This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft File: pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json) Hash identifier: vr5XS4jubMOhpiwa22JiPCaXq5db1bLyUD8hgo6nNPc= Subject key identifier: 14:E6:5E:7E:13:82:5F:34:3D:00:EB:04:2B:8B:44:B7:FE:54:78:F6 Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 Certificate issuer: /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Certificate serial: 0641 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft Manifest number: 0641 Signing time: Tue 30 Dec 2025 21:55:08 +0000 Manifest this update: Tue 30 Dec 2025 21:55:07 +0000 Manifest next update: Tue 06 Jan 2026 21:55:07 +0000 Files and hashes: 1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: o/VDPm5AST14QOI+o7CFqLAJ71RQA+kXfrWMH1pnI7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 21:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138506, serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Validity Not Before: Dec 30 21:55:07 2025 GMT Not After : Jan 6 21:55:07 2026 GMT Subject: CN=69544a3c-87ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ef:59:8d:29:17:44:7a:4e:26:dd:c2:b5:c4: f5:a0:99:b9:0b:91:d3:39:cf:85:f2:2b:00:11:22: b8:e1:11:2c:ea:57:95:1a:96:07:b2:09:44:69:65: 6b:59:c9:7d:02:a5:f7:af:44:32:ba:7f:23:66:41: 8d:2e:c9:aa:5d:cb:69:cc:59:de:60:24:51:8d:69: d1:2a:47:31:a2:90:06:ae:5c:15:65:71:33:f1:91: 84:90:71:cc:21:9b:3d:1b:26:6c:2a:51:c9:b9:39: a7:68:37:5a:86:69:df:b4:d8:5c:23:9a:69:a2:13: e0:93:8e:66:f8:52:81:51:77:ca:b5:82:a1:1f:c3: 5c:bc:9f:2f:0e:09:35:72:26:55:a0:f5:8e:38:95: b5:14:0a:48:1f:e0:9e:ac:a6:27:5e:48:a0:93:53: 90:b6:c0:6c:92:12:1b:96:1e:f6:e2:95:2b:02:91: 1d:83:e1:e1:59:88:6e:b8:ac:f4:6d:00:ac:8f:4f: 3c:bb:84:25:6b:05:ee:7f:52:5c:ce:b5:94:2b:e9: 7e:5e:f1:5f:dc:84:7e:15:03:8e:d3:cd:e3:aa:05: d7:71:1d:11:d9:30:e9:62:1b:87:59:ed:d5:44:66: 95:0e:70:b8:50:18:48:99:13:4a:85:0d:b3:73:ff: 61:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E6:5E:7E:13:82:5F:34:3D:00:EB:04:2B:8B:44:B7:FE:54:78:F6 X509v3 Authority Key Identifier: keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4c:1a:b6:fc:ff:3a:77:fa:b7:2c:56:d4:d0:88:13:13:b2: b1:ee:90:d5:8d:e9:5f:11:7c:5e:c3:63:db:dc:7b:28:a0:23: 3e:64:38:f0:26:d3:ed:22:39:aa:05:af:bb:52:e3:bb:89:1f: 7b:51:11:8b:9d:17:0f:af:87:25:23:ec:e6:74:74:f5:98:65: f4:82:ee:d1:e8:cf:76:84:08:28:fe:93:f5:86:fa:ab:35:47: 4c:bf:cb:d7:2a:d9:22:51:dc:d8:20:1d:e1:23:e0:8e:bf:84: 84:e2:aa:86:a2:fa:b7:e1:f5:85:22:dc:19:39:76:c7:07:8a: d3:0c:f6:a7:b2:84:29:cb:84:66:6a:7d:29:c7:ec:f4:10:78: 3c:36:b2:f4:ef:69:0a:9e:02:44:8b:23:f4:8d:10:16:97:86: 3f:ec:88:d7:cb:b2:68:c3:98:f5:ad:3e:eb:7f:2e:85:dd:66: dc:f3:1d:47:a8:e5:0f:02:df:ea:d8:50:34:3f:4e:21:ec:ae: 7b:84:fc:69:23:08:67:70:a0:98:45:34:ae:0f:02:7e:c7:e9: 18:79:7f:43:ca:cb:26:ae:a6:49:a5:ef:93:61:ce:e8:0f:c0: d7:a5:a2:59:ea:e5:e1:3d:9e:cf:9f:41:5f:f6:f3:61:75:98: b5:70:cf:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1MDYxMTAvBgNVBAUTKEE0RUMxN0I1RkQyRDQ0Q0QyREREMDU1QkY1MzQxMzlG NjhGQzY5OTAwHhcNMjUxMjMwMjE1NTA3WhcNMjYwMTA2MjE1NTA3WjAYMRYwFAYD VQQDDA02OTU0NGEzYy04N2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4u9ZjSkXRHpOJt3CtcT1oJm5C5HTOc+F8isAESK44REs6leVGpYHsglEaWVr Wcl9AqX3r0Qyun8jZkGNLsmqXctpzFneYCRRjWnRKkcxopAGrlwVZXEz8ZGEkHHM IZs9GyZsKlHJuTmnaDdahmnftNhcI5ppohPgk45m+FKBUXfKtYKhH8NcvJ8vDgk1 ciZVoPWOOJW1FApIH+CerKYnXkigk1OQtsBskhIblh724pUrApEdg+HhWYhuuKz0 bQCsj088u4QlawXuf1JczrWUK+l+XvFf3IR+FQOO083jqgXXcR0R2TDpYhuHWe3V RGaVDnC4UBhImRNKhQ2zc/9hYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTmXn4T gl80PQDrBCuLRLf+VHj2MB8GA1UdIwQYMBaAFKTsF7X9LUTNLd0FW/U0E59o/GmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODUwNi8xNTlFQjY5MkI3 QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJNMHQzUVZiOVRRVG4yajhh WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPd1h0ZjB0Uk0wdDNRVmI5VFFUbjJqOGFaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODUwNi8xNTlFQjY5MkI3QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJN MHQzUVZiOVRRVG4yajhhWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfTBq2/P86d/q3LFbU0IgTE7Kx7pDVjelfEXxew2Pb3HsooCM+ZDjw JtPtIjmqBa+7UuO7iR97URGLnRcPr4clI+zmdHT1mGX0gu7R6M92hAgo/pP1hvqr NUdMv8vXKtkiUdzYIB3hI+COv4SE4qqGovq34fWFItwZOXbHB4rTDPansoQpy4Rm an0px+z0EHg8NrL072kKngJEiyP0jRAWl4Y/7IjXy7Jow5j1rT7rfy6F3Wbc8x1H qOUPAt/q2FA0P04h7K57hPxpIwhncKCYRTSuDwJ+x+kYeX9DyssmrqZJpe+TYc7o D8DXpaJZ6uXhPZ7Pn0Ff9vNhdZi1cM+R -----END CERTIFICATE-----Generated at Wed Dec 31 19:34:40 2025 by rpki-client