This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft File: e9ZuQtUwkEC0dRqcKySR1818FLg.mft (raw, json) Hash identifier: KXhOtao4giqn43yEMTbvPDfF/4v6IixCR184f5ocr7c= Subject key identifier: F3:63:4F:FC:7B:75:8A:4B:1F:E4:70:A6:AF:74:8A:B2:7C:1E:1D:68 Authority key identifier: 7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 Certificate issuer: /CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Certificate serial: 34F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft Manifest number: 34F4 Signing time: Thu 18 Dec 2025 14:19:16 +0000 Manifest this update: Thu 18 Dec 2025 14:19:15 +0000 Manifest next update: Thu 25 Dec 2025 14:19:15 +0000 Files and hashes: 1: e9ZuQtUwkEC0dRqcKySR1818FLg.crl (hash: Qec7+fcehlYOYvV7vBiDr4VPrWPuWQS/e+fwNIR2C88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13557 (0x34f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5AD, serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Validity Not Before: Dec 18 14:19:15 2025 GMT Not After : Dec 25 14:19:15 2025 GMT Subject: CN=69440d64-52a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:91:da:8c:25:12:73:e1:89:35:e3:dc:fc: 94:33:46:12:41:4e:bb:d8:86:1c:fc:0f:8a:15:65: 2d:cb:09:e2:8c:16:d4:e5:af:36:87:e1:08:00:be: f2:60:ca:7d:f0:46:2b:23:82:64:c0:10:3a:19:43: d0:03:cf:6f:0a:89:48:9a:30:97:c5:74:d0:8a:f4: 7e:c8:a3:c4:df:14:d4:f9:63:28:8a:28:6c:58:7e: 03:30:51:a0:47:6b:81:bb:a6:f5:fe:dc:68:98:bc: 70:11:11:b5:8f:e6:d6:f2:8c:9f:a6:d2:b6:ec:b3: 83:e8:58:ae:f0:0e:90:d0:fa:49:32:fa:92:a3:ca: 6a:58:fc:1e:d0:c0:44:bc:fc:7b:50:75:0b:15:69: 3a:a7:35:e3:2d:e5:c7:cd:98:bc:cd:b2:78:0f:fa: 11:22:bb:33:42:5f:b3:9b:63:ad:76:52:89:f7:ac: cd:6d:9b:3b:6c:1a:2b:b3:cf:07:73:72:90:52:a3: 98:a7:f8:8c:d5:e2:c0:54:8b:81:6d:1e:64:d8:71: 6f:2b:94:6f:8f:3a:62:f6:9d:5a:72:93:59:59:2f: b3:6c:c9:4b:e7:89:9a:41:c9:06:b2:96:d0:b9:2b: 70:dd:b1:a5:e5:f2:c0:3e:0c:3b:48:d7:e7:ac:25: 6e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:63:4F:FC:7B:75:8A:4B:1F:E4:70:A6:AF:74:8A:B2:7C:1E:1D:68 X509v3 Authority Key Identifier: keyid:7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a1:ac:6e:79:c4:24:40:09:0c:1c:62:15:a2:69:82:c3:02: 66:e1:80:41:31:e9:8e:e2:ea:51:e5:a8:00:64:d8:65:69:06: 7a:8f:bb:02:19:5f:5d:f9:8f:77:22:c3:60:7d:12:48:68:d8: fa:88:6d:2f:03:0c:c4:6d:33:79:17:65:20:90:cf:70:43:8c: 6a:18:3c:e0:c4:c0:96:49:ee:d5:d8:5a:03:d3:1e:8b:88:e3: d5:f0:52:7d:03:21:b7:99:40:44:ed:af:96:fd:34:90:ad:a9: e9:ff:46:97:0a:6c:79:7c:61:f3:27:58:9f:4f:56:31:7d:b6: 15:00:2b:fa:66:1b:66:43:18:c7:53:71:4c:8e:56:cf:40:61: 89:5f:63:66:bd:87:ee:a4:41:8d:99:a0:20:f4:dc:a0:c6:71: e1:53:7d:e1:9f:23:98:9e:38:ca:a0:74:7e:9b:4d:76:3e:be: a3:ce:fb:a6:22:40:23:fb:5c:3d:82:ed:85:1d:cf:e2:6d:31: cd:25:b0:f2:27:17:83:fc:f0:45:e3:48:50:bd:9e:7a:5e:b8: 79:38:f4:70:36:dd:81:2c:b9:c0:e6:d0:89:1b:d5:1e:90:7b: a9:bb:01:d7:12:4a:44:71:a1:b9:88:fd:eb:7f:f6:3e:1b:89: 66:55:cd:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1QUQxMTAvBgNVBAUTKDdCRDY2RTQyRDUzMDkwNDBCNDc1MUE5QzJCMjQ5MUQ3 Q0Q3QzE0QjgwHhcNMjUxMjE4MTQxOTE1WhcNMjUxMjI1MTQxOTE1WjAYMRYwFAYD VQQDDA02OTQ0MGQ2NC01MmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ+R2owlEnPhiTXj3PyUM0YSQU672IYc/A+KFWUtywnijBbU5a82h+EIAL7y YMp98EYrI4JkwBA6GUPQA89vColImjCXxXTQivR+yKPE3xTU+WMoiihsWH4DMFGg R2uBu6b1/txomLxwERG1j+bW8oyfptK27LOD6Fiu8A6Q0PpJMvqSo8pqWPwe0MBE vPx7UHULFWk6pzXjLeXHzZi8zbJ4D/oRIrszQl+zm2OtdlKJ96zNbZs7bBors88H c3KQUqOYp/iM1eLAVIuBbR5k2HFvK5Rvjzpi9p1acpNZWS+zbMlL54maQckGspbQ uStw3bGl5fLAPgw7SNfnrCVubQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNjT/x7 dYpLH+Rwpq90irJ8Hh1oMB8GA1UdIwQYMBaAFHvWbkLVMJBAtHUanCskkdfNfBS4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTVBRC8zNjZDNDQyRTFE NzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tFQzBkUnFjS3lTUjE4MThG TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5WnVRdFV3a0VDMGRScWNLeVNSMTgxOEZMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTVBRC8zNjZDNDQyRTFENzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tF QzBkUnFjS3lTUjE4MThGTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtoaxuecQkQAkMHGIVommCwwJm4YBBMemO4upR5agAZNhlaQZ6j7sC GV9d+Y93IsNgfRJIaNj6iG0vAwzEbTN5F2UgkM9wQ4xqGDzgxMCWSe7V2FoD0x6L iOPV8FJ9AyG3mUBE7a+W/TSQranp/0aXCmx5fGHzJ1ifT1YxfbYVACv6ZhtmQxjH U3FMjlbPQGGJX2NmvYfupEGNmaAg9NygxnHhU33hnyOYnjjKoHR+m012Pr6jzvum IkAj+1w9gu2FHc/ibTHNJbDyJxeD/PBF40hQvZ56Xrh5OPRwNt2BLLnA5tCJG9Ue kHupuwHXEkpEcaG5iP3rf/Y+G4lmVc3B -----END CERTIFICATE-----Generated at Fri Dec 19 23:55:13 2025 by rpki-client