This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft File: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json) Hash identifier: yhX73kyfX9rp1BOISWeeYf2ZDFbYcL/YdS8xR+uro58= Subject key identifier: 8D:14:16:A5:49:41:FD:0F:6D:5A:5A:B2:C2:38:89:FD:7B:8F:24:35 Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 Certificate issuer: /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Certificate serial: 0369 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft Manifest number: 0369 Signing time: Fri 19 Dec 2025 00:08:11 +0000 Manifest this update: Fri 19 Dec 2025 00:08:11 +0000 Manifest next update: Fri 26 Dec 2025 00:08:11 +0000 Files and hashes: 1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: scKHzwP14prDI/h1PFq56aJ9AqRuItvppCEv8h0OzP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 873 (0x369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Validity Not Before: Dec 19 00:08:11 2025 GMT Not After : Dec 26 00:08:11 2025 GMT Subject: CN=6944976b-aae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:39:33:1c:d7:8a:0e:6f:bd:af:5e:e2:50: 70:7d:c0:a3:0d:61:0d:4d:be:6c:dd:05:3f:a6:89: 50:65:a6:26:81:70:c9:29:9a:90:c6:98:e2:05:b6: c2:e0:d4:c9:9f:b1:80:fc:ba:f6:8b:76:cd:a6:c7: 0d:f3:38:0d:23:f4:22:b7:9a:fc:24:15:24:7c:a1: aa:57:b2:46:0e:3b:66:08:fe:07:59:0e:2a:50:a0: f8:10:24:87:ae:78:e5:b5:dc:9c:1d:8f:5c:cf:6a: f1:a4:cd:08:b7:16:e5:8f:dc:b5:81:21:42:ab:99: 57:dd:e2:7b:45:73:97:83:ac:a3:3e:14:22:bf:80: f4:20:18:13:2d:35:7d:40:d0:f8:aa:99:8d:2b:f3: e6:c3:9f:20:ef:9e:d9:11:a8:38:bf:16:a0:f3:84: 1f:b5:f8:43:6f:32:e7:96:46:31:95:24:ca:6f:bc: 43:82:57:4d:af:67:11:c2:6f:76:e5:28:06:c6:dd: ab:8d:1f:78:67:15:19:e1:6f:57:f0:f6:3f:6e:35: d4:c6:fb:58:70:fd:95:2a:a9:dc:45:0f:a2:d1:77: 76:ce:92:fa:3b:40:a3:bf:fe:38:4c:a2:e2:bd:25: 35:e8:13:e1:a4:41:0d:41:fb:ae:6f:8f:7b:e6:2a: b5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:14:16:A5:49:41:FD:0F:6D:5A:5A:B2:C2:38:89:FD:7B:8F:24:35 X509v3 Authority Key Identifier: keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:67:f5:76:a4:91:ae:e6:ef:8a:84:01:e0:db:2f:0d:07:60: 33:4d:60:69:1f:fd:c9:61:94:a1:bf:89:e6:d4:b9:e8:c2:0c: 5f:15:0e:df:02:ea:f8:67:1f:a7:74:d2:45:b5:39:b9:ca:86: 16:8d:b9:68:27:79:78:e5:8f:d9:50:c7:f0:55:20:31:bc:ae: dd:5b:60:72:f4:25:cc:fb:a1:68:9d:35:db:9b:f1:b4:4f:7a: 5f:fb:4e:cc:2f:a4:14:cb:00:3e:f8:96:30:a0:df:bf:53:b6: ea:b2:05:30:8d:7f:c0:ac:d9:16:cb:e3:f2:4e:ac:37:d3:da: ff:6d:31:dc:05:a2:a7:9c:c7:1e:82:ec:40:71:32:06:1f:5e: 9b:83:61:99:bf:d8:be:35:81:13:dc:55:51:cc:1a:13:56:5e: bc:8e:60:0a:21:f9:27:6f:7c:da:a1:66:3e:4c:c5:7c:59:94: bf:7e:1b:ae:23:6a:98:80:85:df:06:1a:a0:97:fe:a9:7c:d8: a2:f4:c4:e4:fc:0b:e3:da:d6:9e:7e:ef:5c:5c:cc:19:fb:3a: 47:35:97:eb:6d:94:03:6b:3e:f5:c6:f1:f5:53:81:d2:7d:d4: eb:cd:1d:20:7d:c0:cb:99:ef:06:b7:a6:96:71:81:d5:21:4f: 70:1d:d6:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNGMjExMTAvBgNVBAUTKEY2N0RBOUYxNUU1RTkzNEQ5MEU0OEZFNTBFN0RDODU3 MUREOTM3QTUwHhcNMjUxMjE5MDAwODExWhcNMjUxMjI2MDAwODExWjAYMRYwFAYD VQQDDA02OTQ0OTc2Yi1hYWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUw5MxzXig5vva9e4lBwfcCjDWENTb5s3QU/polQZaYmgXDJKZqQxpjiBbbC 4NTJn7GA/Lr2i3bNpscN8zgNI/Qit5r8JBUkfKGqV7JGDjtmCP4HWQ4qUKD4ECSH rnjltdycHY9cz2rxpM0Itxblj9y1gSFCq5lX3eJ7RXOXg6yjPhQiv4D0IBgTLTV9 QND4qpmNK/Pmw58g757ZEag4vxag84QftfhDbzLnlkYxlSTKb7xDgldNr2cRwm92 5SgGxt2rjR94ZxUZ4W9X8PY/bjXUxvtYcP2VKqncRQ+i0Xd2zpL6O0Cjv/44TKLi vSU16BPhpEENQfuub4975iq1AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0UFqVJ Qf0PbVpassI4if17jyQ1MB8GA1UdIwQYMBaAFPZ9qfFeXpNNkOSP5Q59yFcd2Tel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0YyMS9GMkVCRUIzNEQ1 MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWswMlE1SV9sRG4zSVZ4M1pO NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluMnA4VjVlazAyUTVJX2xEbjNJVngzWk42VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0YyMS9GMkVCRUIzNEQ1MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWsw MlE1SV9sRG4zSVZ4M1pONlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJZ/V2pJGu5u+KhAHg2y8NB2AzTWBpH/3JYZShv4nm1LnowgxfFQ7f Aur4Zx+ndNJFtTm5yoYWjbloJ3l45Y/ZUMfwVSAxvK7dW2By9CXM+6FonTXbm/G0 T3pf+07ML6QUywA++JYwoN+/U7bqsgUwjX/ArNkWy+PyTqw309r/bTHcBaKnnMce guxAcTIGH16bg2GZv9i+NYET3FVRzBoTVl68jmAKIfknb3zaoWY+TMV8WZS/fhuu I2qYgIXfBhqgl/6pfNii9MTk/Avj2taefu9cXMwZ+zpHNZfrbZQDaz71xvH1U4HS fdTrzR0gfcDLme8Gt6aWcYHVIU9wHdZ3 -----END CERTIFICATE-----Generated at Fri Dec 19 21:59:21 2025 by rpki-client