This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json) Hash identifier: 1Cc+V0CIQ04LvyBZ3vLPKkP97YtZ+b15Rc3vPKdbVls= Subject key identifier: 47:92:85:89:3F:F7:B1:BD:27:E8:07:F1:60:C5:15:F8:23:23:43:73 Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Certificate serial: 34EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft Manifest number: 34EA Signing time: Sat 06 Dec 2025 14:32:31 +0000 Manifest this update: Sat 06 Dec 2025 14:32:30 +0000 Manifest next update: Sat 13 Dec 2025 14:32:30 +0000 Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: bzUnbmlAqNT0pOnHSfGEO42ubwakyyqFZEBnNShN2zM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13546 (0x34ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Validity Not Before: Dec 6 14:32:30 2025 GMT Not After : Dec 13 14:32:30 2025 GMT Subject: CN=69343e7e-442d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:8c:17:0d:48:c5:7b:e1:8b:8d:ba:5b:09: 8a:90:e9:a4:4a:be:95:f5:3d:47:5e:e7:0d:99:a0: d3:5f:82:48:6a:e7:1a:61:1b:47:37:40:db:aa:ec: 31:8b:86:3a:6e:43:3d:e0:b6:ec:16:a3:bb:95:31: f1:a8:04:be:cd:9a:f2:4a:1c:32:41:7d:c9:24:6a: f2:e9:1c:49:d8:d9:15:c4:87:89:fe:81:2f:44:fb: a9:b7:c8:74:d0:9d:93:6d:fe:8b:37:50:a7:5a:60: c7:b6:73:c2:11:44:1c:99:b4:25:99:f3:57:96:fc: 93:95:a1:ae:7f:59:74:f9:98:84:9f:e7:d5:25:18: ff:8d:78:f7:2b:7b:60:16:90:6b:a0:d6:c4:8e:e9: 31:67:e8:e7:32:5a:cc:9c:45:51:91:ad:33:56:22: 5c:b2:fb:08:2b:c6:df:e6:1e:78:53:95:08:e6:38: 90:c6:0c:04:36:1c:b6:62:c4:bf:46:87:6a:f3:9c: f3:b7:f3:94:a0:96:62:5a:96:45:93:b4:e9:a8:9d: 4c:07:26:98:e8:1b:13:03:2b:1f:f4:42:03:83:a0: f4:15:82:45:41:c4:8b:6a:e7:cd:bb:d4:02:1f:43: 74:9e:cc:26:53:16:3f:ec:c4:e0:57:b5:07:af:ed: 03:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:92:85:89:3F:F7:B1:BD:27:E8:07:F1:60:C5:15:F8:23:23:43:73 X509v3 Authority Key Identifier: keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:d6:d5:13:2c:64:fc:fd:11:c7:a8:fe:90:06:5b:8a:e1:07: fd:ec:34:c4:e1:67:6c:1f:b3:b2:2c:32:e6:93:09:c2:7b:b6: 04:26:75:3f:6b:54:05:aa:20:15:07:78:e0:96:d1:36:04:d3: 30:cd:56:d7:51:0e:43:86:84:0b:6c:e7:37:dd:c2:25:d1:98: 64:20:b3:8f:0e:4a:c9:4a:76:6d:37:02:f2:8c:87:10:f3:f6: d5:b4:a9:56:e3:45:a7:81:cf:f4:95:c3:7d:dd:ef:9c:f4:c3: 06:0b:7a:45:33:65:95:ab:12:6e:e7:9f:94:3a:d5:20:ed:b2: f1:89:c3:2c:57:b9:89:8a:5a:d4:af:3f:5b:af:05:bc:af:1d: 51:37:9a:74:4b:c5:93:79:16:04:61:1a:74:7b:f1:9b:1c:e4: a9:b8:9d:00:5d:1f:1b:e1:f7:17:51:d6:00:a9:f5:05:2d:90: 04:99:ee:bc:81:79:67:31:4b:19:98:c1:b8:2e:9b:dc:23:9a: 9e:bc:51:68:b4:d4:1b:f5:89:ed:8e:a4:15:eb:97:36:30:8b: 26:da:73:dd:43:c8:e5:5d:63:41:6f:78:d9:19:c7:30:0f:b1: 8b:f4:d6:f7:96:b5:7f:68:5d:67:14:1e:29:28:e3:65:51:2e: 25:1c:5f:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxQUQxMTAvBgNVBAUTKEE1MkI0MkQ3RDQ2OTU1RjQyODUxMjZCQjBEQzRCRUFB NzM0QTkyQkQwHhcNMjUxMjA2MTQzMjMwWhcNMjUxMjEzMTQzMjMwWjAYMRYwFAYD VQQDEw02OTM0M2U3ZS00NDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPiMFw1IxXvhi426WwmKkOmkSr6V9T1HXucNmaDTX4JIaucaYRtHN0Dbquwx i4Y6bkM94LbsFqO7lTHxqAS+zZryShwyQX3JJGry6RxJ2NkVxIeJ/oEvRPupt8h0 0J2Tbf6LN1CnWmDHtnPCEUQcmbQlmfNXlvyTlaGuf1l0+ZiEn+fVJRj/jXj3K3tg FpBroNbEjukxZ+jnMlrMnEVRka0zViJcsvsIK8bf5h54U5UI5jiQxgwENhy2YsS/ Rodq85zzt/OUoJZiWpZFk7TpqJ1MByaY6BsTAysf9EIDg6D0FYJFQcSLaufNu9QC H0N0nswmUxY/7MTgV7UHr+0DRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeShYk/ 97G9J+gH8WDFFfgjI0NzMB8GA1UdIwQYMBaAFKUrQtfUaVX0KFEmuw3EvqpzSpK9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTFBRC8yMjk1ODFENDFE OEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZmUW9VU2E3RGNTLXFuTktr cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdEMxOVJwVmZRb1VTYTdEY1MtcW5OS2tyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTFBRC8yMjk1ODFENDFEOEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZm UW9VU2E3RGNTLXFuTktrcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE1tUTLGT8/RHHqP6QBluK4Qf97DTE4WdsH7OyLDLmkwnCe7YEJnU/ a1QFqiAVB3jgltE2BNMwzVbXUQ5DhoQLbOc33cIl0ZhkILOPDkrJSnZtNwLyjIcQ 8/bVtKlW40Wngc/0lcN93e+c9MMGC3pFM2WVqxJu55+UOtUg7bLxicMsV7mJilrU rz9brwW8rx1RN5p0S8WTeRYEYRp0e/GbHOSpuJ0AXR8b4fcXUdYAqfUFLZAEme68 gXlnMUsZmMG4LpvcI5qevFFotNQb9YntjqQV65c2MIsm2nPdQ8jlXWNBb3jZGccw D7GL9Nb3lrV/aF1nFB4pKONlUS4lHF9A -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:42 2025 by rpki-client