This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft File: Ak2PFao5dyF1iDou3BZQFOGSiho.mft (raw, json) Hash identifier: 0ZvoEkurvPeKPHvirYBkbuw8H+ERu39ksXbLJ39nYEk= Subject key identifier: 42:79:5F:56:B1:10:9A:08:18:12:03:8C:09:8F:56:1F:2A:A7:99:56 Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A Certificate issuer: /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft Manifest number: 37 Signing time: Sun 07 Dec 2025 01:06:45 +0000 Manifest this update: Sun 07 Dec 2025 01:06:44 +0000 Manifest next update: Sun 14 Dec 2025 01:06:44 +0000 Files and hashes: 1: Ak2PFao5dyF1iDou3BZQFOGSiho.crl (hash: PTQm7rkMaiOy+PAbkgUSLaTuAGUsgpryYXv5Ej1CuhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Validity Not Before: Dec 7 01:06:44 2025 GMT Not After : Dec 14 01:06:44 2025 GMT Subject: CN=6934d324-2830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:30:32:df:fe:d5:34:46:e3:73:74:99:59:ed: f9:59:0e:93:ca:6d:29:a8:9b:0a:1c:4a:16:c3:f3: ad:cf:7a:59:44:7d:dd:39:15:0b:27:2e:1d:72:c8: 37:40:43:b9:b3:a0:38:81:d7:80:17:43:f5:d4:3e: d0:e7:cf:1c:d3:56:3b:fe:da:b7:67:b7:6a:37:af: 6d:38:2e:aa:7c:b5:00:30:c4:2b:58:d5:b9:63:14: a9:2d:8f:82:d5:74:ad:5d:1d:d9:a0:b0:a9:25:fc: 6e:57:1a:c5:b5:06:e9:e4:33:43:a9:53:4b:5b:30: 79:0c:1b:fc:01:5d:71:ff:cd:a1:c3:d9:13:78:f4: 3b:6a:af:da:a7:bc:42:33:ab:4f:08:a2:44:6d:d0: 27:53:c2:ab:b9:e4:dc:d9:e4:7e:ea:28:f7:d6:02: 9f:d5:5e:c6:a8:d7:8c:0f:9b:37:a9:6d:c3:d5:16: 74:7d:e2:83:14:ce:3f:d2:d4:f9:0f:e0:a2:de:71: 0e:87:82:66:0b:c6:0d:f3:27:62:a7:8c:e9:cd:39: 60:71:ef:c2:60:2b:2c:f6:61:47:39:78:0c:e2:7a: 91:35:2e:c4:60:c4:b8:5a:0a:b7:7e:0f:12:be:e3: 9e:ce:b9:36:74:50:19:e5:43:04:99:d8:3c:a0:9d: 3c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:79:5F:56:B1:10:9A:08:18:12:03:8C:09:8F:56:1F:2A:A7:99:56 X509v3 Authority Key Identifier: keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:f4:17:bf:46:50:3f:d2:8f:d2:9f:99:3f:6c:1e:2d:fa:9a: a7:2d:02:5c:9c:4d:58:20:9f:ac:41:77:22:7f:ad:16:a5:32: aa:e5:e2:73:bd:dd:40:06:e3:b6:62:71:0c:da:7e:5f:b0:e9: df:06:8b:d1:dd:8c:21:1e:32:2f:3d:65:58:23:15:08:9a:ae: 50:ad:8b:8e:1c:14:a1:7a:65:a6:df:92:05:b2:08:65:bb:fa: 86:c2:6d:be:25:46:87:3e:a5:fd:37:2f:02:fc:32:d3:0f:1c: 42:66:e7:05:31:99:87:b3:87:85:60:c7:1b:cc:b1:b0:56:cc: 12:ef:63:67:98:fd:cb:e6:fe:db:cc:a9:8f:e6:0b:9e:d4:6a: ee:c7:24:ab:a7:2d:b4:0e:a8:88:1d:2d:33:2e:49:ce:f8:98: b8:13:ba:62:ff:a3:b3:ea:8d:81:d0:3e:fe:83:2b:c2:bb:91: b0:ed:84:0f:ee:ca:43:72:76:0d:e3:2b:26:69:d9:83:97:ef: 08:1d:b5:31:af:b1:31:97:fb:6c:19:fc:e0:ea:dd:69:b9:73: 97:4b:6b:e8:42:33:57:71:14:dc:52:9e:f0:38:02:db:96:38: e3:63:61:f4:48:2f:c4:d4:41:1c:64:bd:c7:7e:19:ad:93:fc: 4c:84:1c:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjUyMDExMC8GA1UEBRMoMDI0RDhGMTVBQTM5NzcyMTc1ODgzQTJFREMxNjUwMTRF MTkyOEExQTAeFw0yNTEyMDcwMTA2NDRaFw0yNTEyMTQwMTA2NDRaMBgxFjAUBgNV BAMTDTY5MzRkMzI0LTI4MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQMDLf/tU0RuNzdJlZ7flZDpPKbSmomwocShbD863PellEfd05FQsnLh1yyDdA Q7mzoDiB14AXQ/XUPtDnzxzTVjv+2rdnt2o3r204Lqp8tQAwxCtY1bljFKktj4LV dK1dHdmgsKkl/G5XGsW1BunkM0OpU0tbMHkMG/wBXXH/zaHD2RN49Dtqr9qnvEIz q08IokRt0CdTwqu55NzZ5H7qKPfWAp/VXsao14wPmzepbcPVFnR94oMUzj/S1PkP 4KLecQ6HgmYLxg3zJ2KnjOnNOWBx78JgKyz2YUc5eAziepE1LsRgxLhaCrd+DxK+ 457OuTZ0UBnlQwSZ2DygnTzvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQnlfVrEQ mggYEgOMCY9WHyqnmVYwHwYDVR0jBBgwFoAUAk2PFao5dyF1iDou3BZQFOGSihow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNTIwLzRBMTJBMzNDODJG NDExRjA5Qjc0MzU0RUM0RjlBRTAyL0FrMlBGYW81ZHlGMWlEb3UzQlpRRk9HU2lo by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvQWsyUEZhbzVkeUYxaURvdTNCWlFGT0dTaWhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC NTIwLzRBMTJBMzNDODJGNDExRjA5Qjc0MzU0RUM0RjlBRTAyL0FrMlBGYW81ZHlG MWlEb3UzQlpRRk9HU2loby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADL0F79GUD/Sj9KfmT9sHi36mqctAlycTVggn6xBdyJ/rRalMqrl4nO9 3UAG47ZicQzafl+w6d8Gi9HdjCEeMi89ZVgjFQiarlCti44cFKF6ZabfkgWyCGW7 +obCbb4lRoc+pf03LwL8MtMPHEJm5wUxmYezh4VgxxvMsbBWzBLvY2eY/cvm/tvM qY/mC57Uau7HJKunLbQOqIgdLTMuSc74mLgTumL/o7PqjYHQPv6DK8K7kbDthA/u ykNydg3jKyZp2YOX7wgdtTGvsTGX+2wZ/ODq3Wm5c5dLa+hCM1dxFNxSnvA4AtuW OONjYfRIL8TUQRxkvcd+Ga2T/EyEHHk= -----END CERTIFICATE-----Generated at Sun Dec 7 02:55:15 2025 by rpki-client