This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft File: CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft (raw, json) Hash identifier: +mLEtEerqMJILObxAVpk0Ni9Y4HVnNEtuvPMEot4xfQ= Subject key identifier: 13:FE:E0:84:A6:19:44:03:80:5C:97:11:3B:2D:43:5F:6B:1C:2D:A4 Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E Certificate issuer: /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Certificate serial: 19B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft Manifest number: 19A7 Signing time: Thu 18 Dec 2025 16:16:39 +0000 Manifest this update: Thu 18 Dec 2025 16:16:39 +0000 Manifest next update: Thu 25 Dec 2025 16:16:39 +0000 Files and hashes: 1: CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl (hash: bcXvW4hwnRhq0f98kN08E8pIiupWQ32qTVN5mKxtDUE=) 2: 290732FC79A211E79F34D81FC4F9AE02.roa (hash: SR7eVnerj/ud7fW+5gtERIt5ClN7aXRbGYLPuzi6Nlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6579 (0x19b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE533, serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Validity Not Before: Dec 18 16:16:39 2025 GMT Not After : Dec 25 16:16:39 2025 GMT Subject: CN=694428e7-1d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:10:66:ae:3a:07:8d:56:63:2e:aa:43:88: 6a:f6:9e:e6:51:99:8e:93:bb:80:b7:b9:d9:6e:c6: 9d:23:f7:bf:e7:31:2c:5b:d6:15:c7:d1:ce:8c:f0: b7:6b:4f:bd:88:30:8f:dc:37:fb:72:e7:11:76:f3: 00:e1:33:55:07:60:35:cf:be:b1:77:69:77:f7:7a: a2:61:79:ec:60:fa:5e:23:2d:9c:2f:fe:0f:b4:53: b2:de:a6:3a:5e:46:f9:04:df:bf:0f:69:77:ed:c8: b5:12:51:bb:8e:37:e4:db:29:0f:8a:8c:64:c2:69: ca:a0:de:a9:e5:9e:3b:38:30:ad:44:8b:9d:16:96: 8e:9a:44:7a:f3:6e:e9:4a:ae:40:ce:25:64:89:73: 2e:d8:1a:0a:2a:a4:05:12:d4:74:a3:f1:32:5d:27: 74:6d:ad:cb:7d:0f:ba:b7:ab:47:96:bc:fc:64:b8: 23:5b:49:8c:08:3f:a6:d3:b8:d0:c1:98:88:16:5e: 41:46:3d:8b:66:c5:17:d9:45:52:51:82:7a:2f:e4: 0b:a3:94:69:2d:de:f1:99:31:7d:e7:16:51:cf:d9: 9f:45:af:65:43:db:c7:e8:4b:89:be:9b:9e:41:d7: 66:85:45:cd:0d:a6:dd:88:c3:7f:bb:03:bf:08:4a: 34:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FE:E0:84:A6:19:44:03:80:5C:97:11:3B:2D:43:5F:6B:1C:2D:A4 X509v3 Authority Key Identifier: keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:04:47:4d:f4:0c:b5:bc:29:94:2d:ef:97:26:41:70:c6:e9: ad:44:b5:3d:22:b5:b6:11:43:19:9e:fe:8e:e3:ff:9a:52:6d: ca:2d:62:53:9e:96:a0:9d:1f:6a:38:7d:ec:ca:5a:e9:8f:b6: 21:c3:9b:2e:d4:8f:09:cd:03:3c:f7:6a:e1:4d:4b:8f:00:6d: a3:f1:35:e0:41:23:4a:f3:95:40:09:2c:c5:cf:76:fb:ae:a5: a9:5a:4d:d9:0d:62:65:e8:46:56:86:87:b1:51:96:37:3a:47: 05:31:9d:a0:76:be:66:a0:2b:d9:6d:ae:07:52:33:1f:bc:a5: df:b9:41:35:51:fa:b2:14:72:59:9a:c8:bd:ba:be:be:ad:31: c3:9b:82:8f:da:31:37:ae:2e:ba:e2:56:7f:01:19:51:5b:ed: 53:76:c0:25:be:b3:da:42:19:4c:38:d2:6f:19:c6:9a:e3:fc: 82:94:c3:76:c7:69:50:a5:fd:35:0a:03:46:47:a7:eb:e0:a2: 3e:12:88:2e:8d:d7:d7:db:29:66:f5:02:14:06:69:91:6e:de: 96:5f:be:3b:76:23:8e:66:7d:1e:1f:42:40:9a:91:05:60:5e: 38:f1:b0:4c:1c:c2:df:21:cf:27:af:ce:29:9f:55:dd:f4:b8: e1:d2:8b:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MzMxMTAvBgNVBAUTKDA5QTNFQ0M0OUY4M0E3OThBRTEzOUYxRENCQzUzNkVF NkY2N0NFN0UwHhcNMjUxMjE4MTYxNjM5WhcNMjUxMjI1MTYxNjM5WjAYMRYwFAYD VQQDDA02OTQ0MjhlNy0xZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaMQZq46B41WYy6qQ4hq9p7mUZmOk7uAt7nZbsadI/e/5zEsW9YVx9HOjPC3 a0+9iDCP3Df7cucRdvMA4TNVB2A1z76xd2l393qiYXnsYPpeIy2cL/4PtFOy3qY6 Xkb5BN+/D2l37ci1ElG7jjfk2ykPioxkwmnKoN6p5Z47ODCtRIudFpaOmkR6827p Sq5AziVkiXMu2BoKKqQFEtR0o/EyXSd0ba3LfQ+6t6tHlrz8ZLgjW0mMCD+m07jQ wZiIFl5BRj2LZsUX2UVSUYJ6L+QLo5RpLd7xmTF95xZRz9mfRa9lQ9vH6EuJvpue QddmhUXNDabdiMN/uwO/CEo0owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBP+4ISm GUQDgFyXETstQ19rHC2kMB8GA1UdIwQYMBaAFAmj7MSfg6eYrhOfHcvFNu5vZ85+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUzMy9FOEZENEZBNDc5 OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1aXVFNThkeThVMjdtOW56 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhUHN4Si1EcDVpdUU1OGR5OFUyN205bnpuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUzMy9FOEZENEZBNDc5OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1 aXVFNThkeThVMjdtOW56bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNBEdN9Ay1vCmULe+XJkFwxumtRLU9IrW2EUMZnv6O4/+aUm3KLWJT npagnR9qOH3sylrpj7Yhw5su1I8JzQM892rhTUuPAG2j8TXgQSNK85VACSzFz3b7 rqWpWk3ZDWJl6EZWhoexUZY3OkcFMZ2gdr5moCvZba4HUjMfvKXfuUE1UfqyFHJZ msi9ur6+rTHDm4KP2jE3ri664lZ/ARlRW+1TdsAlvrPaQhlMONJvGcaa4/yClMN2 x2lQpf01CgNGR6fr4KI+EogujdfX2ylm9QIUBmmRbt6WX747diOOZn0eH0JAmpEF YF448bBMHMLfIc8nr84pn1Xd9Ljh0osh -----END CERTIFICATE-----Generated at Fri Dec 19 23:53:21 2025 by rpki-client