This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json) Hash identifier: 9DuwCJJ/KgCBDfpDuwIHYG7hPJJ4YTOH+5ayGkYde0I= Subject key identifier: E2:5F:00:DB:55:AA:A0:6E:F1:5F:FD:66:77:96:CE:C5:DE:71:09:3C Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Certificate serial: 0669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft Manifest number: 0664 Signing time: Thu 04 Dec 2025 21:21:22 +0000 Manifest this update: Thu 04 Dec 2025 21:21:22 +0000 Manifest next update: Thu 11 Dec 2025 21:21:22 +0000 Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: xno2Idnws6WOlXrvFZ7Lb2lsUiGZsZ+URbEhEcXDkxk=) 2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: otn7zJrk0PPbtnlH9qLQ0UvTzJRXUBW5NBaU6fJKloc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Validity Not Before: Dec 4 21:21:22 2025 GMT Not After : Dec 11 21:21:22 2025 GMT Subject: CN=6931fb52-dd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9b:94:16:e4:23:ca:d5:4c:ed:19:11:ae:6a: 62:0f:9d:f2:a1:0e:b6:b5:ad:30:88:90:e3:b5:74: 8f:8d:bf:3d:e2:5b:c9:76:5c:10:09:6f:04:84:dc: 8d:a7:fb:a6:86:8c:32:ed:23:3f:b5:0d:dc:75:3c: c9:3a:32:f5:38:30:07:7d:d3:b4:2c:01:62:ae:91: b6:ab:3f:4e:4c:73:2d:30:65:97:fa:5c:fb:9f:9e: 35:10:67:25:e2:69:c3:ca:6a:91:96:2d:2e:2d:92: 90:48:fe:dc:2f:ec:f5:31:ef:52:09:c8:8f:83:ce: 21:e0:b4:04:11:a2:39:9b:81:cb:08:08:af:9d:3b: e7:1b:85:5d:6b:c1:22:f6:a5:92:81:05:4f:20:6a: 36:c2:3a:07:63:d5:ea:8b:07:73:16:e0:a9:f8:23: 1d:bc:b7:ca:ad:ef:ff:bd:29:bf:42:94:b1:87:b1: f5:77:9d:43:72:47:98:91:76:0d:40:6e:a1:8a:95: 7d:90:97:02:a7:f1:9b:b5:e0:68:7b:4e:44:aa:aa: 42:7a:b4:a9:e0:e9:4b:ce:fb:54:4f:62:27:f6:f5: 6d:6c:c0:04:f8:1a:10:b7:f4:71:0d:62:69:47:e5: de:d9:c2:2a:b0:32:f2:06:89:47:c0:90:66:be:b1: 19:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5F:00:DB:55:AA:A0:6E:F1:5F:FD:66:77:96:CE:C5:DE:71:09:3C X509v3 Authority Key Identifier: keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:d8:9a:67:49:4a:7d:31:66:54:da:7b:ab:34:e0:4c:e6:b6: 12:47:76:7e:d0:86:ef:ce:4c:d6:c8:f4:d7:96:e0:a9:cf:71: c0:be:cb:c4:06:d5:85:cf:bc:1c:0e:0e:6a:d4:a8:95:f9:cf: 9f:56:49:84:1e:e1:f0:e5:76:6c:82:bd:db:61:44:70:f7:6e: 4b:df:22:d5:7f:26:54:f3:54:8a:0d:72:55:e5:7d:1e:e6:6f: 02:8c:3a:1f:0d:73:99:b5:ed:a4:1e:0e:51:95:35:08:4f:0b: 6b:f8:dd:41:48:09:74:af:03:f4:d7:05:aa:29:73:07:8d:c8: de:fe:9f:7c:b2:b7:0f:7c:11:a1:cb:bf:c2:ef:c3:4b:1f:87: 26:f3:f4:cb:f9:36:41:51:1b:7e:e1:aa:10:f4:95:e1:97:b1: ab:da:93:6a:98:b5:54:c0:a5:6e:06:69:fe:61:e3:11:3f:fa: 4e:b8:eb:44:72:fb:b1:5b:4b:3a:9a:84:11:89:e3:6a:ed:bd: 05:ca:9d:9d:48:0a:72:43:94:15:d7:63:0f:20:0e:0c:45:b9: 99:8f:0b:0b:2c:63:4a:f1:ab:7d:80:e3:47:1f:0e:73:7f:7e: 76:2e:8e:fd:a1:eb:78:e9:bb:1b:93:a4:55:e6:fd:06:39:c6: 09:ce:9b:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3NUQxMTAvBgNVBAUTKDcwNTEyQjNEMzJEMDVEQzMyNTQxRTk4RTU3NUEzMUM1 MzIwNzM2NDgwHhcNMjUxMjA0MjEyMTIyWhcNMjUxMjExMjEyMTIyWjAYMRYwFAYD VQQDEw02OTMxZmI1Mi1kZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4puUFuQjytVM7RkRrmpiD53yoQ62ta0wiJDjtXSPjb894lvJdlwQCW8EhNyN p/umhowy7SM/tQ3cdTzJOjL1ODAHfdO0LAFirpG2qz9OTHMtMGWX+lz7n541EGcl 4mnDymqRli0uLZKQSP7cL+z1Me9SCciPg84h4LQEEaI5m4HLCAivnTvnG4Vda8Ei 9qWSgQVPIGo2wjoHY9XqiwdzFuCp+CMdvLfKre//vSm/QpSxh7H1d51DckeYkXYN QG6hipV9kJcCp/GbteBoe05EqqpCerSp4OlLzvtUT2In9vVtbMAE+BoQt/RxDWJp R+Xe2cIqsDLyBolHwJBmvrEZTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJfANtV qqBu8V/9ZneWzsXecQk8MB8GA1UdIwQYMBaAFHBRKz0y0F3DJUHpjldaMcUyBzZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc1RC83RTI3MkY3Q0E2 ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhjTWxRZW1PVjFveHhUSUhO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGRXJQVExRWGNNbFFlbU9WMW94eFRJSE5rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDc1RC83RTI3MkY3Q0E2ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhj TWxRZW1PVjFveHhUSUhOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC72JpnSUp9MWZU2nurNOBM5rYSR3Z+0IbvzkzWyPTXluCpz3HAvsvE BtWFz7wcDg5q1KiV+c+fVkmEHuHw5XZsgr3bYURw925L3yLVfyZU81SKDXJV5X0e 5m8CjDofDXOZte2kHg5RlTUITwtr+N1BSAl0rwP01wWqKXMHjcje/p98srcPfBGh y7/C78NLH4cm8/TL+TZBURt+4aoQ9JXhl7Gr2pNqmLVUwKVuBmn+YeMRP/pOuOtE cvuxW0s6moQRieNq7b0Fyp2dSApyQ5QV12MPIA4MRbmZjwsLLGNK8at9gONHHw5z f352Lo79oet46bsbk6RV5v0GOcYJzpst -----END CERTIFICATE-----Generated at Sat Dec 6 18:31:11 2025 by rpki-client