This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft File: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft (raw, json) Hash identifier: LgE6NyGbg/i5PZcyxVIrE6tUkVs4M+zOikYBbZsxPrc= Subject key identifier: CD:01:95:78:CB:8F:D8:15:75:A5:69:E5:DD:BC:B7:AF:AC:1B:58:E2 Authority key identifier: 6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F Certificate issuer: /CN=A91F522D/serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Certificate serial: 0825 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft Manifest number: 0820 Signing time: Thu 18 Dec 2025 20:24:02 +0000 Manifest this update: Thu 18 Dec 2025 20:24:02 +0000 Manifest next update: Thu 25 Dec 2025 20:24:02 +0000 Files and hashes: 1: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl (hash: gvDpLN1+pKDaPg3NMNhyhJ/AmRHXkrMCkkIVDVd/+uY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2085 (0x825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F522D, serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Validity Not Before: Dec 18 20:24:02 2025 GMT Not After : Dec 25 20:24:02 2025 GMT Subject: CN=694462e2-1f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f9:76:0d:3b:79:c5:fa:20:6d:32:4c:0e:71: 1b:b9:7b:2a:e7:33:8f:ad:34:5d:5d:24:06:61:73: a7:fd:24:e6:55:61:5c:6b:16:da:50:49:f8:11:f0: d2:40:f1:da:1b:80:3b:94:fe:58:88:5d:fd:39:3e: ca:84:d3:ee:1c:dd:8b:7e:bb:a5:f0:97:95:d3:59: dd:8a:6a:76:ee:6e:15:22:f7:5f:08:1d:91:19:db: dd:82:27:4f:a3:3b:bb:ea:f3:4f:d2:4c:16:8c:0c: 04:5a:b1:2a:11:cb:70:f8:6a:bd:0a:c1:13:3e:6f: fc:90:50:19:86:64:df:de:67:34:a3:f2:b4:1e:c1: ad:5e:9b:ab:15:e1:92:6a:68:32:77:fd:15:25:eb: 98:47:49:70:63:76:95:b5:a1:67:5e:8f:a0:5f:8c: c0:fb:4b:ea:7a:5f:c5:1d:b4:97:b9:f0:67:74:c1: 87:4a:d6:24:1a:6e:87:bc:51:ff:cf:c1:e6:ec:fe: ac:0b:fe:6c:fc:23:73:7b:71:d8:72:e0:1e:62:f2: 25:95:a5:47:31:4d:02:31:dd:a7:79:9b:6f:13:4f: f3:1f:ba:fa:32:d1:15:78:db:32:76:91:c5:e4:67: 2e:9e:d8:d0:5d:e4:81:48:cf:e1:f6:ad:89:d9:31: 69:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:01:95:78:CB:8F:D8:15:75:A5:69:E5:DD:BC:B7:AF:AC:1B:58:E2 X509v3 Authority Key Identifier: keyid:6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:dd:8a:66:f4:72:37:f6:3c:2b:e8:7e:ad:81:9e:85:f3:98: 0e:17:3d:e0:8b:73:d5:e1:3a:6c:57:eb:c5:85:41:54:ed:04: bc:1e:b1:78:7e:18:f7:24:5b:bb:8b:51:3b:76:20:68:5c:bd: 7f:65:d1:dd:fa:c1:31:2d:fc:30:36:88:99:c3:cf:d4:af:5d: b7:7c:ad:fc:d4:08:32:93:1c:8d:95:54:ef:b2:c0:e5:59:d9: 29:b5:dd:71:df:32:0e:33:12:3b:5b:f3:4c:2b:68:35:d4:4c: 80:28:f5:f2:e5:42:2e:fe:71:ce:f1:17:f8:e3:3f:17:c2:f5: 15:0f:dc:5b:3e:21:df:83:99:88:d5:fb:ff:db:be:2f:af:8d: 5a:0d:35:20:3f:5f:a8:18:48:23:6e:f5:fa:a9:b4:a8:42:2f: f2:ee:5e:48:23:a0:4b:2f:ab:2a:a5:28:91:0c:cb:cd:96:cb: a5:13:33:39:56:fd:34:c6:2b:02:94:20:8f:1f:28:64:56:26: 24:b0:4b:42:ac:33:a9:74:e2:a3:ba:e2:ff:7a:83:3b:40:66: 96:2d:20:26:59:ff:43:80:fa:70:52:fe:c2:63:7d:cb:7d:bc: ee:ce:a9:34:97:32:38:7b:2f:28:76:88:c9:71:d4:0a:39:88: ff:fd:a7:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMkQxMTAvBgNVBAUTKDZCNkNEREVCNzEzOUE5RDkzNjY3NkQ4M0E1M0VDNTY3 RjFENkYxOUYwHhcNMjUxMjE4MjAyNDAyWhcNMjUxMjI1MjAyNDAyWjAYMRYwFAYD VQQDDA02OTQ0NjJlMi0xZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPl2DTt5xfogbTJMDnEbuXsq5zOPrTRdXSQGYXOn/STmVWFcaxbaUEn4EfDS QPHaG4A7lP5YiF39OT7KhNPuHN2Lfrul8JeV01ndimp27m4VIvdfCB2RGdvdgidP ozu76vNP0kwWjAwEWrEqEctw+Gq9CsETPm/8kFAZhmTf3mc0o/K0HsGtXpurFeGS amgyd/0VJeuYR0lwY3aVtaFnXo+gX4zA+0vqel/FHbSXufBndMGHStYkGm6HvFH/ z8Hm7P6sC/5s/CNze3HYcuAeYvIllaVHMU0CMd2neZtvE0/zH7r6MtEVeNsydpHF 5GcuntjQXeSBSM/h9q2J2TFp6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0BlXjL j9gVdaVp5d28t6+sG1jiMB8GA1UdIwQYMBaAFGts3etxOanZNmdtg6U+xWfx1vGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIyRC82QzBBRDA5MkZD QjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFkazJaMjJEcFQ3RlpfSFc4 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyemQ2M0U1cWRrMloyMkRwVDdGWl9IVzhaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIyRC82QzBBRDA5MkZDQjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFk azJaMjJEcFQ3RlpfSFc4WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE3Ypm9HI39jwr6H6tgZ6F85gOFz3gi3PV4TpsV+vFhUFU7QS8HrF4 fhj3JFu7i1E7diBoXL1/ZdHd+sExLfwwNoiZw8/Ur123fK381AgykxyNlVTvssDl Wdkptd1x3zIOMxI7W/NMK2g11EyAKPXy5UIu/nHO8Rf44z8XwvUVD9xbPiHfg5mI 1fv/274vr41aDTUgP1+oGEgjbvX6qbSoQi/y7l5II6BLL6sqpSiRDMvNlsulEzM5 Vv00xisClCCPHyhkViYksEtCrDOpdOKjuuL/eoM7QGaWLSAmWf9DgPpwUv7CY33L fbzuzqk0lzI4ey8odojJcdQKOYj//acN -----END CERTIFICATE-----Generated at Fri Dec 19 23:53:22 2025 by rpki-client