This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json) Hash identifier: fCtyoSw+jGae02PSCwnEnw5Lo3MTbBXisA04RDK5RUM= Subject key identifier: 0C:5B:C3:5A:9C:3E:BB:6D:B4:10:A7:B3:68:9C:B9:FD:5E:68:B5:71 Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft Manifest number: A1 Signing time: Fri 19 Dec 2025 05:21:53 +0000 Manifest this update: Fri 19 Dec 2025 05:21:53 +0000 Manifest next update: Fri 26 Dec 2025 05:21:53 +0000 Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: YUpSeVh5RjnfsFnQ+MzrLUuVxFnDI9jYpzQQE9AeuKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Validity Not Before: Dec 19 05:21:53 2025 GMT Not After : Dec 26 05:21:53 2025 GMT Subject: CN=6944e0f1-d20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a9:c2:d7:b3:f9:f2:97:56:17:f9:ee:f1:90: 9d:a5:4d:cb:6b:cf:55:45:bb:ab:fd:27:81:43:64: 54:00:d5:9f:85:26:cd:8c:96:bd:2c:08:8d:1d:b5: 46:eb:79:65:48:f9:df:1e:29:e8:3d:03:5c:55:32: 9d:b2:c4:e5:85:da:53:a3:dc:08:fa:a2:99:74:af: d9:61:66:b9:45:d5:62:c0:aa:f6:6d:a0:c5:03:24: ef:92:ac:f4:91:42:2f:65:2c:61:b3:ef:78:32:ce: f8:fd:a2:9b:62:5b:07:de:50:0a:9a:c7:21:d1:48: 17:fc:ec:a5:54:ad:1a:d1:96:61:a3:92:07:7c:08: a8:f5:bf:ca:47:15:3f:75:cc:08:44:c0:4e:29:cf: 87:67:f5:3e:b1:ff:a4:62:6b:9a:62:44:64:f1:e7: a3:5d:37:25:67:f9:52:80:22:88:eb:2d:35:e3:38: 20:4c:41:ea:6b:71:61:88:5a:4c:0a:ef:c4:3b:92: 28:02:c8:3a:52:95:d0:62:db:c1:73:af:df:5f:fc: 42:20:90:6b:82:2b:0b:ed:11:37:4f:f4:86:fa:33: 73:8d:47:5e:47:7b:19:4c:97:c1:83:d5:96:26:23: 20:ad:45:ce:a7:c5:9c:7d:e8:90:2f:ca:bb:24:4a: 7d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5B:C3:5A:9C:3E:BB:6D:B4:10:A7:B3:68:9C:B9:FD:5E:68:B5:71 X509v3 Authority Key Identifier: keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:31:72:0f:3a:35:21:e1:83:fd:d3:3d:88:a7:67:db:55:3e: d8:0a:43:89:16:11:f2:59:f2:a8:1c:01:e5:ce:06:43:b7:2e: 9e:12:9e:25:02:5d:94:77:50:1a:cf:c1:74:00:45:ab:a9:98: c4:08:7a:6b:c5:86:5e:04:2e:b4:6a:09:63:84:d7:b0:d0:a7: ed:f3:72:f5:78:9b:0d:bc:1b:78:91:92:d6:45:a9:18:5c:c7: d7:e0:35:b1:37:97:9d:75:ab:d4:31:03:0c:55:47:56:8e:a9: 60:60:1f:56:e2:bf:dd:12:df:d4:70:d1:a5:ed:64:28:be:2e: 0d:17:e0:10:e3:d5:5f:ff:2c:10:b7:d6:59:da:6d:8d:fc:92: 46:bd:dd:7e:79:5f:16:19:4e:1e:f5:9b:e0:b5:cc:f3:95:4b: c7:21:89:51:0a:56:8a:83:13:18:7f:10:f9:c4:a0:29:57:77: cf:e1:9e:e7:e8:dd:79:7d:a7:36:08:50:cc:85:f1:04:43:10: 1a:88:6e:d7:ee:d0:6b:15:ff:cb:11:93:f7:72:67:78:ee:3d: 98:07:61:12:77:db:d6:a2:f7:31:00:69:a8:4d:2d:6a:b0:7e: 9e:ff:6a:b0:38:b4:3f:27:fd:5a:b5:a2:32:39:65:be:ee:55: 33:07:88:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRBODAxMTAvBgNVBAUTKDNGRDdGNTU1RkM3RDZGQzIzNTM5QTNBNjIxRUYyRDA0 OEQ0QzdDQzcwHhcNMjUxMjE5MDUyMTUzWhcNMjUxMjI2MDUyMTUzWjAYMRYwFAYD VQQDDA02OTQ0ZTBmMS1kMjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlqnC17P58pdWF/nu8ZCdpU3La89VRbur/SeBQ2RUANWfhSbNjJa9LAiNHbVG 63llSPnfHinoPQNcVTKdssTlhdpTo9wI+qKZdK/ZYWa5RdViwKr2baDFAyTvkqz0 kUIvZSxhs+94Ms74/aKbYlsH3lAKmsch0UgX/OylVK0a0ZZho5IHfAio9b/KRxU/ dcwIRMBOKc+HZ/U+sf+kYmuaYkRk8eejXTclZ/lSgCKI6y014zggTEHqa3FhiFpM Cu/EO5IoAsg6UpXQYtvBc6/fX/xCIJBrgisL7RE3T/SG+jNzjUdeR3sZTJfBg9WW JiMgrUXOp8WcfeiQL8q7JEp92QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxbw1qc PrtttBCns2icuf1eaLVxMB8GA1UdIwQYMBaAFD/X9VX8fW/CNTmjpiHvLQSNTHzH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEE4MC8yOUVDNzNCQUU0 RUYxMUVGQjcxNEU1NkNDNEY5QUUwMi9QOWYxVmZ4OWI4STFPYU9tSWU4dEJJMU1m TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5ZjFWZng5YjhJMU9hT21JZTh0QkkxTWZNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEE4MC8yOUVDNzNCQUU0RUYxMUVGQjcxNEU1NkNDNEY5QUUwMi9QOWYxVmZ4OWI4 STFPYU9tSWU4dEJJMU1mTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmMXIPOjUh4YP90z2Ip2fbVT7YCkOJFhHyWfKoHAHlzgZDty6eEp4l Al2Ud1Aaz8F0AEWrqZjECHprxYZeBC60agljhNew0Kft83L1eJsNvBt4kZLWRakY XMfX4DWxN5eddavUMQMMVUdWjqlgYB9W4r/dEt/UcNGl7WQovi4NF+AQ49Vf/ywQ t9ZZ2m2N/JJGvd1+eV8WGU4e9ZvgtczzlUvHIYlRClaKgxMYfxD5xKApV3fP4Z7n 6N15fac2CFDMhfEEQxAaiG7X7tBrFf/LEZP3cmd47j2YB2ESd9vWovcxAGmoTS1q sH6e/2qwOLQ/J/1ataIyOWW+7lUzB4gB -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:45 2025 by rpki-client