This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft File: f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json) Hash identifier: l3Z/VHpFUATogZZ4g2ew28wrG7RpwhNPLwCj9Ih3j7g= Subject key identifier: 06:09:E4:C1:FC:CA:9E:BE:95:E3:73:04:38:0E:17:95:1D:E4:3C:C5 Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B Certificate issuer: /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft Manifest number: 018C Signing time: Fri 05 Dec 2025 01:45:51 +0000 Manifest this update: Fri 05 Dec 2025 01:45:50 +0000 Manifest next update: Fri 12 Dec 2025 01:45:50 +0000 Files and hashes: 1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: +tZWLOj9sjk0kyawH8jh7fm2brMusrCnbETzcZN6LWY=) 2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: 6XI21Rbox6GrvQ2XIiLWLaxiZEN511Ja5aYkWDlWtkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Validity Not Before: Dec 5 01:45:50 2025 GMT Not After : Dec 12 01:45:50 2025 GMT Subject: CN=6932394f-9b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ab:ab:13:6f:67:ca:4a:2d:9a:52:e5:67:88: 5b:1e:fc:4e:1e:a0:29:90:31:b3:14:e5:f6:46:c3: 4b:9e:e6:53:eb:a4:e2:38:a7:62:7b:ef:8a:28:7c: c8:da:98:b0:95:72:5e:38:16:12:4d:d5:e4:1a:6e: b1:1d:09:3e:22:04:4e:97:b5:f6:f7:9e:c3:19:c3: 6c:99:39:52:10:b4:26:9a:4b:63:88:00:b2:66:c0: af:5e:29:da:85:04:02:ef:f2:61:61:ee:91:e3:12: e8:db:a7:31:32:76:23:3a:43:df:7e:d9:5f:ea:f6: b7:a4:ba:b7:ec:b7:94:2c:38:2b:f7:41:b9:d2:f0: 5b:e8:cf:2f:85:aa:bb:00:f1:f8:6e:4e:5f:cf:1c: 90:4c:d0:93:0a:ca:5c:11:28:47:6b:c5:91:09:fc: 88:fd:eb:d3:47:b1:eb:7a:5b:aa:50:a2:b5:5f:b3: 23:91:77:9c:42:f3:c1:1a:55:d8:2c:fd:b5:f4:8f: f4:3f:f7:54:53:d3:fb:8a:d3:14:d9:1b:ba:96:1b: 5f:59:d5:d9:e6:6a:44:47:4c:47:d7:52:aa:7a:84: 1b:3f:34:24:8d:07:30:ed:db:3a:ff:88:3a:37:cb: 00:f9:95:de:e3:e0:0b:8a:36:e2:2d:ef:3c:e6:25: f8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:09:E4:C1:FC:CA:9E:BE:95:E3:73:04:38:0E:17:95:1D:E4:3C:C5 X509v3 Authority Key Identifier: keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:1b:49:87:04:17:ef:f8:28:d0:63:22:1f:e9:f4:ff:8c:64: 87:a4:b7:fd:91:21:85:54:86:d1:f4:8c:99:03:ca:ad:da:38: f4:19:d8:2b:77:f0:2a:0f:69:a6:f7:71:bc:ad:bb:42:30:53: f8:85:ae:a6:e7:5a:df:5b:b4:76:c4:2f:1e:f7:89:4c:62:52: 1a:a2:4b:c5:05:56:20:87:45:05:08:04:2e:81:a0:e4:97:94: 80:b1:ec:3c:02:1e:d1:49:9d:73:09:b1:97:52:32:72:0b:2a: 1a:99:aa:b1:00:c0:72:e6:8e:fe:a3:44:bd:34:00:74:18:10: 72:6d:98:d5:b7:b3:dc:ec:dc:a7:4f:da:9c:78:84:d5:79:6f: 81:ef:e0:f6:90:fc:60:37:77:21:b2:25:bb:67:fa:a4:f5:b7: a1:95:36:1d:7f:d5:a2:5b:b2:9c:f5:6e:0b:5f:05:be:55:de: ab:73:21:67:09:5c:77:1a:a4:a6:d3:1d:03:0c:4f:d3:38:79: 08:25:c3:92:a6:28:a1:8d:c9:56:07:d1:ef:cd:30:c5:6a:7a: 84:01:91:93:7b:a3:53:88:18:df:8f:94:36:28:30:cf:63:82: 04:d9:1e:03:84:1d:08:58:9f:2f:3c:b9:0b:36:63:72:f5:b0: 84:27:76:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk4ODMxMTAvBgNVBAUTKDdGREU2NDJDNDQyMTdFREU3Q0M3Njc3MTlCQTY3RDAz NkQxN0QwNEIwHhcNMjUxMjA1MDE0NTUwWhcNMjUxMjEyMDE0NTUwWjAYMRYwFAYD VQQDEw02OTMyMzk0Zi05YjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6urE29nykotmlLlZ4hbHvxOHqApkDGzFOX2RsNLnuZT66TiOKdie++KKHzI 2piwlXJeOBYSTdXkGm6xHQk+IgROl7X2957DGcNsmTlSELQmmktjiACyZsCvXina hQQC7/JhYe6R4xLo26cxMnYjOkPfftlf6va3pLq37LeULDgr90G50vBb6M8vhaq7 APH4bk5fzxyQTNCTCspcEShHa8WRCfyI/evTR7HreluqUKK1X7MjkXecQvPBGlXY LP219I/0P/dUU9P7itMU2Ru6lhtfWdXZ5mpER0xH11KqeoQbPzQkjQcw7ds6/4g6 N8sA+ZXe4+ALijbiLe885iX4hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYJ5MH8 yp6+leNzBDgOF5Ud5DzFMB8GA1UdIwQYMBaAFH/eZCxEIX7efMdncZumfQNtF9BL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTg4My9DMzdFQzhCMjcy NzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0NTh4MmR4bTZaOUEyMFgw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5NWtMRVFoZnQ1OHgyZHhtNlo5QTIwWDBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTg4My9DMzdFQzhCMjcyNzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0 NTh4MmR4bTZaOUEyMFgwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXG0mHBBfv+CjQYyIf6fT/jGSHpLf9kSGFVIbR9IyZA8qt2jj0Gdgr d/AqD2mm93G8rbtCMFP4ha6m51rfW7R2xC8e94lMYlIaokvFBVYgh0UFCAQugaDk l5SAsew8Ah7RSZ1zCbGXUjJyCyoamaqxAMBy5o7+o0S9NAB0GBBybZjVt7Pc7Nyn T9qceITVeW+B7+D2kPxgN3chsiW7Z/qk9behlTYdf9WiW7Kc9W4LXwW+Vd6rcyFn CVx3GqSm0x0DDE/TOHkIJcOSpiihjclWB9HvzTDFanqEAZGTe6NTiBjfj5Q2KDDP Y4IE2R4DhB0IWJ8vPLkLNmNy9bCEJ3aH -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:20 2025 by rpki-client