This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft File: i6r6xGXwjQR9LXCUulKA19OYg2Y.mft (raw, json) Hash identifier: F26OsjRdpUtX+TGOC9koovE+ZwHy2T3v9GFlgrHc0Ps= Subject key identifier: E2:95:80:96:59:D1:E6:BF:DC:8D:D5:A1:97:D1:BF:D7:CD:7A:82:2C Authority key identifier: 8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66 Certificate issuer: /CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft Manifest number: 0448 Signing time: Thu 04 Dec 2025 23:46:26 +0000 Manifest this update: Thu 04 Dec 2025 23:46:25 +0000 Manifest next update: Thu 11 Dec 2025 23:46:25 +0000 Files and hashes: 1: i6r6xGXwjQR9LXCUulKA19OYg2Y.crl (hash: XevmOaWUeA0qBVb5aoX1HMeMEEbEan9GFhDgcsrxBQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366 Validity Not Before: Dec 4 23:46:25 2025 GMT Not After : Dec 11 23:46:25 2025 GMT Subject: CN=69321d52-cddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:32:8e:b0:0a:b1:82:97:95:54:22:17:86:7a: f8:d2:3a:48:a5:26:ec:d5:e3:cd:0c:27:d8:5f:3f: 6f:5d:35:3d:01:03:75:ca:90:c0:81:8b:1a:4a:94: 6c:33:75:01:99:2d:bd:d8:7c:01:a6:57:97:1c:52: 16:15:ae:c8:8f:9d:75:6a:51:74:47:11:ab:a0:0b: 98:cd:46:76:09:6b:c2:86:e3:cf:6d:5f:18:09:2f: 68:23:33:4e:78:ca:54:f5:49:38:45:71:05:ae:0e: 72:fb:ae:d6:db:6a:5d:86:c5:a6:96:a8:c3:2f:f8: 8a:f8:04:82:ff:b3:b5:94:d9:77:ae:31:bb:e1:e4: b7:48:d3:14:6e:d2:87:c0:0f:4c:55:f2:77:41:d8: 9e:02:c6:44:fb:44:f8:5d:60:5c:ba:cf:d3:74:74: b4:cc:24:1f:b2:13:7a:b4:bd:d1:0f:9a:29:2d:48: 81:c2:8f:06:ab:83:2e:83:31:02:ff:e3:99:24:39: b7:96:79:37:57:d8:f1:67:2b:78:e0:42:7b:47:35: 92:a7:88:de:b1:e3:f2:6f:dd:1b:a8:32:25:c3:49: 98:57:b2:dc:a4:43:3c:7c:f5:f7:e6:6f:ae:68:c9: 1b:03:a1:c1:73:9e:cd:d0:55:27:50:ff:48:20:e8: bd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:95:80:96:59:D1:E6:BF:DC:8D:D5:A1:97:D1:BF:D7:CD:7A:82:2C X509v3 Authority Key Identifier: keyid:8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:27:7a:62:12:05:af:bd:99:38:56:b4:50:68:c8:24:d4:56: 8c:f3:a4:1f:78:54:ef:f8:37:27:87:05:58:b3:9d:45:d8:10: 29:a2:77:e5:2c:ea:22:5b:42:3c:0e:80:99:86:77:67:57:7b: 89:f9:c5:03:c4:5c:e4:3c:95:72:4c:9e:dc:b5:77:28:d6:c4: 8e:54:f3:2c:90:20:4d:4e:e0:aa:ef:55:9e:9c:c8:70:17:2d: e6:80:a6:0a:11:ab:f0:5e:62:6d:28:c8:b7:69:1a:72:53:66: e2:25:ca:70:25:7a:64:e0:53:9a:ad:45:56:db:f0:ae:af:a2: 8a:8e:b1:66:4a:87:9b:87:99:d8:c9:da:7f:f4:48:b4:fd:04: af:dd:6b:8c:a8:9c:89:da:7b:19:93:2a:9a:42:09:1c:44:2c: 04:38:2e:d0:0c:ba:1c:8e:1a:f5:0a:6e:94:3c:4d:3a:07:17: 1c:53:e2:f1:31:4b:f0:0c:18:db:ce:32:00:c4:55:b1:d5:7d: 20:3b:33:26:e3:0b:03:87:89:b4:2c:c7:f1:58:4c:0d:79:7c: 40:85:78:e3:95:92:84:32:bb:1b:c1:af:3a:33:77:5c:7b:ca: c9:70:9c:0a:1b:f8:d1:2b:bb:0f:35:75:a4:02:aa:9f:de:96: aa:57:6b:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDhCQUFGQUM0NjVGMDhEMDQ3RDJENzA5NEJBNTI4MEQ3 RDM5ODgzNjYwHhcNMjUxMjA0MjM0NjI1WhcNMjUxMjExMjM0NjI1WjAYMRYwFAYD VQQDEw02OTMyMWQ1Mi1jZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jKOsAqxgpeVVCIXhnr40jpIpSbs1ePNDCfYXz9vXTU9AQN1ypDAgYsaSpRs M3UBmS292HwBpleXHFIWFa7Ij511alF0RxGroAuYzUZ2CWvChuPPbV8YCS9oIzNO eMpU9Uk4RXEFrg5y+67W22pdhsWmlqjDL/iK+ASC/7O1lNl3rjG74eS3SNMUbtKH wA9MVfJ3QdieAsZE+0T4XWBcus/TdHS0zCQfshN6tL3RD5opLUiBwo8Gq4MugzEC /+OZJDm3lnk3V9jxZyt44EJ7RzWSp4jesePyb90bqDIlw0mYV7LcpEM8fPX35m+u aMkbA6HBc57N0FUnUP9IIOi9lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKVgJZZ 0ea/3I3VoZfRv9fNeoIsMB8GA1UdIwQYMBaAFIuq+sRl8I0EfS1wlLpSgNfTmINm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9pNnI2eEdYd2pRUjlMWENVdWxLQTE5T1ln MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2cjZ4R1h3alFSOUxYQ1V1bEtBMTlPWWcyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9pNnI2eEdYd2pR UjlMWENVdWxLQTE5T1lnMlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABJ3piEgWvvZk4VrRQaMgk1FaM86QfeFTv+DcnhwVYs51F2BAponfl LOoiW0I8DoCZhndnV3uJ+cUDxFzkPJVyTJ7ctXco1sSOVPMskCBNTuCq71WenMhw Fy3mgKYKEavwXmJtKMi3aRpyU2biJcpwJXpk4FOarUVW2/Cur6KKjrFmSoebh5nY ydp/9Ei0/QSv3WuMqJyJ2nsZkyqaQgkcRCwEOC7QDLocjhr1Cm6UPE06BxccU+Lx MUvwDBjbzjIAxFWx1X0gOzMm4wsDh4m0LMfxWEwNeXxAhXjjlZKEMrsbwa86M3dc e8rJcJwKG/jRK7sPNXWkAqqf3paqV2t5 -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:36 2025 by rpki-client