This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft File: x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft (raw, json) Hash identifier: 8CXcmiSe+ArFDDImOromPVygvURjxcH80y72n7g53yM= Subject key identifier: 54:18:94:1D:99:A1:AE:05:3A:12:D8:4A:47:1A:BC:EA:72:F9:21:13 Authority key identifier: C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD Certificate issuer: /CN=A91D8BB1/serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft Manifest number: 63 Signing time: Fri 05 Dec 2025 04:57:09 +0000 Manifest this update: Fri 05 Dec 2025 04:57:09 +0000 Manifest next update: Fri 12 Dec 2025 04:57:09 +0000 Files and hashes: 1: x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl (hash: QmG8fnkyJTD9BygDBQoQO3qFwFFh74HHCFShuIV5vDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Validity Not Before: Dec 5 04:57:09 2025 GMT Not After : Dec 12 04:57:09 2025 GMT Subject: CN=69326625-c828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f7:f8:95:45:26:a9:91:e3:a8:17:1c:90:b3: 19:a5:c2:ca:26:57:7b:18:cd:64:1d:bf:d3:4e:55: fd:ee:b6:34:6c:37:9f:cd:4b:51:81:4f:ce:c8:b9: 4d:2e:e6:74:6e:20:a3:96:aa:b3:b7:61:34:3e:5e: 4c:94:b9:3e:09:2b:cf:fb:d5:76:50:0e:6b:68:d2: 8d:ab:83:af:5d:4d:cc:83:cb:37:94:de:f7:c5:d0: 35:58:60:dd:3e:ea:88:69:ca:76:3d:40:5d:b9:b2: 6f:6b:62:df:03:f9:67:1d:64:c6:5a:6c:bc:30:23: d9:9c:8d:6a:08:c6:55:f4:9f:8b:9e:40:f8:5a:48: 0b:64:ba:d4:a3:d8:4b:ca:28:96:ca:4c:80:0a:86: ac:fb:04:80:6b:8f:31:03:51:7b:94:c8:e7:ad:48: 01:70:63:90:17:20:26:5f:42:d6:0b:e9:50:58:8e: 86:9f:f7:88:c7:28:df:10:83:ac:9d:a9:15:59:da: 16:88:b3:4a:10:95:9a:98:a8:f6:27:9c:86:90:e5: d7:5e:18:fd:9e:a2:fc:63:ed:db:e5:c3:fc:e7:94: 29:d2:27:90:74:a3:b4:62:03:47:62:28:0b:46:c2: 86:dc:a3:21:be:a3:72:f2:c2:0f:a5:e0:d7:92:ed: 56:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:18:94:1D:99:A1:AE:05:3A:12:D8:4A:47:1A:BC:EA:72:F9:21:13 X509v3 Authority Key Identifier: keyid:C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1f:7d:f1:57:99:96:06:ec:05:25:4d:f7:32:72:a2:97:3c: ad:b1:e6:63:bb:11:f2:43:4f:4d:34:4c:75:44:4f:65:82:01: a1:46:2e:e7:cc:8d:f2:0d:b3:66:17:48:1b:b6:ab:78:f4:11: 01:c1:9c:18:eb:6c:8a:cf:d7:d9:2a:87:89:3d:e5:55:a3:c7: f6:6d:52:10:e3:6b:81:f1:07:6b:a6:6a:8d:0d:d2:0c:6a:74: 97:c5:53:93:03:23:38:ef:71:b6:c1:4d:8a:9a:ee:ef:dd:3f: 4a:da:65:1e:51:96:dc:71:1b:69:b8:12:11:10:2e:56:ca:8b: 2e:d9:4f:7e:cd:1f:2d:9a:6c:04:d1:56:f9:56:c0:f1:be:9f: c0:d1:8a:6e:c7:c5:1c:4d:aa:82:c5:93:55:c1:b7:ef:49:77: 59:b2:ff:16:3a:23:73:92:0f:1e:62:5a:e8:ae:8c:21:ac:be: fc:87:61:d0:05:47:90:33:57:9a:90:4b:a2:7a:47:b4:7a:18: f3:a3:d7:a0:34:fc:a0:b9:14:22:1b:9f:b8:83:48:38:4b:3c: 95:f0:c2:a8:50:85:4b:42:c5:20:67:c7:8c:d6:31:ab:ec:ca: 96:88:2a:4f:d7:06:85:00:16:49:e5:cd:b0:b1:6d:55:70:ac: 76:9c:43:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEJCMTExMC8GA1UEBRMoQzdGMDI4MzdEMjQ1Q0I4RkFCQ0Q0NzQxQ0ZBMkI0QTVB MkY3M0VBRDAeFw0yNTEyMDUwNDU3MDlaFw0yNTEyMTIwNDU3MDlaMBgxFjAUBgNV BAMTDTY5MzI2NjI1LWM4MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi9/iVRSapkeOoFxyQsxmlwsomV3sYzWQdv9NOVf3utjRsN5/NS1GBT87IuU0u 5nRuIKOWqrO3YTQ+XkyUuT4JK8/71XZQDmto0o2rg69dTcyDyzeU3vfF0DVYYN0+ 6ohpynY9QF25sm9rYt8D+WcdZMZabLwwI9mcjWoIxlX0n4ueQPhaSAtkutSj2EvK KJbKTIAKhqz7BIBrjzEDUXuUyOetSAFwY5AXICZfQtYL6VBYjoaf94jHKN8Qg6yd qRVZ2haIs0oQlZqYqPYnnIaQ5ddeGP2eovxj7dvlw/znlCnSJ5B0o7RiA0diKAtG wobcoyG+o3Lywg+l4NeS7VaFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVBiUHZmh rgU6EthKRxq86nL5IRMwHwYDVR0jBBgwFoAUx/AoN9JFy4+rzUdBz6K0paL3Pq0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QkIxLzVBRDc2OUIwM0Qy NTExRjA4MEM0ODk1NUM0RjlBRTAyL3hfQW9OOUpGeTQtcnpVZEJ6NkswcGFMM1Bx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveF9Bb045SkZ5NC1yelVkQno2SzBwYUwzUHEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QkIxLzVBRDc2OUIwM0QyNTExRjA4MEM0ODk1NUM0RjlBRTAyL3hfQW9OOUpGeTQt cnpVZEJ6NkswcGFMM1BxMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIofffFXmZYG7AUlTfcycqKXPK2x5mO7EfJDT000THVET2WCAaFGLufM jfINs2YXSBu2q3j0EQHBnBjrbIrP19kqh4k95VWjx/ZtUhDja4HxB2umao0N0gxq dJfFU5MDIzjvcbbBTYqa7u/dP0raZR5RltxxG2m4EhEQLlbKiy7ZT37NHy2abATR VvlWwPG+n8DRim7HxRxNqoLFk1XBt+9Jd1my/xY6I3OSDx5iWuiujCGsvvyHYdAF R5AzV5qQS6J6R7R6GPOj16A0/KC5FCIbn7iDSDhLPJXwwqhQhUtCxSBnx4zWMavs ypaIKk/XBoUAFknlzbCxbVVwrHacQ5k= -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:07 2025 by rpki-client