This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft File: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft (raw, json) Hash identifier: GRbIKuVa5qMnJHFVvg3hn9kAiGGrVweXo3nYdjkhY4I= Subject key identifier: EA:42:57:AC:26:34:8C:A5:49:67:FA:37:09:3C:E9:D2:A1:0F:56:2F Authority key identifier: B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 Certificate issuer: /CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft Manifest number: 011C Signing time: Sun 21 Dec 2025 04:05:30 +0000 Manifest this update: Sun 21 Dec 2025 04:05:29 +0000 Manifest next update: Sun 28 Dec 2025 04:05:29 +0000 Files and hashes: 1: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl (hash: NkRiNT6/LbjE1eCy+XWK5FaEK00vd1DvV9rY7sLsQOc=) 2: B4F165084F1F11EFA3B1F709C4F9AE02.roa (hash: 6g7DJTli/YH5hSeeCwQn1OlBs7GZnC1wNbHw8krPxSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A, serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Validity Not Before: Dec 21 04:05:29 2025 GMT Not After : Dec 28 04:05:29 2025 GMT Subject: CN=6947720a-bfc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:04:84:1a:77:a8:30:a8:39:e0:ef:b9:dd:d5: fa:e0:82:ff:f6:17:6d:fc:0f:da:bd:ed:dd:27:d9: ac:9b:15:b0:7b:e1:37:a8:32:b8:91:f4:47:83:fd: fb:9c:38:65:ef:d5:c8:bd:bd:9d:42:73:bd:7a:96: aa:41:c9:fd:08:49:03:14:73:98:7e:90:cb:42:2c: 45:c6:ac:ad:2d:d5:f7:a7:68:62:c1:7a:f3:25:aa: 0d:02:43:b9:a4:ad:a7:7b:3b:85:6f:93:ed:bb:14: 2f:29:55:2b:39:46:48:f9:35:1c:35:72:b3:5b:db: 93:56:ef:db:5e:a3:da:69:c8:ef:ec:21:93:eb:f7: 3c:37:c9:3e:e5:e1:7e:be:da:50:c2:fd:82:bf:24: d0:3f:6e:33:cc:f0:b9:24:ca:81:39:74:61:e7:1a: 10:6f:ae:ca:98:87:fd:5d:58:29:28:a3:40:0e:1b: e7:cf:26:17:93:37:e0:35:b4:a1:14:af:4e:a4:80: bd:ac:ff:58:14:3f:43:de:f4:a6:be:75:4d:d0:54: 5d:fb:19:74:fd:53:40:c2:70:18:cc:da:b1:a0:cd: 30:07:7a:d7:fb:56:03:52:19:ee:ef:cc:87:5e:95: f4:2b:09:64:32:d7:02:4d:74:40:25:4d:8c:05:1f: b6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:42:57:AC:26:34:8C:A5:49:67:FA:37:09:3C:E9:D2:A1:0F:56:2F X509v3 Authority Key Identifier: keyid:B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:92:15:00:21:2b:22:b3:42:3c:1c:a9:ce:7a:84:d8:1c:3b: b0:31:9b:f6:a1:3c:78:77:bc:b2:bf:21:50:54:2a:05:b4:e1: a5:fd:35:58:34:51:cc:3f:5e:f7:b1:3f:a7:3c:88:19:39:00: b0:2f:f8:01:f4:58:66:f8:3b:fa:b3:25:47:d5:d2:e8:be:a6: 9a:92:72:68:01:c5:8e:f6:c4:e8:f5:1d:55:e3:49:0c:ef:53: 24:ab:3d:88:09:ff:09:43:b6:ac:b7:a1:f7:15:ae:a2:19:e4: a3:a7:04:26:d0:58:43:70:22:98:90:68:d9:4e:12:52:43:65: 5b:68:50:0c:99:6a:4e:50:f0:a2:34:ec:1c:03:0f:c8:85:8a: bc:82:d4:4e:26:67:28:f8:00:be:e7:8c:a8:67:a1:ef:2c:b6: 8a:15:73:45:cd:6b:25:35:0e:b5:47:86:a5:19:5b:77:10:3d: 1f:fe:bb:bf:ee:94:aa:e0:b0:ef:f7:f7:6b:d2:a0:96:51:5a: 8f:59:7f:dc:6b:27:fd:94:fe:b6:4a:40:05:55:16:9f:5b:92: 8c:5a:e8:18:3f:98:58:a6:71:e8:ea:f9:4d:72:9b:02:38:1e: ba:6b:7d:c7:9e:d8:fa:67:fc:aa:dd:8d:5c:66:21:f1:40:8b: e2:2b:fb:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxN0ExMTAvBgNVBAUTKEIzRUZBN0Q2QUUxOTlEMTQ1ODJERDRFQ0I5MTYzQTND OUQ4NDE3NTkwHhcNMjUxMjIxMDQwNTI5WhcNMjUxMjI4MDQwNTI5WjAYMRYwFAYD VQQDDA02OTQ3NzIwYS1iZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ASEGneoMKg54O+53dX64IL/9hdt/A/ave3dJ9msmxWwe+E3qDK4kfRHg/37 nDhl79XIvb2dQnO9epaqQcn9CEkDFHOYfpDLQixFxqytLdX3p2hiwXrzJaoNAkO5 pK2nezuFb5PtuxQvKVUrOUZI+TUcNXKzW9uTVu/bXqPaacjv7CGT6/c8N8k+5eF+ vtpQwv2CvyTQP24zzPC5JMqBOXRh5xoQb67KmIf9XVgpKKNADhvnzyYXkzfgNbSh FK9OpIC9rP9YFD9D3vSmvnVN0FRd+xl0/VNAwnAYzNqxoM0wB3rX+1YDUhnu78yH XpX0KwlkMtcCTXRAJU2MBR+2RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpCV6wm NIylSWf6Nwk86dKhD1YvMB8GA1UdIwQYMBaAFLPvp9auGZ0UWC3U7LkWOjydhBdZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3QS83NEJCMjREMjNG NUQxMUVGOEJGNzg2MEVDNEY5QUUwMi9zLS1uMXE0Wm5SUllMZFRzdVJZNlBKMkVG MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3MtLW4xcTRablJSWUxkVHN1Ulk2UEoyRUYxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3QS83NEJCMjREMjNGNUQxMUVGOEJGNzg2MEVDNEY5QUUwMi9zLS1uMXE0Wm5S UllMZFRzdVJZNlBKMkVGMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXkhUAISsis0I8HKnOeoTYHDuwMZv2oTx4d7yyvyFQVCoFtOGl/TVY NFHMP173sT+nPIgZOQCwL/gB9Fhm+Dv6syVH1dLovqaaknJoAcWO9sTo9R1V40kM 71Mkqz2ICf8JQ7ast6H3Fa6iGeSjpwQm0FhDcCKYkGjZThJSQ2VbaFAMmWpOUPCi NOwcAw/IhYq8gtROJmco+AC+54yoZ6HvLLaKFXNFzWslNQ61R4alGVt3ED0f/ru/ 7pSq4LDv9/dr0qCWUVqPWX/cayf9lP62SkAFVRafW5KMWugYP5hYpnHo6vlNcpsC OB66a33Hntj6Z/yq3Y1cZiHxQIviK/vH -----END CERTIFICATE-----Generated at Mon Dec 22 09:44:44 2025 by rpki-client