This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: PtxH3Ck2q8DVNgA/Xr/NX7uXFycTQKt3YjN2p3raChw= Subject key identifier: AE:DA:E8:57:52:C8:8E:79:98:3B:21:EB:61:AD:00:AA:4D:77:5C:5C Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 34E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 34E4 Signing time: Sat 06 Dec 2025 14:48:22 +0000 Manifest this update: Sat 06 Dec 2025 14:48:22 +0000 Manifest next update: Sat 13 Dec 2025 14:48:22 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: wUKZ4xFyORVB/iYwOko/GSPhN+qTpYM3Cej2BmAe3yU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13540 (0x34e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: Dec 6 14:48:22 2025 GMT Not After : Dec 13 14:48:22 2025 GMT Subject: CN=69344236-c8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4f:94:df:d2:61:c8:93:40:5f:9e:af:fc:36: 47:0d:93:d2:53:de:30:39:b9:d8:09:aa:ab:20:88: 3a:08:dd:fc:e9:2e:32:1b:6e:92:35:4c:e6:ca:41: 5b:fa:06:09:f9:f1:aa:7e:0b:41:e1:41:51:a5:ff: 32:01:a4:3c:34:58:21:ff:7b:32:4f:88:ef:ab:0d: e8:1e:1b:83:95:53:e7:56:81:f5:b0:62:6e:af:e6: 1b:e0:eb:07:16:1a:21:fa:0f:88:d6:40:19:56:74: d6:1b:14:87:05:70:2b:59:36:c0:6a:db:74:e8:3d: 6e:de:b3:b5:bd:77:18:e6:ef:3b:bb:e5:4e:21:17: 87:d7:3e:15:03:52:5b:48:69:96:a4:81:88:22:bd: 01:17:8b:96:79:bd:1c:b9:e0:32:fe:43:3e:f3:39: 82:b5:36:c6:76:e1:0c:67:8c:28:cb:f9:96:3e:bb: fb:be:3a:33:f8:d3:f3:6d:32:af:78:77:5f:d3:c0: 5a:9b:49:44:51:36:8f:c5:d4:00:64:ed:ff:41:1e: ca:79:ce:26:c7:95:fd:c4:80:91:81:5c:f8:c9:be: a8:ab:f0:b4:63:23:0e:76:cf:02:59:aa:fc:98:4e: 37:5b:1b:be:ed:1d:d0:1b:a7:72:00:21:c9:be:eb: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DA:E8:57:52:C8:8E:79:98:3B:21:EB:61:AD:00:AA:4D:77:5C:5C X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:97:7a:69:04:77:0a:b3:34:04:b5:96:2b:83:eb:79:2d:14: d3:d9:ba:45:0b:a3:55:24:c3:6c:f7:67:27:d1:50:70:15:cf: cf:0d:16:59:93:04:80:c4:1d:42:09:34:34:30:6e:8f:91:ec: f1:fa:d0:e1:b7:de:b6:92:2f:76:a1:45:e0:b8:62:db:8f:8c: 56:f1:07:84:6c:fd:e7:92:d8:f4:91:be:32:77:f5:0c:e9:13: c0:a0:cd:f7:16:b0:0d:bf:7a:96:95:6d:72:82:64:46:8e:82: b7:27:22:00:84:a9:06:56:7e:fe:75:de:91:1b:bf:1f:83:91: 6f:c2:36:d4:2a:6b:fd:58:55:4f:1f:aa:aa:50:bd:c8:32:0d: a7:be:da:ce:58:bc:e1:a6:02:24:8d:06:bb:c8:4e:14:3e:58: f2:f2:85:57:f7:38:34:70:c7:37:35:6a:af:ae:0b:f1:93:85: cd:3e:fe:ba:ad:eb:27:b1:2f:ab:44:f2:54:de:5f:a3:4f:82: fb:b0:54:be:33:9d:2b:23:eb:0f:01:66:d0:0b:72:bc:a1:74: 80:79:fd:d7:6b:e0:36:1f:bb:a2:61:47:f3:5e:6e:c9:30:4a: 99:b7:d0:89:d9:4f:9a:7e:8d:80:47:7d:c9:52:a1:77:08:21: d2:4a:c5:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjUxMjA2MTQ0ODIyWhcNMjUxMjEzMTQ0ODIyWjAYMRYwFAYD VQQDEw02OTM0NDIzNi1jOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArE+U39JhyJNAX56v/DZHDZPSU94wObnYCaqrIIg6CN386S4yG26SNUzmykFb +gYJ+fGqfgtB4UFRpf8yAaQ8NFgh/3syT4jvqw3oHhuDlVPnVoH1sGJur+Yb4OsH Fhoh+g+I1kAZVnTWGxSHBXArWTbAatt06D1u3rO1vXcY5u87u+VOIReH1z4VA1Jb SGmWpIGIIr0BF4uWeb0cueAy/kM+8zmCtTbGduEMZ4woy/mWPrv7vjoz+NPzbTKv eHdf08Bam0lEUTaPxdQAZO3/QR7Kec4mx5X9xICRgVz4yb6oq/C0YyMOds8CWar8 mE43Wxu+7R3QG6dyACHJvuvoiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7a6FdS yI55mDsh62GtAKpNd1xcMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyl3ppBHcKszQEtZYrg+t5LRTT2bpFC6NVJMNs92cn0VBwFc/PDRZZ kwSAxB1CCTQ0MG6Pkezx+tDht962ki92oUXguGLbj4xW8QeEbP3nktj0kb4yd/UM 6RPAoM33FrANv3qWlW1ygmRGjoK3JyIAhKkGVn7+dd6RG78fg5FvwjbUKmv9WFVP H6qqUL3IMg2nvtrOWLzhpgIkjQa7yE4UPljy8oVX9zg0cMc3NWqvrgvxk4XNPv66 resnsS+rRPJU3l+jT4L7sFS+M50rI+sPAWbQC3K8oXSAef3Xa+A2H7uiYUfzXm7J MEqZt9CJ2U+afo2AR33JUqF3CCHSSsWB -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:43 2025 by rpki-client