This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft File: 1h14JILiVI0iXRvIiINjk97jmBI.mft (raw, json) Hash identifier: Hp1wDsYGp0ZFLmhctuDMX2ngYtqiHCJgKSYeyZBjn+o= Subject key identifier: E9:A0:43:0F:65:31:B7:BA:86:76:DC:71:A0:DB:3B:55:16:5C:5A:F4 Authority key identifier: D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12 Certificate issuer: /CN=A91F0A98/serialNumber=D61D782482E2548D225D1BC888836393DEE39812 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft Manifest number: 01B2 Signing time: Fri 05 Dec 2025 01:22:25 +0000 Manifest this update: Fri 05 Dec 2025 01:22:25 +0000 Manifest next update: Fri 12 Dec 2025 01:22:25 +0000 Files and hashes: 1: 1h14JILiVI0iXRvIiINjk97jmBI.crl (hash: vlkfTk4goQ8yyDfu6fhn11dBw4/oU91Tmx4LzJHV7Ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0A98, serialNumber=D61D782482E2548D225D1BC888836393DEE39812 Validity Not Before: Dec 5 01:22:25 2025 GMT Not After : Dec 12 01:22:25 2025 GMT Subject: CN=693233d1-b9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:28:90:e0:c4:3d:fb:dc:74:10:60:c5:f9:4b: f6:72:3b:b3:95:ba:44:4a:f6:be:0d:43:c2:b4:77: 01:e3:69:20:97:d8:45:89:e7:45:b5:86:27:35:b1: bd:80:d8:5b:b6:9e:69:89:21:f1:93:2e:68:43:0d: f6:01:de:d5:75:94:98:64:ce:bc:62:be:ec:f6:f9: 57:6a:af:4c:27:28:b7:cf:3e:f9:ff:84:10:1c:26: 18:5c:db:df:73:d7:dc:a0:52:76:83:84:87:cf:bd: 22:1a:53:2a:35:b4:ee:f4:74:b4:c1:9e:e7:99:09: 13:00:a2:a9:1b:76:f1:a5:10:a3:c8:d5:dc:f8:82: 34:be:bc:a6:f0:d2:0e:51:a0:9b:51:75:22:8c:c0: ca:d9:b7:1a:75:2c:cb:61:7b:a6:8e:5d:b4:f8:3d: ee:83:0a:dd:e7:ba:16:1e:e4:48:11:1c:c8:8f:39: 12:e0:30:25:8b:98:86:e1:ed:ce:6f:a2:73:81:60: d5:5c:e8:5a:f6:44:1c:b8:bc:e6:5d:43:a6:a6:43: f4:48:ce:74:ce:91:6d:fe:32:9b:15:84:9c:5e:39: cb:9e:8c:db:23:ed:ee:29:d5:c2:88:07:f3:57:69: ff:d0:95:67:86:fa:af:6f:b2:da:82:ba:ad:c7:ee: a3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A0:43:0F:65:31:B7:BA:86:76:DC:71:A0:DB:3B:55:16:5C:5A:F4 X509v3 Authority Key Identifier: keyid:D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:5c:f2:22:37:29:72:62:b2:07:e6:63:c6:ad:bc:36:1b:93: a1:f8:ed:30:ac:1b:66:39:00:1b:4d:f8:c9:f9:db:0e:37:46: e7:ef:44:64:86:07:51:31:f7:d9:f8:cc:b9:e7:79:c1:65:5b: c3:e4:91:e4:ce:4a:02:bf:12:12:0d:fa:b1:61:30:ed:e5:66: 79:e5:25:0b:57:2e:1a:42:04:80:1e:33:15:d0:2d:28:20:b0: df:ed:03:ce:ba:46:5d:0f:25:f0:b6:5b:9c:d5:5f:f0:0b:50: bf:e7:38:e3:de:06:8a:5c:9d:5f:b0:50:53:3d:b2:31:27:29: f6:f5:b2:7b:1d:d0:eb:ce:8e:66:9f:9e:f7:9b:dd:c6:cd:f7: fc:b2:df:63:84:40:de:e6:7a:5a:63:6b:da:84:8d:73:35:e5: 96:1c:0f:7c:9b:b4:b7:ca:d4:4a:e1:fb:20:cc:05:ee:26:06: e6:27:80:69:c1:c0:54:6e:c0:27:e5:f2:3b:ab:d5:7c:88:0a: 7a:99:09:c0:88:1d:96:b3:62:71:b2:ec:dd:55:05:57:ce:67: 13:c5:17:10:b1:44:ad:dc:05:cb:3b:09:94:36:ea:77:4e:25: 59:fb:29:e7:f7:dd:6e:70:a5:3d:2f:57:f8:07:01:05:cc:c6: c8:0f:29:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBBOTgxMTAvBgNVBAUTKEQ2MUQ3ODI0ODJFMjU0OEQyMjVEMUJDODg4ODM2Mzkz REVFMzk4MTIwHhcNMjUxMjA1MDEyMjI1WhcNMjUxMjEyMDEyMjI1WjAYMRYwFAYD VQQDEw02OTMyMzNkMS1iOWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySiQ4MQ9+9x0EGDF+Uv2cjuzlbpESva+DUPCtHcB42kgl9hFiedFtYYnNbG9 gNhbtp5piSHxky5oQw32Ad7VdZSYZM68Yr7s9vlXaq9MJyi3zz75/4QQHCYYXNvf c9fcoFJ2g4SHz70iGlMqNbTu9HS0wZ7nmQkTAKKpG3bxpRCjyNXc+II0vrym8NIO UaCbUXUijMDK2bcadSzLYXumjl20+D3ugwrd57oWHuRIERzIjzkS4DAli5iG4e3O b6JzgWDVXOha9kQcuLzmXUOmpkP0SM50zpFt/jKbFYScXjnLnozbI+3uKdXCiAfz V2n/0JVnhvqvb7Lagrqtx+6j4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmgQw9l Mbe6hnbccaDbO1UWXFr0MB8GA1UdIwQYMBaAFNYdeCSC4lSNIl0byIiDY5Pe45gS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEE5OC84RjQ4NjRFQTM1 RTAxMUVFODdDMkE2NzBDNEY5QUUwMi8xaDE0SklMaVZJMGlYUnZJaUlOams5N2pt QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoMTRKSUxpVkkwaVhSdklpSU5qazk3am1CSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEE5OC84RjQ4NjRFQTM1RTAxMUVFODdDMkE2NzBDNEY5QUUwMi8xaDE0SklMaVZJ MGlYUnZJaUlOams5N2ptQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoXPIiNylyYrIH5mPGrbw2G5Oh+O0wrBtmOQAbTfjJ+dsON0bn70Rk hgdRMffZ+My553nBZVvD5JHkzkoCvxISDfqxYTDt5WZ55SULVy4aQgSAHjMV0C0o ILDf7QPOukZdDyXwtluc1V/wC1C/5zjj3gaKXJ1fsFBTPbIxJyn29bJ7HdDrzo5m n573m93Gzff8st9jhEDe5npaY2vahI1zNeWWHA98m7S3ytRK4fsgzAXuJgbmJ4Bp wcBUbsAn5fI7q9V8iAp6mQnAiB2Ws2JxsuzdVQVXzmcTxRcQsUSt3AXLOwmUNup3 TiVZ+ynn991ucKU9L1f4BwEFzMbIDyn0 -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:14 2025 by rpki-client