This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: in0BC8ALfNbpI6nhmxOtJmH6CL4OSDjqQW6Y8VCr4/o= Subject key identifier: 2C:4D:1A:83:C2:6A:ED:1D:8C:56:9D:6A:4B:3B:81:15:D5:8D:04:82 Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 168C Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 1682 Signing time: Thu 04 Dec 2025 16:21:54 +0000 Manifest this update: Thu 04 Dec 2025 16:21:54 +0000 Manifest next update: Thu 11 Dec 2025 16:21:54 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: AfYKRsoh8e5arrZrIgutUgLzMOc5n4Ipk9YpNBC2IbY=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: LPGhf2+lZ/tfy7iMoJQ9mcHsSA792NuIJHPh9NLe0yI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5772 (0x168c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: Dec 4 16:21:54 2025 GMT Not After : Dec 11 16:21:54 2025 GMT Subject: CN=6931b522-679b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:8c:6d:7d:a2:e2:da:18:e9:fa:f1:7a:2b: 94:48:4a:f7:47:da:71:0d:1a:a8:18:8d:21:04:d7: 9b:90:b7:71:28:96:2f:3b:0b:f0:35:b4:73:8a:6c: 5a:73:82:73:ff:b3:cf:f0:5b:71:87:b1:f6:e5:52: 63:17:92:98:28:a5:b4:5f:4b:6d:2e:24:14:6f:aa: b2:02:a9:29:49:b1:ce:b1:ab:f4:08:43:a8:14:39: 60:c4:18:7f:95:b0:b9:a6:85:62:6f:40:32:0d:cc: 9e:09:37:8d:11:ba:ad:47:3f:30:51:43:ae:77:06: dc:e7:e5:82:41:64:c8:bf:90:fb:83:7b:94:ae:1a: 78:22:10:3e:2a:96:d9:ca:da:28:dd:33:be:8c:cf: 4d:25:bf:9e:8f:b1:50:ca:c3:ab:58:f5:19:00:ec: fb:f4:5b:ac:68:1a:af:a7:c3:c8:a1:fd:83:24:dc: 18:59:86:00:ca:c9:52:c4:4a:00:25:b0:ba:86:8b: 6f:15:31:86:61:c9:ab:9e:66:e0:3d:35:dd:e0:8e: df:53:9a:d9:d0:07:c5:24:d9:1a:8b:cc:13:ad:24: bd:70:cd:8d:fe:a9:67:be:4e:d7:7b:34:97:f3:15: 39:85:48:01:d6:cf:0a:01:c3:b1:0c:15:7a:c4:aa: 49:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4D:1A:83:C2:6A:ED:1D:8C:56:9D:6A:4B:3B:81:15:D5:8D:04:82 X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e2:ea:40:0a:4d:2b:e5:f4:0e:a1:21:1e:9d:ce:5a:d4:5a: 65:5b:63:45:f9:9f:0b:43:16:db:6e:03:a0:5b:b9:27:8c:d0: 89:7d:7e:30:26:f5:f0:1f:b2:d8:1d:df:d4:5d:48:b4:89:0b: 0c:5f:4f:78:0b:bb:0a:df:8a:f9:c8:d7:88:46:8c:fa:c7:b1: b0:ac:d3:dd:cf:7e:01:fd:d5:3c:2a:2b:8a:94:b5:c4:f9:c4: ae:97:f7:2f:a1:08:cc:56:8d:56:5d:7d:d9:0a:ac:42:01:f4: d7:bd:f9:66:fb:ab:33:38:88:e5:aa:99:15:29:08:15:f2:44: 1d:67:37:54:11:35:44:82:c6:57:6f:a6:ab:4a:a8:28:0f:8b: bb:b5:a8:99:c2:2f:39:00:1e:1e:5b:e2:db:9c:e6:c8:37:92: df:91:a2:a2:62:8f:cd:8f:3c:0d:3c:d0:1c:98:48:34:46:54: 83:81:b7:cd:03:a1:71:21:bb:25:5e:b2:e9:38:59:d8:5c:6f: 15:d7:4f:47:36:0a:ce:f5:56:bf:64:8c:7b:af:27:7a:3e:47: 54:a9:0f:db:27:52:7d:b3:1e:43:a7:9f:43:da:3d:6d:1e:8c: 1f:22:76:3b:a2:f1:63:cd:b7:7f:6e:7d:f4:12:f8:4f:ec:2f: 0a:23:30:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjUxMjA0MTYyMTU0WhcNMjUxMjExMTYyMTU0WjAYMRYwFAYD VQQDEw02OTMxYjUyMi02NzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso2MbX2i4toY6frxeiuUSEr3R9pxDRqoGI0hBNebkLdxKJYvOwvwNbRzimxa c4Jz/7PP8Ftxh7H25VJjF5KYKKW0X0ttLiQUb6qyAqkpSbHOsav0CEOoFDlgxBh/ lbC5poVib0AyDcyeCTeNEbqtRz8wUUOudwbc5+WCQWTIv5D7g3uUrhp4IhA+KpbZ ytoo3TO+jM9NJb+ej7FQysOrWPUZAOz79FusaBqvp8PIof2DJNwYWYYAyslSxEoA JbC6hotvFTGGYcmrnmbgPTXd4I7fU5rZ0AfFJNkai8wTrSS9cM2N/qlnvk7XezSX 8xU5hUgB1s8KAcOxDBV6xKpJHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxNGoPC au0djFadaks7gRXVjQSCMB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc4upACk0r5fQOoSEenc5a1FplW2NF+Z8LQxbbbgOgW7knjNCJfX4w JvXwH7LYHd/UXUi0iQsMX094C7sK34r5yNeIRoz6x7GwrNPdz34B/dU8KiuKlLXE +cSul/cvoQjMVo1WXX3ZCqxCAfTXvflm+6szOIjlqpkVKQgV8kQdZzdUETVEgsZX b6arSqgoD4u7taiZwi85AB4eW+LbnObIN5LfkaKiYo/NjzwNPNAcmEg0RlSDgbfN A6FxIbslXrLpOFnYXG8V109HNgrO9Va/ZIx7ryd6PkdUqQ/bJ1J9sx5Dp59D2j1t HowfInY7ovFjzbd/bn30EvhP7C8KIzDL -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:19 2025 by rpki-client