqRMZiHVv1oTm/UgeJbLbC8OWJkSC SvhPHvJjy870D5cs/emSuGu+eS1Gl17Zd6CbwAUeN+RGbiT2DEFB18bA+RIRtNMN J1mIT+MaEyf+fqkMf9jpZxqhfpDV2JIg0PD59In4HMUOBjsWZO+AChXJ1yGZksE3 5xnatCbSt6mJ0FGdZ5jHCohIh7o2wjri -----END CERTIFICATE-----Generated at Sun Dec 7 03:32:32 2025 by rpki-client