This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json) Hash identifier: QaGkWQrpHpWDVhyho75TKILOb7O+mQN6qk1WtLkUgKo= Subject key identifier: 22:7A:76:50:29:55:F3:A0:F4:EA:20:E7:1A:85:90:CD:C4:45:8C:F9 Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Certificate serial: 04A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft Manifest number: 0495 Signing time: Fri 26 Dec 2025 23:08:43 +0000 Manifest this update: Fri 26 Dec 2025 23:08:43 +0000 Manifest next update: Fri 02 Jan 2026 23:08:43 +0000 Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: 2W9RG7/M67EXh8q/8oQHZ/BnsdFTPFSAU02lWHv4BFs=) 2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: WCMKfsm9/EeBkBa5cFgOrZbAGuLyEt0uGvg0UunKLIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 23:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF19B, serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Validity Not Before: Dec 26 23:08:43 2025 GMT Not After : Jan 2 23:08:43 2026 GMT Subject: CN=694f157b-9f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:9a:12:e8:4f:00:e3:0b:1c:61:3d:6d:ac: 72:a8:a2:a6:6c:89:92:17:48:84:57:d5:c4:44:f3: 4d:3a:76:cb:8b:1e:06:e4:fc:77:79:18:92:9f:8c: c8:15:9d:17:54:37:82:de:b5:43:d9:0f:4b:62:7a: 43:19:b1:df:a0:4c:30:0a:41:cb:e8:3a:f8:e4:2e: 58:18:54:f1:ef:ca:a9:32:84:a8:36:d1:5b:ad:df: f4:48:d4:21:38:51:9d:80:ae:dc:09:d0:b1:96:82: fb:da:3b:17:81:d8:b5:32:03:be:de:6e:79:11:a2: 21:76:77:99:fb:97:59:87:4b:f6:76:42:50:e8:82: 59:11:36:02:9f:25:16:a7:d9:33:3a:99:ef:50:ca: 7b:90:55:71:57:dc:10:58:e0:f4:a0:3e:db:fe:ee: f0:3e:ff:a6:ef:06:25:ec:ec:cf:bc:c7:0f:67:56: 48:8a:b7:15:1e:f0:d3:cd:1a:d7:26:91:7a:4f:36: eb:e5:cc:dc:ac:7c:5a:c1:1b:c4:9c:37:47:3a:f6: 8f:1a:24:a3:c0:9c:ea:6e:fc:d6:7d:d5:f6:0f:44: c2:a8:7b:d3:ae:22:79:be:f3:ed:d0:ff:eb:30:a5: 62:1e:de:96:65:4d:e2:25:90:06:5c:43:39:04:7e: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7A:76:50:29:55:F3:A0:F4:EA:20:E7:1A:85:90:CD:C4:45:8C:F9 X509v3 Authority Key Identifier: keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:23:3e:f3:b7:a4:22:66:cb:ad:5e:30:b8:18:3d:cc:a9:3a: 79:bc:a0:a8:5b:4d:c2:64:13:1b:58:98:e3:76:bf:26:4a:8d: 9f:46:1b:e7:eb:4a:8a:66:77:07:e8:4a:da:4a:58:85:4d:b8: a5:17:d3:76:d9:a1:59:28:ff:d8:f8:39:e1:21:76:49:0b:a2: 65:58:45:3e:a4:e6:88:fe:62:a4:2d:df:4a:55:bc:f6:92:12: 06:53:88:17:90:c6:ea:dd:75:d2:a6:5e:4a:d9:66:d1:92:39: 11:d9:2a:10:4c:41:de:d8:49:e2:00:09:b8:9e:6d:0e:36:f2: 25:35:10:00:f6:a2:8a:4a:41:26:a9:77:97:eb:db:00:fa:37: 66:a7:ba:14:af:58:b2:84:a3:cc:1b:c4:3a:c1:90:06:76:ce: c2:3a:d9:2e:cb:24:e7:00:6c:b7:49:33:91:f3:78:10:b4:14: 52:35:61:d0:98:92:b8:ff:de:79:e6:46:ef:d1:43:2f:af:f7: 1e:58:c2:25:96:f2:06:49:7e:ad:a3:84:a1:78:28:b8:5b:42: 5f:31:de:43:ad:41:20:52:70:c2:c1:a3:30:cb:b0:2f:47:af: 4e:3a:7d:7c:2a:02:96:9a:1e:89:49:23:bb:10:e0:f0:a6:b6: 43:96:e2:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOUIxMTAvBgNVBAUTKDcyQjhCOENEMTAzMDdCMTYzMjREODc5ODI3REYzMkE0 QUE4RDZBQTEwHhcNMjUxMjI2MjMwODQzWhcNMjYwMTAyMjMwODQzWjAYMRYwFAYD VQQDDA02OTRmMTU3Yi05ZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHyaEuhPAOMLHGE9baxyqKKmbImSF0iEV9XERPNNOnbLix4G5Px3eRiSn4zI FZ0XVDeC3rVD2Q9LYnpDGbHfoEwwCkHL6Dr45C5YGFTx78qpMoSoNtFbrd/0SNQh OFGdgK7cCdCxloL72jsXgdi1MgO+3m55EaIhdneZ+5dZh0v2dkJQ6IJZETYCnyUW p9kzOpnvUMp7kFVxV9wQWOD0oD7b/u7wPv+m7wYl7OzPvMcPZ1ZIircVHvDTzRrX JpF6Tzbr5czcrHxawRvEnDdHOvaPGiSjwJzqbvzWfdX2D0TCqHvTriJ5vvPt0P/r MKViHt6WZU3iJZAGXEM5BH52HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJ6dlAp VfOg9Oog5xqFkM3ERYz5MB8GA1UdIwQYMBaAFHK4uM0QMHsWMk2HmCffMqSqjWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE5Qi8zNjQ4OEQ4MDY2 NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4WXlUWWVZSjk4eXBLcU5h cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NyaTR6UkF3ZXhZeVRZZVlKOTh5cEtxTmFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE5Qi8zNjQ4OEQ4MDY2NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4 WXlUWWVZSjk4eXBLcU5hcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvIz7zt6QiZsutXjC4GD3MqTp5vKCoW03CZBMbWJjjdr8mSo2fRhvn 60qKZncH6EraSliFTbilF9N22aFZKP/Y+DnhIXZJC6JlWEU+pOaI/mKkLd9KVbz2 khIGU4gXkMbq3XXSpl5K2WbRkjkR2SoQTEHe2EniAAm4nm0ONvIlNRAA9qKKSkEm qXeX69sA+jdmp7oUr1iyhKPMG8Q6wZAGds7COtkuyyTnAGy3STOR83gQtBRSNWHQ mJK4/9555kbv0UMvr/ceWMIllvIGSX6to4SheCi4W0JfMd5DrUEgUnDCwaMwy7Av R69OOn18KgKWmh6JSSO7EODwprZDluLq -----END CERTIFICATE-----Generated at Sat Dec 27 05:44:25 2025 by rpki-client