This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft File: -vIwziL75k9oiZnvfNiU3b2biSU.mft (raw, json) Hash identifier: 5DqxrY7wPcCgT7wV7PQ2pSn2sndgs0VBVMskyTQFSJo= Subject key identifier: 0D:77:A7:20:DA:28:98:4D:55:DD:CE:4C:3F:C1:47:DF:3E:E9:1C:D0 Authority key identifier: FA:F2:30:CE:22:FB:E6:4F:68:89:99:EF:7C:D8:94:DD:BD:9B:89:25 Certificate issuer: /CN=A913841B/serialNumber=FAF230CE22FBE64F688999EF7CD894DDBD9B8925 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft Manifest number: 4A Signing time: Fri 05 Dec 2025 05:11:14 +0000 Manifest this update: Fri 05 Dec 2025 05:11:13 +0000 Manifest next update: Fri 12 Dec 2025 05:11:13 +0000 Files and hashes: 1: -vIwziL75k9oiZnvfNiU3b2biSU.crl (hash: sMceGttyxLi0MT3UU4KVMKrSdl3KBWkvBiBKtlIEYPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.crl rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913841B, serialNumber=FAF230CE22FBE64F688999EF7CD894DDBD9B8925 Validity Not Before: Dec 5 05:11:13 2025 GMT Not After : Dec 12 05:11:13 2025 GMT Subject: CN=69326972-ea67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e4:c1:07:96:67:e2:0a:d2:89:97:a5:5b:b0: 64:3b:ce:10:46:0f:ca:5b:ad:13:67:2f:d2:fd:df: 8c:0b:e5:65:48:7b:3d:ec:f0:32:8d:08:b9:3c:1a: 15:d1:80:9e:05:7d:1e:d6:6e:36:3d:9a:4e:f2:9d: 0c:3b:dd:48:cb:76:72:9d:c6:83:79:21:09:1c:af: 64:06:5f:cf:3d:7f:96:2b:de:0a:dc:8b:d8:7c:5b: f6:cd:07:dd:36:7a:0a:6f:e7:93:bd:3b:e8:4c:2c: 40:d5:51:f6:6d:6a:5f:43:1f:00:5b:10:d2:b9:fc: ba:ab:6b:b4:4c:24:f2:07:6a:f5:35:da:c5:e5:19: 9b:f9:0e:1b:64:e5:47:85:52:9e:a5:81:8d:91:68: 61:b3:31:b8:19:a5:96:47:d9:b9:af:db:45:52:81: c3:75:29:c2:37:50:85:3e:f6:c9:6b:a3:17:79:fd: 0c:5d:56:83:0b:e0:79:54:ae:4b:c1:02:2e:3a:ea: f2:14:02:37:ce:f0:d5:89:49:f8:3a:60:c9:c1:84: 7a:f2:d8:33:38:b1:2f:8d:1e:9c:01:8e:20:8f:2c: 9c:8f:6c:91:8b:f1:af:ee:e8:4b:30:d8:f2:a3:5c: ab:9b:cf:08:a3:45:c6:41:48:8b:0d:d5:2f:de:2f: c3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:77:A7:20:DA:28:98:4D:55:DD:CE:4C:3F:C1:47:DF:3E:E9:1C:D0 X509v3 Authority Key Identifier: keyid:FA:F2:30:CE:22:FB:E6:4F:68:89:99:EF:7C:D8:94:DD:BD:9B:89:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:0f:05:49:41:dc:0e:c9:1e:d5:97:ab:c4:68:6d:ff:20:64: 82:ed:a8:a5:4f:16:fe:22:4c:7c:8f:bd:f8:c2:05:11:44:9c: