This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: 6iT2dWDdYlj0RVobEbVgNXxPhhZgzjuLFDiSUzzczhI= Subject key identifier: C3:72:5D:76:88:47:14:67:F8:24:A8:43:80:C6:5B:A5:EB:A8:AE:8B Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0A55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0A24 Signing time: Wed 24 Dec 2025 19:21:01 +0000 Manifest this update: Wed 24 Dec 2025 19:21:00 +0000 Manifest next update: Wed 31 Dec 2025 19:21:00 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: 7ViPhphFuCXLZ5smH+Azv3UAykX1o4exgc4WKTcKMZY=) 2: 634495BEDCD011F0B585C4234F6F56BC.roa (hash: yMIgErHwcMLy+p1ElMHGccZVOlfBZ5uC4MwpTi10hSo=) 3: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: mrdifevaNrjgGPKQ1OBlBf3Ozo1jwgzsiYqzgjiO4VY=) 4: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: grefGbNN/VHvdzizv2NC+EAajk8nYYeMvxNGZRpSLyU=) 5: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: mNYe4FUja3MrCQuFkjZ9mW3HWoF6dWXAjyDLZL2gjns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 19:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2645 (0xa55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Dec 24 19:21:00 2025 GMT Not After : Dec 31 19:21:00 2025 GMT Subject: CN=694c3d1d-cfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ce:c6:9d:80:96:7b:d8:19:a2:2a:3a:2c:c0: 64:82:0f:ef:6c:05:69:a0:37:60:88:94:30:d6:0e: b9:98:3e:7b:4a:1d:44:49:f4:5e:d1:79:03:9e:59: 5a:bb:cc:5a:1e:ff:71:65:c0:e4:6a:cf:a5:90:89: a6:33:00:fe:0d:93:28:77:01:d9:e8:81:38:c7:66: b3:83:c7:75:85:94:81:90:7d:d3:7d:ba:fb:3b:d0: 0c:ca:8f:15:c1:64:80:4d:71:04:ce:2d:af:6e:b2: 04:e9:9d:c4:4e:41:e8:e9:39:e9:2e:9a:7b:28:dd: 83:54:5b:72:ea:ff:ff:c9:78:b7:78:c3:8e:75:25: 43:ea:38:79:8e:6d:23:4f:e3:c6:f5:92:1f:4f:e1: b7:31:18:2a:aa:73:a6:f2:37:1d:ba:2a:17:de:d4: f3:22:4a:4a:f4:15:a4:be:25:0c:2e:1f:f5:9b:60: 2a:c6:64:87:41:a7:3c:cc:3d:1f:89:ca:e0:f4:6a: c9:33:bd:6a:81:11:6e:f0:cd:e6:4b:64:b6:79:13: a6:1f:9f:bd:47:88:e4:41:37:ea:07:a0:fb:a8:7a: a2:49:7c:c0:d0:83:32:a4:9d:63:68:e7:5e:19:95: f0:95:7b:fc:71:ed:a5:b7:a1:09:8f:64:a4:2c:14: ed:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:72:5D:76:88:47:14:67:F8:24:A8:43:80:C6:5B:A5:EB:A8:AE:8B X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:7f:c1:c4:34:b4:5d:e5:be:c7:78:db:d8:cd:6f:4f:64:45: 40:cc:b4:99:90:ae:ad:6b:03:6c:ed:5a:51:38:c4:26:a5:45: 87:12:0e:df:4a:94:b2:2d:80:d8:0d:4c:04:d8:81:f0:17:00: 0f:85:8c:4d:7d:b7:e3:8e:37:47:44:1a:9a:ff:ed:0b:d3:49: 92:1b:d1:5e:1f:af:4d:1c:c2:6c:56:16:14:be:e1:16:1b:09: 84:94:74:51:76:cc:e1:17:a8:de:26:ef:d6:cf:27:9f:b8:e5: b5:69:9e:92:e7:de:e4:f1:d0:21:9f:90:a8:69:43:f7:0d:74: 88:2b:31:e7:37:df:47:cb:85:16:a4:7a:60:a4:ee:1f:d3:84: d8:cd:9c:4c:9b:0a:ec:75:25:1e:53:6e:98:42:cb:24:94:2a: 80:04:31:11:e6:bb:c5:dd:aa:cd:b6:08:40:78:04:e8:1d:cf: f0:00:df:eb:34:9e:bf:37:28:cb:d1:9d:c2:c4:8f:25:83:74: 1f:c9:5d:24:47:ee:76:e7:e5:38:86:bd:d8:f3:36:46:96:1c: 16:59:38:e1:8f:30:59:30:8d:55:c1:1e:9b:21:ba:82:db:bd: 95:72:65:1e:c9:c8:ea:74:f4:6f:b5:45:68:ba:28:e5:c6:c4: ea:c0:c5:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjUxMjI0MTkyMTAwWhcNMjUxMjMxMTkyMTAwWjAYMRYwFAYD VQQDDA02OTRjM2QxZC1jZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA387GnYCWe9gZoio6LMBkgg/vbAVpoDdgiJQw1g65mD57Sh1ESfRe0XkDnlla u8xaHv9xZcDkas+lkImmMwD+DZModwHZ6IE4x2azg8d1hZSBkH3Tfbr7O9AMyo8V wWSATXEEzi2vbrIE6Z3ETkHo6TnpLpp7KN2DVFty6v//yXi3eMOOdSVD6jh5jm0j T+PG9ZIfT+G3MRgqqnOm8jcduioX3tTzIkpK9BWkviUMLh/1m2AqxmSHQac8zD0f icrg9GrJM71qgRFu8M3mS2S2eROmH5+9R4jkQTfqB6D7qHqiSXzA0IMypJ1jaOde GZXwlXv8ce2lt6EJj2SkLBTtRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNyXXaI RxRn+CSoQ4DGW6XrqK6LMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpf8HENLRd5b7HeNvYzW9PZEVAzLSZkK6tawNs7VpROMQmpUWHEg7f SpSyLYDYDUwE2IHwFwAPhYxNfbfjjjdHRBqa/+0L00mSG9FeH69NHMJsVhYUvuEW GwmElHRRdszhF6jeJu/WzyefuOW1aZ6S597k8dAhn5CoaUP3DXSIKzHnN99Hy4UW pHpgpO4f04TYzZxMmwrsdSUeU26YQssklCqABDER5rvF3arNtghAeAToHc/wAN/r NJ6/NyjL0Z3CxI8lg3QfyV0kR+525+U4hr3Y8zZGlhwWWTjhjzBZMI1VwR6bIbqC 272VcmUeycjqdPRvtUVouijlxsTqwMXa -----END CERTIFICATE-----Generated at Thu Dec 25 07:08:45 2025 by rpki-client