This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json) Hash identifier: l+MCPXsLxZ4vZ42Xv2LlAnYx7cJ1yzh4QRgp3TBZcSI= Subject key identifier: FB:6C:37:AB:1E:98:A5:3C:21:FC:72:47:6F:7D:FF:0B:B0:04:BE:FA Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Certificate serial: 0695 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft Manifest number: 067E Signing time: Thu 04 Dec 2025 21:19:05 +0000 Manifest this update: Thu 04 Dec 2025 21:19:05 +0000 Manifest next update: Thu 11 Dec 2025 21:19:05 +0000 Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: feUACSvy6ba8lobGizgk8clwWlzBw+MijoeO0eHmBmU=) 2: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: k5QsNW2UHXx3nyL0zXl6ErEpAH+UnqW9IYvw+MU5620=) 3: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: m0D2GQEuEloT+9a5hd4XJIXteBt7D/lUYhm6KRzzdn0=) 4: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: IsFTUXxsw7oP6sOsJZN0fFgsJ2mQPRr349bOV7EbeEQ=) 5: 68219776A41311EBBF911855C4F9AE02.roa (hash: d0b5vUBWzMm2pz0E2OMmgEy+tuggoWEtsruTL8xevaE=) 6: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: Gp+VrNNQKJoE7nZhj+fgxNCDM9H0dRu0kS108OiQiRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1685 (0x695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Validity Not Before: Dec 4 21:19:05 2025 GMT Not After : Dec 11 21:19:05 2025 GMT Subject: CN=6931fac9-101f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ae:40:5a:b8:b8:a9:1a:83:d4:e5:09:24:29: af:5e:22:ec:38:eb:ce:4f:30:54:b4:c2:73:97:a6: ed:03:c7:b3:a7:7f:c3:a1:d2:36:c3:cf:5e:86:62: fd:29:0f:55:02:1b:c7:ff:2a:7a:0b:19:5d:29:51: 53:e7:57:c0:53:e5:b0:c0:5d:13:4d:be:3b:fb:53: 8c:d9:87:c8:e8:c3:e8:30:06:ef:a4:3a:b7:ba:9c: 73:3e:80:ea:21:5a:c7:a4:82:df:1a:e4:d7:bd:1a: d9:8f:e1:cd:55:1a:aa:d4:12:53:57:ae:17:87:49: 2e:0c:ca:b8:f4:b5:3c:a8:f4:4a:b5:77:a0:ed:39: f3:62:9f:bc:2f:08:5b:7c:62:05:33:03:50:80:0a: 89:b9:7e:21:ba:fa:4c:00:e9:41:ef:f7:8f:0d:70: eb:c0:66:61:c1:02:d5:43:b9:18:d6:2d:a4:6b:fb: 0b:4d:37:82:8d:1f:e8:d6:dc:25:cb:78:ac:13:2b: 5d:68:6b:49:15:04:fe:6f:a3:e5:14:78:6c:1c:69: 30:9d:29:fd:be:52:eb:5e:c4:85:e7:40:25:d8:09: 1a:d2:cc:d3:54:26:23:15:24:19:7a:e2:72:b7:0d: ea:eb:0c:7a:12:ad:28:ce:65:c6:65:78:de:ea:b0: d0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6C:37:AB:1E:98:A5:3C:21:FC:72:47:6F:7D:FF:0B:B0:04:BE:FA X509v3 Authority Key Identifier: keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:7d:06:dc:18:b4:98:1a:4e:6e:dc:8b:5e:ed:a8:51:e6:a8: 13:cf:f0:0e:77:ea:2a:01:72:62:b8:5b:5c:94:57:26:e3:59: 1b:6d:85:5b:0a:82:46:52:4e:b6:30:5a:21:02:df:3e:25:12: c9:ba:d9:93:d7:6e:ba:a8:6b:77:bc:d5:62:6f:34:2c:99:1e: 80:a3:45:55:53:e4:7f:80:83:57:6e:1d:d7:5c:44:ba:99:e6: fd:ff:53:88:48:bc:00:3c:e1:1a:11:6e:9d:bf:96:70:be:2b: 4e:d3:e7:e9:dd:5c:4d:29:31:38:02:6e:3a:61:ec:87:17:9a: 26:94:14:d1:6d:d4:79:d2:21:91:e3:22:a0:09:eb:ec:bb:49: b5:b4:b9:5c:30:63:ea:d4:5d:52:64:2f:56:da:ef:61:ea:fa: 57:52:9e:fb:27:24:5c:dc:b1:33:51:f4:22:e9:9f:e9:6a:b3: 91:2d:60:a2:45:2f:00:3a:74:d2:e8:86:61:76:90:15:dc:fb: 5b:c6:64:a4:bf:78:e1:46:f9:83:fb:4a:80:94:e4:c9:f1:d4: 6b:3a:f0:d9:bb:fe:20:17:f5:35:c7:72:42:9d:21:a6:e1:0d: 33:50:0b:84:00:04:df:43:80:59:10:c7:4b:77:39:b5:7c:10: 10:18:29:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz MzIwODJDNTkwHhcNMjUxMjA0MjExOTA1WhcNMjUxMjExMjExOTA1WjAYMRYwFAYD VQQDEw02OTMxZmFjOS0xMDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsa5AWri4qRqD1OUJJCmvXiLsOOvOTzBUtMJzl6btA8ezp3/DodI2w89ehmL9 KQ9VAhvH/yp6CxldKVFT51fAU+WwwF0TTb47+1OM2YfI6MPoMAbvpDq3upxzPoDq IVrHpILfGuTXvRrZj+HNVRqq1BJTV64Xh0kuDMq49LU8qPRKtXeg7TnzYp+8Lwhb fGIFMwNQgAqJuX4huvpMAOlB7/ePDXDrwGZhwQLVQ7kY1i2ka/sLTTeCjR/o1twl y3isEytdaGtJFQT+b6PlFHhsHGkwnSn9vlLrXsSF50Al2Aka0szTVCYjFSQZeuJy tw3q6wx6Eq0ozmXGZXje6rDQxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtsN6se mKU8IfxyR299/wuwBL76MB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRBMy82RDYyQzhDNEEwNDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQ dEVRa1dEMzBTa2N6SUlMRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkfQbcGLSYGk5u3Ite7ahR5qgTz/AOd+oqAXJiuFtclFcm41kbbYVb CoJGUk62MFohAt8+JRLJutmT1266qGt3vNVibzQsmR6Ao0VVU+R/gINXbh3XXES6 meb9/1OISLwAPOEaEW6dv5ZwvitO0+fp3VxNKTE4Am46YeyHF5omlBTRbdR50iGR 4yKgCevsu0m1tLlcMGPq1F1SZC9W2u9h6vpXUp77JyRc3LEzUfQi6Z/parORLWCi RS8AOnTS6IZhdpAV3PtbxmSkv3jhRvmD+0qAlOTJ8dRrOvDZu/4gF/U1x3JCnSGm 4Q0zUAuEAATfQ4BZEMdLdzm1fBAQGCmM -----END CERTIFICATE-----Generated at Sat Dec 6 23:02:32 2025 by rpki-client