This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json) Hash identifier: STtGMCGmQnT+9pY3Fd1mGCN/stRxHgNAXHeiuoh91SA= Subject key identifier: 70:A3:3A:6E:FF:35:B1:04:5B:57:32:1D:45:E0:E2:47:CF:9C:02:E3 Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft Manifest number: 017C Signing time: Fri 05 Dec 2025 01:55:22 +0000 Manifest this update: Fri 05 Dec 2025 01:55:21 +0000 Manifest next update: Fri 12 Dec 2025 01:55:21 +0000 Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: vmK2qspvpQmVACprreKN0rCh0ViCg1WcVqBPTkxIoG4=) 2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: Kn/Z1rDpA/ttbyRypaR6AHeF+y7El6cRx5pOMXcKn6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Validity Not Before: Dec 5 01:55:21 2025 GMT Not After : Dec 12 01:55:21 2025 GMT Subject: CN=69323b8a-1cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:59:ac:da:e5:74:95:93:e0:de:77:f5:1d:e2: 71:e1:dd:0a:41:57:3a:58:8d:a6:1d:21:3b:a6:5c: d3:43:d0:a2:64:f7:5c:8d:d8:85:64:38:40:0f:55: ed:6c:d3:23:ac:56:3a:6b:63:4f:4f:07:23:81:83: db:d4:b4:b5:94:06:01:08:9f:53:af:ad:15:33:6c: 7b:c2:32:98:66:e9:6e:bd:2a:bc:7f:4b:20:fc:0b: ca:fc:fc:fe:39:10:38:d2:d5:88:30:d1:6b:89:3c: 97:81:c0:cf:74:fb:53:5b:2d:1f:4c:f7:e0:4e:0a: b7:74:38:96:20:f8:34:c9:6d:8a:94:bd:b6:2b:92: f4:90:75:5b:87:85:1d:0f:71:4a:3b:79:6b:4d:36: 25:cf:75:02:8a:9b:56:2e:67:8e:b1:65:aa:b5:a1: c0:05:1e:c3:da:2b:dd:84:c1:a2:a7:b0:ef:b7:6a: ad:a7:d3:3c:e3:a5:77:c6:0c:54:d6:99:1c:23:f8: 97:d6:56:ed:49:6f:a8:39:88:c9:d7:69:9b:01:70: c0:d5:15:1c:db:1e:76:43:82:fd:76:c6:d0:9b:88: 4d:2d:24:7a:2d:f8:3a:53:61:29:e1:b3:15:44:d8: 4b:b6:cd:e7:d1:aa:1e:5d:b1:fb:ce:90:dc:fa:9a: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A3:3A:6E:FF:35:B1:04:5B:57:32:1D:45:E0:E2:47:CF:9C:02:E3 X509v3 Authority Key Identifier: keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:62:39:2c:2d:e4:75:0e:88:8e:2d:6a:65:21:a1:9c:4d:12: a0:86:5d:00:3c:53:2c:f7:49:6a:81:3b:a4:04:d8:62:41:56: 58:04:e0:65:99:40:c9:63:25:3c:1d:c2:a8:e5:98:ec:f2:81: 7b:ad:66:e8:96:87:c2:76:09:f3:66:95:39:77:dc:45:ef:50: 64:6c:7d:48:03:47:d3:15:df:ce:85:ca:33:0b:c8:ab:01:7a: 95:bf:f4:24:b2:3f:6d:e9:5d:1d:67:56:ef:58:42:18:99:da: ca:64:5f:61:d7:8a:3e:6c:9a:d7:52:f3:a7:88:9b:49:1d:1f: 0d:51:b7:c7:cd:96:8f:5b:f8:bb:7f:41:55:8f:8a:7b:90:24: d8:95:e9:cf:a1:90:c4:ca:42:b5:5c:bd:59:81:6a:f6:f9:8b: da:28:7b:50:7a:80:29:82:89:0c:96:d6:9a:ff:05:53:9e:6e: 20:12:e9:51:62:34:d3:2d:dc:61:2a:e0:ab:f1:58:05:c9:78: ad:71:13:37:af:26:a7:77:07:7a:05:d0:09:de:15:dd:eb:be: db:91:ce:16:a3:07:57:04:31:9e:fc:c8:a7:5c:18:c5:73:4a: 2d:af:52:4c:7d:9b:4d:a4:5a:b5:f9:e0:c8:aa:40:90:03:98: 56:f8:f6:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE NzU1RUQwQzAwHhcNMjUxMjA1MDE1NTIxWhcNMjUxMjEyMDE1NTIxWjAYMRYwFAYD VQQDEw02OTMyM2I4YS0xY2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01ms2uV0lZPg3nf1HeJx4d0KQVc6WI2mHSE7plzTQ9CiZPdcjdiFZDhAD1Xt bNMjrFY6a2NPTwcjgYPb1LS1lAYBCJ9Tr60VM2x7wjKYZuluvSq8f0sg/AvK/Pz+ ORA40tWIMNFriTyXgcDPdPtTWy0fTPfgTgq3dDiWIPg0yW2KlL22K5L0kHVbh4Ud D3FKO3lrTTYlz3UCiptWLmeOsWWqtaHABR7D2ivdhMGip7Dvt2qtp9M846V3xgxU 1pkcI/iX1lbtSW+oOYjJ12mbAXDA1RUc2x52Q4L9dsbQm4hNLSR6Lfg6U2Ep4bMV RNhLts3n0aoeXbH7zpDc+prTNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCjOm7/ NbEEW1cyHUXg4kfPnALjMB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP aTJtdFBER25OaG5YVmUwTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3YjksLeR1DoiOLWplIaGcTRKghl0APFMs90lqgTukBNhiQVZYBOBl mUDJYyU8HcKo5Zjs8oF7rWbolofCdgnzZpU5d9xF71BkbH1IA0fTFd/OhcozC8ir AXqVv/Qksj9t6V0dZ1bvWEIYmdrKZF9h14o+bJrXUvOniJtJHR8NUbfHzZaPW/i7 f0FVj4p7kCTYlenPoZDEykK1XL1ZgWr2+YvaKHtQeoApgokMltaa/wVTnm4gEulR YjTTLdxhKuCr8VgFyXitcRM3ryandwd6BdAJ3hXd677bkc4WowdXBDGe/MinXBjF c0otr1JMfZtNpFq1+eDIqkCQA5hW+Pbx -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:39 2025 by rpki-client