This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft File: K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json) Hash identifier: PLbnT14YNMMKTCnCKGc96YV7M5sqCEHGnjjFqj4HW3M= Subject key identifier: 26:3F:53:66:74:6B:CF:40:C1:5B:7F:35:A1:4D:38:D9:E0:71:24:34 Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 Certificate issuer: /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft Manifest number: BA Signing time: Fri 05 Dec 2025 04:00:50 +0000 Manifest this update: Fri 05 Dec 2025 04:00:49 +0000 Manifest next update: Fri 12 Dec 2025 04:00:49 +0000 Files and hashes: 1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: tfez5e34baabqYCToqzz0smeOsBR/zscopnsTT+AogI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Validity Not Before: Dec 5 04:00:49 2025 GMT Not After : Dec 12 04:00:49 2025 GMT Subject: CN=693258f2-33bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:84:8a:a2:d0:d8:a8:fd:4e:b0:fb:81:1d:a6: db:f6:41:05:d5:55:48:01:c0:5b:a3:0e:8a:5d:59: 64:00:26:15:2e:f5:9c:75:66:45:f6:f4:ba:0b:2b: 24:a5:ed:39:48:f0:3a:a6:f7:7b:68:d2:79:c4:7d: 12:34:3e:a6:54:79:03:19:15:18:a4:40:ce:15:22: 81:07:e5:bc:a4:9a:62:bd:15:83:bd:ae:7f:0c:e6: ba:5e:be:27:f4:8d:8f:a8:f7:37:f8:51:ec:a1:76: 31:28:d1:f2:c7:19:9f:e2:c4:be:9f:ae:b3:99:1b: 74:e9:38:17:86:6d:58:91:fd:d3:fd:6e:c7:53:64: 59:f4:91:11:32:a2:ae:2d:29:9e:3a:cf:f0:9e:95: 12:2a:55:ae:07:d8:fa:55:f9:9f:f8:03:99:74:ae: cb:1b:a9:95:49:6e:16:27:ce:25:f6:df:27:92:16: 77:a8:5c:cf:bc:0f:54:b3:54:6e:45:c0:47:e6:81: f3:b8:09:86:1e:cb:af:cd:0a:10:d7:5e:7d:9e:6b: 96:ab:47:37:02:1a:97:40:dc:38:fa:1e:14:04:71: a3:34:49:9c:e6:0c:4d:5d:29:99:f8:cb:81:d7:1e: bc:c3:f4:68:7b:06:9d:a3:ce:f7:2c:b8:fe:0f:b6: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3F:53:66:74:6B:CF:40:C1:5B:7F:35:A1:4D:38:D9:E0:71:24:34 X509v3 Authority Key Identifier: keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:78:0e:b5:54:a3:49:5c:ea:d6:b7:2a:af:47:23:d0:b1:90: b1:8b:bb:27:1c:f9:6d:6a:b5:fc:3f:11:7c:02:61:db:b1:8b: 00:04:76:4c:07:fd:1b:56:67:00:b8:31:02:02:08:b1:d7:7d: 54:8a:f6:a7:93:32:03:81:f5:45:73:8a:c5:48:b6:09:12:90: 5b:77:cc:4e:15:fc:c9:0f:f6:06:c5:e9:ca:bf:67:31:ff:95: 26:df:27:55:2d:cb:d2:79:dd:60:dd:11:02:5e:d7:b2:f2:fe: 38:81:41:fd:42:e8:86:59:87:70:47:30:79:1b:a7:b7:64:c1: 87:04:c4:a0:9e:cc:58:ea:6f:50:d9:1e:ae:a5:ab:ae:d0:44: 5d:12:15:c6:34:0b:f4:91:4c:e3:5f:15:43:07:71:db:de:f1: 8b:51:94:ae:f8:3d:03:4f:ef:00:6b:91:f4:cd:c5:66:16:76: 35:1a:ba:e8:77:e7:bc:b5:5f:41:65:de:39:71:62:de:1b:f3: 13:87:51:1c:6a:dd:a7:dd:26:b2:76:fb:9b:70:f4:9e:f0:d9: fe:2d:f3:b3:9c:f7:36:61:d4:56:a6:ff:06:bc:ef:b6:c1:a0: 7e:dd:d0:0c:28:26:c7:fa:30:3a:6f:40:df:2a:fd:cb:3f:b4: 41:59:34:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY2RTMxMTAvBgNVBAUTKDJCRjBBRTY3OTBEMkYwMUREMURCNjczODMxMzJEQzQw M0I2NzQ1MjIwHhcNMjUxMjA1MDQwMDQ5WhcNMjUxMjEyMDQwMDQ5WjAYMRYwFAYD VQQDEw02OTMyNThmMi0zM2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5oSKotDYqP1OsPuBHabb9kEF1VVIAcBbow6KXVlkACYVLvWcdWZF9vS6Cysk pe05SPA6pvd7aNJ5xH0SND6mVHkDGRUYpEDOFSKBB+W8pJpivRWDva5/DOa6Xr4n 9I2PqPc3+FHsoXYxKNHyxxmf4sS+n66zmRt06TgXhm1Ykf3T/W7HU2RZ9JERMqKu LSmeOs/wnpUSKlWuB9j6Vfmf+AOZdK7LG6mVSW4WJ84l9t8nkhZ3qFzPvA9Us1Ru RcBH5oHzuAmGHsuvzQoQ1159nmuWq0c3AhqXQNw4+h4UBHGjNEmc5gxNXSmZ+MuB 1x68w/Roewado873LLj+D7bH+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCY/U2Z0 a89AwVt/NaFNONngcSQ0MB8GA1UdIwQYMBaAFCvwrmeQ0vAd0dtnODEy3EA7Z0Ui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjZFMy9GMkZCODI1MEI1 REQxMUVGOTdEOUZBMzRDNEY5QUUwMi9LX0N1WjVEUzhCM1IyMmM0TVRMY1FEdG5S U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tfQ3VaNURTOEIzUjIyYzRNVExjUUR0blJTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjZFMy9GMkZCODI1MEI1REQxMUVGOTdEOUZBMzRDNEY5QUUwMi9LX0N1WjVEUzhC M1IyMmM0TVRMY1FEdG5SU0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6eA61VKNJXOrWtyqvRyPQsZCxi7snHPltarX8PxF8AmHbsYsABHZM B/0bVmcAuDECAgix131UivankzIDgfVFc4rFSLYJEpBbd8xOFfzJD/YGxenKv2cx /5Um3ydVLcvSed1g3RECXtey8v44gUH9QuiGWYdwRzB5G6e3ZMGHBMSgnsxY6m9Q 2R6upauu0ERdEhXGNAv0kUzjXxVDB3Hb3vGLUZSu+D0DT+8Aa5H0zcVmFnY1Grro d+e8tV9BZd45cWLeG/MTh1Ecat2n3SaydvubcPSe8Nn+LfOznPc2YdRWpv8GvO+2 waB+3dAMKCbH+jA6b0DfKv3LP7RBWTT+ -----END CERTIFICATE-----Generated at Sat Dec 6 22:44:30 2025 by rpki-client