This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft File: cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json) Hash identifier: C5e7yXCm1QHcWYDdC85oWLL5sV0JQjSRLPadxu4wz4Q= Subject key identifier: 72:47:B5:BD:58:26:40:99:FD:01:4E:ED:78:C9:7D:0C:05:56:CD:E0 Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 Certificate issuer: /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Certificate serial: 130B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft Manifest number: 4829 Signing time: Sun 28 Dec 2025 14:20:44 +0000 Manifest this update: Sun 28 Dec 2025 14:20:43 +0000 Manifest next update: Sun 04 Jan 2026 14:20:43 +0000 Files and hashes: 1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: rWSqKQdOUTGmmBvtJYk0BrBhnQx4qMOOMNLRQXQ1w9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 14:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4875 (0x130b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Validity Not Before: Dec 28 14:20:43 2025 GMT Not After : Jan 4 14:20:43 2026 GMT Subject: CN=69513cbc-ebb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:a7:f9:73:5c:23:0c:ef:12:62:17:b5:fc: 5d:81:9e:ff:32:53:07:7e:96:61:08:9e:bd:1e:6d: 9c:24:d7:70:0a:df:53:55:09:63:24:b7:6b:d3:9b: cf:b5:64:b1:4f:78:85:44:17:7d:9f:be:46:4f:b4: aa:49:1e:03:41:cd:25:ea:4a:2e:77:ff:32:ee:2e: 0b:33:85:7a:69:d6:12:ec:11:58:d4:cb:34:37:56: 4e:13:2c:b5:cf:9e:31:70:8f:20:69:42:37:4e:d6: 5a:22:89:4e:9c:b1:de:b3:22:ef:48:24:b2:09:64: 72:ea:21:f9:09:19:31:f8:a4:88:db:28:f1:fc:3d: 94:3d:f6:89:3a:b8:33:52:26:b8:3a:7d:10:ea:f3: b6:dd:17:99:61:dd:03:09:9d:45:fb:d4:cd:d8:e2: c7:52:b2:88:26:8c:aa:af:e3:d9:73:db:74:cc:d8: fa:07:a8:11:eb:cc:ae:bb:25:0d:95:9e:0c:c2:c7: f9:47:18:ab:2e:b7:5c:b2:12:a8:4e:81:e1:51:ca: df:a8:06:b8:ec:84:a3:10:cf:e0:ee:4f:bc:3c:87: ca:09:9b:5e:09:70:a4:c2:05:a0:41:ce:63:af:a3: 9d:7b:89:94:01:e9:d0:18:d5:aa:68:9a:1d:d3:97: 9b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:47:B5:BD:58:26:40:99:FD:01:4E:ED:78:C9:7D:0C:05:56:CD:E0 X509v3 Authority Key Identifier: keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:33:9d:73:bd:99:4e:d1:77:3f:ae:a3:8e:a3:bf:64:9f:30: f4:f5:37:5b:be:e1:b1:2b:62:2c:af:b6:8f:97:92:6d:d2:0c: 08:bf:0c:1a:a2:bc:0d:47:05:36:33:f0:f5:3d:d2:e9:f4:37: 60:cf:e4:8c:bd:e1:c0:18:f9:a3:d7:05:c8:20:51:7f:5a:74: 54:73:fe:55:3d:9b:f4:6a:a2:63:f2:3c:78:26:b8:d8:b1:59: d5:f3:3c:d1:e5:bf:51:22:85:fe:5f:a7:8c:86:61:a0:3a:b9: cb:1b:98:e0:6c:45:76:94:49:71:7a:ed:39:87:15:bc:29:f4: 5d:e2:32:80:50:c3:42:43:75:64:49:21:6e:58:95:f9:c8:5b: 85:57:b2:b0:b8:93:0e:4d:35:a1:23:f0:be:de:0b:8f:b5:21: 03:e8:ae:13:64:88:b4:01:f4:e8:aa:98:28:67:f0:de:cb:5a: 0c:00:c0:d3:25:56:ac:f5:6c:4b:66:f5:cc:22:d3:f1:e0:6e: 06:a0:60:6c:fc:32:38:d1:3d:8f:11:2c:75:9f:58:45:26:ee: c5:89:a4:48:e2:ad:16:da:01:36:51:62:ed:07:ac:4e:00:d4: e6:a8:b6:50:b3:05:6e:58:8c:73:0f:3f:d2:07:1b:13:3b:d0: cc:61:4e:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDcwMUI1NUVEMjBEODNFMzQ4RDgyMzdDRTM3NTk3OTU5 RUJDMDE4MjQwHhcNMjUxMjI4MTQyMDQzWhcNMjYwMTA0MTQyMDQzWjAYMRYwFAYD VQQDDA02OTUxM2NiYy1lYmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbSn+XNcIwzvEmIXtfxdgZ7/MlMHfpZhCJ69Hm2cJNdwCt9TVQljJLdr05vP tWSxT3iFRBd9n75GT7SqSR4DQc0l6koud/8y7i4LM4V6adYS7BFY1Ms0N1ZOEyy1 z54xcI8gaUI3TtZaIolOnLHesyLvSCSyCWRy6iH5CRkx+KSI2yjx/D2UPfaJOrgz Uia4On0Q6vO23ReZYd0DCZ1F+9TN2OLHUrKIJoyqr+PZc9t0zNj6B6gR68yuuyUN lZ4Mwsf5RxirLrdcshKoToHhUcrfqAa47ISjEM/g7k+8PIfKCZteCXCkwgWgQc5j r6Ode4mUAenQGNWqaJod05ebNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJHtb1Y JkCZ/QFO7XjJfQwFVs3gMB8GA1UdIwQYMBaAFHAbVe0g2D40jYI3zjdZeVnrwBgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBqU05namZPTjFsNVdldkFH Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCdFY3U0RZUGpTTmdqZk9OMWw1V2V2QUdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBq U05namZPTjFsNVdldkFHQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmM51zvZlO0Xc/rqOOo79knzD09TdbvuGxK2Isr7aPl5Jt0gwIvwwa orwNRwU2M/D1PdLp9Ddgz+SMveHAGPmj1wXIIFF/WnRUc/5VPZv0aqJj8jx4JrjY sVnV8zzR5b9RIoX+X6eMhmGgOrnLG5jgbEV2lElxeu05hxW8KfRd4jKAUMNCQ3Vk SSFuWJX5yFuFV7KwuJMOTTWhI/C+3guPtSED6K4TZIi0AfToqpgoZ/Dey1oMAMDT JVas9WxLZvXMItPx4G4GoGBs/DI40T2PESx1n1hFJu7FiaRI4q0W2gE2UWLtB6xO ANTmqLZQswVuWIxzDz/SBxsTO9DMYU4H -----END CERTIFICATE-----Generated at Tue Dec 30 14:57:43 2025 by rpki-client