This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft File: Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft (raw, json) Hash identifier: EiJrfTVvJ4g/I5o/GrpYsEyl01ULSZYpGuP08g0kdkc= Subject key identifier: 15:7C:9F:BC:3E:AA:7D:40:F8:0D:CB:FA:DE:1B:1E:E8:49:31:9E:75 Authority key identifier: 57:1E:D2:56:D5:8F:85:C6:00:C6:4A:59:EE:7B:1D:36:AE:3C:B0:9B Certificate issuer: /CN=A9123059/serialNumber=571ED256D58F85C600C64A59EE7B1D36AE3CB09B Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft Manifest number: 3A Signing time: Fri 05 Dec 2025 05:20:19 +0000 Manifest this update: Fri 05 Dec 2025 05:20:18 +0000 Manifest next update: Fri 12 Dec 2025 05:20:18 +0000 Files and hashes: 1: Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl (hash: 8ldWNngRL9n6EsmfNIgAN22xeiEWgXeGaqzomOAk2Jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=571ED256D58F85C600C64A59EE7B1D36AE3CB09B Validity Not Before: Dec 5 05:20:18 2025 GMT Not After : Dec 12 05:20:18 2025 GMT Subject: CN=69326b92-837b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:ef:97:3d:a1:c7:f7:ff:88:8e:65:2b:5c: 44:d8:e6:89:da:3c:86:cc:d9:26:f6:24:17:9f:e9: a3:ef:e0:87:84:ad:cb:a4:c3:23:65:7a:df:0a:a7: 43:23:0f:5a:b7:2e:3f:7c:11:d4:f9:89:88:12:36: b6:d0:b6:b3:72:59:9c:aa:bb:10:2a:1d:9a:6d:3a: ed:b0:d8:a9:7e:65:2d:a1:7a:73:00:57:90:8a:c9: 3a:91:5e:45:f0:89:5d:62:71:b1:3a:e3:7c:6c:8a: 75:5e:d3:0a:fa:80:c6:13:78:38:2c:e3:44:37:be: df:f0:34:3a:61:a2:fa:76:cd:d5:80:9d:89:5b:82: 1a:e2:4c:15:52:1d:1a:e6:78:57:67:cc:ae:2a:1e: b5:da:c3:c9:e3:19:66:83:99:18:8a:da:bf:3e:8d: 76:3c:05:cf:af:a7:32:4e:ee:51:06:e7:3d:89:ae: ef:1f:96:f4:44:fc:0d:f5:5d:d3:81:4a:69:39:55: c9:7a:95:f5:cd:9b:0b:7d:f2:ec:b7:5f:e1:fe:f6: 23:60:e6:64:9d:e5:b2:ef:99:e6:28:36:4d:28:59: 8e:83:33:41:d0:a6:f7:bd:3c:17:88:35:27:16:93: 90:47:1b:39:9b:8c:7d:e8:ae:30:48:35:4b:07:c1: a9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7C:9F:BC:3E:AA:7D:40:F8:0D:CB:FA:DE:1B:1E:E8:49:31:9E:75 X509v3 Authority Key Identifier: keyid:57:1E:D2:56:D5:8F:85:C6:00:C6:4A:59:EE:7B:1D:36:AE:3C:B0:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:4f:b9:65:90:13:8a:94:9a:66:dc:05:11:41:25:d5:cd:a9: 3d:32:47:43:14:13:a0:dd:bb:34:5a:8c:b7:8b:73:a2:35:b5: 3c:4e:4d:34:ac:81:55:5a:a9:68:5e:ef:53:6c:fb:f9:ba:7b: 28:45:7c:ce:7d:05:a4:04:3a:d1:47:d0:58:88:94:21:8a:dc: 6a:4f:3f:83:7b:22:e0:d8:07:2a:3e:35:41:0a:d3:a4:b4:97: ab:bc:14:bd:81:a5:21:a2:bb:61:e5:fa:0b:15:6a:5b:40:f7: cb:72:d3:37:14:76:7e:8c:71:90:c9:ca:6e:9c:84:25:3d:bb: 90:4d:a6:35:5d:93:3a:25:d6:f1:59:27:d6:85:20:2e:db:59: 7b:be:88:f9:30:9d:13:a8:6e:aa:74:d5:c6:55:8b:fd:0e:00: e8:cb:a4:53:1a:d8:ae:a6:4a:db:f7:0e:9d:a4:d9:3d:19:e7: 80:1f:80:ab:45:0e:58:7f:ea:3d:77:62:9b:38:1a:3e:60:d7: 44:fc:cb:2f:aa:8a:75:ee:b5:ae:96:17:4c:a1:cc:93:cd:d7: 4b:5b:a2:a7:ce:0d:f5:71:a2:b8:35:8d:f6:06:9d:77:55:75: 14:04:7a:6b:2d:e0:21:d0:d9:b2:9d:54:87:b5:ed:54:63:28: 5f:70:f6:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzA1OTExMC8GA1UEBRMoNTcxRUQyNTZENThGODVDNjAwQzY0QTU5RUU3QjFEMzZB RTNDQjA5QjAeFw0yNTEyMDUwNTIwMThaFw0yNTEyMTIwNTIwMThaMBgxFjAUBgNV BAMTDTY5MzI2YjkyLTgzN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEUO+XPaHH9/+IjmUrXETY5onaPIbM2Sb2JBef6aPv4IeErcukwyNlet8Kp0Mj D1q3Lj98EdT5iYgSNrbQtrNyWZyquxAqHZptOu2w2Kl+ZS2henMAV5CKyTqRXkXw iV1icbE643xsinVe0wr6gMYTeDgs40Q3vt/wNDphovp2zdWAnYlbghriTBVSHRrm eFdnzK4qHrXaw8njGWaDmRiK2r8+jXY8Bc+vpzJO7lEG5z2Jru8flvRE/A31XdOB Smk5Vcl6lfXNmwt98uy3X+H+9iNg5mSd5bLvmeYoNk0oWY6DM0HQpve9PBeINScW k5BHGzmbjH3orjBINUsHwamjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFXyfvD6q fUD4Dcv63hse6EkxnnUwHwYDVR0jBBgwFoAUVx7SVtWPhcYAxkpZ7nsdNq48sJsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0JCQkQ4MDI2NzlG NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1Z4N1NWdFdQaGNZQXhrcFo3bnNkTnE0OHNK cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVng3U1Z0V1BoY1lBeGtwWjduc2ROcTQ4c0pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MDU5L0JCQkQ4MDI2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1Z4N1NWdFdQaGNZ QXhrcFo3bnNkTnE0OHNKcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHVPuWWQE4qUmmbcBRFBJdXNqT0yR0MUE6DduzRajLeLc6I1tTxOTTSs gVVaqWhe71Ns+/m6eyhFfM59BaQEOtFH0FiIlCGK3GpPP4N7IuDYByo+NUEK06S0 l6u8FL2BpSGiu2Hl+gsValtA98ty0zcUdn6McZDJym6chCU9u5BNpjVdkzol1vFZ J9aFIC7bWXu+iPkwnROobqp01cZVi/0OAOjLpFMa2K6mStv3Dp2k2T0Z54AfgKtF Dlh/6j13Yps4Gj5g10T8yy+qinXuta6WF0yhzJPN10tboqfODfVxorg1jfYGnXdV dRQEemst4CHQ2bKdVIe17VRjKF9w9uI= -----END CERTIFICATE-----Generated at Sat Dec 6 18:18:08 2025 by rpki-client