This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft File: h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json) Hash identifier: q5DiwT/awCiySPBzmSZczdgsS03Iw8Z2TbGEfhBFROg= Subject key identifier: 89:D3:40:B6:43:B0:55:25:2E:F0:1C:AA:BE:1A:16:9D:0B:56:D9:8B Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 Certificate issuer: /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft Manifest number: D8 Signing time: Fri 05 Dec 2025 03:35:41 +0000 Manifest this update: Fri 05 Dec 2025 03:35:40 +0000 Manifest next update: Fri 12 Dec 2025 03:35:40 +0000 Files and hashes: 1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: FmoaSDkyAMy6ruQ/Ol4DhaVCTPZA0FVbQusI5pwk/ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Validity Not Before: Dec 5 03:35:40 2025 GMT Not After : Dec 12 03:35:40 2025 GMT Subject: CN=6932530d-01bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e4:d6:d3:33:92:93:1d:3e:d4:82:44:63:c0: bb:00:e8:42:ed:88:a5:92:96:06:64:3e:1d:21:fe: 29:b9:f2:44:df:5d:c5:8d:cf:50:81:6e:91:33:06: e4:7f:90:25:ea:07:c5:8c:f0:a7:ba:0c:68:0a:82: 3f:0f:ab:37:7c:fd:a9:1f:a6:f5:81:8f:c3:c8:1b: 0c:0c:41:1f:64:82:04:34:50:26:41:c8:b8:31:a9: e1:30:0e:13:c2:bb:a4:2f:b1:1a:27:30:8a:8d:3b: 04:de:0d:e9:f7:7c:09:24:a6:28:e6:41:40:51:29: c4:f5:02:7c:e7:1c:0c:32:22:f0:5a:54:6f:73:4f: da:25:57:69:6b:90:cb:a8:fb:cd:a2:68:5f:92:ef: 8f:21:32:1b:9e:ca:48:6e:3d:80:7e:b3:fa:60:f3: 8d:59:68:10:7a:e2:ac:63:f1:7a:0c:46:a5:af:1f: 66:ad:60:65:62:f9:f4:ca:24:0c:f4:52:6f:f8:f7: 17:84:35:62:d9:c4:a0:32:b4:a5:8e:b5:26:d5:69: a5:97:c2:57:a4:0e:00:a9:7f:4c:45:6b:16:83:e9: 7a:d7:05:61:12:5a:04:26:c7:83:ba:0e:13:d3:5a: 99:f6:4e:35:57:02:e4:5c:8f:11:79:31:57:cf:e8: dd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D3:40:B6:43:B0:55:25:2E:F0:1C:AA:BE:1A:16:9D:0B:56:D9:8B X509v3 Authority Key Identifier: keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4a:8b:cf:91:20:2c:c2:b6:ec:35:55:6a:4d:a6:b0:fa:68: 63:86:06:79:2c:cb:c6:3a:00:46:a3:78:36:e2:7c:c6:46:13: 44:5c:09:cb:a7:32:86:00:cf:50:d3:9b:30:2f:b9:ac:68:28: ac:a9:10:49:41:bb:e1:00:3d:12:11:2a:e3:7f:b7:08:30:3a: 64:3c:5b:06:73:4e:96:ca:3d:00:9f:76:66:5c:91:61:07:3e: 82:0b:c3:57:60:09:7f:c2:4e:b4:75:3a:78:64:b4:8f:70:4d: 12:44:c9:a1:33:b5:45:a2:2d:d9:7e:df:d4:7d:6f:ec:e5:9f: 09:44:d7:e1:3c:a6:f7:67:01:be:63:51:1a:6f:f0:ec:6c:29: 20:01:72:05:46:83:23:0a:4a:ff:a4:e8:2b:ea:b3:08:26:6d: 19:05:2d:6f:7c:7f:f0:46:68:30:77:f0:71:2e:83:6b:6a:09: ee:2a:01:52:3a:87:09:29:2f:f4:3a:f6:8c:ea:ed:45:12:a8: 02:70:d6:ff:f2:e3:dd:39:ad:18:df:47:89:32:34:13:74:de: 70:8b:31:34:fd:b3:04:37:13:34:74:fb:dd:14:37:f9:aa:d2: 23:98:93:c7:56:02:68:13:b2:45:e0:87:7f:61:8d:6d:f8:a1: 70:18:f9:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE0RjcxMTAvBgNVBAUTKDg3OTJERTM5OUNGNjMxOTNEREMyOUQzMEZCRjBBNTgx RTAyNEYwMDMwHhcNMjUxMjA1MDMzNTQwWhcNMjUxMjEyMDMzNTQwWjAYMRYwFAYD VQQDEw02OTMyNTMwZC0wMWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9eTW0zOSkx0+1IJEY8C7AOhC7YilkpYGZD4dIf4pufJE313Fjc9QgW6RMwbk f5Al6gfFjPCnugxoCoI/D6s3fP2pH6b1gY/DyBsMDEEfZIIENFAmQci4ManhMA4T wrukL7EaJzCKjTsE3g3p93wJJKYo5kFAUSnE9QJ85xwMMiLwWlRvc0/aJVdpa5DL qPvNomhfku+PITIbnspIbj2AfrP6YPONWWgQeuKsY/F6DEalrx9mrWBlYvn0yiQM 9FJv+PcXhDVi2cSgMrSljrUm1Wmll8JXpA4AqX9MRWsWg+l61wVhEloEJseDug4T 01qZ9k41VwLkXI8ReTFXz+jdMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInTQLZD sFUlLvAcqr4aFp0LVtmLMB8GA1UdIwQYMBaAFIeS3jmc9jGT3cKdMPvwpYHgJPAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTRGNy9BM0RENkI5QTg1 RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi9oNUxlT1p6Mk1aUGR3cDB3LV9DbGdlQWs4 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g1TGVPWnoyTVpQZHdwMHctX0NsZ2VBazhBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTRGNy9BM0RENkI5QTg1RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi9oNUxlT1p6Mk1a UGR3cDB3LV9DbGdlQWs4QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6SovPkSAswrbsNVVqTaaw+mhjhgZ5LMvGOgBGo3g24nzGRhNEXAnL pzKGAM9Q05swL7msaCisqRBJQbvhAD0SESrjf7cIMDpkPFsGc06Wyj0An3ZmXJFh Bz6CC8NXYAl/wk60dTp4ZLSPcE0SRMmhM7VFoi3Zft/UfW/s5Z8JRNfhPKb3ZwG+ Y1Eab/DsbCkgAXIFRoMjCkr/pOgr6rMIJm0ZBS1vfH/wRmgwd/BxLoNragnuKgFS OocJKS/0OvaM6u1FEqgCcNb/8uPdOa0Y30eJMjQTdN5wizE0/bMENxM0dPvdFDf5 qtIjmJPHVgJoE7JF4Id/YY1t+KFwGPnC -----END CERTIFICATE-----Generated at Sat Dec 6 18:06:26 2025 by rpki-client