This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft File: 67hSKipPZGizmgkPciqw63Doi4I.mft (raw, json) Hash identifier: 1wtR0ib8Rpli4IUli8J86k8+ldhu2X/g9NvIgv02HEU= Subject key identifier: 46:FD:98:D5:44:A2:1D:DD:3E:17:9A:5C:95:4C:A0:AC:93:98:A3:52 Authority key identifier: EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82 Certificate issuer: /CN=A917E27F/serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft Manifest number: 40 Signing time: Fri 05 Dec 2025 05:18:03 +0000 Manifest this update: Fri 05 Dec 2025 05:18:02 +0000 Manifest next update: Fri 12 Dec 2025 05:18:02 +0000 Files and hashes: 1: 67hSKipPZGizmgkPciqw63Doi4I.crl (hash: /WtY4hPanDclXz9mA+hATCp+YTT3YeHyxOwd7R4KZAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E27F, serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82 Validity Not Before: Dec 5 05:18:02 2025 GMT Not After : Dec 12 05:18:02 2025 GMT Subject: CN=69326b0b-72d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:61:c5:13:fe:f4:34:5b:d0:2a:43:a3:a2: 80:78:61:da:6d:17:7c:80:e1:0d:31:2f:e0:2a:ac: 87:6b:4b:3b:fd:51:6d:5c:a3:ed:2f:5f:e8:c1:16: 0a:fc:59:b3:b7:b1:4e:ce:07:9b:cd:33:5a:10:42: 33:54:9a:5b:52:e7:f0:d6:d6:b5:19:0f:1c:2a:b8: 9e:3d:1c:0f:9b:c7:3a:0b:5e:dc:5e:bc:6f:5b:bb: 98:9c:ce:60:08:bb:e1:57:64:df:d7:06:6e:e4:4d: f7:dd:8d:3e:ab:41:9f:05:e6:f1:ce:b5:97:4a:3b: f0:10:72:40:95:5a:4a:b1:91:8e:da:d6:24:5e:f4: 11:ec:c4:44:73:f4:c4:24:70:b8:fb:37:b8:ee:32: a4:b3:82:ad:13:90:40:48:73:e8:28:15:c3:f5:79: af:73:84:93:4f:00:b3:e8:2c:91:cb:60:93:e8:57: 3e:ce:8c:49:ca:39:26:63:40:b6:74:58:ca:eb:9c: cb:d3:1f:57:d2:f2:45:1c:d1:27:97:c4:00:d4:b7: 2a:49:00:df:2a:23:d9:fd:a8:3a:e6:f1:c8:1b:3b: 27:a4:4e:9a:bf:9e:d4:43:5e:c4:12:ad:dc:76:71: 89:cc:7e:16:1c:ba:1a:9e:8b:33:52:51:57:c3:b4: ba:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FD:98:D5:44:A2:1D:DD:3E:17:9A:5C:95:4C:A0:AC:93:98:A3:52 X509v3 Authority Key Identifier: keyid:EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:ba:1f:0a:c6:79:fe:5d:40:76:39:a0:ec:5d:62:42:1d:9e: 28:e7:cb:bd:7c:46:99:9f:6f:47:8a:6a:9d:55:22:c3:fc:c1: f9:70:6c:8d:59:a2:27:2c:af:9f:7e:7e:ef:cb:5d:10:b6:40: 33:2a:7a:e0:07:13:e4:4d:17:5a:a4:0f:fa:cb:ab:71:ee:b0: 77:6d:c9:24:e1:7d:ed:57:13:63:d1:73:e6:f1:73:8e:22:e6: a4:a2:0d:d3:39:ed:55:71:18:02:80:64:59:58:cd:3c:11:af: 97:39:42:f1:49:10:dc:bc:71:81:91:5e:8c:ba:9b:d1:26:ce: 40:4b:0a:9c:59:c2:57:4a:3c:92:bc:b8:91:07:e2:c8:c9:29: ce:09:58:ec:1b:af:7f:27:a1:7a:35:56:37:ea:95:31:57:4e: ef:9d:fa:06:b7:e8:2b:07:f2:c4:1b:e2:fb:d6:37:12:e7:22: 6d:bb:a4:a4:c4:c9:25:f0:78:5b:a3:c7:20:72:b5:b6:f0:b3: 88:c5:53:3c:61:c7:2e:ad:35:9d:49:0f:8b:71:e6:92:24:3b: 10:0b:34:12:b8:79:a5:aa:a2:aa:eb:02:ec:eb:d0:3e:a8:97: fb:59:61:24:db:13:48:cd:22:d4:8a:3c:12:89:57:ba:5a:bb: b2:63:49:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTI3RjExMC8GA1UEBRMoRUJCODUyMkEyQTRGNjQ2OEIzOUEwOTBGNzIyQUIwRUI3 MEU4OEI4MjAeFw0yNTEyMDUwNTE4MDJaFw0yNTEyMTIwNTE4MDJaMBgxFjAUBgNV BAMTDTY5MzI2YjBiLTcyZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtPGHFE/70NFvQKkOjooB4YdptF3yA4Q0xL+AqrIdrSzv9UW1co+0vX+jBFgr8 WbO3sU7OB5vNM1oQQjNUmltS5/DW1rUZDxwquJ49HA+bxzoLXtxevG9bu5iczmAI u+FXZN/XBm7kTffdjT6rQZ8F5vHOtZdKO/AQckCVWkqxkY7a1iRe9BHsxERz9MQk cLj7N7juMqSzgq0TkEBIc+goFcP1ea9zhJNPALPoLJHLYJPoVz7OjEnKOSZjQLZ0 WMrrnMvTH1fS8kUc0SeXxADUtypJAN8qI9n9qDrm8cgbOyekTpq/ntRDXsQSrdx2 cYnMfhYcuhqeizNSUVfDtLo5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURv2Y1USi Hd0+F5pclUygrJOYo1IwHwYDVR0jBBgwFoAU67hSKipPZGizmgkPciqw63Doi4Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMjdGLzdGNzVDMjE4NzJC NzExRjA5QzA0NjkwREM0RjlBRTAyLzY3aFNLaXBQWkdpem1na1BjaXF3NjNEb2k0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjdoU0tpcFBaR2l6bWdrUGNpcXc2M0RvaTRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MjdGLzdGNzVDMjE4NzJCNzExRjA5QzA0NjkwREM0RjlBRTAyLzY3aFNLaXBQWkdp em1na1BjaXF3NjNEb2k0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHK6HwrGef5dQHY5oOxdYkIdnijny718Rpmfb0eKap1VIsP8wflwbI1Z oicsr59+fu/LXRC2QDMqeuAHE+RNF1qkD/rLq3HusHdtySThfe1XE2PRc+bxc44i 5qSiDdM57VVxGAKAZFlYzTwRr5c5QvFJENy8cYGRXoy6m9EmzkBLCpxZwldKPJK8 uJEH4sjJKc4JWOwbr38noXo1VjfqlTFXTu+d+ga36CsH8sQb4vvWNxLnIm27pKTE ySXweFujxyBytbbws4jFUzxhxy6tNZ1JD4tx5pIkOxALNBK4eaWqoqrrAuzr0D6o l/tZYSTbE0jNItSKPBKJV7pau7JjSZ0= -----END CERTIFICATE-----Generated at Sat Dec 6 16:09:59 2025 by rpki-client