This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft File: -BaXnSqJmynqWV8rVO6jmQokNvk.mft (raw, json) Hash identifier: HSc8JHfXJ+lnrsD9rNWi1YAdrBGCvKyDiLRkjWr5DCI= Subject key identifier: 45:5D:E2:54:72:8A:23:6D:67:45:ED:7C:A3:B2:E9:A9:47:C9:01:46 Authority key identifier: F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 Certificate issuer: /CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Certificate serial: 1662 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft Manifest number: 1662 Signing time: Wed 31 Dec 2025 16:30:39 +0000 Manifest this update: Wed 31 Dec 2025 16:30:39 +0000 Manifest next update: Wed 07 Jan 2026 16:30:39 +0000 Files and hashes: 1: -BaXnSqJmynqWV8rVO6jmQokNvk.crl (hash: D4KUJrhsvaJMVY8usNFhrsGn7BKmrbxtNSRwSYKZYfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 16:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5730 (0x1662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5DB6, serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Validity Not Before: Dec 31 16:30:39 2025 GMT Not After : Jan 7 16:30:39 2026 GMT Subject: CN=69554faf-1470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:05:b4:f9:a4:1e:53:c2:94:01:44:75:46:c1: 5d:49:a6:9f:fb:b7:a8:f0:02:c5:59:e5:28:79:71: f2:9a:2a:d7:a0:b5:7a:0f:40:1e:b3:c7:e7:55:e5: 2e:59:29:7d:49:93:a2:a6:4e:4b:62:f8:08:61:1a: 92:e9:a9:31:df:0d:1a:4a:75:df:58:58:2b:1d:5e: 3f:bb:e0:10:21:a7:df:14:44:e9:b6:da:ce:8c:ee: b2:67:72:7d:f6:3f:77:b3:09:a3:17:8d:10:f2:01: 40:0b:d7:2d:56:52:10:7c:50:7e:82:1f:a7:e3:85: ef:9a:c0:94:a3:5d:65:b6:21:a7:7d:31:9a:b2:34: f9:cb:60:df:d7:5a:e9:e9:15:49:1f:fc:86:9d:c0: bf:18:c8:c0:c7:29:e8:8f:43:64:a3:82:15:6f:c1: 5c:06:8a:d2:e2:cd:fc:c2:92:c3:8e:ab:5a:bb:63: 4e:58:a5:94:79:3d:6b:eb:1a:2c:0d:ec:28:70:90: 25:bc:82:af:f2:f7:82:d2:1c:33:80:d6:fd:c5:96: 87:b8:28:df:74:68:5d:05:9e:17:77:cb:43:7d:b9: 26:4f:d6:29:01:75:a8:77:2c:19:ef:71:1b:3c:ba: 4d:bb:a1:38:c0:31:e5:12:8f:36:45:30:0c:a2:89: 4d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5D:E2:54:72:8A:23:6D:67:45:ED:7C:A3:B2:E9:A9:47:C9:01:46 X509v3 Authority Key Identifier: keyid:F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:67:fb:52:c3:e7:a7:c5:56:b0:8c:70:5f:51:c3:ee:20:4c: 52:4f:93:a0:41:52:1f:19:90:8c:d6:24:7b:ab:42:ad:43:cb: b9:d5:60:e7:be:c3:e1:e3:ab:e3:64:7e:98:92:2c:7f:be:db: 75:0c:b6:b1:e9:c2:78:12:42:e2:2c:a8:b3:1f:f5:ec:c0:3f: d1:d1:06:84:48:1d:55:9b:5c:55:27:78:4a:95:b8:f8:89:bb: f5:76:db:1a:c1:44:cb:88:8b:72:a0:93:54:71:a2:f6:8d:5f: 98:6d:ef:54:02:6d:b5:44:fc:d7:94:b1:67:f7:c0:38:78:22: da:14:c1:f1:b2:dc:1c:6f:8e:f7:42:1b:4c:4b:7d:34:f1:60: c0:fe:50:0e:20:8f:91:a6:1e:39:78:be:56:db:d8:c9:b7:f8: 8b:07:5c:35:37:7e:bb:b7:35:32:17:a7:30:2c:4d:93:85:ee: 40:b2:3b:3a:da:d9:aa:f0:d0:fd:5a:87:50:71:10:51:d8:a0: 79:95:4f:99:19:67:ce:7c:34:83:99:e0:92:10:82:f1:9c:87: 5d:d2:e1:6b:85:23:40:ce:93:3f:2e:92:d2:0d:74:92:13:e6: 9e:84:95:a3:36:c7:cb:bd:6d:b9:8c:96:47:7d:18:78:cf:ae: 4f:20:2d:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEQjYxMTAvBgNVBAUTKEY4MTY5NzlEMkE4OTlCMjlFQTU5NUYyQjU0RUVBMzk5 MEEyNDM2RjkwHhcNMjUxMjMxMTYzMDM5WhcNMjYwMTA3MTYzMDM5WjAYMRYwFAYD VQQDDA02OTU1NGZhZi0xNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QW0+aQeU8KUAUR1RsFdSaaf+7eo8ALFWeUoeXHymirXoLV6D0Aes8fnVeUu WSl9SZOipk5LYvgIYRqS6akx3w0aSnXfWFgrHV4/u+AQIaffFETpttrOjO6yZ3J9 9j93swmjF40Q8gFAC9ctVlIQfFB+gh+n44XvmsCUo11ltiGnfTGasjT5y2Df11rp 6RVJH/yGncC/GMjAxynoj0Nko4IVb8FcBorS4s38wpLDjqtau2NOWKWUeT1r6xos DewocJAlvIKv8veC0hwzgNb9xZaHuCjfdGhdBZ4Xd8tDfbkmT9YpAXWodywZ73Eb PLpNu6E4wDHlEo82RTAMoolNGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVd4lRy iiNtZ0XtfKOy6alHyQFGMB8GA1UdIwQYMBaAFPgWl50qiZsp6llfK1Tuo5kKJDb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENURCNi8xM0Y5NkI4MjE4 NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15bnFXVjhyVk82am1Rb2tO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CYVhuU3FKbXlucVdWOHJWTzZqbVFva052ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NURCNi8xM0Y5NkI4MjE4NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15 bnFXVjhyVk82am1Rb2tOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLZ/tSw+enxVawjHBfUcPuIExST5OgQVIfGZCM1iR7q0KtQ8u51WDn vsPh46vjZH6Ykix/vtt1DLax6cJ4EkLiLKizH/XswD/R0QaESB1Vm1xVJ3hKlbj4 ibv1dtsawUTLiItyoJNUcaL2jV+Ybe9UAm21RPzXlLFn98A4eCLaFMHxstwcb473 QhtMS3008WDA/lAOII+Rph45eL5W29jJt/iLB1w1N367tzUyF6cwLE2The5Asjs6 2tmq8ND9WodQcRBR2KB5lU+ZGWfOfDSDmeCSEILxnIdd0uFrhSNAzpM/LpLSDXSS E+aehJWjNsfLvW25jJZHfRh4z65PIC2Q -----END CERTIFICATE-----Generated at Fri Jan 2 10:02:04 2026 by rpki-client