This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json) Hash identifier: BvzzPRRIhCPWbeXNiuYNbZiG0eSI4+KODu8nHIUT1ek= Subject key identifier: 18:BD:91:90:A8:40:FE:C7:B3:C7:C1:D8:4D:1F:17:5E:88:DF:0E:8A Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 1389 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft Manifest number: 132D Signing time: Sat 06 Dec 2025 16:35:30 +0000 Manifest this update: Sat 06 Dec 2025 16:35:30 +0000 Manifest next update: Sat 13 Dec 2025 16:35:30 +0000 Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: 53pzapIcQhO2N81Di2f7iTcXwLnBcJrxsINYm3eRGrQ=) 2: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: pmGjv9e4kJuui8gahJeniJTVkFZxLqAkqBkutIyaUmM=) 3: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: rzWRSvP8FzgLIAzzQm5a0g9KtMMg7ZcTgH4qB+DOkDI=) 4: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: JtAyYvcjsSIbHjMavRbf74w0IIhNg4IBABZJn0wcwzQ=) 5: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: 3fdnPO7nIXug6dYvzk2siFXVuDYGDIdJas3DCvUTWPA=) 6: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: DOUd4Ct4uA10KaiPoOZjeWOyNrfXwTZYgvv/v0X/i0Y=) 7: DEF977A6E53611EB81682769C4F9AE02.roa (hash: SO0gHlbHvBD1Qdf3mOeX+9pYdaFRkZquUMH00OZSNZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5001 (0x1389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: Dec 6 16:35:30 2025 GMT Not After : Dec 13 16:35:30 2025 GMT Subject: CN=69345b52-6245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:13:bf:58:34:ef:dc:e1:a2:3b:b8:e9:88:f9: 78:4a:d0:20:71:93:2a:74:21:26:ae:db:f8:19:63: 7c:28:59:be:95:51:fc:48:47:79:71:f6:25:eb:b4: bd:dc:f2:f7:7d:52:0d:38:44:df:4e:d3:a6:18:24: 4e:c8:8b:6d:8c:8f:e3:00:f6:a6:01:61:65:09:3b: ad:14:20:d0:b4:9a:36:ba:56:ca:2f:fe:05:b4:fe: 6b:23:46:5f:1d:9f:e1:de:ad:1c:a6:33:93:b5:be: 61:7f:6e:6f:99:8f:ec:cf:97:68:08:78:5a:68:19: 79:3f:8e:09:f0:8f:71:77:52:0d:e2:bf:ba:1a:55: 62:29:31:ce:e1:e8:61:19:d1:14:70:1e:91:bc:2e: cb:ad:60:94:4e:d5:d5:83:73:10:81:3d:1d:99:92: 09:e0:76:b6:1e:10:93:d0:56:c6:b5:b1:80:e1:38: a3:bd:d3:f1:4b:4d:b1:54:5e:f6:ea:9f:1e:db:14: e2:10:6e:c8:dd:52:84:14:dd:13:b3:b8:82:f1:82: a0:29:75:54:af:e6:ca:e1:07:ea:b6:84:a7:76:35: a2:94:09:3e:95:77:0d:e0:10:e0:0b:5d:8c:e4:6e: d1:a4:ec:ca:80:21:aa:a9:54:62:b9:4c:69:10:69: 22:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BD:91:90:A8:40:FE:C7:B3:C7:C1:D8:4D:1F:17:5E:88:DF:0E:8A X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:5a:57:66:1d:71:27:2b:c2:73:27:a1:46:12:45:44:57:16: f4:1e:db:cf:99:7e:c2:b4:b8:92:29:84:0c:d0:23:de:24:8b: 61:0e:f4:4b:83:42:56:21:e8:ee:ba:d7:e9:bb:c7:9b:93:ca: 00:15:7f:2a:c9:f5:b2:ba:f6:39:97:e4:83:c6:e5:49:bb:4a: a9:d6:98:9d:98:c7:86:d6:41:e0:a5:09:8e:46:a2:94:1e:95: 83:ce:84:39:3f:42:9f:db:e5:d1:f5:5a:d4:61:2e:b7:01:63: bf:a9:54:81:8f:0b:c9:64:4c:9c:20:15:5d:d8:de:b7:fa:cd: 27:3b:c7:5c:ff:68:be:8f:86:da:78:81:8b:28:27:29:02:d4: d5:6f:4c:67:8d:be:d1:b4:00:fe:c6:14:de:cd:71:81:86:11: 45:5c:44:59:fa:12:aa:c6:e6:67:87:de:9f:78:d4:07:9b:9d: 15:df:eb:d0:41:e9:26:6a:3c:5c:99:7c:52:26:19:f2:f9:b7: 58:93:b7:83:f4:6c:97:6e:fd:55:24:af:15:8b:df:6c:1e:b8: c4:c7:a1:61:0e:6b:93:e4:38:40:0c:a9:4c:93:d8:b9:90:4c: af:ff:e0:8c:2a:61:1e:cf:e7:c2:78:d6:48:3c:f6:c9:16:fd: 78:c3:f9:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjUxMjA2MTYzNTMwWhcNMjUxMjEzMTYzNTMwWjAYMRYwFAYD VQQDEw02OTM0NWI1Mi02MjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphO/WDTv3OGiO7jpiPl4StAgcZMqdCEmrtv4GWN8KFm+lVH8SEd5cfYl67S9 3PL3fVINOETfTtOmGCROyIttjI/jAPamAWFlCTutFCDQtJo2ulbKL/4FtP5rI0Zf HZ/h3q0cpjOTtb5hf25vmY/sz5doCHhaaBl5P44J8I9xd1IN4r+6GlViKTHO4ehh GdEUcB6RvC7LrWCUTtXVg3MQgT0dmZIJ4Ha2HhCT0FbGtbGA4TijvdPxS02xVF72 6p8e2xTiEG7I3VKEFN0Ts7iC8YKgKXVUr+bK4QfqtoSndjWilAk+lXcN4BDgC12M 5G7RpOzKgCGqqVRiuUxpEGkivwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBi9kZCo QP7Hs8fB2E0fF16I3w6KMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVWldmHXEnK8JzJ6FGEkVEVxb0HtvPmX7CtLiSKYQM0CPeJIthDvRL g0JWIejuutfpu8ebk8oAFX8qyfWyuvY5l+SDxuVJu0qp1pidmMeG1kHgpQmORqKU HpWDzoQ5P0Kf2+XR9VrUYS63AWO/qVSBjwvJZEycIBVd2N63+s0nO8dc/2i+j4ba eIGLKCcpAtTVb0xnjb7RtAD+xhTezXGBhhFFXERZ+hKqxuZnh96feNQHm50V3+vQ QekmajxcmXxSJhny+bdYk7eD9GyXbv1VJK8Vi99sHrjEx6FhDmuT5DhADKlMk9i5 kEyv/+CMKmEez+fCeNZIPPbJFv14w/nH -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:47 2025 by rpki-client