This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json) Hash identifier: svrJrhqDiq9y6AMp7DgyDkB1+t/Uerl0o0gYbFs5+Ds= Subject key identifier: E1:37:E4:AD:CC:32:A7:93:37:34:26:F4:FC:31:92:92:CC:43:92:82 Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Certificate serial: 34ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft Manifest number: 34ED Signing time: Sat 06 Dec 2025 14:36:19 +0000 Manifest this update: Sat 06 Dec 2025 14:36:19 +0000 Manifest next update: Sat 13 Dec 2025 14:36:19 +0000 Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: FDnckValKXnfXiJXa1Muo2Qbw7HBBYpbOV3G7wk3IHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13549 (0x34ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Validity Not Before: Dec 6 14:36:19 2025 GMT Not After : Dec 13 14:36:19 2025 GMT Subject: CN=69343f63-ac3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f2:d3:0d:9f:53:9c:23:21:6c:ab:a8:cc:23: 9c:73:4a:2e:93:42:de:2f:cc:5b:d3:cb:02:08:6c: ca:b6:89:8b:b5:ca:86:12:52:59:24:3f:00:12:b0: 7d:89:bb:15:87:21:36:b2:90:b5:dc:42:ad:83:a1: ff:f1:ed:ba:f4:60:0a:03:ca:56:80:48:93:d4:62: bf:4d:31:e6:c0:f4:8d:a2:58:c2:8c:6d:59:0d:30: bf:4f:df:60:e0:18:32:9a:17:74:d5:cb:a9:39:de: 69:02:6f:9f:50:7b:d2:8b:e6:e5:86:89:a5:45:2a: 1c:c8:90:7c:5d:78:fd:23:c6:32:35:ff:79:57:db: 0c:31:31:95:fb:72:fb:00:ea:88:82:cb:ee:ef:e0: f5:5e:8d:13:ae:c7:66:9f:d8:49:0e:ab:00:6f:61: cb:5a:53:ec:3d:8c:3a:b4:45:28:76:80:be:66:d6: ca:70:53:e2:c3:a3:7c:11:10:d2:48:30:9f:2e:4b: 71:68:2d:17:ff:69:cb:4c:f2:c9:33:d0:fe:85:4c: be:8d:18:af:20:c0:2c:90:d7:d3:04:1c:09:3c:f6: d6:c0:b9:6e:6c:5c:25:d2:50:b6:da:bd:16:b4:43: 00:10:3d:cb:72:84:72:b8:9b:b1:fa:90:d4:02:96: 78:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:37:E4:AD:CC:32:A7:93:37:34:26:F4:FC:31:92:92:CC:43:92:82 X509v3 Authority Key Identifier: keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0d:5b:1d:0f:e9:e0:9b:12:ba:cb:70:bd:80:91:d2:2c:95: 7b:07:d6:3f:64:5d:4c:47:7c:e1:59:99:09:6b:77:44:34:13: ca:9d:17:8d:9d:5b:0b:67:dc:5d:de:fd:50:00:08:34:04:74: 34:51:21:01:2e:1a:4d:d0:30:40:43:28:4a:52:24:cb:31:c5: b7:c4:1f:4d:bc:fc:90:92:f2:6f:ba:f5:b5:9a:ae:b1:d9:86: 36:72:f7:95:c5:2e:8d:67:a6:b4:08:2f:66:db:42:79:a3:e7: 7f:b0:37:8b:63:48:22:3e:40:5b:96:50:f7:09:ba:26:4b:11: aa:5a:d8:2c:9b:e9:9a:22:10:64:c5:06:a5:fa:d4:9b:76:05: b1:cb:0d:46:85:14:c8:33:24:c1:12:ad:89:fc:40:58:25:75: 21:d8:dd:6f:0c:14:50:3a:3b:55:b4:de:14:21:da:ba:cd:43: 4e:b2:41:19:e1:c1:93:79:77:59:cb:fb:30:4b:70:9a:aa:77: 5e:08:44:93:48:b6:d1:39:40:78:fb:6f:62:95:54:a1:47:05: ca:62:45:b5:e1:f0:4a:dd:6a:47:c5:fb:fe:1f:bf:74:80:a8: 2f:df:49:4f:5d:8a:4d:6e:80:b6:f1:d4:4d:da:20:c6:be:77: 09:ac:f1:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFFMjgxMTAvBgNVBAUTKEFDMTlDNjZCQzRCMzFDRUI5MzBCQTZBRTBENkVCNzQ3 QjEwQUI2MDYwHhcNMjUxMjA2MTQzNjE5WhcNMjUxMjEzMTQzNjE5WjAYMRYwFAYD VQQDEw02OTM0M2Y2My1hYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvLTDZ9TnCMhbKuozCOcc0ouk0LeL8xb08sCCGzKtomLtcqGElJZJD8AErB9 ibsVhyE2spC13EKtg6H/8e269GAKA8pWgEiT1GK/TTHmwPSNoljCjG1ZDTC/T99g 4Bgymhd01cupOd5pAm+fUHvSi+blhomlRSocyJB8XXj9I8YyNf95V9sMMTGV+3L7 AOqIgsvu7+D1Xo0Trsdmn9hJDqsAb2HLWlPsPYw6tEUodoC+ZtbKcFPiw6N8ERDS SDCfLktxaC0X/2nLTPLJM9D+hUy+jRivIMAskNfTBBwJPPbWwLlubFwl0lC22r0W tEMAED3LcoRyuJux+pDUApZ4mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOE35K3M MqeTNzQm9PwxkpLMQ5KCMB8GA1UdIwQYMBaAFKwZxmvEsxzrkwumrg1ut0exCrYG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUUyOC84NDU4QjkxMDFE OEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhPdVRDNmF1RFc2M1I3RUt0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JCbkdhOFN6SE91VEM2YXVEVzYzUjdFS3RnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUUyOC84NDU4QjkxMDFEOEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhP dVRDNmF1RFc2M1I3RUt0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKDVsdD+ngmxK6y3C9gJHSLJV7B9Y/ZF1MR3zhWZkJa3dENBPKnReN nVsLZ9xd3v1QAAg0BHQ0USEBLhpN0DBAQyhKUiTLMcW3xB9NvPyQkvJvuvW1mq6x 2YY2cveVxS6NZ6a0CC9m20J5o+d/sDeLY0giPkBbllD3CbomSxGqWtgsm+maIhBk xQal+tSbdgWxyw1GhRTIMyTBEq2J/EBYJXUh2N1vDBRQOjtVtN4UIdq6zUNOskEZ 4cGTeXdZy/swS3CaqndeCESTSLbROUB4+29ilVShRwXKYkW14fBK3WpHxfv+H790 gKgv30lPXYpNboC28dRN2iDGvncJrPGc -----END CERTIFICATE-----Generated at Sat Dec 6 23:42:57 2025 by rpki-client