b5:07:3c:be:48:fb:11:16:a0:00:4e:9e:37:30:06:ba:4e:7d: 02:5e:fe:d6:08:c6:e7:19:c7:d1:fa:f8:bc:d4:b6:39:24:9b: 6b:12:fd:4f:e3:c6:85:d6:4a:6c:3e:46:f1:b9:db:c0:5a:dc: 78:c2:01:ec:33:54:d3:a1:60:af:af:d9:d8:9c:90:54:03:b5: ef:02:1a:4e:88:8f:47:28:75:84:96:1e:1f:d7:a3:40:30:fc: 41:d6:70:8c:f0:b8:8a:a2:17:cc:90:12:df:1b:c0:99:cb:32: 67:97:7f:16:c3:7f:90:46:a1:8d:d6:5f:8f:94:1d:f9:2f:d1: 71:fa:07:53:ea:66:a6:ad:a6:aa:9c:59:06:1b:73:03:12:4f: 62:a3:41:f3:63:48:d2:35:be:58:d4:b4:e9:a7:ab:fd:51:4a: 4e:96:f9:f5:34:46:08:c4:cb:27:63:08:c0:5f:15:d0:b4:f1: 2f:dc:e9:0c:87:8b:fc:39:00:6b:0f:75:d9:94:b0:81:9f:ae: d2:e9:48:8b:99:87:3f:f6:4c:b3:42:3f:a4:46:ef:27:dd:dd: ac:da:c8:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODQxQjExMC8GA1UEBRMoRkFGMjMwQ0UyMkZCRTY0RjY4ODk5OUVGN0NEODk0RERC RDlCODkyNTAeFw0yNTEyMDUwNTExMTNaFw0yNTEyMTIwNTExMTNaMBgxFjAUBgNV BAMTDTY5MzI2OTcyLWVhNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDl5MEHlmfiCtKJl6VbsGQ7zhBGD8pbrRNnL9L934wL5WVIez3s8DKNCLk8GhXR gJ4FfR7WbjY9mk7ynQw73UjLdnKdxoN5IQkcr2QGX889f5Yr3grci9h8W/bNB902 egpv55O9O+hMLEDVUfZtal9DHwBbENK5/Lqra7RMJPIHavU12sXlGZv5Dhtk5UeF Up6lgY2RaGGzMbgZpZZH2bmv20VSgcN1KcI3UIU+9slroxd5/QxdVoML4HlUrkvB Ai466vIUAjfO8NWJSfg6YMnBhHry2DM4sS+NHpwBjiCPLJyPbJGL8a/u6Esw2PKj XKubzwijRcZBSIsN1S/eL8PnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDXenINoo mE1V3c5MP8FH3z7pHNAwHwYDVR0jBBgwFoAU+vIwziL75k9oiZnvfNiU3b2biSUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4NDFCL0Q1RjExOEVFNjBD MDExRjBBMkYxRUEyQ0M0RjlBRTAyLy12SXd6aUw3NWs5b2labnZmTmlVM2IyYmlT VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXZJd3ppTDc1azlvaVpudmZOaVUzYjJiaVNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 NDFCL0Q1RjExOEVFNjBDMDExRjBBMkYxRUEyQ0M0RjlBRTAyLy12SXd6aUw3NWs5 b2labnZmTmlVM2IyYmlTVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALsPBUlB3A7JHtWXq8Robf8gZILtqKVPFv4iTHyPvfjCBRFEnLUHPL5I +xEWoABOnjcwBrpOfQJe/tYIxucZx9H6+LzUtjkkm2sS/U/jxoXWSmw+RvG528Ba 3HjCAewzVNOhYK+v2dickFQDte8CGk6Ij0codYSWHh/Xo0Aw/EHWcIzwuIqiF8yQ Et8bwJnLMmeXfxbDf5BGoY3WX4+UHfkv0XH6B1PqZqatpqqcWQYbcwMST2KjQfNj SNI1vljUtOmnq/1RSk6W+fU0RgjEyydjCMBfFdC08S/c6QyHi/w5AGsPddmUsIGf rtLpSIuZhz/2TLNCP6RG7yfd3azayDk= -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:25 2025 by rpki-client