This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft File: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft (raw, json) Hash identifier: enVMwtY0LxGy/xv2zaEK6Sc39AzuJEnAXw9uCk1clCI= Subject key identifier: F3:9D:CD:A1:57:81:10:1A:55:B6:27:60:94:16:6E:A8:04:DF:EF:7A Authority key identifier: D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 Certificate issuer: /CN=A91BB629/serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft Manifest number: 0109 Signing time: Fri 19 Dec 2025 04:08:07 +0000 Manifest this update: Fri 19 Dec 2025 04:08:06 +0000 Manifest next update: Fri 26 Dec 2025 04:08:06 +0000 Files and hashes: 1: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl (hash: +dZ0Nkv1hlAn62k8fQwOFBokbcGm0m2moQDyxjJO6Gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB629, serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Validity Not Before: Dec 19 04:08:06 2025 GMT Not After : Dec 26 04:08:06 2025 GMT Subject: CN=6944cfa7-e0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f8:98:34:f6:14:8d:19:7b:f9:cb:dc:37:a5: 61:38:67:d6:e5:c3:d6:2f:af:c2:56:70:42:79:ee: 83:39:04:b5:a2:bb:3d:d8:76:64:cd:59:81:8c:fb: 76:c6:65:e1:6b:5d:94:de:c6:d9:59:21:38:46:d5: 0d:a9:e3:c4:ee:30:40:f1:65:61:8b:40:f8:aa:61: b4:b8:51:f7:c2:29:a7:da:bc:05:77:d0:a9:e1:cb: b6:18:05:46:aa:3e:e8:0a:b1:e1:f2:8c:a8:97:86: 5c:2b:8c:10:90:01:a4:b3:c7:d7:5a:80:b2:19:b3: ff:0d:d8:c7:c9:a1:68:a2:d4:82:0b:d6:50:c2:ed: ed:cd:9c:d3:a7:fe:0b:62:89:b1:98:42:5b:16:a8: 6f:93:b2:5e:af:87:19:55:79:fd:17:78:bf:12:74: a5:bc:64:54:2a:69:32:b8:df:3e:86:8f:e9:00:62: b9:c5:34:dd:e0:b2:bc:2b:01:0b:92:4d:ec:64:f0: 52:cb:64:1f:0d:70:3d:bf:45:ed:88:2f:fa:d0:22: 66:4b:39:97:74:71:ed:48:b8:11:b4:30:5b:07:d7: 92:97:7d:10:ed:55:65:d8:6d:28:cb:b8:81:b4:d1: a3:f5:90:99:81:77:d6:1b:31:07:c2:a2:af:d9:28: 5e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9D:CD:A1:57:81:10:1A:55:B6:27:60:94:16:6E:A8:04:DF:EF:7A X509v3 Authority Key Identifier: keyid:D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:01:57:e3:87:37:cd:72:c2:81:03:13:05:7a:60:1b:52:a4: e0:bb:2a:ba:b8:8e:90:f1:ac:a7:f2:11:01:57:42:73:d7:02: d2:ae:1d:7f:4b:c0:a8:5a:8b:00:13:24:24:c7:ac:b2:10:57: 5a:db:70:c3:d4:1a:38:d3:42:be:9f:d6:75:6c:9c:e0:74:e9: 45:7d:fe:93:c4:1c:93:dc:10:4a:74:30:6a:6a:ab:50:ea:e5: 4e:35:c1:33:5e:24:28:98:13:d5:39:68:1d:cc:33:b4:f4:bc: 82:d2:c4:7f:ed:31:67:a2:85:15:98:1c:68:13:19:37:95:1e: f9:ea:f5:fb:35:95:e8:77:f1:0d:03:a7:c1:cd:8a:15:ae:69: a5:46:05:d8:c7:0c:23:6c:a8:8e:c0:9d:84:49:1f:8b:40:04: 16:c8:d1:da:af:47:a5:1b:23:f5:a3:12:36:09:0a:33:e0:d9: 02:1a:9b:9c:07:db:b1:de:a2:25:be:52:dc:1a:45:aa:e6:88: ec:59:09:23:b4:32:3c:0e:15:6e:d0:8c:1f:31:77:ef:d8:86: e8:a0:03:43:ed:ea:b5:6d:f3:a3:49:1b:31:b6:ef:74:0a:a2: 6e:00:b0:bd:5f:ad:67:83:62:9c:16:03:a9:2d:ad:70:dd:89: af:dd:f5:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2MjkxMTAvBgNVBAUTKEQ2NjExQTM0MkUwNUU2RENEQzE5MjQzQkQ1MkY4OEQw MkIwNzg3RDIwHhcNMjUxMjE5MDQwODA2WhcNMjUxMjI2MDQwODA2WjAYMRYwFAYD VQQDDA02OTQ0Y2ZhNy1lMGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fiYNPYUjRl7+cvcN6VhOGfW5cPWL6/CVnBCee6DOQS1ors92HZkzVmBjPt2 xmXha12U3sbZWSE4RtUNqePE7jBA8WVhi0D4qmG0uFH3wimn2rwFd9Cp4cu2GAVG qj7oCrHh8oyol4ZcK4wQkAGks8fXWoCyGbP/DdjHyaFootSCC9ZQwu3tzZzTp/4L YomxmEJbFqhvk7Jer4cZVXn9F3i/EnSlvGRUKmkyuN8+ho/pAGK5xTTd4LK8KwEL kk3sZPBSy2QfDXA9v0XtiC/60CJmSzmXdHHtSLgRtDBbB9eSl30Q7VVl2G0oy7iB tNGj9ZCZgXfWGzEHwqKv2ShefQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOdzaFX gRAaVbYnYJQWbqgE3+96MB8GA1UdIwQYMBaAFNZhGjQuBebc3BkkO9UviNArB4fS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjYyOS9FQUZCQjU1MDQ1 QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0emNHU1E3MVMtSTBDc0ho OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtRWFOQzRGNXR6Y0dTUTcxUy1JMENzSGg5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjYyOS9FQUZCQjU1MDQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0 emNHU1E3MVMtSTBDc0hoOUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfAVfjhzfNcsKBAxMFemAbUqTguyq6uI6Q8ayn8hEBV0Jz1wLSrh1/ S8CoWosAEyQkx6yyEFda23DD1Bo400K+n9Z1bJzgdOlFff6TxByT3BBKdDBqaqtQ 6uVONcEzXiQomBPVOWgdzDO09LyC0sR/7TFnooUVmBxoExk3lR756vX7NZXod/EN A6fBzYoVrmmlRgXYxwwjbKiOwJ2ESR+LQAQWyNHar0elGyP1oxI2CQoz4NkCGpuc B9ux3qIlvlLcGkWq5ojsWQkjtDI8DhVu0IwfMXfv2IbooAND7eq1bfOjSRsxtu90 CqJuALC9X61ng2KcFgOpLa1w3Ymv3fWe -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:24 2025 by rpki-client