This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft File: SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json) Hash identifier: c17jQDcqeUsnjo35ulfKkN0jrOJFj/639P7LW5SbrJA= Subject key identifier: 8F:94:EE:3E:1D:F4:C7:75:59:BD:B9:2D:C4:68:A3:E7:F0:D9:CA:BF Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A Certificate issuer: /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft Manifest number: 01FC Signing time: Fri 05 Dec 2025 01:10:35 +0000 Manifest this update: Fri 05 Dec 2025 01:10:34 +0000 Manifest next update: Fri 12 Dec 2025 01:10:34 +0000 Files and hashes: 1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: m81HrFPRdCtByIBDWByS+TTogwF267WTrx2OwoCu4zk=) 2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: gQgaVP6gsqEmtORlyD8C7NpCpWYfOsLgU2Aae4Tbg5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Validity Not Before: Dec 5 01:10:34 2025 GMT Not After : Dec 12 01:10:34 2025 GMT Subject: CN=6932310a-af53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:12:04:21:f6:2c:04:4c:4c:34:bf:42:c6:a4: 98:e3:4b:07:8e:cd:77:e0:54:ab:db:93:83:be:6a: d7:d0:a8:92:d1:61:41:aa:2b:b6:b6:c4:af:64:88: 4e:f1:b4:15:0a:f1:93:2e:cd:92:ef:32:15:c3:b4: ee:c0:40:72:58:50:ee:22:97:82:38:e5:e7:af:5b: 6c:10:77:48:d8:52:b9:63:67:b6:21:b4:a9:dc:c3: f2:3c:91:99:af:69:ee:90:c0:12:21:a5:e1:1b:62: fb:4e:1b:16:1c:90:b5:ec:74:75:01:b7:8b:96:75: 65:e7:6b:d5:41:0e:16:05:d3:98:32:13:d8:b6:b8: 2a:ec:ff:a2:c6:7c:2c:e4:bd:04:62:64:c9:ea:5a: 17:3b:e5:4e:96:eb:95:45:17:83:38:2a:68:df:46: 6b:b2:97:ed:a9:cd:eb:3f:24:78:5e:16:be:13:2f: a4:9f:31:de:5a:5c:20:28:99:82:34:f3:ca:7f:9f: 26:33:22:07:77:f0:b7:b1:c9:77:51:6e:96:be:9d: 7a:ad:79:09:72:0e:b4:d8:89:13:43:86:08:f3:81: 67:02:d4:53:ff:e8:e0:71:db:87:e7:32:75:d0:ce: a6:45:7f:ca:db:57:c8:08:53:9e:a3:c2:1c:60:04: 91:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:94:EE:3E:1D:F4:C7:75:59:BD:B9:2D:C4:68:A3:E7:F0:D9:CA:BF X509v3 Authority Key Identifier: keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:23:44:64:21:60:de:08:e9:5c:2b:85:98:cf:cf:32:2a:2b: 89:d1:5e:31:0b:17:41:db:5f:6b:af:bd:ea:74:3c:dd:9d:7a: c2:dc:52:bc:41:2b:6d:4c:a7:c8:6e:6d:53:42:f9:a8:f1:cc: 96:5c:bf:fa:3c:e7:f2:1f:53:3c:0c:9a:70:3a:9c:5b:0d:aa: 3b:82:16:be:a0:f1:a4:53:8a:02:ae:2c:bb:57:65:28:5f:91: 0c:c1:cd:4e:17:e9:12:f7:f7:15:ce:a2:85:dd:4a:6b:18:83: 4a:d5:c5:b7:22:f9:b9:e7:8c:63:00:aa:cb:b1:1e:d1:7f:0d: d6:c6:ad:4e:76:b4:88:b1:0b:5e:37:43:14:f0:9a:b1:57:e5: 2c:02:9e:40:26:40:98:ff:03:6a:0e:b5:87:10:86:e8:f5:0c: bb:f6:86:22:ae:98:89:a8:8a:33:88:52:a7:46:49:3a:bb:ee: 07:27:70:2d:44:f9:7d:70:5a:76:5d:cd:16:87:d5:a0:db:44: 35:96:64:50:a5:d8:39:d5:42:56:39:d9:06:91:cb:32:eb:af: 44:c1:50:41:81:ef:92:e3:be:e2:f7:2c:50:bb:ec:90:06:8c: c9:e1:04:5c:7b:f7:af:84:1d:16:53:2b:63:00:21:cc:82:6d: d2:95:ab:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5OUUxMTAvBgNVBAUTKDQ4N0NCNjMzMTcxQTBEREYzOEFDQkI2QUQxRUQ4QUU2 OTY1NTg2MEEwHhcNMjUxMjA1MDExMDM0WhcNMjUxMjEyMDExMDM0WjAYMRYwFAYD VQQDEw02OTMyMzEwYS1hZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hIEIfYsBExMNL9CxqSY40sHjs134FSr25ODvmrX0KiS0WFBqiu2tsSvZIhO 8bQVCvGTLs2S7zIVw7TuwEByWFDuIpeCOOXnr1tsEHdI2FK5Y2e2IbSp3MPyPJGZ r2nukMASIaXhG2L7ThsWHJC17HR1AbeLlnVl52vVQQ4WBdOYMhPYtrgq7P+ixnws 5L0EYmTJ6loXO+VOluuVRReDOCpo30Zrspftqc3rPyR4Xha+Ey+knzHeWlwgKJmC NPPKf58mMyIHd/C3scl3UW6Wvp16rXkJcg602IkTQ4YI84FnAtRT/+jgcduH5zJ1 0M6mRX/K21fICFOeo8IcYASRmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+U7j4d 9Md1Wb25LcRoo+fw2cq/MB8GA1UdIwQYMBaAFEh8tjMXGg3fOKy7atHtiuaWVYYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk5RS82QzEzNTQzNEM5 RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURkODRyTHRxMGUySzVwWlZo Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NIeTJNeGNhRGQ4NHJMdHEwZTJLNXBaVmhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk5RS82QzEzNTQzNEM5RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURk ODRyTHRxMGUySzVwWlZoZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+I0RkIWDeCOlcK4WYz88yKiuJ0V4xCxdB219rr73qdDzdnXrC3FK8 QSttTKfIbm1TQvmo8cyWXL/6POfyH1M8DJpwOpxbDao7gha+oPGkU4oCriy7V2Uo X5EMwc1OF+kS9/cVzqKF3UprGINK1cW3Ivm554xjAKrLsR7Rfw3Wxq1OdrSIsQte N0MU8JqxV+UsAp5AJkCY/wNqDrWHEIbo9Qy79oYirpiJqIoziFKnRkk6u+4HJ3At RPl9cFp2Xc0Wh9Wg20Q1lmRQpdg51UJWOdkGkcsy669EwVBBge+S477i9yxQu+yQ BozJ4QRce/evhB0WUytjACHMgm3Slaur -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:14 2025 by rpki-client