This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft File: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft (raw, json) Hash identifier: pa8NoKurE3cWEN+8w383vyDNSIN/Q9Wnlsa/qZMVRAI= Subject key identifier: 09:A6:AC:5B:8B:04:C9:45:D6:CB:DB:2D:17:4E:B4:25:D2:EF:96:DF Authority key identifier: E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0 Certificate issuer: /CN=A917B633/serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft Manifest number: D8 Signing time: Fri 05 Dec 2025 03:36:12 +0000 Manifest this update: Fri 05 Dec 2025 03:36:12 +0000 Manifest next update: Fri 12 Dec 2025 03:36:12 +0000 Files and hashes: 1: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl (hash: ApSwXs5BFXTJNEcZjjxgJyBrv/6S7NZQ903BG9OQmb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B633, serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0 Validity Not Before: Dec 5 03:36:12 2025 GMT Not After : Dec 12 03:36:12 2025 GMT Subject: CN=6932532c-72cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fa:4f:59:93:77:b4:52:9a:ef:40:91:9c:52: c2:ce:f9:7c:1e:14:67:b6:67:05:f1:ea:42:bc:7e: ff:ae:44:5e:16:00:8f:42:fd:8e:61:ae:6c:6d:d3: ed:e5:4e:0d:65:b0:69:b6:ed:40:96:09:e8:c0:a7: ce:f1:ab:f3:0c:d8:03:c6:d8:e1:9d:9f:60:27:c0: c5:c6:10:88:d0:db:f9:ec:ca:ab:a9:ae:ca:a4:61: 85:64:dc:fc:81:5a:1f:f9:fb:84:51:2d:87:97:5b: 6c:1b:ba:7f:85:e0:ef:b3:b4:b6:f7:48:a5:8c:ab: 41:d9:6a:cd:e3:ea:33:08:ce:1b:b0:c3:f6:2b:33: 64:6a:62:1e:85:18:24:24:4a:9d:6b:9b:eb:52:b5: b6:9e:96:40:a6:c1:62:56:95:46:23:78:56:04:08: b2:23:99:cf:60:80:d0:1f:1d:42:82:9b:75:d4:8b: cf:45:a1:54:02:92:86:ab:29:b5:37:7e:b3:28:27: 6b:5e:fe:05:68:f5:74:6f:23:75:f9:51:a2:ca:45: c3:d1:04:12:88:56:16:26:8d:06:50:54:df:b1:40: 06:04:01:aa:87:91:ab:9d:2a:3a:62:8c:55:8b:77: 35:19:a0:90:24:8b:69:05:49:7c:71:d2:34:14:cb: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A6:AC:5B:8B:04:C9:45:D6:CB:DB:2D:17:4E:B4:25:D2:EF:96:DF X509v3 Authority Key Identifier: keyid:E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:5c:cb:cb:86:42:f0:b9:40:3c:89:d8:73:79:c7:c1:69:de: e3:a2:70:fa:40:2c:2b:3d:27:7e:f9:81:59:3f:e4:31:4b:72: ac:5f:45:de:22:ce:5c:87:ed:3b:9d:9d:79:4b:bc:1e:d4:9f: bf:c7:38:54:85:97:ae:c1:52:ed:86:bf:88:35:be:81:82:9e: de:a7:ae:07:07:ef:68:5c:1b:7e:8a:85:fc:cf:38:b7:07:67: f5:aa:02:cd:a6:b8:45:33:c8:31:58:d6:e2:6a:d2:3e:eb:83: c0:f2:24:a9:79:d8:30:6a:09:60:1d:37:43:aa:f6:0e:40:ea: 3f:5e:5a:7d:ea:95:d7:19:bb:54:eb:55:05:86:3e:b2:d0:06: 6c:36:d4:aa:5d:51:bd:90:61:cd:36:70:76:3d:2d:c9:3c:65: 0a:43:a8:3c:0e:23:74:81:37:46:19:2d:1f:9e:4d:f1:75:f0: 33:e8:0b:d9:18:4d:24:59:e0:7e:8d:ac:f1:7d:55:49:40:33: af:99:f6:4a:d9:a4:59:36:f3:9b:f5:7b:68:44:ab:0e:1a:ab: 5a:26:76:45:06:65:70:4f:e6:f9:91:23:25:5e:a0:4c:a6:96: 1a:70:4c:88:b3:fc:95:c6:38:80:a7:92:c1:fa:f9:9f:9f:d0: ed:4e:87:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2MzMxMTAvBgNVBAUTKEU2MEUyMTQxRDcxREI5RkM4OUZBQkZCNUZEQUQwMzcy REZBMzM3RDAwHhcNMjUxMjA1MDMzNjEyWhcNMjUxMjEyMDMzNjEyWjAYMRYwFAYD VQQDEw02OTMyNTMyYy03MmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/pPWZN3tFKa70CRnFLCzvl8HhRntmcF8epCvH7/rkReFgCPQv2OYa5sbdPt 5U4NZbBptu1AlgnowKfO8avzDNgDxtjhnZ9gJ8DFxhCI0Nv57Mqrqa7KpGGFZNz8 gVof+fuEUS2Hl1tsG7p/heDvs7S290iljKtB2WrN4+ozCM4bsMP2KzNkamIehRgk JEqda5vrUrW2npZApsFiVpVGI3hWBAiyI5nPYIDQHx1Cgpt11IvPRaFUApKGqym1 N36zKCdrXv4FaPV0byN1+VGiykXD0QQSiFYWJo0GUFTfsUAGBAGqh5GrnSo6YoxV i3c1GaCQJItpBUl8cdI0FMubxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmmrFuL BMlF1svbLRdOtCXS75bfMB8GA1UdIwQYMBaAFOYOIUHXHbn8ifq/tf2tA3LfozfQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjYzMy9EOTE2NUVCQTg2 RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi81ZzRoUWRjZHVmeUotci0xX2EwRGN0LWpO OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVnNGhRZGNkdWZ5Si1yLTFfYTBEY3Qtak45QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjYzMy9EOTE2NUVCQTg2RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi81ZzRoUWRjZHVm eUotci0xX2EwRGN0LWpOOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgXMvLhkLwuUA8idhzecfBad7jonD6QCwrPSd++YFZP+QxS3KsX0Xe Is5ch+07nZ15S7we1J+/xzhUhZeuwVLthr+INb6Bgp7ep64HB+9oXBt+ioX8zzi3 B2f1qgLNprhFM8gxWNbiatI+64PA8iSpedgwaglgHTdDqvYOQOo/Xlp96pXXGbtU 61UFhj6y0AZsNtSqXVG9kGHNNnB2PS3JPGUKQ6g8DiN0gTdGGS0fnk3xdfAz6AvZ GE0kWeB+jazxfVVJQDOvmfZK2aRZNvOb9XtoRKsOGqtaJnZFBmVwT+b5kSMlXqBM ppYacEyIs/yVxjiAp5LB+vmfn9DtTodK -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:58 2025 by rpki-client