This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft File: t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft (raw, json) Hash identifier: VQwS/bBDm4HKQ3xGB6DfAaIdq6+asPnFRaYbrgr4mBg= Subject key identifier: 9A:9B:95:B3:B4:54:DC:1F:80:12:CB:01:96:9D:B7:63:2B:22:F4:F2 Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 Certificate issuer: /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft Manifest number: 0160 Signing time: Fri 05 Dec 2025 02:10:54 +0000 Manifest this update: Fri 05 Dec 2025 02:10:54 +0000 Manifest next update: Fri 12 Dec 2025 02:10:54 +0000 Files and hashes: 1: t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl (hash: FiyVQSAcy/hpxg/IRPXjBKKsMh5MXWstOFFyerV6UUY=) 2: 18F9209CB55411EEAD96E873C4F9AE02.roa (hash: 5qovDHOan50hnf/FjfnVrN4jiM2XyUgRA/JNpM3f5Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918897A, serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Validity Not Before: Dec 5 02:10:54 2025 GMT Not After : Dec 12 02:10:54 2025 GMT Subject: CN=69323f2e-ba06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:14:b3:d5:28:a4:16:3c:87:7a:24:12:5f: 15:5f:72:04:51:ae:21:1b:35:17:d8:1b:64:3c:fe: 09:56:ae:1b:64:44:16:b7:d3:21:5e:d0:0c:8e:46: 08:82:95:3b:4d:b6:03:c0:e6:82:96:d2:5a:68:f4: 68:ad:6a:6c:8f:1e:1a:27:78:5b:44:23:cc:23:7d: 13:98:d0:dd:08:98:83:4b:5e:28:d5:24:b9:10:ed: 07:57:44:7a:0f:d2:0f:8c:9f:26:20:7e:9a:0c:9a: c7:94:e1:bf:db:7e:47:8d:fc:18:22:f7:3c:16:d0: a8:da:14:f6:68:9b:a2:f3:84:55:dc:ea:98:4d:55: 05:9b:1d:cb:9b:5d:87:1b:7a:ca:ff:11:d4:1b:ff: db:08:96:a9:0d:5d:c5:1d:ba:e5:f8:b1:3f:54:37: 2b:0a:42:80:0c:69:8b:e8:81:77:4d:bb:98:ba:e2: c8:02:00:d0:34:c1:6a:97:2e:56:76:1f:e1:55:db: 64:d7:1b:35:9f:e5:2f:d4:62:b0:39:3d:2d:3d:8b: a8:be:4a:c0:b9:c6:ab:69:c4:80:0c:36:99:95:78: 47:a3:10:ac:46:61:03:32:dd:1c:c5:5d:0a:6d:8f: a5:d0:1f:f7:8a:5a:83:bf:64:13:f2:53:10:ef:2e: d8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9B:95:B3:B4:54:DC:1F:80:12:CB:01:96:9D:B7:63:2B:22:F4:F2 X509v3 Authority Key Identifier: keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6c:93:6e:e6:7b:e0:08:8e:31:1a:6b:0e:72:98:ea:70:67: 88:ba:e3:a4:37:50:0f:0f:f4:b1:0a:fd:20:12:11:a5:94:23: b6:72:0e:6f:d8:f6:ef:83:0d:8d:ef:cc:ba:46:18:4c:b2:a6: 92:8c:bb:88:4e:45:94:ce:d9:06:54:e3:cc:68:e4:b3:ae:01: 9b:5c:54:94:6c:9b:96:32:19:50:37:84:5c:4c:91:e4:48:73: 7e:2a:91:fd:26:ea:f9:a8:b3:e2:ac:cd:b7:ca:fc:09:86:89: 02:6e:04:7e:14:d4:35:1b:8c:0a:5f:63:24:c5:86:4b:3c:a6: d6:c3:24:e7:6d:68:d2:91:09:6d:31:de:b3:2c:6b:e5:26:f6: 5a:4e:43:56:78:27:f4:08:5e:b4:c0:c9:06:d2:3a:5f:e8:5b: 22:80:8b:d7:71:8c:c7:05:2d:91:9f:b9:f6:49:54:24:8a:10: 86:58:5d:ff:c8:ce:fa:ed:15:86:4d:ef:32:fe:8a:12:c1:c4: ff:47:74:86:3c:7f:b3:02:01:02:3a:f7:e6:05:ae:af:eb:83: 72:15:8c:83:8b:d9:08:03:b2:91:93:83:d5:be:ea:97:2f:0e: b2:fc:7c:78:53:48:db:73:3a:5d:5a:25:cc:d0:da:ab:5f:57: ca:52:8c:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5N0ExMTAvBgNVBAUTKEI3RkE1MTIxNUJCNUMxRUY4OEVBRTE1RjAzNDMxM0Qx QjcxQjhENDQwHhcNMjUxMjA1MDIxMDU0WhcNMjUxMjEyMDIxMDU0WjAYMRYwFAYD VQQDEw02OTMyM2YyZS1iYTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx78Us9UopBY8h3okEl8VX3IEUa4hGzUX2BtkPP4JVq4bZEQWt9MhXtAMjkYI gpU7TbYDwOaCltJaaPRorWpsjx4aJ3hbRCPMI30TmNDdCJiDS14o1SS5EO0HV0R6 D9IPjJ8mIH6aDJrHlOG/235HjfwYIvc8FtCo2hT2aJui84RV3OqYTVUFmx3Lm12H G3rK/xHUG//bCJapDV3FHbrl+LE/VDcrCkKADGmL6IF3TbuYuuLIAgDQNMFqly5W dh/hVdtk1xs1n+Uv1GKwOT0tPYuovkrAucaracSADDaZlXhHoxCsRmEDMt0cxV0K bY+l0B/3ilqDv2QT8lMQ7y7YqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqblbO0 VNwfgBLLAZadt2MrIvTyMB8GA1UdIwQYMBaAFLf6USFbtcHviOrhXwNDE9G3G41E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODk3QS81MzNFMjQ2MkI1 NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdlLUk2dUZmQTBNVDBiY2Jq VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfcFJJVnUxd2UtSTZ1RmZBME1UMGJjYmpVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODk3QS81MzNFMjQ2MkI1NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdl LUk2dUZmQTBNVDBiY2JqVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNbJNu5nvgCI4xGmsOcpjqcGeIuuOkN1APD/SxCv0gEhGllCO2cg5v 2Pbvgw2N78y6RhhMsqaSjLuITkWUztkGVOPMaOSzrgGbXFSUbJuWMhlQN4RcTJHk SHN+KpH9Jur5qLPirM23yvwJhokCbgR+FNQ1G4wKX2MkxYZLPKbWwyTnbWjSkQlt Md6zLGvlJvZaTkNWeCf0CF60wMkG0jpf6FsigIvXcYzHBS2Rn7n2SVQkihCGWF3/ yM767RWGTe8y/ooSwcT/R3SGPH+zAgECOvfmBa6v64NyFYyDi9kIA7KRk4PVvuqX Lw6y/Hx4U0jbczpdWiXM0NqrX1fKUowT -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:17 2025 by rpki-client