This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft File: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json) Hash identifier: OIEeW0AzY2L1YvmnJ43t+Md4Nyaji2SElFyZ6TNuwtY= Subject key identifier: 27:6A:76:C8:75:19:7B:C8:2F:29:71:BF:8D:E5:1E:2C:06:0A:C6:DD Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Certificate serial: 34EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft Manifest number: 34EC Signing time: Thu 18 Dec 2025 14:37:29 +0000 Manifest this update: Thu 18 Dec 2025 14:37:28 +0000 Manifest next update: Thu 25 Dec 2025 14:37:28 +0000 Files and hashes: 1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: zY6+BKhZxw73cvkuZ4Ee2q5psy1epUIthCWTIIBQRdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13548 (0x34ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Validity Not Before: Dec 18 14:37:28 2025 GMT Not After : Dec 25 14:37:28 2025 GMT Subject: CN=694411a8-d6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:a7:fc:06:04:dc:ac:5d:a0:2b:85:c4:6b: 51:0e:42:8f:b9:52:1b:96:3e:9b:17:e1:7b:72:b7: 28:42:d4:07:c0:6a:39:8f:89:01:fd:06:23:bc:1b: 8e:1a:e9:4f:ab:e7:b4:29:80:e5:ea:4c:3a:c4:2d: 40:76:22:08:f5:94:65:4e:1d:78:40:bb:a3:3e:e0: 55:85:2b:19:01:7c:26:ca:69:3f:4c:15:26:b0:89: c9:0b:46:0a:7e:22:7c:b6:53:3f:cd:3a:0f:2d:12: 8d:97:c0:4a:26:e5:b1:fe:f4:bc:f4:e1:77:8c:d5: 38:a2:53:cc:2e:a4:07:21:c2:ac:81:11:f7:d2:a2: 02:95:e3:51:e0:31:73:a1:ef:7e:42:a3:ac:2a:73: 53:c0:6b:20:d4:85:4d:85:cb:e7:e0:de:26:45:01: 45:57:3a:df:a1:04:8b:28:79:20:65:05:ac:5c:08: 6f:97:1d:c4:c7:41:0d:53:ff:ba:81:b1:06:f5:ab: 7e:86:77:63:17:6d:dd:4c:32:f1:f9:ff:e5:00:e6: 34:50:78:78:2a:49:ee:81:0d:52:81:e7:09:a2:fb: 05:2e:91:32:b1:33:e6:7e:f6:7a:fc:90:a8:c4:60: fd:e4:9d:11:6b:e4:f8:2f:48:4d:2d:f2:8e:11:86: d3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6A:76:C8:75:19:7B:C8:2F:29:71:BF:8D:E5:1E:2C:06:0A:C6:DD X509v3 Authority Key Identifier: keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:5d:b7:a2:05:df:bd:3c:7d:87:72:a9:02:c8:a5:91:5f:27: 80:21:81:f4:cf:e4:4a:a8:8c:f9:3e:1d:93:65:80:cd:04:e3: 27:98:f8:1e:8c:11:c6:f3:3b:19:a9:dd:7a:1f:f5:8c:ec:d5: 92:d4:83:d0:39:11:ba:48:20:8b:bc:84:d5:02:3e:c3:85:24: a6:12:77:a5:52:01:32:fc:42:40:20:12:4e:ad:dc:73:b6:dc: a4:92:50:38:64:1e:7d:c6:a2:a3:69:95:ae:f8:88:0c:aa:6e: ec:2a:bd:83:36:44:c3:9b:ab:dc:6e:5f:6b:34:9a:97:fd:0e: 24:aa:17:23:c0:27:07:68:34:9f:d4:9a:dd:08:d3:1d:db:c1: 63:03:b9:6f:75:2a:f2:1f:71:ba:14:3a:1a:c4:fd:58:75:87: 33:f4:5e:e9:12:6b:34:81:55:43:76:eb:27:16:39:67:bd:e8: 18:d6:a6:c9:8a:56:23:7b:f2:35:17:75:e6:49:20:8c:bd:f8: e4:8a:00:99:1a:ab:3a:74:39:b8:73:40:54:22:35:f5:09:70: fe:94:fb:d3:06:86:0f:e2:4a:a2:8a:95:33:09:c7:5c:33:e9: 8d:48:76:da:94:6b:6d:68:25:75:f0:81:73:ab:a4:d6:e1:28: e0:78:23:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDdDRDRBRUU0N0NCMjFEQUU5ODc3RUZGNDFGMDRCRTk1 RDk3MzY4NkQwHhcNMjUxMjE4MTQzNzI4WhcNMjUxMjI1MTQzNzI4WjAYMRYwFAYD VQQDDA02OTQ0MTFhOC1kNmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZKn/AYE3KxdoCuFxGtRDkKPuVIblj6bF+F7crcoQtQHwGo5j4kB/QYjvBuO GulPq+e0KYDl6kw6xC1AdiII9ZRlTh14QLujPuBVhSsZAXwmymk/TBUmsInJC0YK fiJ8tlM/zToPLRKNl8BKJuWx/vS89OF3jNU4olPMLqQHIcKsgRH30qICleNR4DFz oe9+QqOsKnNTwGsg1IVNhcvn4N4mRQFFVzrfoQSLKHkgZQWsXAhvlx3Ex0ENU/+6 gbEG9at+hndjF23dTDLx+f/lAOY0UHh4KknugQ1SgecJovsFLpEysTPmfvZ6/JCo xGD95J0Ra+T4L0hNLfKOEYbT9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdqdsh1 GXvILylxv43lHiwGCsbdMB8GA1UdIwQYMBaAFHzUruR8sh2umHfv9B8EvpXZc2ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84Nzk2ODQ5NjFE OEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhhNllkLV8wSHdTLWxkbHph RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZOU3U1SHl5SGE2WWQtXzBId1MtbGRsemFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84Nzk2ODQ5NjFEOEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhh NllkLV8wSHdTLWxkbHphRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQXbeiBd+9PH2HcqkCyKWRXyeAIYH0z+RKqIz5Ph2TZYDNBOMnmPge jBHG8zsZqd16H/WM7NWS1IPQORG6SCCLvITVAj7DhSSmEnelUgEy/EJAIBJOrdxz ttykklA4ZB59xqKjaZWu+IgMqm7sKr2DNkTDm6vcbl9rNJqX/Q4kqhcjwCcHaDSf 1JrdCNMd28FjA7lvdSryH3G6FDoaxP1YdYcz9F7pEms0gVVDdusnFjlnvegY1qbJ ilYje/I1F3XmSSCMvfjkigCZGqs6dDm4c0BUIjX1CXD+lPvTBoYP4kqiipUzCcdc M+mNSHbalGttaCV18IFzq6TW4SjgeCNR -----END CERTIFICATE-----Generated at Fri Dec 19 17:48:03 2025 by rpki-client