This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft File: M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json) Hash identifier: fQuj/7+k/HnJlptmbIv0lMeqX1QpO7a0Hkh1AiTMMFU= Subject key identifier: 91:A5:CF:9B:0C:0F:EF:CD:68:9D:12:06:2C:D4:69:A3:0D:0E:32:48 Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 Certificate issuer: /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Certificate serial: 34F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft Manifest number: 34F3 Signing time: Wed 31 Dec 2025 14:57:30 +0000 Manifest this update: Wed 31 Dec 2025 14:57:30 +0000 Manifest next update: Wed 07 Jan 2026 14:57:30 +0000 Files and hashes: 1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: +crNbSPBBAe8EWFvX8l6kaaHd+mmylxe7dXSfxaqI58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 14:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13555 (0x34f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A3A, serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Validity Not Before: Dec 31 14:57:30 2025 GMT Not After : Jan 7 14:57:30 2026 GMT Subject: CN=695539da-dcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:db:72:27:54:1c:1a:68:dc:79:1a:2b:62: 23:c2:ac:02:10:66:b4:16:34:11:a2:2a:60:ad:08: da:d9:30:7a:c0:00:04:be:48:0a:6e:99:72:28:f6: c0:07:10:0b:a1:32:a5:21:42:55:f7:44:9e:2b:10: c3:f2:42:a1:6e:dd:24:94:c6:43:30:8b:91:0c:e6: 2d:b1:14:5a:71:df:5f:e2:d6:81:2e:4e:2b:39:5f: d7:ed:a4:57:6b:8b:a2:73:3f:6c:ec:2b:ad:b3:e0: 75:42:b2:22:62:8a:9e:24:ac:2a:db:5d:9f:77:fc: 3e:1a:d3:a1:59:df:1b:f4:8f:d6:b0:06:fe:dd:a5: f8:9c:ec:34:f3:32:fb:fb:88:21:e4:e8:70:b6:1b: 9c:fa:4a:13:e2:61:c0:09:75:89:6e:be:da:97:f7: 9c:dc:12:34:e3:8c:0a:01:e3:b9:79:21:86:08:58: 70:f0:b9:e8:0b:d4:a1:7a:5e:be:43:35:db:ce:bc: cd:c9:15:0d:ee:8c:21:67:32:89:08:7b:69:0d:30: 27:8f:aa:fb:bc:54:14:6b:3a:ed:3e:c4:4c:08:9e: 9a:15:fe:87:59:4e:3b:c9:c5:50:3a:b3:37:25:de: a0:6f:79:20:d6:5e:27:60:57:c5:bb:05:61:16:cd: fa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A5:CF:9B:0C:0F:EF:CD:68:9D:12:06:2C:D4:69:A3:0D:0E:32:48 X509v3 Authority Key Identifier: keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:7f:0b:1c:46:49:e5:5d:d2:34:0b:83:e0:59:ca:c4:98:87: bc:6c:31:52:b2:be:c2:99:6a:88:4d:69:9b:50:ed:09:f0:95: 08:1b:f9:87:86:80:74:0d:da:37:70:ed:fb:18:03:35:d5:b9: 90:93:50:69:66:c9:04:ac:e5:97:f8:37:c8:77:d6:e9:52:26: 9d:59:c5:8d:4f:8a:a4:4f:0b:b2:1d:64:e1:8a:a0:3b:13:f4: 57:86:a1:6e:9a:6b:17:e4:90:29:b0:12:b8:24:1f:97:f6:a1: 3f:d7:5e:67:fa:26:64:0e:77:64:3c:bb:a3:e9:f3:92:49:af: 13:8f:a5:20:d5:08:03:9a:2f:c5:33:2e:19:ef:af:2f:15:df: 9f:3e:2a:b3:2c:c4:92:5c:de:4d:be:18:aa:03:92:f7:92:38: 45:21:a1:31:a5:cc:25:27:32:d6:71:e7:31:c9:0d:dd:ad:43: 4c:84:de:d6:a6:c9:d8:96:d7:51:31:3d:79:9b:b7:c3:57:df: 69:1b:41:28:8a:29:22:3d:34:7d:40:fe:ba:ca:1f:2e:d4:32: a9:93:3d:7c:84:2c:f2:7b:ce:a2:70:73:a6:1d:9e:18:58:d0: 88:e8:54:4f:90:ea:c5:ad:82:d5:14:66:cf:d9:ef:84:1b:6c: a3:dd:1c:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBM0ExMTAvBgNVBAUTKDMzOTIxQjRFOUE4OTQxQTU4NkJCREQ5QUY4QjE4ODVB OEYyMjVGQTIwHhcNMjUxMjMxMTQ1NzMwWhcNMjYwMTA3MTQ1NzMwWjAYMRYwFAYD VQQDDA02OTU1MzlkYS1kY2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLrbcidUHBpo3HkaK2IjwqwCEGa0FjQRoipgrQja2TB6wAAEvkgKbplyKPbA BxALoTKlIUJV90SeKxDD8kKhbt0klMZDMIuRDOYtsRRacd9f4taBLk4rOV/X7aRX a4uicz9s7Cuts+B1QrIiYoqeJKwq212fd/w+GtOhWd8b9I/WsAb+3aX4nOw08zL7 +4gh5Ohwthuc+koT4mHACXWJbr7al/ec3BI044wKAeO5eSGGCFhw8LnoC9Shel6+ QzXbzrzNyRUN7owhZzKJCHtpDTAnj6r7vFQUazrtPsRMCJ6aFf6HWU47ycVQOrM3 Jd6gb3kg1l4nYFfFuwVhFs36IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGlz5sM D+/NaJ0SBizUaaMNDjJIMB8GA1UdIwQYMBaAFDOSG06aiUGlhrvdmvixiFqPIl+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUEzQS8yOThEMjU4ODFE OUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFhV0d1OTJhLUxHSVdvOGlY NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001SWJUcHFKUWFXR3U5MmEtTEdJV284aVg2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUEzQS8yOThEMjU4ODFEOUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFh V0d1OTJhLUxHSVdvOGlYNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVfwscRknlXdI0C4PgWcrEmIe8bDFSsr7CmWqITWmbUO0J8JUIG/mH hoB0Ddo3cO37GAM11bmQk1BpZskErOWX+DfId9bpUiadWcWNT4qkTwuyHWThiqA7 E/RXhqFummsX5JApsBK4JB+X9qE/115n+iZkDndkPLuj6fOSSa8Tj6Ug1QgDmi/F My4Z768vFd+fPiqzLMSSXN5NvhiqA5L3kjhFIaExpcwlJzLWcecxyQ3drUNMhN7W psnYltdRMT15m7fDV99pG0EoiikiPTR9QP66yh8u1DKpkz18hCzye86icHOmHZ4Y WNCI6FRPkOrFrYLVFGbP2e+EG2yj3RzR -----END CERTIFICATE-----Generated at Thu Jan 1 14:24:33 2026 by rpki-client