This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft File: 529w4WvXl_FHD9HglUZu2f_XC94.mft (raw, json) Hash identifier: tGwItwLiY2GXVSsbUMQ3IxBNonPbdllEEzVKoaCYVQo= Subject key identifier: 01:26:C4:CC:C5:F0:21:30:BA:DB:D3:F9:4F:FE:06:CE:37:73:D3:4F Authority key identifier: E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE Certificate issuer: /CN=A914B6D8/serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft Manifest number: 0E Signing time: Thu 04 Dec 2025 17:40:57 +0000 Manifest this update: Thu 04 Dec 2025 17:40:57 +0000 Manifest next update: Thu 11 Dec 2025 17:40:57 +0000 Files and hashes: 1: 529w4WvXl_FHD9HglUZu2f_XC94.crl (hash: nO0/LYbxjURsIyPm4JmubzWC7pBQTCH0UTdR5UiGXAg=) 2: 551B0760BEBD11F0AD50D23AC4F9AE02.roa (hash: k/Bj5MFr5woGzZDRB9XxOYqM9e19oHws7ME7lRNdfok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B6D8, serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE Validity Not Before: Dec 4 17:40:57 2025 GMT Not After : Dec 11 17:40:57 2025 GMT Subject: CN=6931c7a9-9e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:1d:5b:1f:1c:60:65:e8:6b:2b:38:28:8c: 8d:d3:9b:a1:f8:e8:85:a2:9f:fb:d6:d2:54:49:a8: 75:6a:cb:6a:03:d6:22:72:62:1f:8c:47:69:6c:ff: 0b:db:05:70:13:f8:cc:0b:67:b6:eb:5d:d1:2e:08: e8:4c:70:ee:bc:d8:e5:b6:55:18:98:01:e9:55:a4: 0f:c2:84:ff:50:b6:32:8a:e1:ed:29:46:8c:12:ac: 39:9e:12:41:47:40:8f:22:63:f0:4e:13:47:bb:e7: 2a:ca:cc:8a:1e:85:73:0f:b0:6a:fc:7a:05:18:da: 1b:e0:e7:7a:5f:d1:e4:6e:19:95:22:e6:62:54:f2: 1e:d0:70:dc:2c:d8:3f:a4:5e:95:f8:7b:2c:f4:64: 51:36:31:4c:96:a9:89:17:ba:71:5d:f9:f2:69:bc: 7a:f0:6b:59:7e:69:93:89:fb:7a:6c:f8:a4:14:31: 48:a3:c0:4f:c2:21:6f:2e:c7:33:6e:42:16:3f:45: 83:a6:15:5d:60:92:8f:f1:8f:2f:7f:48:ff:a2:2a: 76:b4:0d:b2:18:ae:3a:2d:12:4f:df:d6:76:72:94: 22:79:9c:7a:65:d8:3d:e2:8f:b8:05:b9:e4:52:e6: aa:df:0d:e2:d0:02:e0:a6:68:1d:7e:e2:c1:4a:52: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:26:C4:CC:C5:F0:21:30:BA:DB:D3:F9:4F:FE:06:CE:37:73:D3:4F X509v3 Authority Key Identifier: keyid:E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:aa:f5:dc:53:c2:fc:8d:bb:7e:96:a3:82:87:dd:34:65:32: f5:27:d6:1c:93:6e:a7:5e:03:77:18:81:a3:1a:7b:3e:dc:9c: b2:e2:5f:e0:e2:58:ed:08:0e:84:3d:8a:22:92:a2:f6:7a:a5: 