This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft File: -nL57HMUa01gWMiKYGr6AzMOA1E.mft (raw, json) Hash identifier: 6HvrFBhIVV2RYxvg3cO+M3j3S3r1U4J5CR0WoBSy+MU= Subject key identifier: D2:9D:36:DC:CD:C8:A4:2E:0B:D2:BC:BE:24:04:10:EE:27:8F:64:81 Authority key identifier: FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51 Certificate issuer: /CN=A91B2D56/serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft Manifest number: 10 Signing time: Fri 19 Dec 2025 06:50:39 +0000 Manifest this update: Fri 19 Dec 2025 06:50:39 +0000 Manifest next update: Fri 26 Dec 2025 06:50:39 +0000 Files and hashes: 1: -nL57HMUa01gWMiKYGr6AzMOA1E.crl (hash: P2PudVxdctE20jrJFo6xtRFDl4wWfTzJEHH+HO85HRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351 Validity Not Before: Dec 19 06:50:39 2025 GMT Not After : Dec 26 06:50:39 2025 GMT Subject: CN=6944f5bf-8b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c6:ae:25:9d:73:f8:d5:fe:99:80:e4:b1:57: 4e:1f:06:5c:ca:05:01:e1:41:94:65:e9:2e:f0:92: 7a:a7:45:40:29:ba:fe:5d:84:3d:37:6a:2a:15:0f: b6:f3:74:01:71:8f:66:bf:3c:1a:5e:05:92:36:18: 23:ac:a1:5d:2b:80:a6:b0:5b:c9:9a:03:33:31:75: f0:2b:6c:a6:49:83:c3:c5:02:26:41:40:77:a6:29: 40:d1:a1:26:47:c1:df:91:49:07:03:08:4e:23:9d: 0f:b1:df:e4:bb:20:29:76:a6:c3:f1:77:84:79:0b: 05:08:d2:5f:97:e4:44:52:6b:a5:72:fa:da:79:98: 69:f4:0d:f0:da:58:05:0b:da:dd:81:53:fa:48:d8: c4:eb:1b:b2:00:a9:bd:fb:32:73:a4:10:34:75:8d: b8:31:3d:d4:35:53:64:c4:1a:ca:10:cf:d7:d7:51: 1b:20:99:5f:37:78:6f:2a:77:98:63:57:79:7d:30: 8d:2c:c6:bc:b2:18:d0:66:a4:72:52:5f:7f:3c:98: 02:5e:7f:1e:c3:51:78:cd:05:3a:31:5b:ca:48:14: 84:70:6c:1f:7c:f6:28:17:3f:07:82:57:f3:e5:5e: a7:dc:31:b4:c1:1f:60:e1:08:24:17:9b:59:85:31: a9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9D:36:DC:CD:C8:A4:2E:0B:D2:BC:BE:24:04:10:EE:27:8F:64:81 X509v3 Authority Key Identifier: keyid:FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:1c:b5:54:87:3b:70:51:39:fd:42:b5:ea:2f:71:a0:c0:f3: 8e:02:93:31:93:3b:0b:ac:94:d9:c9:21:3a:4f:fc:5c:66:1c: b6:fc:a8:38:e9:0b:4b:e9:29:e7:77:ec:7f:38:b2:c3:7a:c0: 64:f1:a5:4b:2e:a2:4e:94:d1:59:49:39:23:e5:2e:7d:55:91: 34:cd:d9:d8:8b:d0:73:e6:6c:d3:18:a3:f7:a1:0b:22:50:0f: 25:48:e7:1f:7d:e1:d9:a6:a8:17:85:14:b7:d7:e8:18:ea:5b: d2:68:07:76:fa:60:3b:68:89:e6:c8:9d:23:06:8d:76:49:7d: 9a:7f:e5:8f:e0:79:df:21:54:a8:25:8b:de:08:83:3e:c8:d0: 07:b2:62:af:88:44:ed:f4:67:15:66:5e:d3:62:a1:a3:32:1a: ae:e0:78:1f:b0:48:5a:fe:7a:d7:1d:cd:9f:7b:79:ac:c4:60: 79:91:aa:f5:7f:c5:90:d5:86:a6:e4:83:12:cb:fb:57:4b:5d: 48:33:f5:7a:25:f9:53:41:c1:34:db:44:79:b4:fe:5e:4f:cf: 3f:3c:c8:bf:69:ee:b5:01:22:c6:b2:3d:78:0d:45:f8:aa:ee: 2a:ff:89:18:0e:21:32:24:d1:ec:68:11:94:14:61:f3:9c:6d: 90:51:20:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkQ1NjExMC8GA1UEBRMoRkE3MkY5RUM3MzE0NkI0RDYwNThDODhBNjA2QUZBMDMz MzBFMDM1MTAeFw0yNTEyMTkwNjUwMzlaFw0yNTEyMjYwNjUwMzlaMBgxFjAUBgNV BAMMDTY5NDRmNWJmLThiMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGxq4lnXP41f6ZgOSxV04fBlzKBQHhQZRl6S7wknqnRUApuv5dhD03aioVD7bz dAFxj2a/PBpeBZI2GCOsoV0rgKawW8maAzMxdfArbKZJg8PFAiZBQHemKUDRoSZH wd+RSQcDCE4jnQ+x3+S7ICl2psPxd4R5CwUI0l+X5ERSa6Vy+tp5mGn0DfDaWAUL 2t2BU/pI2MTrG7IAqb37MnOkEDR1jbgxPdQ1U2TEGsoQz9fXURsgmV83eG8qd5hj V3l9MI0sxryyGNBmpHJSX388mAJefx7DUXjNBToxW8pIFIRwbB989igXPweCV/Pl XqfcMbTBH2DhCCQXm1mFMakVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0p023M3I pC4L0ry+JAQQ7iePZIEwHwYDVR0jBBgwFoAU+nL57HMUa01gWMiKYGr6AzMOA1Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDU2L0Y2OTIzNjdBQzUy MjExRjA5NUQxQjIxN0M0RjlBRTAyLy1uTDU3SE1VYTAxZ1dNaUtZR3I2QXpNT0Ex RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLW5MNTdITVVhMDFnV01pS1lHcjZBek1PQTFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RDU2L0Y2OTIzNjdBQzUyMjExRjA5NUQxQjIxN0M0RjlBRTAyLy1uTDU3SE1VYTAx Z1dNaUtZR3I2QXpNT0ExRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABUctVSHO3BROf1CteovcaDA844CkzGTOwuslNnJITpP/FxmHLb8qDjp C0vpKed37H84ssN6wGTxpUsuok6U0VlJOSPlLn1VkTTN2diL0HPmbNMYo/ehCyJQ DyVI5x994dmmqBeFFLfX6BjqW9JoB3b6YDtoiebInSMGjXZJfZp/5Y/ged8hVKgl i94Igz7I0AeyYq+IRO30ZxVmXtNioaMyGq7geB+wSFr+etcdzZ97eazEYHmRqvV/ xZDVhqbkgxLL+1dLXUgz9Xol+VNBwTTbRHm0/l5Pzz88yL9p7rUBIsayPXgNRfiq 7ir/iRgOITIk0exoEZQUYfOcbZBRIKY= -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:00 2025 by rpki-client