This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json) Hash identifier: R7DOKwApAygdQ1iQKPjfmr9VKEGwKpjCxB0hqGe1ekM= Subject key identifier: 8B:65:E0:74:29:46:1D:04:5F:FB:2A:1E:50:EA:2E:2A:83:81:89:37 Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Certificate serial: 09A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft Manifest number: 099E Signing time: Thu 04 Dec 2025 19:15:53 +0000 Manifest this update: Thu 04 Dec 2025 19:15:52 +0000 Manifest next update: Thu 11 Dec 2025 19:15:52 +0000 Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: 6GtjUtq6Wyq1W2W2JC5MwRLAF5PLByMz27z11XBjn8w=) 2: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 4zTT34lM7O6gFPRhXB1r+qunYynBSeEm8n99il9hQxc=) 3: CB91083CA63511EA900DB923C4F9AE02.roa (hash: 1guI2gXzSQT5STi81CKAucU8Uim1y9wn0ld7tOI9/tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2471 (0x9a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Validity Not Before: Dec 4 19:15:52 2025 GMT Not After : Dec 11 19:15:52 2025 GMT Subject: CN=6931dde9-aec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f1:e3:c7:e3:a2:b0:45:06:8b:41:08:d8:58: 8f:73:9a:24:99:2b:db:3a:f7:db:aa:ce:54:ce:e3: fd:bc:8f:e6:0e:e6:ad:d4:f1:33:93:9c:d2:eb:1e: d1:db:b0:c8:43:74:2b:8c:74:f7:e8:70:d1:42:86: 4c:1e:c2:56:ff:e5:2a:d0:9e:a8:26:ba:2a:aa:b1: 9e:a9:61:c6:91:68:46:ac:01:3f:0b:98:fa:fa:b0: 95:cf:61:96:c9:53:e0:96:92:56:6b:11:25:75:44: 63:d2:89:e5:06:bb:cc:48:f2:57:ca:f8:77:61:be: a7:83:04:5a:64:c9:a7:3b:48:f8:de:af:ac:19:34: d9:23:21:09:db:ad:e0:09:2a:04:86:b7:5f:3b:d9: 36:f9:12:fd:9b:21:ac:cf:ff:cc:e4:b8:19:50:c1: 2a:4c:e9:d3:97:72:b2:98:e4:84:06:7d:6f:9b:4d: 41:af:9d:7a:b3:06:1b:2f:cb:ea:31:11:10:03:8e: 61:9c:3b:02:47:38:1e:ac:9e:3b:cf:88:c7:1e:c4: 57:04:36:1d:af:10:6e:98:49:8e:e6:30:b9:62:2c: 68:08:64:e8:58:cd:e4:26:47:80:55:02:a9:56:fe: 18:09:99:74:71:30:57:b7:e4:eb:96:ac:4f:29:d8: 90:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:65:E0:74:29:46:1D:04:5F:FB:2A:1E:50:EA:2E:2A:83:81:89:37 X509v3 Authority Key Identifier: keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:a4:e9:ab:de:7e:1b:25:7f:02:1f:db:06:dd:db:bb:d9:cb: 60:34:09:19:83:8a:cc:81:cd:c3:bc:ae:f6:fd:c8:fa:79:71: f0:10:c2:a3:2b:17:5a:a6:b1:31:02:ef:ab:c1:ef:7b:17:18: 74:20:4d:88:90:8b:4b:25:e3:cf:d8:dd:78:85:bb:d1:da:0c: 53:0c:3d:36:5b:19:07:dd:e5:d5:ad:e9:6a:e1:09:4d:51:0e: 2c:5c:4a:a2:48:8a:b6:67:40:39:43:7c:b7:38:c2:01:23:3d: 33:21:df:39:77:83:b5:6c:44:66:43:72:67:e1:23:51:29:75: fa:6a:c0:d7:bd:ce:cf:02:30:31:ae:1e:b9:33:86:28:c2:14: d5:c0:9c:a9:1c:c8:01:81:02:39:41:c3:1e:66:87:da:cc:75: 0e:f5:a2:ca:96:59:5e:ea:60:7b:83:b9:b3:14:bd:14:c1:07: dd:3c:d4:27:5a:f3:a6:51:66:6e:fd:b4:e8:15:6b:3b:26:6b: c3:58:05:a9:13:04:34:2d:07:71:d5:ad:4c:6a:01:74:6c:fa: 88:95:06:86:94:e5:6d:00:fe:c6:24:01:c0:9d:a9:21:8e:4e: f5:e1:57:dc:dc:ce:65:2b:04:bb:d0:9c:c8:42:25:0a:a8:37: f3:d7:9c:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxODUxMTAvBgNVBAUTKEFFNDcxOEU1RjMyRjAwNEEwMzEyRkVCODY5QURDQkJD QzRFRUU1MTYwHhcNMjUxMjA0MTkxNTUyWhcNMjUxMjExMTkxNTUyWjAYMRYwFAYD VQQDEw02OTMxZGRlOS1hZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8/Hjx+OisEUGi0EI2FiPc5okmSvbOvfbqs5UzuP9vI/mDuat1PEzk5zS6x7R 27DIQ3QrjHT36HDRQoZMHsJW/+Uq0J6oJroqqrGeqWHGkWhGrAE/C5j6+rCVz2GW yVPglpJWaxEldURj0onlBrvMSPJXyvh3Yb6ngwRaZMmnO0j43q+sGTTZIyEJ263g CSoEhrdfO9k2+RL9myGsz//M5LgZUMEqTOnTl3KymOSEBn1vm01Br516swYbL8vq MREQA45hnDsCRzgerJ47z4jHHsRXBDYdrxBumEmO5jC5YixoCGToWM3kJkeAVQKp Vv4YCZl0cTBXt+TrlqxPKdiQQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItl4HQp Rh0EX/sqHlDqLiqDgYk3MB8GA1UdIwQYMBaAFK5HGOXzLwBKAxL+uGmty7zE7uUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzE4NS8yMDIyNzZCQTlC RkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFFb0RFdjY0YWEzTHZNVHU1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrY1k1Zk12QUVvREV2NjRhYTNMdk1UdTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzE4NS8yMDIyNzZCQTlCRkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFF b0RFdjY0YWEzTHZNVHU1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFpOmr3n4bJX8CH9sG3du72ctgNAkZg4rMgc3DvK72/cj6eXHwEMKj KxdaprExAu+rwe97Fxh0IE2IkItLJePP2N14hbvR2gxTDD02WxkH3eXVrelq4QlN UQ4sXEqiSIq2Z0A5Q3y3OMIBIz0zId85d4O1bERmQ3Jn4SNRKXX6asDXvc7PAjAx rh65M4YowhTVwJypHMgBgQI5QcMeZofazHUO9aLKllle6mB7g7mzFL0UwQfdPNQn WvOmUWZu/bToFWs7JmvDWAWpEwQ0LQdx1a1MagF0bPqIlQaGlOVtAP7GJAHAnakh jk714Vfc3M5lKwS70JzIQiUKqDfz15xd -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:46 2025 by rpki-client