This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft File: x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json) Hash identifier: ECKAQDk0PRgH40UVed6ENr8c/U0ttMG7YA3Aypxap1g= Subject key identifier: EF:77:10:F9:D6:D0:CF:BB:C1:5B:22:35:D2:E3:22:D4:8B:97:66:09 Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 Certificate issuer: /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft Manifest number: 82 Signing time: Fri 05 Dec 2025 04:38:03 +0000 Manifest this update: Fri 05 Dec 2025 04:38:02 +0000 Manifest next update: Fri 12 Dec 2025 04:38:02 +0000 Files and hashes: 1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: nZOt7/eaqB9IxXdaRMqtEqSVMiKcl0wmXt3D1wb5UQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Validity Not Before: Dec 5 04:38:02 2025 GMT Not After : Dec 12 04:38:02 2025 GMT Subject: CN=693261ab-3643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:9f:e6:0a:1d:41:8c:e4:99:09:d1:68:00: 0d:32:43:7f:4f:a3:38:95:35:39:df:88:f7:81:df: 2d:6c:62:f4:d1:59:70:b9:e9:12:4e:3e:e7:c0:a1: 71:0b:f8:9e:78:ef:9c:4a:57:13:ef:02:78:26:42: be:f0:d2:3a:97:47:7b:11:47:72:be:9c:52:d0:18: 78:2b:ff:9a:55:04:aa:01:ca:10:02:80:ab:87:8a: 13:e6:bf:78:26:3c:f7:9f:75:e0:c0:fe:1f:e6:22: a9:8a:55:ab:af:19:47:ef:de:07:06:65:dd:bb:89: 69:b5:89:c5:ce:bf:0e:9e:2b:51:d3:68:61:56:b6: 05:f3:78:53:1b:d4:7c:52:10:2a:56:3e:32:6d:04: bb:58:c9:4b:f9:27:ca:91:78:50:48:d4:40:3f:89: 15:b0:74:07:09:1f:6b:35:5a:22:ad:55:49:64:98: 2c:de:a2:d5:e9:c7:68:58:b4:f4:de:16:fe:ce:0d: b9:55:86:47:cd:32:58:6b:f4:f0:0e:c5:fb:ed:c0: 2b:95:17:ef:75:0f:81:f0:22:0c:3c:ee:4b:37:47: a7:ca:29:c5:47:4d:04:9b:bd:d9:01:63:79:73:b5: 07:c5:ff:06:85:1a:1a:d2:9b:40:e1:0d:55:76:a0: a8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:77:10:F9:D6:D0:CF:BB:C1:5B:22:35:D2:E3:22:D4:8B:97:66:09 X509v3 Authority Key Identifier: keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:87:45:a0:83:6b:02:21:d1:e0:29:89:c9:0a:2c:5a:d9:f2: 55:72:fb:1f:e4:57:82:99:a3:ce:bc:4f:d8:77:e0:64:39:7a: 86:d0:49:9e:eb:de:5e:90:3e:f5:69:3d:97:70:11:b7:8a:77: f1:4c:78:59:cf:a5:59:ac:91:47:ee:90:34:43:27:24:2d:64: b1:b0:e7:cf:78:80:63:67:b0:94:ed:c0:5d:1e:ea:d3:39:26: e1:e9:78:a6:7e:1f:b4:74:e0:37:38:56:25:c9:a6:f9:52:a5: 28:4d:f5:74:fd:6c:23:9a:a9:1b:ed:c5:91:a2:83:b3:e4:cf: 63:e4:76:10:cf:99:75:3f:cf:39:76:69:22:aa:b1:e3:82:7c: 7a:9c:cc:14:cd:17:98:07:66:0e:1f:51:70:65:60:4a:ae:22: 20:9f:33:26:ef:48:84:d0:6d:b4:d4:53:cf:73:21:b0:08:ff: d7:64:a7:bd:95:8d:39:84:b8:92:9a:e1:68:4f:35:c2:d8:f8: 37:d8:72:a0:b5:31:68:e3:20:e9:24:2f:0c:fa:46:79:8a:ec: a0:9a:b0:e6:5c:97:4d:65:20:33:46:e1:62:2b:42:f2:1a:11: f8:3e:36:3c:0e:97:bf:d6:af:00:c4:90:e8:ca:a3:fb:65:1d: f6:8c:d0:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJFRkExMTAvBgNVBAUTKEM3Q0RCNEVBMTgxNjVFNTk4MkQwQTkxOUZGNDdGNzI2 NzZFMDUwNzMwHhcNMjUxMjA1MDQzODAyWhcNMjUxMjEyMDQzODAyWjAYMRYwFAYD VQQDEw02OTMyNjFhYi0zNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArk+f5godQYzkmQnRaAANMkN/T6M4lTU534j3gd8tbGL00VlwuekSTj7nwKFx C/ieeO+cSlcT7wJ4JkK+8NI6l0d7EUdyvpxS0Bh4K/+aVQSqAcoQAoCrh4oT5r94 Jjz3n3XgwP4f5iKpilWrrxlH794HBmXdu4lptYnFzr8OnitR02hhVrYF83hTG9R8 UhAqVj4ybQS7WMlL+SfKkXhQSNRAP4kVsHQHCR9rNVoirVVJZJgs3qLV6cdoWLT0 3hb+zg25VYZHzTJYa/TwDsX77cArlRfvdQ+B8CIMPO5LN0enyinFR00Em73ZAWN5 c7UHxf8GhRoa0ptA4Q1VdqCoxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO93EPnW 0M+7wVsiNdLjItSLl2YJMB8GA1UdIwQYMBaAFMfNtOoYFl5ZgtCpGf9H9yZ24FBz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkVGQS8xNzI1NDZCQzBC MzcxMUYwOEMyMzk4NjNDNEY5QUUwMi94ODIwNmhnV1hsbUMwS2taXzBmM0puYmdV SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4MjA2aGdXWGxtQzBLa1pfMGYzSm5iZ1VITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkVGQS8xNzI1NDZCQzBCMzcxMUYwOEMyMzk4NjNDNEY5QUUwMi94ODIwNmhnV1hs bUMwS2taXzBmM0puYmdVSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIh0Wgg2sCIdHgKYnJCixa2fJVcvsf5FeCmaPOvE/Yd+BkOXqG0Eme 695ekD71aT2XcBG3infxTHhZz6VZrJFH7pA0QyckLWSxsOfPeIBjZ7CU7cBdHurT OSbh6Ximfh+0dOA3OFYlyab5UqUoTfV0/Wwjmqkb7cWRooOz5M9j5HYQz5l1P885 dmkiqrHjgnx6nMwUzReYB2YOH1FwZWBKriIgnzMm70iE0G201FPPcyGwCP/XZKe9 lY05hLiSmuFoTzXC2Pg32HKgtTFo4yDpJC8M+kZ5iuygmrDmXJdNZSAzRuFiK0Ly GhH4PjY8Dpe/1q8AxJDoyqP7ZR32jNA9 -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:28 2025 by rpki-client