This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft File: 1u0VCduHw0xGCiZBoZt_SE5NxEU.mft (raw, json) Hash identifier: NZD06sMZzWf4wp8NY+qJDQIxQFSOiDTd9LAFukoN+ik= Subject key identifier: 29:04:18:D9:55:27:93:8B:F3:A0:24:79:F1:2A:DC:C8:B8:57:90:14 Authority key identifier: D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45 Certificate issuer: /CN=A91F5216/serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft Manifest number: 023D Signing time: Sat 27 Dec 2025 00:53:34 +0000 Manifest this update: Sat 27 Dec 2025 00:53:34 +0000 Manifest next update: Sat 03 Jan 2026 00:53:34 +0000 Files and hashes: 1: 1u0VCduHw0xGCiZBoZt_SE5NxEU.crl (hash: f0Xxbl0M2MwnbvMDb9KbG+DrJQizeMinrk3rJCvHJkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 22:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216, serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445 Validity Not Before: Dec 27 00:53:34 2025 GMT Not After : Jan 3 00:53:34 2026 GMT Subject: CN=694f2e0e-ff4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:ea:5d:29:3b:77:91:4e:3e:14:b6:da:9c: a3:03:53:6d:f9:15:c7:9b:ef:c6:f4:bb:d7:4a:22: 09:d6:ac:86:18:de:07:a9:c9:71:a0:5a:2e:d0:f0: 6b:4d:8c:d6:07:ee:5a:fe:8d:43:c5:20:28:b2:c3: 47:80:0f:cd:70:93:55:63:b7:9d:54:3d:ec:f2:30: f2:00:55:61:93:2f:ad:f8:86:a0:11:0f:17:15:43: 99:aa:54:a0:59:75:46:cc:c7:76:60:d1:ba:97:26: be:b2:74:d1:95:65:33:f1:20:83:23:dc:9b:cf:19: 0c:e6:d0:ab:82:40:13:1a:51:f3:09:2a:ea:7b:aa: 70:20:21:4b:79:05:5b:2e:a2:e3:9d:da:d2:e9:28: db:e7:41:0d:55:75:e6:99:31:15:43:ff:52:32:5b: 1f:59:da:f1:6e:83:8c:e5:67:58:99:e0:ff:59:0c: cb:0e:f2:aa:48:20:58:97:eb:31:c0:3f:bf:f6:19: 91:1e:99:2d:c3:66:86:4f:98:b0:1d:cf:e5:1a:52: ac:a7:33:d1:0f:bb:06:19:cc:25:98:1b:d1:aa:6f: 67:44:00:5d:45:7c:3a:14:60:b0:f2:60:97:4a:02: ba:71:b2:b7:d5:68:42:d7:60:52:ab:e8:60:2a:e1: cd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:04:18:D9:55:27:93:8B:F3:A0:24:79:F1:2A:DC:C8:B8:57:90:14 X509v3 Authority Key Identifier: keyid:D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:24:8f:dc:c7:70:6d:33:fa:fd:39:6c:fc:51:49:b6:9a:78: bb:16:ec:ee:b8:21:20:a6:db:00:e8:f9:fd:3c:21:58:75:e3: 31:f0:17:26:73:f7:af:91:d2:c9:2e:db:8c:1a:4b:c4:40:a5: 2e:27:9e:35:96:99:cd:8b:ef:36:c1:dd:a4:06:b3:77:59:91: 28:f1:72:82:bb:f6:08:46:4d:e0:b5:da:c1:be:6a:30:38:56: 80:b7:9e:46:57:9b:ec:1e:0e:e9:a9:f8:16:e4:85:16:6a:84: b8:91:57:b5:af:c5:8a:f5:47:4a:c9:7b:1d:b5:e4:69:98:db: 43:a6:57:0d:98:51:78:2a:ad:27:d6:6e:81:e9:76:0f:90:5e: 64:82:35:dd:2a:d9:31:15:bb:c8:a8:39:29:24:36:13:f9:35: aa:10:6f:f3:25:f1:5a:44:0e:24:c5:3a:50:78:48:5d:5e:8a: 9f:cc:eb:78:1e:fc:fb:75:cd:f0:aa:b3:e9:03:74:c1:1a:cd: fa:e9:df:db:0b:d3:e9:e7:08:c4:9d:f7:b0:2f:b2:5a:aa:9f: b0:30:a1:02:ab:32:15:f3:32:f4:99:bd:f4:16:ae:9c:fd:32: 77:f8:6d:d0:68:ce:66:d3:8d:18:a1:b3:72:b8:84:32:ae:52: 6f:80:81:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEQ2RUQxNTA5REI4N0MzNEM0NjBBMjY0MUExOUI3RjQ4 NEU0REM0NDUwHhcNMjUxMjI3MDA1MzM0WhcNMjYwMTAzMDA1MzM0WjAYMRYwFAYD VQQDDA02OTRmMmUwZS1mZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPjqXSk7d5FOPhS22pyjA1Nt+RXHm+/G9LvXSiIJ1qyGGN4HqclxoFou0PBr TYzWB+5a/o1DxSAossNHgA/NcJNVY7edVD3s8jDyAFVhky+t+IagEQ8XFUOZqlSg WXVGzMd2YNG6lya+snTRlWUz8SCDI9ybzxkM5tCrgkATGlHzCSrqe6pwICFLeQVb LqLjndrS6Sjb50ENVXXmmTEVQ/9SMlsfWdrxboOM5WdYmeD/WQzLDvKqSCBYl+sx wD+/9hmRHpktw2aGT5iwHc/lGlKspzPRD7sGGcwlmBvRqm9nRABdRXw6FGCw8mCX SgK6cbK31WhC12BSq+hgKuHNvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkEGNlV J5OL86AkefEq3Mi4V5AUMB8GA1UdIwQYMBaAFNbtFQnbh8NMRgomQaGbf0hOTcRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi82NjQ1QUNBNjZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi8xdTBWQ2R1SHcweEdDaVpCb1p0X1NFNU54 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1MFZDZHVIdzB4R0NpWkJvWnRfU0U1TnhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi82NjQ1QUNBNjZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi8xdTBWQ2R1SHcw eEdDaVpCb1p0X1NFNU54RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzJI/cx3BtM/r9OWz8UUm2mni7FuzuuCEgptsA6Pn9PCFYdeMx8Bcm c/evkdLJLtuMGkvEQKUuJ541lpnNi+82wd2kBrN3WZEo8XKCu/YIRk3gtdrBvmow OFaAt55GV5vsHg7pqfgW5IUWaoS4kVe1r8WK9UdKyXsdteRpmNtDplcNmFF4Kq0n 1m6B6XYPkF5kgjXdKtkxFbvIqDkpJDYT+TWqEG/zJfFaRA4kxTpQeEhdXoqfzOt4 Hvz7dc3wqrPpA3TBGs366d/bC9Pp5wjEnfewL7Jaqp+wMKECqzIV8zL0mb30Fq6c /TJ3+G3QaM5m040YobNyuIQyrlJvgIG+ -----END CERTIFICATE-----Generated at Sat Dec 27 02:16:22 2025 by rpki-client