This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft File: aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json) Hash identifier: 6HpvN8Scq7LYcog7Cs/mgZPej5PQqi7c8Y17lZKPtYM= Subject key identifier: 83:5A:85:2C:49:B5:FB:E9:A0:80:FF:E9:AB:E7:89:DF:51:EE:B4:BF Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 Certificate issuer: /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Certificate serial: 22E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft Manifest number: 22E2 Signing time: Sat 06 Dec 2025 14:35:15 +0000 Manifest this update: Sat 06 Dec 2025 14:35:15 +0000 Manifest next update: Sat 13 Dec 2025 14:35:15 +0000 Files and hashes: 1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: N6b6ak80b2uG1p/trJzJbRMy0j6CbfQbhb2riYFAYAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8930 (0x22e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Validity Not Before: Dec 6 14:35:15 2025 GMT Not After : Dec 13 14:35:15 2025 GMT Subject: CN=69343f23-3f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bc:9b:94:55:e4:41:e6:07:0c:ae:88:91:40: e8:0c:fd:07:78:2c:20:2d:c5:f5:73:f6:a5:07:64: 74:2a:1c:00:e9:44:ae:3c:00:ee:fd:56:ac:21:24: fa:a5:86:3a:6b:d1:0c:7e:cb:1c:ba:bc:e5:fd:e4: c0:36:98:78:d2:51:dd:1e:89:b8:2f:c8:59:d5:8f: c6:c2:d0:8a:cf:c0:dd:60:12:44:2a:e8:ca:80:6f: b5:5e:9b:88:17:e8:14:92:04:c2:e4:f9:d8:f8:46: f9:91:0d:66:b6:f0:4c:d1:f4:31:e7:85:e4:19:04: 6d:7b:8f:3f:e7:51:a2:7f:8a:cf:02:5f:99:bb:1e: 8f:98:0c:0c:e1:4d:e2:47:ab:9c:a6:6d:a0:68:f6: f4:e6:d8:57:42:ed:a5:4a:f7:d7:75:cc:05:a4:67: d0:d6:c4:21:1e:c1:88:6b:0d:9e:30:74:0c:61:56: 36:c3:96:74:d1:84:ce:34:4a:19:f2:7a:7b:6b:f3: 1e:7d:f7:8c:78:8b:c5:77:62:5f:9f:99:31:92:76: c1:50:f6:32:61:42:17:23:c3:db:38:4e:16:04:f2: f9:2d:5c:94:92:fa:ba:7f:76:74:88:8e:0f:f3:c3: 05:9b:a3:1a:b6:1e:6b:4f:0d:ca:07:3c:c1:12:15: d3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5A:85:2C:49:B5:FB:E9:A0:80:FF:E9:AB:E7:89:DF:51:EE:B4:BF X509v3 Authority Key Identifier: keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:92:a5:05:d8:4d:60:cb:15:10:88:fb:06:21:bf:75:47:40: 01:da:11:93:e9:2f:f7:6c:c0:18:e7:85:64:bd:9a:50:c7:84: 39:91:bb:72:bc:be:2e:5c:4d:fc:0f:55:ac:a2:15:d7:46:79: dc:33:b3:fc:3d:bb:77:d7:4b:80:59:11:af:d1:48:18:4e:80: db:96:92:97:05:88:be:3a:aa:b8:5c:a2:2d:ef:7e:e5:9c:8f: ea:b8:d2:bf:3f:a8:02:65:2c:ec:ff:d7:62:31:8a:92:1b:18: 88:9a:35:8e:96:7d:51:02:12:c5:da:9d:21:a3:74:ed:8c:f7: 09:66:25:ba:9a:b4:45:57:40:a6:8b:8c:4b:5c:f8:22:fd:67: 60:19:7d:ab:f7:57:0d:a0:f7:91:97:0d:a1:18:7d:de:f9:eb: 8c:f0:7c:cf:0f:d5:8c:af:8e:b3:e4:45:90:cd:05:ed:56:87: 2f:91:53:cb:70:49:25:b3:3c:fd:50:12:71:71:3c:7a:85:b8: 8c:08:c0:ee:06:60:3e:8b:c3:11:94:0f:16:92:b1:9d:36:ea: 4f:21:5b:ca:e0:49:71:fe:dc:c3:dd:1c:ca:bf:f3:b0:b2:69: e2:7f:e6:2b:cd:cb:34:64:9f:d7:1f:c4:59:c3:0c:63:84:ca: 6e:44:e0:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDY5NUM0NURBNDI0NTNCNEUwQjA2MkJGMTdEQkY0NDcy NUM3ODgzODcwHhcNMjUxMjA2MTQzNTE1WhcNMjUxMjEzMTQzNTE1WjAYMRYwFAYD VQQDEw02OTM0M2YyMy0zZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnryblFXkQeYHDK6IkUDoDP0HeCwgLcX1c/alB2R0KhwA6USuPADu/VasIST6 pYY6a9EMfsscurzl/eTANph40lHdHom4L8hZ1Y/GwtCKz8DdYBJEKujKgG+1XpuI F+gUkgTC5PnY+Eb5kQ1mtvBM0fQx54XkGQRte48/51Gif4rPAl+Zux6PmAwM4U3i R6ucpm2gaPb05thXQu2lSvfXdcwFpGfQ1sQhHsGIaw2eMHQMYVY2w5Z00YTONEoZ 8np7a/MeffeMeIvFd2Jfn5kxknbBUPYyYUIXI8PbOE4WBPL5LVyUkvq6f3Z0iI4P 88MFm6Math5rTw3KBzzBEhXTfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINahSxJ tfvpoID/6avnid9R7rS/MB8GA1UdIwQYMBaAFGlcRdpCRTtOCwYr8X2/RHJceIOH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84NDZFQzYyRUE3 OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8wNExCaXZ4ZmI5RWNseDRn NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FWeEYya0pGTzA0TEJpdnhmYjlFY2x4NGc0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84NDZFQzYyRUE3OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8w NExCaXZ4ZmI5RWNseDRnNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjkqUF2E1gyxUQiPsGIb91R0AB2hGT6S/3bMAY54VkvZpQx4Q5kbty vL4uXE38D1WsohXXRnncM7P8Pbt310uAWRGv0UgYToDblpKXBYi+Oqq4XKIt737l nI/quNK/P6gCZSzs/9diMYqSGxiImjWOln1RAhLF2p0ho3TtjPcJZiW6mrRFV0Cm i4xLXPgi/WdgGX2r91cNoPeRlw2hGH3e+euM8HzPD9WMr46z5EWQzQXtVocvkVPL cEklszz9UBJxcTx6hbiMCMDuBmA+i8MRlA8WkrGdNupPIVvK4Elx/tzD3RzKv/Ow smnif+Yrzcs0ZJ/XH8RZwwxjhMpuROAW -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:38 2025 by rpki-client