This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json) Hash identifier: Tq95jqrkC9fD5fWzebuAz58e+lyZRogPsx59SwCfguM= Subject key identifier: 10:98:BA:D0:02:90:19:E9:BE:EF:06:47:38:D4:B8:6E:4E:1D:5F:27 Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Certificate serial: 10F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft Manifest number: 1A05 Signing time: Thu 18 Dec 2025 17:07:56 +0000 Manifest this update: Thu 18 Dec 2025 17:07:56 +0000 Manifest next update: Thu 25 Dec 2025 17:07:56 +0000 Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: +hjeP780WBqFb0/K5uOLIHG6EMsHC3+8w9Min1jKb7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4345 (0x10f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Validity Not Before: Dec 18 17:07:56 2025 GMT Not After : Dec 25 17:07:56 2025 GMT Subject: CN=694434ec-cd30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:58:21:df:e3:3e:00:05:df:58:a2:82:57:81: 5e:23:ab:53:f0:dd:76:55:0b:49:83:4c:c8:3a:54: e6:77:21:93:01:3a:45:22:40:9a:20:2e:7d:44:15: 72:74:27:d8:5e:38:ea:93:39:08:15:5e:38:1f:5c: 35:3d:a0:e9:66:54:49:45:de:a0:74:32:14:77:7f: 61:a6:28:33:fc:9c:c3:49:84:21:28:6a:b0:25:dd: 36:a5:4b:bd:91:c4:f2:a7:23:bd:44:d0:ce:c7:7c: 91:00:e1:ee:04:94:75:9e:86:87:16:ce:64:5c:b5: f6:a7:a9:73:9d:b2:9d:8c:c6:7c:b0:8c:65:b0:cf: 31:e8:32:2b:9d:c1:0c:89:35:97:64:c5:7e:d0:91: 1b:bc:8d:1b:8a:29:7c:db:26:d0:89:09:d8:d1:fb: 31:5c:9a:68:17:fb:3e:6f:18:73:48:b9:7e:f7:b0: 76:49:d2:59:eb:5b:2c:87:5c:14:51:c2:94:88:94: 3a:d4:8b:28:70:13:b5:43:79:db:31:74:20:a8:e6: 30:74:11:15:ca:90:b9:52:af:19:0b:ba:f8:50:4f: 04:01:c0:a0:07:79:fa:fa:7a:b9:06:a7:8e:bf:af: e2:e1:e0:fc:7e:04:af:22:48:b4:32:4a:46:6f:e2: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:98:BA:D0:02:90:19:E9:BE:EF:06:47:38:D4:B8:6E:4E:1D:5F:27 X509v3 Authority Key Identifier: keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:10:79:da:c6:f8:ed:56:ac:ca:ae:14:8b:a8:07:23:38:fa: 77:f6:2b:d6:06:7b:4a:26:7a:03:d0:dc:d0:9f:10:dd:bf:4f: 5d:50:f7:51:46:d0:11:f9:99:e3:ef:aa:25:79:f2:f2:21:76: c2:fb:c8:a0:d5:71:da:8a:3b:9d:dc:66:3f:8e:8d:ec:14:af: 73:e9:fa:28:dc:1f:a1:41:6d:92:ae:94:cd:0b:3e:61:d4:6e: 72:53:4b:fb:82:e3:e8:bb:68:d7:79:32:00:a5:3c:23:a6:c1: a6:6d:d9:59:32:23:2a:a7:a6:af:45:36:f0:90:a6:a4:9c:4d: c4:8b:a4:9d:12:df:b9:96:7d:e5:78:1c:25:6b:be:35:a2:e0: fc:ab:ea:da:50:48:47:1c:8d:15:c4:2a:8e:23:f2:bc:f1:35: 19:27:88:03:53:33:bd:9f:66:fa:d6:2b:e3:f8:f4:6a:05:4e: c2:3c:82:60:f6:9e:6d:5d:30:f1:be:44:d8:bb:92:35:66:12: c9:3a:81:d1:8b:a1:39:ae:70:1b:35:79:4b:cd:4b:13:ef:03: 6d:ce:98:0c:3c:d5:19:62:a5:3f:fe:09:5e:47:6e:44:22:63: f4:a6:bc:62:e8:28:0e:73:95:90:3c:ff:70:85:80:9a:35:13: 65:56:99:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKEY5Q0YwNDk3Q0ZCNjdFMTYyNzI5MTA5OEYxMUYxNzg2 RUI4OUZGNTAwHhcNMjUxMjE4MTcwNzU2WhcNMjUxMjI1MTcwNzU2WjAYMRYwFAYD VQQDDA02OTQ0MzRlYy1jZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Fgh3+M+AAXfWKKCV4FeI6tT8N12VQtJg0zIOlTmdyGTATpFIkCaIC59RBVy dCfYXjjqkzkIFV44H1w1PaDpZlRJRd6gdDIUd39hpigz/JzDSYQhKGqwJd02pUu9 kcTypyO9RNDOx3yRAOHuBJR1noaHFs5kXLX2p6lznbKdjMZ8sIxlsM8x6DIrncEM iTWXZMV+0JEbvI0biil82ybQiQnY0fsxXJpoF/s+bxhzSLl+97B2SdJZ61ssh1wU UcKUiJQ61IsocBO1Q3nbMXQgqOYwdBEVypC5Uq8ZC7r4UE8EAcCgB3n6+nq5BqeO v6/i4eD8fgSvIki0MkpGb+J1swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCYutAC kBnpvu8GRzjUuG5OHV8nMB8GA1UdIwQYMBaAFPnPBJfPtn4WJykQmPEfF4brif9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZoWW5LUkNZOFI4WGh1dUpf MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jOEVsOC0yZmhZbktSQ1k4UjhYaHV1Sl8xQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZo WW5LUkNZOFI4WGh1dUpfMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1EHnaxvjtVqzKrhSLqAcjOPp39ivWBntKJnoD0NzQnxDdv09dUPdR RtAR+Znj76olefLyIXbC+8ig1XHaijud3GY/jo3sFK9z6foo3B+hQW2SrpTNCz5h 1G5yU0v7guPou2jXeTIApTwjpsGmbdlZMiMqp6avRTbwkKaknE3Ei6SdEt+5ln3l eBwla741ouD8q+raUEhHHI0VxCqOI/K88TUZJ4gDUzO9n2b61ivj+PRqBU7CPIJg 9p5tXTDxvkTYu5I1ZhLJOoHRi6E5rnAbNXlLzUsT7wNtzpgMPNUZYqU//gleR25E ImP0prxi6CgOc5WQPP9whYCaNRNlVpnw -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:44 2025 by rpki-client