This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft File: mtiSjq8lxRyzsyEdSba6ufC59n8.mft (raw, json) Hash identifier: FN8D3N1Dhjjaiu92QXRVu2Nl9POk3gnG0hAj2+vk9Gc= Subject key identifier: 0F:DB:77:90:81:A2:E5:DA:1D:25:02:C1:C2:F7:23:4C:97:3C:FD:CC Authority key identifier: 9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F Certificate issuer: /CN=A91EBD8F/serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft Manifest number: 04 Signing time: Fri 19 Dec 2025 06:58:46 +0000 Manifest this update: Fri 19 Dec 2025 06:58:46 +0000 Manifest next update: Fri 26 Dec 2025 06:58:46 +0000 Files and hashes: 1: mtiSjq8lxRyzsyEdSba6ufC59n8.crl (hash: anxxOwyznbYd5mZ1q9ptGXIWdZ671KUntNxht/+48SA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBD8F, serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F Validity Not Before: Dec 19 06:58:46 2025 GMT Not After : Dec 26 06:58:46 2025 GMT Subject: CN=6944f7a6-08d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:5b:7c:05:01:1d:ee:38:d5:88:fe:b9:11: 97:30:bd:f3:aa:62:90:b0:3c:67:f0:b8:d2:fe:7f: 3d:79:56:52:53:43:80:88:e7:3c:7b:94:1b:88:d2: 63:7a:57:70:d0:d0:05:1d:7e:ff:84:3a:a3:71:64: 76:70:70:09:48:d2:7f:60:25:f8:da:0e:44:0a:ae: d7:af:15:78:3f:5f:6e:ec:e1:d1:14:63:b6:d1:93: 96:63:42:88:90:b0:f1:d9:f6:82:74:dd:00:98:3b: b1:9a:ae:b5:13:01:58:24:b6:03:9f:59:c6:88:aa: c2:03:3c:4c:54:50:c6:c6:6c:f8:8b:a6:61:73:1f: 9c:7f:aa:72:fb:2f:2c:f6:2d:4d:c0:b9:d8:1b:42: 40:39:bc:6d:dc:72:4d:99:95:af:6a:bc:d2:e1:65: 46:2f:41:ec:e6:9a:87:7f:13:98:f0:52:fd:1d:0d: eb:fc:7a:dc:8f:96:76:b9:80:e5:9b:ee:c9:bb:19: 23:90:b1:98:8f:0d:b4:69:0a:7b:1e:b6:04:e7:08: 11:62:54:b2:fd:0b:04:7c:b4:95:2a:70:b1:5e:3b: 4b:01:36:c2:45:6d:83:dd:f7:db:98:bc:3e:54:2a: 50:0d:f3:f2:36:0f:92:62:ad:ec:4e:e3:dd:0e:bf: 10:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DB:77:90:81:A2:E5:DA:1D:25:02:C1:C2:F7:23:4C:97:3C:FD:CC X509v3 Authority Key Identifier: keyid:9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:82:0c:d3:d5:77:96:88:d5:f0:b8:bd:85:82:e4:fc:9e:ce: d3:8e:41:6f:5f:53:20:a1:ba:fb:42:7d:44:fe:14:c6:67:cc: 43:db:5f:da:86:66:66:24:57:b4:96:c6:3f:74:ed:fd:83:cc: e2:88:d0:77:56:b7:61:0c:04:e8:13:bd:82:21:35:be:ce:8f: e4:33:67:ff:eb:c3:ee:9b:18:2e:ea:6d:2f:fc:d4:bf:93:1d: 87:bb:1f:cc:c4:dd:2b:9a:5e:44:76:c0:1f:64:46:f0:b4:41: ea:98:9c:ff:56:1d:7d:75:d5:6d:6b:db:fd:0c:ae:fa:37:bb: 9a:03:1c:e1:6e:4f:b1:ab:b7:a0:79:f8:36:4e:c8:b7:45:3b: 51:41:ce:85:c2:28:1b:53:dd:6e:67:80:eb:c0:0c:97:40:4d: db:81:2d:c9:11:2c:81:dc:8d:e2:0b:38:7f:1b:fe:63:38:5a: 71:93:29:82:0b:03:93:48:2c:d0:8f:79:49:a0:bf:8f:af:e2: e7:ab:ee:54:68:36:bf:33:88:4d:6d:15:18:fa:a9:2c:9f:2b: 51:30:cc:9e:32:e5:48:c4:6e:ec:f0:29:0f:bd:b0:0c:18:e6: 15:c9:15:34:9e:7d:90:bb:8c:c0:af:b7:0e:07:3c:4f:9d:90: 8a:83:dc:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkQ4RjExMC8GA1UEBRMoOUFEODkyOEVBRjI1QzUxQ0IzQjMyMTFENDlCNkJBQjlG MEI5RjY3RjAeFw0yNTEyMTkwNjU4NDZaFw0yNTEyMjYwNjU4NDZaMBgxFjAUBgNV BAMMDTY5NDRmN2E2LTA4ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoJFt8BQEd7jjViP65EZcwvfOqYpCwPGfwuNL+fz15VlJTQ4CI5zx7lBuI0mN6 V3DQ0AUdfv+EOqNxZHZwcAlI0n9gJfjaDkQKrtevFXg/X27s4dEUY7bRk5ZjQoiQ sPHZ9oJ03QCYO7GarrUTAVgktgOfWcaIqsIDPExUUMbGbPiLpmFzH5x/qnL7Lyz2 LU3AudgbQkA5vG3cck2Zla9qvNLhZUYvQezmmod/E5jwUv0dDev8etyPlna5gOWb 7sm7GSOQsZiPDbRpCnsetgTnCBFiVLL9CwR8tJUqcLFeO0sBNsJFbYPd99uYvD5U KlAN8/I2D5JirexO490OvxCbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD9t3kIGi 5dodJQLBwvcjTJc8/cwwHwYDVR0jBBgwFoAUmtiSjq8lxRyzsyEdSba6ufC59n8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCRDhGLzUyRUJDOEM4RDk5 QjExRjA4NEY0MzZCMTY1RDM2NDFEL210aVNqcThseFJ5enN5RWRTYmE2dWZDNTlu OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXRpU2pxOGx4Unl6c3lFZFNiYTZ1ZkM1OW44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC RDhGLzUyRUJDOEM4RDk5QjExRjA4NEY0MzZCMTY1RDM2NDFEL210aVNqcThseFJ5 enN5RWRTYmE2dWZDNTluOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK6CDNPVd5aI1fC4vYWC5PyeztOOQW9fUyChuvtCfUT+FMZnzEPbX9qG ZmYkV7SWxj907f2DzOKI0HdWt2EMBOgTvYIhNb7Oj+QzZ//rw+6bGC7qbS/81L+T HYe7H8zE3SuaXkR2wB9kRvC0QeqYnP9WHX111W1r2/0Mrvo3u5oDHOFuT7Grt6B5 +DZOyLdFO1FBzoXCKBtT3W5ngOvADJdATduBLckRLIHcjeILOH8b/mM4WnGTKYIL A5NILNCPeUmgv4+v4uer7lRoNr8ziE1tFRj6qSyfK1EwzJ4y5UjEbuzwKQ+9sAwY 5hXJFTSefZC7jMCvtw4HPE+dkIqD3Pk= -----END CERTIFICATE-----Generated at Fri Dec 19 17:42:01 2025 by rpki-client