This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft File: 37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json) Hash identifier: ENCkIyXWrTzxASYnQcwAvHJLOThGNzLSmFCClO2eGdg= Subject key identifier: E5:76:C5:29:BD:33:62:84:FB:19:EC:0A:EB:7E:82:B3:83:6E:F2:08 Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 Certificate issuer: /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Certificate serial: 0CB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft Manifest number: 0CA1 Signing time: Sat 06 Dec 2025 17:46:03 +0000 Manifest this update: Sat 06 Dec 2025 17:46:02 +0000 Manifest next update: Sat 13 Dec 2025 17:46:02 +0000 Files and hashes: 1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: 0gptzzpD405UshSnICsfoibkNWWkTDPCBFjc9H9Yv6E=) 2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: gCE8sQKb8A6qpKcLfMZ4C7XBMwBoNFAnuYIqxIqfFSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Validity Not Before: Dec 6 17:46:02 2025 GMT Not After : Dec 13 17:46:02 2025 GMT Subject: CN=69346bdb-f6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:b7:34:d2:27:61:0c:ff:77:03:ea:c1:02: d9:b9:f0:a9:14:7f:30:2c:1f:4d:f2:af:81:7f:60: 85:2b:6d:d6:0b:e8:e9:27:76:e9:66:7a:2f:ba:c3: c1:c0:86:66:41:5a:d7:f2:7d:b8:f0:f0:e9:26:ca: 7d:7f:24:96:48:53:03:cc:14:60:6c:77:fa:b3:35: e0:ee:21:4a:da:cd:1e:f0:72:42:fb:f3:e2:6e:90: fa:32:1d:41:97:50:81:d4:43:e7:08:58:1f:d9:11: 74:28:6e:1b:e8:14:b1:68:90:31:f4:a0:ad:78:34: 79:aa:9a:10:f8:d1:72:4d:49:c4:f1:b1:58:53:4d: f4:32:57:c3:e8:1d:b9:35:56:73:8f:a0:50:b3:cf: 65:29:3f:41:06:f4:e6:e0:18:1a:fe:fe:c3:88:9c: 01:7c:31:74:89:d6:31:96:0b:f9:09:53:3f:7f:aa: d6:c3:a1:36:0d:e1:02:76:fd:b0:30:ea:9b:fb:da: 16:da:04:aa:f3:0f:3b:c4:ed:5f:71:72:54:f3:84: d4:23:91:4a:c4:ba:bd:dd:ba:1f:1c:78:03:de:61: 67:ad:6b:11:10:69:5e:4a:98:d4:a2:97:24:15:e0: 97:5c:32:8b:db:7b:10:49:2a:ab:b8:a5:3c:b1:5e: 26:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:76:C5:29:BD:33:62:84:FB:19:EC:0A:EB:7E:82:B3:83:6E:F2:08 X509v3 Authority Key Identifier: keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:bd:57:2f:52:7c:08:f5:2a:55:eb:73:e3:75:22:1b:08:a8: 1d:0f:06:c0:2e:75:43:ac:85:fe:56:a8:28:e5:c3:31:93:a0: 9b:6a:26:94:7c:a3:c5:9d:72:de:2d:76:0d:94:0f:06:3a:5b: 45:7c:de:d7:4f:d1:7c:5d:6b:aa:7e:db:23:7b:6f:12:9b:a7: 31:9b:f5:73:cd:1f:8b:b8:ac:c7:a4:e2:f4:6c:29:ce:24:02: 75:9c:8c:24:e7:31:c0:4f:89:5a:c6:ad:87:56:5f:66:e5:12: 14:cd:41:83:db:63:01:cf:8e:f6:b6:43:9f:91:a1:e9:34:38: 0f:41:09:d4:15:8a:51:f7:68:10:5a:aa:5a:72:1e:7a:ef:8f: 23:6b:b2:a6:b1:15:8f:17:d3:06:e9:b6:1f:fe:01:6b:8f:92: 1e:3f:85:d6:fc:64:0e:1f:58:8c:ec:03:19:a9:84:d3:e8:3c: cc:34:5c:03:05:1f:26:8f:64:f7:53:c6:1d:c6:74:70:55:d0: d0:78:17:ce:4b:b4:aa:06:e8:3d:d5:25:ee:a7:04:d0:ba:1a: 44:71:02:47:0c:ad:b7:69:c6:0b:eb:de:c8:72:67:8b:d3:ee: 2a:31:8f:34:c9:17:a7:f8:8e:27:71:4c:05:eb:92:09:a7:81: ad:ac:e2:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2MkYxMTAvBgNVBAUTKERGQjY3MjM2NzIxNTFFQzJDNDZDRDA0RTcxQzU5Rjkx NjlDQUU2RjgwHhcNMjUxMjA2MTc0NjAyWhcNMjUxMjEzMTc0NjAyWjAYMRYwFAYD VQQDEw02OTM0NmJkYi1mNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphu3NNInYQz/dwPqwQLZufCpFH8wLB9N8q+Bf2CFK23WC+jpJ3bpZnovusPB wIZmQVrX8n248PDpJsp9fySWSFMDzBRgbHf6szXg7iFK2s0e8HJC+/PibpD6Mh1B l1CB1EPnCFgf2RF0KG4b6BSxaJAx9KCteDR5qpoQ+NFyTUnE8bFYU030MlfD6B25 NVZzj6BQs89lKT9BBvTm4Bga/v7DiJwBfDF0idYxlgv5CVM/f6rWw6E2DeECdv2w MOqb+9oW2gSq8w87xO1fcXJU84TUI5FKxLq93bofHHgD3mFnrWsREGleSpjUopck FeCXXDKL23sQSSqruKU8sV4mPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOV2xSm9 M2KE+xnsCut+grODbvIIMB8GA1UdIwQYMBaAFN+2cjZyFR7CxGzQTnHFn5Fpyub4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyRi8xQ0Y5ODcyNjA4 NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhzTEViTkJPY2NXZmtXbks1 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3WnlObklWSHNMRWJOQk9jY1dma1duSzV2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTYyRi8xQ0Y5ODcyNjA4NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhz TEViTkJPY2NXZmtXbks1dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtvVcvUnwI9SpV63PjdSIbCKgdDwbALnVDrIX+Vqgo5cMxk6CbaiaU fKPFnXLeLXYNlA8GOltFfN7XT9F8XWuqftsje28Sm6cxm/VzzR+LuKzHpOL0bCnO JAJ1nIwk5zHAT4laxq2HVl9m5RIUzUGD22MBz472tkOfkaHpNDgPQQnUFYpR92gQ Wqpach56748ja7KmsRWPF9MG6bYf/gFrj5IeP4XW/GQOH1iM7AMZqYTT6DzMNFwD BR8mj2T3U8YdxnRwVdDQeBfOS7SqBug91SXupwTQuhpEcQJHDK23acYL697IcmeL 0+4qMY80yRen+I4ncUwF65IJp4GtrOKz -----END CERTIFICATE-----Generated at Sun Dec 7 01:56:53 2025 by rpki-client