This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft File: c5C6Rl4CIu4xQH5VCebenj-pENs.mft (raw, json) Hash identifier: z8iXWAjdceLU2ho9meU9YYYrEQM1IZj9V25RAcagLJM= Subject key identifier: A3:D6:80:8B:7E:E9:F0:40:70:E5:32:7B:CE:B4:4D:41:3B:FE:1C:04 Authority key identifier: 73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB Certificate issuer: /CN=A91CA6E6/serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft Manifest number: 0318 Signing time: Thu 25 Dec 2025 01:44:14 +0000 Manifest this update: Thu 25 Dec 2025 01:44:13 +0000 Manifest next update: Thu 01 Jan 2026 01:44:13 +0000 Files and hashes: 1: c5C6Rl4CIu4xQH5VCebenj-pENs.crl (hash: bBWr8JYA9Q+Gt90kmGWvr5wgQ+3vTzSjs9Jga1KFXf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 01:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6, serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Validity Not Before: Dec 25 01:44:13 2025 GMT Not After : Jan 1 01:44:13 2026 GMT Subject: CN=694c96ee-7cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:70:fc:c1:8f:7b:09:49:54:51:72:41:35: de:61:19:da:db:54:f4:fc:fa:74:66:5b:9f:ee:40: d5:1c:fe:7a:fa:27:b1:91:1d:f8:ec:37:1a:19:c9: 34:51:0e:ca:26:0c:c5:24:89:5e:7d:39:97:f6:4c: 7d:d7:9d:c9:f6:83:b4:51:1f:1c:a8:c6:43:9d:ff: 02:d0:1c:99:d1:ab:07:bf:e6:db:24:44:bb:ee:a8: e1:0d:b6:94:99:26:b1:11:a3:75:28:56:b7:f9:78: 1b:b2:2c:0a:23:53:44:5d:b9:5b:d5:1b:59:ab:e3: f2:ad:53:eb:53:97:b8:19:45:75:86:a8:04:36:f5: 28:61:fe:98:54:e2:27:31:91:db:a1:09:15:f9:0b: f5:dc:f0:19:07:b0:1b:b9:21:0c:a8:42:26:aa:96: 3e:88:75:42:9c:cf:be:6b:98:38:1e:ad:a0:7f:14: 4a:f0:2d:a3:78:c2:f6:ef:a9:e7:9e:88:d7:6a:68: 13:f8:de:90:7f:4a:5d:37:29:c3:18:7d:3a:d7:e7: 97:5d:7f:13:47:0c:21:87:42:36:3c:2c:9f:af:7e: d7:f4:09:8a:72:d0:8e:5c:aa:e7:83:70:ce:d8:0f: 59:76:4f:48:e1:5e:93:22:3e:6e:7d:e5:16:39:84: 61:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D6:80:8B:7E:E9:F0:40:70:E5:32:7B:CE:B4:4D:41:3B:FE:1C:04 X509v3 Authority Key Identifier: keyid:73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:32:7f:bc:76:ca:e3:e9:54:2c:49:57:47:3f:2d:d4:8e:98: d3:bd:e5:36:24:cd:7f:e7:25:b6:19:d5:ef:13:43:b4:e4:9b: 1a:84:7b:b3:14:59:71:47:47:3f:7f:0f:3d:08:53:67:62:6c: ef:04:c0:93:0e:34:7c:13:3b:c4:86:5c:92:df:f1:c6:2a:f8: cd:b9:64:ef:b4:2f:ca:a0:f7:6a:3a:0a:cb:3c:9c:52:43:da: ac:b4:48:17:75:85:a6:35:54:4c:64:d8:e3:5b:4a:07:b4:09: 26:f8:69:49:07:79:7f:61:5c:bd:f2:dc:2c:52:55:d6:25:d8: 9f:d5:9a:fb:c9:a7:fb:5e:56:6a:49:2a:1c:70:7c:9a:c0:16: f6:32:b4:f3:10:d6:50:28:28:df:5d:0a:01:86:f5:82:bf:bd: 11:78:b1:c6:7f:a9:b0:f7:2a:b9:f9:19:c2:33:df:4d:21:64: 18:7e:74:0c:b6:65:98:6f:ea:f4:33:d8:72:55:dc:5d:6a:76: 48:fd:6f:ba:83:f7:ce:5a:c1:b6:6d:51:b4:ec:51:b6:d1:a3: d2:f7:95:36:7d:f5:f1:ef:40:8b:2e:43:97:4a:51:03:19:22: 6c:7d:39:59:f3:1a:f3:58:06:b8:39:35:08:a3:02:58:9f:6f: fa:7a:d8:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E2RTYxMTAvBgNVBAUTKDczOTBCQTQ2NUUwMjIyRUUzMTQwN0U1NTA5RTZERTlF M0ZBOTEwREIwHhcNMjUxMjI1MDE0NDEzWhcNMjYwMTAxMDE0NDEzWjAYMRYwFAYD VQQDDA02OTRjOTZlZS03Y2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoJw/MGPewlJVFFyQTXeYRna21T0/Pp0Zluf7kDVHP56+iexkR347DcaGck0 UQ7KJgzFJIlefTmX9kx9153J9oO0UR8cqMZDnf8C0ByZ0asHv+bbJES77qjhDbaU mSaxEaN1KFa3+XgbsiwKI1NEXblb1RtZq+PyrVPrU5e4GUV1hqgENvUoYf6YVOIn MZHboQkV+Qv13PAZB7AbuSEMqEImqpY+iHVCnM++a5g4Hq2gfxRK8C2jeML276nn nojXamgT+N6Qf0pdNynDGH061+eXXX8TRwwhh0I2PCyfr37X9AmKctCOXKrng3DO 2A9Zdk9I4V6TIj5ufeUWOYRhcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPWgIt+ 6fBAcOUye860TUE7/hwEMB8GA1UdIwQYMBaAFHOQukZeAiLuMUB+VQnm3p4/qRDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9jNUM2Umw0Q0l1NHhRSDVWQ2ViZW5qLXBF TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1QzZSbDRDSXU0eFFINVZDZWJlbmotcEVOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9jNUM2Umw0Q0l1 NHhRSDVWQ2ViZW5qLXBFTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOMn+8dsrj6VQsSVdHPy3UjpjTveU2JM1/5yW2GdXvE0O05JsahHuz FFlxR0c/fw89CFNnYmzvBMCTDjR8EzvEhlyS3/HGKvjNuWTvtC/KoPdqOgrLPJxS Q9qstEgXdYWmNVRMZNjjW0oHtAkm+GlJB3l/YVy98twsUlXWJdif1Zr7yaf7XlZq SSoccHyawBb2MrTzENZQKCjfXQoBhvWCv70ReLHGf6mw9yq5+RnCM99NIWQYfnQM tmWYb+r0M9hyVdxdanZI/W+6g/fOWsG2bVG07FG20aPS95U2ffXx70CLLkOXSlED GSJsfTlZ8xrzWAa4OTUIowJYn2/6ethO -----END CERTIFICATE-----Generated at Thu Dec 25 12:47:28 2025 by rpki-client