This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft File: znNgvRqU6JF702ckM_gh7HgKjSg.mft (raw, json) Hash identifier: jw/qSBw/6bRIDwLVYF4nJrQg7aS1i6SoPYPKGIR8sNk= Subject key identifier: 21:FC:DF:5B:83:E5:FA:74:26:D2:32:DB:54:30:6A:24:AE:98:21:A5 Authority key identifier: CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28 Certificate issuer: /CN=A915E1F9/serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft Manifest number: 2C Signing time: Fri 05 Dec 2025 05:27:39 +0000 Manifest this update: Fri 05 Dec 2025 05:27:39 +0000 Manifest next update: Fri 12 Dec 2025 05:27:39 +0000 Files and hashes: 1: znNgvRqU6JF702ckM_gh7HgKjSg.crl (hash: I1gxj6/NmzO3+lft8qqjbuAi5RxNVweRWhIjIwEzn68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E1F9, serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28 Validity Not Before: Dec 5 05:27:39 2025 GMT Not After : Dec 12 05:27:39 2025 GMT Subject: CN=69326d4b-e559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:5b:4e:41:d2:db:2a:4a:1d:88:05:47:a2:71: 38:86:d8:73:b1:b3:4f:73:1a:bd:cc:b3:4a:c7:cc: 24:63:cc:75:ca:7f:a7:83:ac:8e:56:bc:04:69:a0: ea:0b:49:85:10:ef:c9:b5:52:32:58:4c:57:27:6b: c8:21:fa:4e:07:6e:6f:aa:a4:c7:0a:7a:03:17:66: 69:45:70:77:7f:bb:9f:bf:4d:29:2b:51:9e:26:c0: 4b:33:71:b2:f2:1f:41:b0:bd:f2:a5:2d:02:f9:44: f2:a8:8f:b8:fd:7f:bb:4c:0d:8c:22:47:4c:d4:f2: 6e:fa:dc:04:d2:af:64:1a:37:a8:eb:2e:d5:a7:8d: 4f:97:4f:07:fe:61:9a:32:69:16:80:26:80:0c:87: db:01:a1:12:7d:9f:f7:27:2e:42:26:f1:9c:87:10: b9:17:8e:b6:94:a6:0e:13:04:36:3f:80:a2:86:03: 83:ee:ea:ec:d7:a4:0e:f9:d5:29:a2:51:1b:c9:ed: dd:61:51:ef:73:6f:cb:4b:48:ff:44:a9:f8:9c:a9: 0d:ce:18:1e:81:94:09:79:7d:f7:00:3b:d3:34:a4: 47:d9:b1:7c:d2:11:53:86:7d:18:ed:34:b4:84:40: 85:54:31:2f:63:7c:1c:ff:26:a5:7e:36:77:37:c6: 1f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FC:DF:5B:83:E5:FA:74:26:D2:32:DB:54:30:6A:24:AE:98:21:A5 X509v3 Authority Key Identifier: keyid:CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:6c:fb:b9:c3:67:7a:70:ec:74:a2:82:aa:f4:84:53:b9:10: af:0b:9e:15:36:90:be:b9:96:d2:46:3c:32:75:44:eb:50:3f: 1d:c4:be:ec:0d:98:63:cd:24:c7:82:0f:2b:38:45:b0:dc:45: a8:5d:b9:7c:ec:3c:11:e3:c3:9e:98:ee:91:89:e6:77:05:f1: 05:a7:00:33:c6:a3:fb:5a:8c:4d:d2:2f:aa:ee:91:21:c8:df: 00:f7:ad:ed:00:25:01:59:98:c1:e6:7e:98:f8:3a:28:4a:8b: 88:58:e1:6a:bf:c2:8b:7f:97:64:ca:f1:52:81:29:32:7b:d8: e4:0e:f6:6a:31:7c:85:9e:62:c1:fc:2d:72:7d:e4:02:95:c4: 2f:7b:d1:9e:86:b1:f1:33:c0:e4:e6:20:a3:e2:c6:2f:70:19: 96:50:22:0d:32:3d:eb:78:2b:7a:a5:8e:41:be:57:a8:55:5b: d0:55:46:38:47:4e:3f:48:e1:13:76:3e:01:35:fe:10:d2:58: 55:64:75:49:29:12:50:9b:45:51:18:33:61:eb:8a:f4:8e:46: 7e:88:79:7c:04:42:25:e1:dc:99:e3:bf:ad:be:1c:12:21:89: 1e:47:67:81:3d:45:59:2d:3b:4b:bd:56:dc:20:20:59:1d:50: 53:37:c1:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTFGOTExMC8GA1UEBRMoQ0U3MzYwQkQxQTk0RTg5MTdCRDM2NzI0MzNGODIxRUM3 ODBBOEQyODAeFw0yNTEyMDUwNTI3MzlaFw0yNTEyMTIwNTI3MzlaMBgxFjAUBgNV BAMTDTY5MzI2ZDRiLWU1NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD4W05B0tsqSh2IBUeicTiG2HOxs09zGr3Ms0rHzCRjzHXKf6eDrI5WvARpoOoL SYUQ78m1UjJYTFcna8gh+k4Hbm+qpMcKegMXZmlFcHd/u5+/TSkrUZ4mwEszcbLy H0GwvfKlLQL5RPKoj7j9f7tMDYwiR0zU8m763ATSr2QaN6jrLtWnjU+XTwf+YZoy aRaAJoAMh9sBoRJ9n/cnLkIm8ZyHELkXjraUpg4TBDY/gKKGA4Pu6uzXpA751Smi URvJ7d1hUe9zb8tLSP9EqficqQ3OGB6BlAl5ffcAO9M0pEfZsXzSEVOGfRjtNLSE QIVUMS9jfBz/JqV+Nnc3xh89AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIfzfW4Pl +nQm0jLbVDBqJK6YIaUwHwYDVR0jBBgwFoAUznNgvRqU6JF702ckM/gh7HgKjSgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMUY5L0FGRTRBOTBBOERF MjExRjBBMzA4QUM3Q0M0RjlBRTAyL3puTmd2UnFVNkpGNzAyY2tNX2doN0hnS2pT Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem5OZ3ZScVU2SkY3MDJja01fZ2g3SGdLalNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MUY5L0FGRTRBOTBBOERFMjExRjBBMzA4QUM3Q0M0RjlBRTAyL3puTmd2UnFVNkpG NzAyY2tNX2doN0hnS2pTZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJNs+7nDZ3pw7HSigqr0hFO5EK8LnhU2kL65ltJGPDJ1ROtQPx3EvuwN mGPNJMeCDys4RbDcRahduXzsPBHjw56Y7pGJ5ncF8QWnADPGo/tajE3SL6rukSHI 3wD3re0AJQFZmMHmfpj4OihKi4hY4Wq/wot/l2TK8VKBKTJ72OQO9moxfIWeYsH8 LXJ95AKVxC970Z6GsfEzwOTmIKPixi9wGZZQIg0yPet4K3qljkG+V6hVW9BVRjhH Tj9I4RN2PgE1/hDSWFVkdUkpElCbRVEYM2HrivSORn6IeXwEQiXh3Jnjv62+HBIh iR5HZ4E9RVktO0u9VtwgIFkdUFM3wTM= -----END CERTIFICATE-----Generated at Sun Dec 7 03:20:16 2025 by rpki-client