This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft File: u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft (raw, json) Hash identifier: 45As2mrXXihRDVuG+1d7SUtCEMdeVFWUCasLNp7+sLQ= Subject key identifier: FC:44:DA:BB:0E:76:17:3B:B1:E2:73:4C:51:E7:C0:16:D5:F3:6C:8C Authority key identifier: BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59 Certificate issuer: /CN=A91A1E1C/serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft Manifest number: D8 Signing time: Fri 19 Dec 2025 04:44:58 +0000 Manifest this update: Fri 19 Dec 2025 04:44:58 +0000 Manifest next update: Fri 26 Dec 2025 04:44:58 +0000 Files and hashes: 1: u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl (hash: qHlsDJJtiB+fmR7Rh3/VtIQ7lUK7FbC+EH9GNWDl3rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E1C, serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59 Validity Not Before: Dec 19 04:44:58 2025 GMT Not After : Dec 26 04:44:58 2025 GMT Subject: CN=6944d84a-99df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5f:52:3d:32:c1:a7:de:61:80:af:ae:95:59: 15:f3:ee:2f:c4:34:13:8a:18:f1:6b:01:5f:0c:e0: 96:ee:a0:cd:95:a7:3d:13:42:ca:2d:3d:b1:27:6d: 56:3d:26:aa:48:2a:dc:b2:c7:ff:37:f5:67:16:3b: 23:c4:44:4c:9e:91:f3:cb:e4:39:82:a2:7a:d6:40: 11:19:12:61:95:b9:65:76:b0:81:c6:da:44:31:ac: c8:f6:ce:c6:6e:56:f5:5e:51:a6:f7:82:43:de:87: 85:98:cf:fd:45:bf:c2:db:82:78:97:cf:7f:33:95: 86:c8:f5:4f:af:bc:86:4b:7d:e5:79:e1:50:9a:90: 4c:14:f5:e8:fa:49:48:50:66:43:97:cd:73:a3:53: 1a:c1:c6:8c:28:94:0a:97:06:25:1b:94:7f:99:ab: 47:40:8f:84:00:24:b5:c7:3e:30:a7:65:29:91:0f: 7e:a0:be:f8:43:b7:ef:4c:be:5e:7a:ea:dc:03:75: 1a:4f:e1:df:17:98:4f:c0:05:8c:30:c3:ed:3e:30: 21:a4:f2:df:be:89:3d:95:53:8d:48:a9:61:15:82: 7f:b7:4a:b0:a5:f9:e4:32:86:88:2d:47:33:26:b4: e7:53:e0:15:e7:cb:5c:b0:1c:dc:18:08:e1:44:19: a7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:44:DA:BB:0E:76:17:3B:B1:E2:73:4C:51:E7:C0:16:D5:F3:6C:8C X509v3 Authority Key Identifier: keyid:BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:cf:f0:8c:c0:b5:96:f2:64:f8:68:b1:01:d6:9c:64:c6:63: f5:13:b3:81:76:4d:ca:43:53:9b:bd:34:74:b8:0c:c4:e2:72: aa:3a:86:82:73:d7:da:fc:fa:b8:3b:28:eb:89:d4:db:89:41: 13:22:63:8d:0a:58:1d:cd:4d:d4:3a:2f:92:ef:c1:ce:cd:88: f9:0a:f8:c1:5c:17:3c:55:b2:b1:52:0a:f7:9c:c0:ef:f7:a2: 8c:a7:16:96:82:18:cf:28:b5:d1:0e:af:d6:2d:87:8e:fc:df: ce:1e:6a:7e:0c:55:eb:7d:74:bc:0d:a4:72:72:4b:6c:55:a7: 29:6e:08:0d:cf:8e:fb:02:f0:15:15:61:43:80:12:ac:fa:4a: 6a:5f:cf:2a:50:0d:79:f2:92:61:af:d6:32:0a:3f:f3:64:98: a5:ca:37:33:40:a1:92:82:d1:9a:7d:09:47:c2:44:31:a6:d9: 0a:e1:d0:c5:6c:f6:26:5e:b1:8e:33:9a:6c:7d:b1:c1:b8:6a: 94:08:63:bc:80:06:ae:72:9b:89:3a:3e:bd:fd:d8:a4:d2:ad: 5d:3e:e9:18:d0:df:30:f5:0f:85:33:01:8b:e4:1b:b9:6c:51: f1:36:c5:2c:e3:a4:96:87:d9:9f:77:dd:f1:80:b8:43:42:b3: 28:aa:a9:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFMUMxMTAvBgNVBAUTKEJCODNGMkEzNzNDMDVBOUZERUM0MEY3MTJDODMxRjU3 Q0Y5MThBNTkwHhcNMjUxMjE5MDQ0NDU4WhcNMjUxMjI2MDQ0NDU4WjAYMRYwFAYD VQQDDA02OTQ0ZDg0YS05OWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApV9SPTLBp95hgK+ulVkV8+4vxDQTihjxawFfDOCW7qDNlac9E0LKLT2xJ21W PSaqSCrcssf/N/VnFjsjxERMnpHzy+Q5gqJ61kARGRJhlblldrCBxtpEMazI9s7G blb1XlGm94JD3oeFmM/9Rb/C24J4l89/M5WGyPVPr7yGS33leeFQmpBMFPXo+klI UGZDl81zo1MawcaMKJQKlwYlG5R/matHQI+EACS1xz4wp2UpkQ9+oL74Q7fvTL5e eurcA3UaT+HfF5hPwAWMMMPtPjAhpPLfvok9lVONSKlhFYJ/t0qwpfnkMoaILUcz JrTnU+AV58tcsBzcGAjhRBmn2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxE2rsO dhc7seJzTFHnwBbV82yMMB8GA1UdIwQYMBaAFLuD8qNzwFqf3sQPcSyDH1fPkYpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUUxQy8yREI1MzVGQTky MDAxMUVGOUUwQzNENkJDNEY5QUUwMi91NFB5bzNQQVdwX2V4QTl4TElNZlY4LVJp bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0UHlvM1BBV3BfZXhBOXhMSU1mVjgtUmlsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUUxQy8yREI1MzVGQTkyMDAxMUVGOUUwQzNENkJDNEY5QUUwMi91NFB5bzNQQVdw X2V4QTl4TElNZlY4LVJpbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASz/CMwLWW8mT4aLEB1pxkxmP1E7OBdk3KQ1ObvTR0uAzE4nKqOoaC c9fa/Pq4OyjridTbiUETImONClgdzU3UOi+S78HOzYj5CvjBXBc8VbKxUgr3nMDv 96KMpxaWghjPKLXRDq/WLYeO/N/OHmp+DFXrfXS8DaRycktsVacpbggNz477AvAV FWFDgBKs+kpqX88qUA158pJhr9YyCj/zZJilyjczQKGSgtGafQlHwkQxptkK4dDF bPYmXrGOM5psfbHBuGqUCGO8gAaucpuJOj69/dik0q1dPukY0N8w9Q+FMwGL5Bu5 bFHxNsUs46SWh9mfd93xgLhDQrMoqqmd -----END CERTIFICATE-----Generated at Fri Dec 19 23:59:12 2025 by rpki-client