This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft File: CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json) Hash identifier: csarZeuiC1+tGN1OMG2BLv5DxwHIjjcUwpDWHaDt3fQ= Subject key identifier: 68:92:0F:29:53:A9:14:97:16:D9:67:53:CB:5E:D9:EE:80:7D:06:F4 Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA Certificate issuer: /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft Manifest number: 5F Signing time: Fri 05 Dec 2025 04:57:51 +0000 Manifest this update: Fri 05 Dec 2025 04:57:50 +0000 Manifest next update: Fri 12 Dec 2025 04:57:50 +0000 Files and hashes: 1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: NZYeFb/SxjUpsByXed+IrimhP9GHchtxetLOyFZ6UCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Validity Not Before: Dec 5 04:57:50 2025 GMT Not After : Dec 12 04:57:50 2025 GMT Subject: CN=6932664f-d141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d2:a9:e6:a8:c0:e5:ad:cb:d4:02:4b:18:f6: ed:fd:9b:fd:43:bf:5c:6e:aa:81:87:7b:ba:5d:d4: 25:e2:fc:14:2d:9d:4c:cc:34:1a:54:98:fc:eb:11: 69:ae:fd:4a:f5:b2:00:1e:29:d8:38:21:a0:9f:1c: 40:81:9c:74:6e:ad:d1:fe:49:85:13:21:64:1f:b7: 12:76:91:8f:47:9d:18:ed:37:88:dc:f6:d2:92:7c: 49:99:94:8b:46:47:2e:6a:7e:dc:76:fd:88:90:90: 50:87:98:7f:2b:48:6a:b8:4b:57:b7:93:ce:2e:cb: 8f:a6:5e:82:be:b3:3e:71:1c:1c:c0:60:05:70:8d: 01:d2:b0:23:02:62:b8:ed:4a:7a:29:fe:04:ec:d3: 6d:85:21:d3:35:8f:a6:e7:90:30:f8:8f:27:a1:80: 0b:de:7e:ef:85:91:37:98:6a:65:5b:ca:48:43:26: 08:53:0f:5e:c4:47:62:29:a6:71:f7:fc:4e:6f:28: fe:ce:9f:56:38:4b:4c:01:3f:37:28:c7:51:1c:21: 26:d5:b9:a3:a1:be:f1:a0:c7:24:a6:d6:16:a7:8b: d2:9e:24:1c:94:57:d4:7b:df:2b:69:6d:d4:92:84: 13:cc:fd:fa:b2:13:f0:05:99:f2:9f:c8:a1:99:3b: 60:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:92:0F:29:53:A9:14:97:16:D9:67:53:CB:5E:D9:EE:80:7D:06:F4 X509v3 Authority Key Identifier: keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:50:64:e0:c5:6e:ca:85:52:f1:aa:8a:dc:6c:b1:a3:4e:0c: 36:8b:24:9b:b1:61:7c:49:e1:f6:ba:83:f7:1e:91:28:d2:08: ac:1c:c0:0f:a2:76:02:d2:cc:36:10:ab:86:dc:77:fc:da:ad: 46:c8:ba:da:c4:b6:0e:ea:7d:e6:5f:ac:a6:36:e4:c5:0a:43: fb:fb:bd:89:1f:47:3c:4c:02:02:76:33:68:4a:a2:6b:63:70: 22:15:d7:b3:8d:fb:89:fd:f9:bd:1a:ae:61:55:a4:2e:71:03: 90:8f:d7:66:fc:1e:61:05:f1:f7:98:f4:d3:27:2c:20:74:77: 27:86:a4:8e:87:e9:72:47:81:fb:dc:98:cb:14:12:45:9f:36: e4:64:82:92:d1:2b:b1:b9:7b:2b:6b:cd:83:ea:ad:97:d9:4a: 71:ce:8a:89:89:a9:9a:6a:c5:f2:79:db:40:c0:60:c7:1a:75: 68:31:0a:c6:6d:78:47:36:ff:db:9b:2e:b4:cd:c7:3f:6c:62: 83:9d:2c:d8:b5:b9:f5:7c:ce:9e:94:2d:29:e1:0f:7e:65:8d: d4:10:37:39:91:8a:db:8b:5a:2d:b9:16:1e:18:89:9e:fc:43: f1:a7:40:f0:a5:a2:d7:5e:e2:11:56:8a:56:ee:99:54:15:f9: 67:11:b6:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEM3QTExMC8GA1UEBRMoMDkxMTExNkZDMzhFOTVERjU5MTYzN0Q4QzY2NEI0NUZC MTZGNEJEQTAeFw0yNTEyMDUwNDU3NTBaFw0yNTEyMTIwNDU3NTBaMBgxFjAUBgNV BAMTDTY5MzI2NjRmLWQxNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDk0qnmqMDlrcvUAksY9u39m/1Dv1xuqoGHe7pd1CXi/BQtnUzMNBpUmPzrEWmu /Ur1sgAeKdg4IaCfHECBnHRurdH+SYUTIWQftxJ2kY9HnRjtN4jc9tKSfEmZlItG Ry5qftx2/YiQkFCHmH8rSGq4S1e3k84uy4+mXoK+sz5xHBzAYAVwjQHSsCMCYrjt Snop/gTs022FIdM1j6bnkDD4jyehgAvefu+FkTeYamVbykhDJghTD17ER2IppnH3 /E5vKP7On1Y4S0wBPzcox1EcISbVuaOhvvGgxySm1hani9KeJByUV9R73ytpbdSS hBPM/fqyE/AFmfKfyKGZO2DBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaJIPKVOp FJcW2WdTy17Z7oB9BvQwHwYDVR0jBBgwFoAUCRERb8OOld9ZFjfYxmS0X7FvS9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0QzdBLzRERjE2REQwNDA0 NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5WkZqZll4bVMwWDdGdlM5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1JFUmI4T09sZDlaRmpmWXhtUzBYN0Z2UzlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 QzdBLzRERjE2REQwNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5 WkZqZll4bVMwWDdGdlM5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHVQZODFbsqFUvGqitxssaNODDaLJJuxYXxJ4fa6g/cekSjSCKwcwA+i dgLSzDYQq4bcd/zarUbIutrEtg7qfeZfrKY25MUKQ/v7vYkfRzxMAgJ2M2hKomtj cCIV17ON+4n9+b0armFVpC5xA5CP12b8HmEF8feY9NMnLCB0dyeGpI6H6XJHgfvc mMsUEkWfNuRkgpLRK7G5eytrzYPqrZfZSnHOiomJqZpqxfJ520DAYMcadWgxCsZt eEc2/9ubLrTNxz9sYoOdLNi1ufV8zp6ULSnhD35ljdQQNzmRituLWi25Fh4YiZ78 Q/GnQPClotde4hFWilbumVQV+WcRtl0= -----END CERTIFICATE-----Generated at Sat Dec 6 13:07:21 2025 by rpki-client