This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: mIIhgKixpquTBRdDjV5Ucv2B0xnvExPzBFZJPqBUoDk= Subject key identifier: 4C:FD:B9:48:3B:D0:65:4C:7C:8B:06:B6:58:23:B4:11:B8:C2:05:34 Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 0A88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 0A88 Signing time: Sat 06 Dec 2025 18:48:44 +0000 Manifest this update: Sat 06 Dec 2025 18:48:44 +0000 Manifest next update: Sat 13 Dec 2025 18:48:44 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: wJjCiM0LOkfrHop9Td4ghNVuk6380LVFePF+MP4e/P8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2696 (0xa88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Validity Not Before: Dec 6 18:48:44 2025 GMT Not After : Dec 13 18:48:44 2025 GMT Subject: CN=69347a8c-4d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:c9:36:d4:03:c7:83:0a:cb:7a:65:82:e1: 48:71:f9:1e:fb:2d:12:e4:6b:89:5a:10:f8:c8:7f: e5:d8:bd:bb:1d:cc:27:3b:2d:25:90:6e:3b:c1:bf: 49:b7:d2:a4:44:4c:75:f1:6d:fd:f5:a5:81:bc:c3: 89:91:d9:93:b6:e2:49:cc:c2:5a:86:52:3e:d2:3c: 7d:9d:8b:c9:c4:65:ed:67:df:f3:29:25:09:2b:41: 47:3b:aa:98:9b:51:06:2b:7a:5e:e5:c7:77:85:3f: e6:86:bc:e5:79:53:2c:1b:d3:4c:09:35:72:35:38: d1:ca:47:41:eb:66:08:33:49:1e:cf:94:83:33:8d: 62:bf:84:4b:03:ca:e0:82:90:0b:cb:2b:95:53:76: c1:a8:fa:5f:1b:fc:02:c2:fa:d1:6b:2b:78:f3:97: 18:bf:4f:ea:1a:25:2c:84:90:8d:65:75:75:c6:4d: 05:11:94:67:40:3b:88:2c:42:98:06:cc:dd:fc:41: 0c:0f:3b:62:3a:a3:c1:aa:e4:2c:08:88:5e:28:bf: 82:bf:4c:5c:e6:1b:ad:02:6a:af:60:b5:3c:ae:be: b1:40:a3:29:4c:1b:9b:a7:b4:6a:26:ad:28:89:15: 08:b1:ce:44:9b:6c:27:d3:6a:cc:ce:1a:04:81:e1: c8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FD:B9:48:3B:D0:65:4C:7C:8B:06:B6:58:23:B4:11:B8:C2:05:34 X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:63:b3:70:7b:87:ff:89:dd:23:cd:02:ea:ff:fa:49:a4:64: 5e:53:1a:ac:f0:30:73:fe:bd:f4:2d:19:a2:85:72:c9:a7:8d: 0e:82:2f:89:e2:71:d5:4c:ba:cb:f5:cc:af:37:d9:b0:01:a2: 2f:30:19:3d:6f:79:90:da:95:18:49:6f:06:46:a7:6f:f5:f7: 15:5e:d0:63:ad:8b:20:7a:b4:59:a0:95:88:4a:c9:30:ad:ab: 23:1a:ed:f7:2b:f0:d7:ae:1e:a3:13:1b:ce:10:61:fb:9c:68: 1b:d8:36:8c:44:8d:33:7a:27:ae:47:2e:63:d6:87:03:66:70: 0b:42:5b:fd:ad:28:19:28:df:41:f6:13:4b:a5:15:e2:52:a8: f9:23:2d:70:1e:2e:a8:5c:13:52:c1:ef:4f:a1:79:72:aa:30: 0f:be:9e:90:16:a4:1c:e9:a4:b7:29:05:96:9e:b8:20:d1:ce: 9e:ed:8b:01:73:89:c9:1b:30:b0:9c:a0:1d:1a:5c:f3:d0:66: 27:73:54:f5:b5:9b:ec:55:05:49:6d:cd:69:45:c8:f6:24:11: ae:8e:26:79:54:e8:a8:3c:4b:90:3c:80:d0:ff:ef:59:50:cc: 99:fa:ff:fb:2e:d5:83:e5:49:0e:98:c1:3e:b8:ba:6d:d4:20: 07:a7:7c:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjUxMjA2MTg0ODQ0WhcNMjUxMjEzMTg0ODQ0WjAYMRYwFAYD VQQDEw02OTM0N2E4Yy00ZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcnJNtQDx4MKy3plguFIcfke+y0S5GuJWhD4yH/l2L27HcwnOy0lkG47wb9J t9KkREx18W399aWBvMOJkdmTtuJJzMJahlI+0jx9nYvJxGXtZ9/zKSUJK0FHO6qY m1EGK3pe5cd3hT/mhrzleVMsG9NMCTVyNTjRykdB62YIM0kez5SDM41iv4RLA8rg gpALyyuVU3bBqPpfG/wCwvrRayt485cYv0/qGiUshJCNZXV1xk0FEZRnQDuILEKY Bszd/EEMDztiOqPBquQsCIheKL+Cv0xc5hutAmqvYLU8rr6xQKMpTBubp7RqJq0o iRUIsc5Em2wn02rMzhoEgeHIBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEz9uUg7 0GVMfIsGtlgjtBG4wgU0MB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAY7Nwe4f/id0jzQLq//pJpGReUxqs8DBz/r30LRmihXLJp40Ogi+J 4nHVTLrL9cyvN9mwAaIvMBk9b3mQ2pUYSW8GRqdv9fcVXtBjrYsgerRZoJWISskw rasjGu33K/DXrh6jExvOEGH7nGgb2DaMRI0zeieuRy5j1ocDZnALQlv9rSgZKN9B 9hNLpRXiUqj5Iy1wHi6oXBNSwe9PoXlyqjAPvp6QFqQc6aS3KQWWnrgg0c6e7YsB c4nJGzCwnKAdGlzz0GYnc1T1tZvsVQVJbc1pRcj2JBGujiZ5VOioPEuQPIDQ/+9Z UMyZ+v/7LtWD5UkOmME+uLpt1CAHp3wL -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:37 2025 by rpki-client