This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft File: Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft (raw, json) Hash identifier: vKx1zO2CvAIA1NzHvNzmFKdL6qACOWUrI5zFHXWNx5Q= Subject key identifier: C2:4C:34:F3:7F:58:91:BD:C2:84:4D:B6:07:B2:0F:B3:74:99:6E:F5 Authority key identifier: 3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 Certificate issuer: /CN=A91F1303/serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft Manifest number: 5C Signing time: Fri 05 Dec 2025 05:00:07 +0000 Manifest this update: Fri 05 Dec 2025 05:00:06 +0000 Manifest next update: Fri 12 Dec 2025 05:00:06 +0000 Files and hashes: 1: Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl (hash: 7HDw0SZB3Sy0vxOIVe+z0QwWD0Moh8YMQpFbMUMZSt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1303, serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Validity Not Before: Dec 5 05:00:06 2025 GMT Not After : Dec 12 05:00:06 2025 GMT Subject: CN=693266d7-3994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:53:aa:7a:21:ce:15:72:cc:a4:d2:4e:bc: a5:7b:08:fb:fb:f9:1b:28:c9:12:e9:9d:89:6d:6a: 48:91:50:4e:01:61:1f:ab:49:e0:f4:1c:a8:e7:02: e5:b2:8f:9e:87:f5:3c:ca:a7:61:5a:e3:06:1d:2d: 7a:82:53:2a:90:02:f7:f9:b9:f2:b8:9c:0b:e0:05: 9f:67:c3:de:a7:d3:5a:10:ca:79:a6:97:2d:4d:e8: da:17:03:48:c3:2c:bc:70:52:68:a8:c7:58:39:91: 8b:fc:eb:b1:d6:c7:ed:e4:af:50:14:b3:a9:6d:37: 62:95:20:58:e8:41:a3:c7:2f:87:36:14:bb:a1:1a: 4d:55:8c:e1:23:5f:2f:12:2c:d0:20:44:9e:08:95: f8:0c:41:81:c5:48:0c:eb:42:24:1c:b5:cc:ab:0c: 56:89:8e:b4:2e:ac:5c:5a:2f:95:61:03:4b:24:dd: 31:0b:6a:00:0c:27:54:94:fb:39:5f:32:0e:ef:9e: 10:08:08:86:0b:d5:b9:85:c7:48:a4:9a:4b:db:4d: 0b:97:3f:e5:23:59:37:85:e8:51:3a:7c:0b:ae:73: 01:91:b0:89:75:cd:b2:af:e1:49:42:7c:0b:94:00: d0:d2:1c:a3:a7:6c:50:e8:ce:6e:c6:ac:66:2d:72: 1b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4C:34:F3:7F:58:91:BD:C2:84:4D:B6:07:B2:0F:B3:74:99:6E:F5 X509v3 Authority Key Identifier: keyid:3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:f2:19:6a:37:9a:84:5b:4c:d4:54:07:e6:87:1c:6b:93:53: 87:4e:b4:6c:cb:58:cd:8f:aa:78:8f:29:3b:8d:7c:ea:c3:05: 71:4c:fa:a7:4c:a3:0e:0d:dd:ec:4b:76:c1:73:cc:c1:ab:09: 98:8b:aa:af:26:91:6f:34:d6:4e:6e:ff:57:9f:3b:3c:c0:27: f1:2d:fb:78:91:59:e4:65:17:c8:70:8c:a3:90:61:c0:61:57: 99:0f:00:aa:fe:d2:2b:eb:be:50:32:c0:29:8f:f8:8d:c3:41: 4a:91:48:78:62:01:b6:26:59:c9:e1:59:19:0f:e5:3a:de:75: fc:3d:3c:d4:d7:b4:31:73:36:fa:9b:fa:69:26:f3:6a:e0:63: a8:02:c9:a7:18:27:2e:5c:c3:88:49:06:73:97:b9:2a:68:86: 79:49:fe:f3:1b:5a:08:47:1d:67:71:39:2f:03:a4:39:cb:cf: 66:10:e3:26:9f:b3:a7:5a:5a:63:4c:8b:d2:d4:e1:59:1c:24: ad:4f:2b:cc:67:c3:93:17:80:2a:fd:ae:56:7b:dc:dc:ec:b8: bd:2f:77:1f:8d:ec:b5:85:4c:da:2e:36:3d:f1:fa:5b:40:c9: cd:02:cf:e3:a1:f2:eb:e9:4f:cd:a1:9c:c4:8f:28:22:2a:e3: a3:d4:2f:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTMwMzExMC8GA1UEBRMoM0YxNzc5MDk4OTE3MkY0MDkyNjdFMEZGRTc0NEVFNDhC MDE3OTFFNzAeFw0yNTEyMDUwNTAwMDZaFw0yNTEyMTIwNTAwMDZaMBgxFjAUBgNV BAMTDTY5MzI2NmQ3LTM5OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3HVOqeiHOFXLMpNJOvKV7CPv7+RsoyRLpnYltakiRUE4BYR+rSeD0HKjnAuWy j56H9TzKp2Fa4wYdLXqCUyqQAvf5ufK4nAvgBZ9nw96n01oQynmmly1N6NoXA0jD LLxwUmiox1g5kYv867HWx+3kr1AUs6ltN2KVIFjoQaPHL4c2FLuhGk1VjOEjXy8S LNAgRJ4IlfgMQYHFSAzrQiQctcyrDFaJjrQurFxaL5VhA0sk3TELagAMJ1SU+zlf Mg7vnhAICIYL1bmFx0ikmkvbTQuXP+UjWTeF6FE6fAuucwGRsIl1zbKv4UlCfAuU ANDSHKOnbFDozm7GrGYtchsbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwkw0839Y kb3ChE22B7IPs3SZbvUwHwYDVR0jBBgwFoAUPxd5CYkXL0CSZ+D/50TuSLAXkecw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxMzAzLzlCNDI0RDMwNDY4 NTExRjBBODgxODgzRUM0RjlBRTAyL1B4ZDVDWWtYTDBDU1otRF81MFR1U0xBWGtl Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHhkNUNZa1hMMENTWi1EXzUwVHVTTEFYa2VjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx MzAzLzlCNDI0RDMwNDY4NTExRjBBODgxODgzRUM0RjlBRTAyL1B4ZDVDWWtYTDBD U1otRF81MFR1U0xBWGtlYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALjyGWo3moRbTNRUB+aHHGuTU4dOtGzLWM2PqniPKTuNfOrDBXFM+qdM ow4N3exLdsFzzMGrCZiLqq8mkW801k5u/1efOzzAJ/Et+3iRWeRlF8hwjKOQYcBh V5kPAKr+0ivrvlAywCmP+I3DQUqRSHhiAbYmWcnhWRkP5Tredfw9PNTXtDFzNvqb +mkm82rgY6gCyacYJy5cw4hJBnOXuSpohnlJ/vMbWghHHWdxOS8DpDnLz2YQ4yaf s6daWmNMi9LU4VkcJK1PK8xnw5MXgCr9rlZ73NzsuL0vdx+N7LWFTNouNj3x+ltA yc0Cz+Oh8uvpT82hnMSPKCIq46PULyo= -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:33 2025 by rpki-client