This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft File: MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft (raw, json) Hash identifier: Zo5az8+ajUhOSLPdBdQokyWJGmaC8AMK8H79zRb4+Ys= Subject key identifier: 58:EE:45:46:94:01:EA:23:CB:6F:C3:1B:79:4E:2E:CA:E3:87:B4:DC Authority key identifier: 30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D Certificate issuer: /CN=A91B4F3C/serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Certificate serial: 34F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft Manifest number: 34F0 Signing time: Mon 22 Dec 2025 15:04:51 +0000 Manifest this update: Mon 22 Dec 2025 15:04:51 +0000 Manifest next update: Mon 29 Dec 2025 15:04:51 +0000 Files and hashes: 1: MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl (hash: Vtfaeoltnxm13vRpAI5bE0BK4DgSOcqGcXVbt6MWU3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13552 (0x34f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F3C, serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Validity Not Before: Dec 22 15:04:51 2025 GMT Not After : Dec 29 15:04:51 2025 GMT Subject: CN=69495e13-ecb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:11:5a:62:a8:ed:1e:d2:a3:d8:7e:bb:34:cc: 4d:58:5e:71:ea:84:08:69:86:92:4b:b3:72:59:25: 22:45:96:71:29:87:16:53:2b:8d:7d:12:b3:e0:30: 66:48:b4:f7:a6:1b:90:bf:fe:04:90:17:01:ab:56: 07:77:0b:87:d5:51:9d:f4:bd:4c:9f:c1:32:b6:59: 5b:1a:80:2f:62:5a:81:66:08:42:82:4c:18:f1:9f: a5:2c:54:e1:b4:78:0c:9b:03:f1:1c:22:42:a5:ae: 98:6e:48:86:a4:31:92:17:02:33:c2:63:d1:d4:c5: 0e:4c:05:f5:4f:53:1a:bf:b0:03:2f:02:e1:f1:9c: e1:b5:55:62:4d:58:29:d3:8a:4c:9e:06:0f:9d:d3: 29:f9:db:3b:3b:13:7e:b3:63:78:04:31:ff:21:32: b4:6b:b7:fc:3b:12:6b:01:e0:b6:37:49:2e:67:ba: 40:f9:04:25:63:d9:ac:24:4a:34:1b:24:44:6a:76: d9:a7:34:2d:b5:4a:cc:de:78:e8:6c:23:cf:b8:97: 97:13:de:fd:ba:03:15:c3:6f:c2:86:81:13:4e:ed: 38:ed:17:fd:48:5b:f7:15:58:b7:74:da:a5:0f:a7: bd:41:81:cb:c9:db:95:f1:21:25:c7:3f:6a:08:d0: 7a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EE:45:46:94:01:EA:23:CB:6F:C3:1B:79:4E:2E:CA:E3:87:B4:DC X509v3 Authority Key Identifier: keyid:30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5e:22:76:f7:63:72:8d:d0:3c:1d:b8:d1:02:18:55:e8:27: c0:e2:d4:35:48:b6:cd:1f:fa:40:61:d1:f0:55:76:46:0e:a7: c8:cf:25:6c:8c:34:e5:9c:24:fb:d8:44:eb:71:83:95:c1:97: e7:07:96:1f:a5:4b:a9:16:cf:f3:b8:67:51:9f:d2:64:45:b3: cd:12:19:46:d5:76:ff:f3:c4:ee:68:90:48:7d:42:9e:48:29: 43:2d:e3:39:27:12:6f:0d:e8:39:97:72:31:15:c9:cf:c6:aa: 80:ef:61:af:68:c5:09:66:96:72:59:34:69:6b:e5:31:84:9f: 96:1b:6c:76:a2:34:25:9c:49:79:66:79:6b:be:b8:4c:1e:73: f5:59:88:76:32:ab:da:73:a8:dd:ee:21:f7:cd:e9:52:1b:45: 15:8b:3d:33:65:b6:dd:e8:55:55:24:e3:50:e9:10:06:43:6d: 9d:63:c1:07:4d:7a:14:d4:a3:54:84:d9:a6:da:93:ff:8e:1f: 53:41:5e:f3:8d:89:4f:b4:5a:20:fc:bc:16:c7:e1:1c:e9:d0: 76:63:1f:2e:a1:d9:8d:87:37:0a:42:12:4b:cb:49:2b:ce:63: 59:16:96:41:20:95:d9:a3:75:64:48:77:7d:c2:ea:10:24:32: 64:66:18:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGM0MxMTAvBgNVBAUTKDMwN0FENDVFMDFCODQ3OUZBMjI4QTEyM0RFN0FGQUE1 RDE5N0MxN0QwHhcNMjUxMjIyMTUwNDUxWhcNMjUxMjI5MTUwNDUxWjAYMRYwFAYD VQQDDA02OTQ5NWUxMy1lY2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxFaYqjtHtKj2H67NMxNWF5x6oQIaYaSS7NyWSUiRZZxKYcWUyuNfRKz4DBm SLT3phuQv/4EkBcBq1YHdwuH1VGd9L1Mn8EytllbGoAvYlqBZghCgkwY8Z+lLFTh tHgMmwPxHCJCpa6YbkiGpDGSFwIzwmPR1MUOTAX1T1Mav7ADLwLh8ZzhtVViTVgp 04pMngYPndMp+ds7OxN+s2N4BDH/ITK0a7f8OxJrAeC2N0kuZ7pA+QQlY9msJEo0 GyREanbZpzQttUrM3njobCPPuJeXE979ugMVw2/ChoETTu047Rf9SFv3FVi3dNql D6e9QYHLyduV8SElxz9qCNB6kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjuRUaU Aeojy2/DG3lOLsrjh7TcMB8GA1UdIwQYMBaAFDB61F4BuEefoiihI956+qXRl8F9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYzQy84QTU1QTZBNDFE QTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1LWlLS0VqM25yNnBkR1h3 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01IclVYZ0c0UjUtaUtLRWozbnI2cGRHWHdYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYzQy84QTU1QTZBNDFEQTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1 LWlLS0VqM25yNnBkR1h3WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPXiJ292NyjdA8HbjRAhhV6CfA4tQ1SLbNH/pAYdHwVXZGDqfIzyVs jDTlnCT72ETrcYOVwZfnB5YfpUupFs/zuGdRn9JkRbPNEhlG1Xb/88TuaJBIfUKe SClDLeM5JxJvDeg5l3IxFcnPxqqA72GvaMUJZpZyWTRpa+UxhJ+WG2x2ojQlnEl5 ZnlrvrhMHnP1WYh2Mqvac6jd7iH3zelSG0UViz0zZbbd6FVVJONQ6RAGQ22dY8EH TXoU1KNUhNmm2pP/jh9TQV7zjYlPtFog/LwWx+Ec6dB2Yx8uodmNhzcKQhJLy0kr zmNZFpZBIJXZo3VkSHd9wuoQJDJkZhhK -----END CERTIFICATE-----Generated at Wed Dec 24 11:26:40 2025 by rpki-client