This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json) Hash identifier: dNL/5EESjdNmXCFw9g/68zzMCNYceRRYCVoJd8lC1tY= Subject key identifier: 48:41:DE:E1:5F:04:6D:3D:D2:33:6B:BF:2A:AF:D9:CE:77:0F:2E:21 Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft Manifest number: 0249 Signing time: Fri 05 Dec 2025 00:04:11 +0000 Manifest this update: Fri 05 Dec 2025 00:04:10 +0000 Manifest next update: Fri 12 Dec 2025 00:04:10 +0000 Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: cB/nXk4XTRwluxYQ/XhEfU1a686MV7I1+isY07gUm0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C756, serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Validity Not Before: Dec 5 00:04:10 2025 GMT Not After : Dec 12 00:04:10 2025 GMT Subject: CN=6932217b-b7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0e:84:d0:8c:ca:ec:36:29:73:44:ae:1d:24: 3f:79:31:bc:ae:15:bd:36:95:ce:b3:b5:f6:16:32: 34:f2:2c:6a:ea:38:5d:58:75:65:5a:81:b3:e9:3b: 02:cb:4a:22:25:b1:d1:ca:3c:1c:5f:20:cc:b8:30: 1f:5b:8e:70:8b:66:19:73:c3:c6:07:08:57:b1:2a: 89:b7:35:c4:a6:26:4a:ac:2a:41:b8:f0:38:b6:33: 63:5c:65:73:33:94:e5:a0:54:04:be:e6:9e:12:15: 6f:13:d4:96:5a:00:e9:82:23:97:b9:84:9a:36:c5: b1:d1:f7:03:43:b0:7b:fb:85:f1:5c:22:26:5d:59: d2:12:24:b5:91:04:00:71:85:89:ab:dd:60:28:d9: 28:84:28:6f:82:22:92:48:0c:34:b9:61:58:30:2f: 38:0c:bf:21:d1:72:f4:4b:b7:df:c4:f3:04:5b:90: ba:1b:81:55:6f:cf:44:4d:f8:d6:07:1e:05:57:a2: 9f:78:92:90:fd:a6:42:11:e9:1b:27:2d:33:da:a1: 40:a8:f7:a3:7e:99:63:63:af:f1:ce:d5:05:76:83: c1:2e:b6:07:86:73:2d:f8:f6:b0:ef:80:d7:0a:84: 86:e6:ec:50:e7:66:3a:0c:d4:83:e0:ab:ca:35:8f: b1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:41:DE:E1:5F:04:6D:3D:D2:33:6B:BF:2A:AF:D9:CE:77:0F:2E:21 X509v3 Authority Key Identifier: keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:57:e7:21:70:b9:1c:56:69:cf:c9:a9:83:9a:df:62:0e:28: eb:b9:2c:68:f0:94:ef:64:bd:9e:15:2c:a8:7b:a1:4c:3c:4f: a9:69:9c:d1:17:1d:d9:fa:00:71:51:8f:12:03:88:f1:de:b5: 65:5a:77:61:08:b5:bf:76:2c:eb:69:67:71:01:7d:12:61:c1: 60:52:56:36:5b:17:fb:66:da:d7:9b:f9:40:e4:a7:17:f7:c4: f8:5f:a1:1b:90:fb:ec:44:fe:f4:65:29:69:16:18:6a:96:01: 67:03:92:1e:41:e8:70:35:5e:95:45:63:a0:01:c4:17:fe:c0: 58:2e:5f:16:91:d0:73:e6:2d:8e:28:20:fe:02:f2:61:0a:64: 2a:95:d0:02:31:3e:10:88:e9:85:8c:c5:55:6a:9c:f8:ce:4a: f0:3f:f2:3c:74:aa:a2:82:a2:42:1b:fc:3f:bf:76:fe:79:65: 67:91:7f:16:f0:fa:88:68:c1:f1:aa:7a:74:43:29:29:6c:38: 7d:4a:d1:15:9c:f3:fe:51:67:5c:26:b8:ec:52:b5:b0:d3:ee: bf:a3:4b:f7:fe:c5:a3:d2:0e:12:cb:ab:72:25:17:fb:20:10: cd:53:e5:0a:8c:a0:82:ba:f5:ad:27:83:42:01:24:b3:16:7c: 37:70:2c:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3NTYxMTAvBgNVBAUTKEE0MkQ4OEMxMkQ2NDcxODNDNzdCRkM0QUVGODI4Q0Yy OTQ0QjlFQzYwHhcNMjUxMjA1MDAwNDEwWhcNMjUxMjEyMDAwNDEwWjAYMRYwFAYD VQQDEw02OTMyMjE3Yi1iN2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyA6E0IzK7DYpc0SuHSQ/eTG8rhW9NpXOs7X2FjI08ixq6jhdWHVlWoGz6TsC y0oiJbHRyjwcXyDMuDAfW45wi2YZc8PGBwhXsSqJtzXEpiZKrCpBuPA4tjNjXGVz M5TloFQEvuaeEhVvE9SWWgDpgiOXuYSaNsWx0fcDQ7B7+4XxXCImXVnSEiS1kQQA cYWJq91gKNkohChvgiKSSAw0uWFYMC84DL8h0XL0S7ffxPMEW5C6G4FVb89ETfjW Bx4FV6KfeJKQ/aZCEekbJy0z2qFAqPejfpljY6/xztUFdoPBLrYHhnMt+Paw74DX CoSG5uxQ52Y6DNSD4KvKNY+xvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhB3uFf BG090jNrvyqv2c53Dy4hMB8GA1UdIwQYMBaAFKQtiMEtZHGDx3v8Su+CjPKUS57G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qzc1Ni8zMzc0NTQ2RTRC NjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZUEhlX3hLNzRLTThwUkxu c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BDMkl3UzFrY1lQSGVfeEs3NEtNOHBSTG5zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qzc1Ni8zMzc0NTQ2RTRCNjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZ UEhlX3hLNzRLTThwUkxuc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2V+chcLkcVmnPyamDmt9iDijruSxo8JTvZL2eFSyoe6FMPE+paZzR Fx3Z+gBxUY8SA4jx3rVlWndhCLW/dizraWdxAX0SYcFgUlY2Wxf7ZtrXm/lA5KcX 98T4X6EbkPvsRP70ZSlpFhhqlgFnA5IeQehwNV6VRWOgAcQX/sBYLl8WkdBz5i2O KCD+AvJhCmQqldACMT4QiOmFjMVVapz4zkrwP/I8dKqigqJCG/w/v3b+eWVnkX8W 8PqIaMHxqnp0QykpbDh9StEVnPP+UWdcJrjsUrWw0+6/o0v3/sWj0g4Sy6tyJRf7 IBDNU+UKjKCCuvWtJ4NCASSzFnw3cCwQ -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:32 2025 by rpki-client