6f:25:91:cb:83:bf:d7:30:c1:f6:36:53:17:e5:ef:78:34:72: 3c:b0:8a:93:75:af:26:4c:d0:7e:da:ce:a6:3a:6a:fe:1b:ef: 13:d2:b9:3a:35:ad:2d:d4:5a:ee:5a:0a:d3:ab:68:13:b4:c3: 12:61:ec:04:b4:5c:f3:03:d5:0f:bf:16:7a:13:ce:a1:e6:f9: 1e:c8:03:33:52:c3:18:0b:8e:95:b8:72:fb:0d:c5:be:b2:4e: 00:8a:b4:bc:5d:4b:31:87:27:38:2b:cc:a3:fc:3f:3d:70:5e: b3:34:9f:42:f4:f3:64:57:93:3f:ae:1e:12:8a:28:54:9b:6f: b6:87:2e:c5:68:d0:e8:1a:4d:50:86:b7:44:8c:5a:4f:ad:5a: 0d:3b:e7:f6:df:f9:45:3b:73:b5:09:3f:4a:5d:f1:7e:77:c1: fd:2f:ee:37:f9:41:ee:6b:cb:32:16:95:6c:9e:d6:c9:fa:d6: 2c:31:50:38:c1:c3:62:ea:5d:bd:04:6c:ab:51:53:34:6e:60: 3a:fe:4b:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjZEODExMC8GA1UEBRMoRTc2RjcwRTE2QkQ3OTdGMTQ3MEZEMUUwOTU0NjZFRDlG RkQ3MEJERTAeFw0yNTEyMDQxNzQwNTdaFw0yNTEyMTExNzQwNTdaMBgxFjAUBgNV BAMTDTY5MzFjN2E5LTllMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/gx1bHxxgZehrKzgojI3Tm6H46IWin/vW0lRJqHVqy2oD1iJyYh+MR2ls/wvb BXAT+MwLZ7brXdEuCOhMcO682OW2VRiYAelVpA/ChP9QtjKK4e0pRowSrDmeEkFH QI8iY/BOE0e75yrKzIoehXMPsGr8egUY2hvg53pf0eRuGZUi5mJU8h7QcNws2D+k XpX4eyz0ZFE2MUyWqYkXunFd+fJpvHrwa1l+aZOJ+3ps+KQUMUijwE/CIW8uxzNu QhY/RYOmFV1gko/xjy9/SP+iKna0DbIYrjotEk/f1nZylCJ5nHpl2D3ij7gFueRS 5qrfDeLQAuCmaB1+4sFKUh05AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUASbEzMXw ITC629P5T/4Gzjdz008wHwYDVR0jBBgwFoAU529w4WvXl/FHD9HglUZu2f/XC94w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNkQ4LzU2OTQ4QjMyQkVC QTExRjA5NkE2Mjc4NEM0RjlBRTAyLzUyOXc0V3ZYbF9GSEQ5SGdsVVp1MmZfWEM5 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNTI5dzRXdlhsX0ZIRDlIZ2xVWnUyZl9YQzk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC NkQ4LzU2OTQ4QjMyQkVCQTExRjA5NkE2Mjc4NEM0RjlBRTAyLzUyOXc0V3ZYbF9G SEQ5SGdsVVp1MmZfWEM5NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEuq9dxTwvyNu36Wo4KH3TRlMvUn1hyTbqdeA3cYgaMaez7cnLLiX+Di WO0IDoQ9iiKSovZ6pW8lkcuDv9cwwfY2Uxfl73g0cjywipN1ryZM0H7azqY6av4b 7xPSuTo1rS3UWu5aCtOraBO0wxJh7AS0XPMD1Q+/FnoTzqHm+R7IAzNSwxgLjpW4 cvsNxb6yTgCKtLxdSzGHJzgrzKP8Pz1wXrM0n0L082RXkz+uHhKKKFSbb7aHLsVo 0OgaTVCGt0SMWk+tWg075/bf+UU7c7UJP0pd8X53wf0v7jf5Qe5ryzIWlWye1sn6 1iwxUDjBw2LqXb0EbKtRUzRuYDr+S1M= -----END CERTIFICATE-----Generated at Sat Dec 6 15:51:02 2025 by rpki-client