This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json) Hash identifier: ybPirXWDLLbTPnY1r5NVJf+qEndTqcq95lrZc5AEPzc= Subject key identifier: 20:90:51:2D:51:7A:A9:83:1B:3B:20:ED:9E:67:9A:2A:84:69:AC:28 Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Certificate serial: 34E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft Manifest number: 34E6 Signing time: Thu 18 Dec 2025 15:03:43 +0000 Manifest this update: Thu 18 Dec 2025 15:03:43 +0000 Manifest next update: Thu 25 Dec 2025 15:03:43 +0000 Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: 3kCJHqLGOGXadBjY4whbdNR88uArARzfbFQigErJD1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13542 (0x34e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A96, serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Validity Not Before: Dec 18 15:03:43 2025 GMT Not After : Dec 25 15:03:43 2025 GMT Subject: CN=694417cf-6738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:2f:f7:d0:85:e0:47:ac:4f:79:d2:fe:37: 09:3a:06:f8:7f:1c:8a:d6:8c:72:42:ce:cf:cc:32: ee:24:8d:83:0b:ed:5f:46:be:a6:14:0e:0e:f8:df: 21:f9:c8:0e:af:33:1a:62:9d:ce:72:59:15:95:ea: 8c:d5:f7:03:83:0f:60:7a:e8:14:ca:45:bd:29:14: f8:f4:ee:82:20:f0:54:30:a9:84:1f:84:5a:24:90: 67:60:d8:f1:8d:dc:98:01:05:cf:56:b5:80:39:34: 4d:59:72:f9:e3:81:48:a7:35:bd:83:43:31:7c:94: 49:7d:3d:c4:17:fe:4f:6e:8c:d9:62:9f:96:97:d1: 7a:9f:7f:e2:db:44:33:ad:0b:17:fa:ef:d2:95:31: d2:86:12:bf:81:9e:ff:df:47:3f:9b:bc:6a:9d:e6: 31:7b:41:00:e0:e2:72:97:b1:af:5b:48:e7:3f:72: d9:97:aa:94:a3:b5:8e:de:fc:48:5e:d7:5a:89:32: 3d:4d:a6:e0:40:61:8c:a7:15:5e:2e:46:76:82:67: f9:bb:85:01:87:8f:5e:1c:90:fa:1a:c5:64:8c:2d: 95:5e:6f:46:47:40:3a:2b:24:c9:89:30:21:44:36: 3a:9c:56:15:a4:aa:b6:a6:8a:e1:b4:e6:8c:33:7a: d4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:90:51:2D:51:7A:A9:83:1B:3B:20:ED:9E:67:9A:2A:84:69:AC:28 X509v3 Authority Key Identifier: keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:67:65:ba:85:a7:1d:c1:03:62:95:2f:d8:21:9b:ed:7d:e6: 93:52:8b:8e:fd:f0:75:00:d0:ba:5f:1c:39:ae:54:b3:fe:a9: 2e:ef:ab:74:6f:73:5b:8f:59:5e:98:ed:12:d0:76:6d:46:ad: e6:a7:eb:94:69:17:55:30:24:f7:49:23:15:a5:41:23:af:d0: dd:90:b9:42:11:56:b5:2f:33:e4:10:80:6d:85:3d:de:40:7c: 49:b8:b7:92:04:0c:c4:8e:7c:b9:cc:c2:1d:e0:c6:54:07:05: d9:01:0e:93:1c:4b:c6:25:bf:51:39:a6:1a:fd:c7:05:46:58: 12:1c:45:13:62:31:a1:50:44:a9:d9:d1:c5:64:5e:b8:ca:1f: a8:69:83:10:43:ed:47:69:a4:22:81:34:4a:dd:bf:8c:22:35: a4:15:6f:e3:d9:5a:db:b9:12:ce:54:04:b9:8b:11:f7:92:30: af:b5:0b:8d:ca:96:2e:65:c2:9a:3a:8c:8a:a8:7b:cf:43:ff: 5a:10:d1:3f:af:6a:db:aa:fc:f8:e2:4a:e4:e9:5c:6c:c2:97: 5e:21:3f:c9:60:e1:b8:dc:21:93:35:34:5f:65:b6:da:9e:ee: 9a:2d:4f:f7:f0:af:f1:22:c6:a3:18:e4:c8:3c:10:36:db:9a: 39:04:de:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBOTYxMTAvBgNVBAUTKDlBQ0E4QTVDMjQ3NEUyMEZGQTY3MzRGM0Y3MjU0QkZG RjE4NTEzRkUwHhcNMjUxMjE4MTUwMzQzWhcNMjUxMjI1MTUwMzQzWjAYMRYwFAYD VQQDDA02OTQ0MTdjZi02NzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dwv99CF4EesT3nS/jcJOgb4fxyK1oxyQs7PzDLuJI2DC+1fRr6mFA4O+N8h +cgOrzMaYp3OclkVleqM1fcDgw9geugUykW9KRT49O6CIPBUMKmEH4RaJJBnYNjx jdyYAQXPVrWAOTRNWXL544FIpzW9g0MxfJRJfT3EF/5PbozZYp+Wl9F6n3/i20Qz rQsX+u/SlTHShhK/gZ7/30c/m7xqneYxe0EA4OJyl7GvW0jnP3LZl6qUo7WO3vxI XtdaiTI9TabgQGGMpxVeLkZ2gmf5u4UBh49eHJD6GsVkjC2VXm9GR0A6KyTJiTAh RDY6nFYVpKq2porhtOaMM3rUsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCQUS1R eqmDGzsg7Z5nmiqEaawoMB8GA1UdIwQYMBaAFJrKilwkdOIP+mc08/clS//xhRP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE5Ni85MDlENzQ5MDFE QTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRnXzZaelR6OXlWTF9fR0ZF XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zcUtYQ1IwNGdfNlp6VHo5eVZMX19HRkVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE5Ni85MDlENzQ5MDFEQTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRn XzZaelR6OXlWTF9fR0ZFXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYZ2W6hacdwQNilS/YIZvtfeaTUouO/fB1ANC6Xxw5rlSz/qku76t0 b3Nbj1lemO0S0HZtRq3mp+uUaRdVMCT3SSMVpUEjr9DdkLlCEVa1LzPkEIBthT3e QHxJuLeSBAzEjny5zMId4MZUBwXZAQ6THEvGJb9ROaYa/ccFRlgSHEUTYjGhUESp 2dHFZF64yh+oaYMQQ+1HaaQigTRK3b+MIjWkFW/j2VrbuRLOVAS5ixH3kjCvtQuN ypYuZcKaOoyKqHvPQ/9aENE/r2rbqvz44krk6VxswpdeIT/JYOG43CGTNTRfZbba nu6aLU/38K/xIsajGOTIPBA225o5BN6z -----END CERTIFICATE-----Generated at Fri Dec 19 19:03:12 2025 by rpki-client