This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: zBIEpXy5D+vTp1Uycf3Pf3g/7kjBxv6qd2wdU+MgtRg= Subject key identifier: A7:9B:65:E2:71:C3:74:42:59:59:9C:45:08:DD:8C:40:98:6A:C6:12 Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: 79 Signing time: Fri 05 Dec 2025 04:42:26 +0000 Manifest this update: Fri 05 Dec 2025 04:42:25 +0000 Manifest next update: Fri 12 Dec 2025 04:42:25 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: fcovvy/DdoF2MqoUCYA19ykejaIIdfoz+60IHy+gmqs=) 2: 8BACF000172811F0B074151EC4F9AE02.roa (hash: ZKoMpxvl06JDEHPwPvY04s64aILLwwH0kpQN+XzmWw8=) 3: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: QaVxitn1fI1JNxNdOxFRN5URfiNEZoLOemGjg0zo0Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: Dec 5 04:42:25 2025 GMT Not After : Dec 12 04:42:25 2025 GMT Subject: CN=693262b1-7a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:1a:a3:d6:c0:ad:3d:db:96:03:03:53:7d: ed:17:6c:b3:50:46:8b:d0:56:13:8b:cc:e4:23:8f: 59:9c:93:0d:4b:08:ab:e4:3b:f0:b8:ba:37:be:c9: 6c:2d:17:90:85:5d:d4:0f:af:b9:cb:a8:d6:0e:c0: d9:7a:57:1a:d3:12:4f:dd:91:9f:f9:c9:38:e5:30: 03:20:f3:20:e9:f5:e0:37:cd:9c:21:cc:47:35:66: 8e:63:ef:9f:da:c3:69:ee:f5:83:cc:a2:e8:ad:43: 1b:b3:8e:d9:42:99:e5:c2:e4:ed:db:0e:19:6a:6e: 51:c9:9f:2c:51:37:86:9d:aa:61:98:86:ae:8c:d6: 4b:d8:e5:d6:f5:68:b4:40:4a:f9:39:89:df:a7:69: 81:73:46:70:53:22:23:fa:dc:48:ad:2b:1b:fd:8b: 2f:af:bd:7f:03:20:b0:d1:8f:83:2b:fe:dd:45:ae: ac:cd:1e:5b:2a:f6:e3:df:12:c1:3f:64:da:da:08: b2:25:e2:44:ca:dd:69:36:9c:ba:c6:e3:d0:53:3d: d1:8c:6d:a2:f6:d6:f4:e8:1c:4e:ad:5e:3d:2e:8d: b6:94:78:b0:38:a0:59:ad:86:e1:19:22:e6:c9:02: 1f:41:1f:59:9b:9e:29:58:f8:e9:db:31:d0:b9:a6: 50:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9B:65:E2:71:C3:74:42:59:59:9C:45:08:DD:8C:40:98:6A:C6:12 X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a0:c9:f6:52:9d:96:7e:65:c7:f4:74:ab:46:42:16:ec:e9: 0c:0d:8b:81:2a:16:4a:7c:05:cf:d2:57:b8:f2:76:00:27:e9: 6b:93:1a:ba:00:a1:43:1b:ca:18:56:dd:31:8f:74:07:61:bd: ac:20:4b:bb:16:65:b1:1b:f4:ab:45:43:3c:b8:39:ab:fd:d0: 2d:d4:ec:4d:ed:05:56:c2:0a:66:e1:03:f9:8b:a7:f7:d5:cf: b5:30:01:19:ab:be:97:00:94:6d:0d:d0:53:3d:87:7b:aa:0b: 69:ee:d2:b0:4f:1c:2c:f4:cc:87:17:26:5c:56:13:d5:bb:81: bd:3b:b0:9c:92:7f:8a:a4:65:3d:d8:80:fc:f0:93:ff:16:ac: 77:54:3c:f1:ea:d5:3b:ec:b6:2a:1e:c7:59:fd:f4:9c:cf:27: f6:c1:10:85:c4:f3:a8:c2:f6:54:ee:82:79:da:ab:6d:d8:99: a1:20:28:1a:41:75:2e:3b:2d:90:da:79:cd:76:e0:15:72:fa: 65:53:ab:7a:b3:a1:c8:32:c2:f8:e5:bd:ae:32:9d:07:96:0f: 44:0a:8b:04:bc:a7:7b:00:2e:50:6b:68:2b:12:8c:44:c6:fd: 49:b0:64:2e:bc:c8:ee:60:55:f0:8b:19:84:80:a7:ca:f0:6d: 94:21:b1:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY2MzExMC8GA1UEBRMoM0NBQUVBRjFCMEQ0QkY2MzE3QUU0RjFFNTQ2Mzc5QkZG MzQ2Q0ZEMzAeFw0yNTEyMDUwNDQyMjVaFw0yNTEyMTIwNDQyMjVaMBgxFjAUBgNV BAMTDTY5MzI2MmIxLTdhNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzyxqj1sCtPduWAwNTfe0XbLNQRovQVhOLzOQjj1mckw1LCKvkO/C4uje+yWwt F5CFXdQPr7nLqNYOwNl6VxrTEk/dkZ/5yTjlMAMg8yDp9eA3zZwhzEc1Zo5j75/a w2nu9YPMouitQxuzjtlCmeXC5O3bDhlqblHJnyxRN4adqmGYhq6M1kvY5db1aLRA Svk5id+naYFzRnBTIiP63EitKxv9iy+vvX8DILDRj4Mr/t1FrqzNHlsq9uPfEsE/ ZNraCLIl4kTK3Wk2nLrG49BTPdGMbaL21vToHE6tXj0ujbaUeLA4oFmthuEZIubJ Ah9BH1mbnilY+OnbMdC5plBPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp5tl4nHD dEJZWZxFCN2MQJhqxhIwHwYDVR0jBBgwFoAUPKrq8bDUv2MXrk8eVGN5v/NGz9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzLzdBQzk2NzlFMTcy MDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEtycThiRFV2Mk1Ycms4ZVZHTjV2X05HejlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NjYzLzdBQzk2NzlFMTcyMDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJN WHJrOGVWR041dl9OR3o5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD2gyfZSnZZ+Zcf0dKtGQhbs6QwNi4EqFkp8Bc/SV7jydgAn6WuTGroA oUMbyhhW3TGPdAdhvawgS7sWZbEb9KtFQzy4Oav90C3U7E3tBVbCCmbhA/mLp/fV z7UwARmrvpcAlG0N0FM9h3uqC2nu0rBPHCz0zIcXJlxWE9W7gb07sJySf4qkZT3Y gPzwk/8WrHdUPPHq1Tvstioex1n99JzPJ/bBEIXE86jC9lTugnnaq23YmaEgKBpB dS47LZDaec124BVy+mVTq3qzocgywvjlva4ynQeWD0QKiwS8p3sALlBraCsSjETG /UmwZC68yO5gVfCLGYSAp8rwbZQhsVE= -----END CERTIFICATE-----Generated at Sat Dec 6 23:05:49 2025 by rpki-client