This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft File: nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json) Hash identifier: 0HslGRL9GUQ5sJHM4PJEiF40wNRpHjWbtfXXZDhE2BE= Subject key identifier: 0F:57:97:2F:A0:95:75:A7:2C:85:DD:9F:22:D9:CD:7A:6B:96:47:AE Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 Certificate issuer: /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Certificate serial: 34ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft Manifest number: 51AF Signing time: Fri 26 Dec 2025 15:07:56 +0000 Manifest this update: Fri 26 Dec 2025 15:07:55 +0000 Manifest next update: Fri 02 Jan 2026 15:07:55 +0000 Files and hashes: 1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: UglzhYx7N9VWBiErFoY6l/FjVdzhvsKw+ZfIzxfcscg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 15:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13549 (0x34ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48 Validity Not Before: Dec 26 15:07:55 2025 GMT Not After : Jan 2 15:07:55 2026 GMT Subject: CN=694ea4cb-2576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:13:98:c5:d0:8b:e2:4b:11:63:e2:8a:d8:d8: f1:49:51:72:e5:54:09:9f:d7:9c:54:cc:85:c1:f7: 9e:72:5e:66:e0:b7:2b:c5:2d:e7:49:e1:b2:82:24: f8:e1:56:73:25:07:f5:f3:3e:2a:f5:2b:a5:46:84: 6f:ff:2c:1d:9d:7c:62:2f:ac:28:b0:2f:40:84:e0: a4:52:fb:0b:09:3c:00:9b:70:34:b9:9f:20:44:c3: e4:02:bf:c3:cf:8f:a4:23:ba:60:34:bd:d5:9e:3e: 4b:b6:22:b7:6a:c1:e1:af:cc:fc:db:ba:b1:3a:19: ec:20:79:81:4e:cb:76:1c:93:ea:85:3b:3a:b1:62: e5:09:3f:e1:b4:ef:8e:88:99:61:7a:84:bc:50:b6: 3f:90:88:59:db:03:31:3f:cf:b3:31:73:02:ca:a0: a7:78:a9:fa:b1:ef:11:ce:78:ae:96:db:34:bd:05: cc:b5:b0:13:b5:81:fc:a0:6a:44:90:f9:47:76:97: 67:1e:cb:c8:4b:22:e4:d1:97:8e:d2:93:c8:3f:2d: 60:8a:b2:ab:4c:bb:c8:37:0e:c8:73:54:18:c0:40: a4:27:bd:4b:fb:1d:35:e7:60:a7:53:22:85:86:29: 3a:5e:aa:42:90:8e:8b:b1:16:27:8f:80:b6:ea:a9: a4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:57:97:2F:A0:95:75:A7:2C:85:DD:9F:22:D9:CD:7A:6B:96:47:AE X509v3 Authority Key Identifier: keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:28:0f:88:c5:8d:3b:aa:df:f0:b1:ee:9d:73:c4:6c:c0:95: dc:00:c8:99:5d:05:77:28:e4:9e:78:ba:6c:cf:e3:76:99:18: c1:6d:13:cb:d4:ec:54:90:bb:39:81:71:2b:95:53:db:63:fa: 92:99:d1:91:86:4c:90:e2:54:2e:9c:8c:cc:d3:60:ae:8a:13: ae:f5:1b:93:64:36:f4:0e:7b:d9:ef:47:92:7c:6f:6e:b6:29: 40:53:d9:63:68:b6:1b:30:f9:b9:ac:f2:94:ca:d3:d6:b2:81: bc:cc:d1:7a:4c:00:d0:ae:5d:cd:88:4c:3d:dc:8d:2c:66:f4: 7d:7b:1a:a6:8a:65:94:6c:e5:b8:84:5e:55:34:fe:c9:4a:31: 9a:16:c9:b7:ee:39:16:1b:f3:5a:6e:b5:ff:57:72:48:ec:18: dc:a1:a0:f6:ec:95:1f:ec:38:80:70:f9:0a:d5:0d:b5:9b:65: 87:f1:b7:55:ad:89:01:4e:47:b9:37:d7:7f:d5:e1:87:52:d3: ba:3a:b5:7e:cf:80:c1:69:b6:fc:ee:be:35:6f:75:b8:f3:b7: 8b:15:21:c8:35:be:c1:86:41:e0:e4:db:43:bf:87:50:6a:25: 30:5e:8a:03:8e:77:49:20:20:dd:32:b1:11:de:7a:c9:2a:0e: da:3e:04:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDlDM0I3OEYyNDQyNjBFQzQ2MzFCQTBERjYxOTQ2MDhC NzFBODdGNDgwHhcNMjUxMjI2MTUwNzU1WhcNMjYwMTAyMTUwNzU1WjAYMRYwFAYD VQQDDA02OTRlYTRjYi0yNTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlBOYxdCL4ksRY+KK2NjxSVFy5VQJn9ecVMyFwfeecl5m4LcrxS3nSeGygiT4 4VZzJQf18z4q9SulRoRv/ywdnXxiL6wosC9AhOCkUvsLCTwAm3A0uZ8gRMPkAr/D z4+kI7pgNL3Vnj5LtiK3asHhr8z827qxOhnsIHmBTst2HJPqhTs6sWLlCT/htO+O iJlheoS8ULY/kIhZ2wMxP8+zMXMCyqCneKn6se8Rzniults0vQXMtbATtYH8oGpE kPlHdpdnHsvISyLk0ZeO0pPIPy1girKrTLvINw7Ic1QYwECkJ71L+x0152CnUyKF hik6XqpCkI6LsRYnj4C26qmkuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9Xly+g lXWnLIXdnyLZzXprlkeuMB8GA1UdIwQYMBaAFJw7ePJEJg7EYxug32GUYItxqH9I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURzUmpHNkRmWVpSZ2kzR29m MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25EdDQ4a1FtRHNSakc2RGZZWlJnaTNHb2YwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9uRHQ0OGtRbURz UmpHNkRmWVpSZ2kzR29mMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmKA+IxY07qt/wse6dc8RswJXcAMiZXQV3KOSeeLpsz+N2mRjBbRPL 1OxUkLs5gXErlVPbY/qSmdGRhkyQ4lQunIzM02CuihOu9RuTZDb0DnvZ70eSfG9u tilAU9ljaLYbMPm5rPKUytPWsoG8zNF6TADQrl3NiEw93I0sZvR9exqmimWUbOW4 hF5VNP7JSjGaFsm37jkWG/NabrX/V3JI7BjcoaD27JUf7DiAcPkK1Q21m2WH8bdV rYkBTke5N9d/1eGHUtO6OrV+z4DBabb87r41b3W487eLFSHINb7BhkHg5NtDv4dQ aiUwXooDjndJICDdMrER3nrJKg7aPgQ8 -----END CERTIFICATE-----Generated at Sun Dec 28 03:16:49 2025 by rpki-client