This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: 9u/+61f3GawPwTSzZGh8NBBvzlGSftgpXJaSkVumyW8= Subject key identifier: C1:87:B4:17:8C:61:D9:1F:D9:DB:08:01:B0:0F:75:0E:55:9D:EE:36 Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 0586 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 055B Signing time: Thu 04 Dec 2025 22:04:59 +0000 Manifest this update: Thu 04 Dec 2025 22:04:59 +0000 Manifest next update: Thu 11 Dec 2025 22:04:59 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: Y6QXJ9rq5lrMErsUJGTYIAjBEdbOssvmKVjZQjNG1rc=) 2: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: XSuhAhi3kRB8kUY+l+Kw6bn9CYFf3Y2Di14tTGA1/Oo=) 3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: /zpbbyMm2w5Xcql5zfUtoN8iPAyG5aFUqVMvzNCSPuM=) 4: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: hn+qGaZCtkUKYopOyzVnHKxTxBxzaX/N9RY/bypGInA=) 5: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: 02gdGUoKaGU981qYNAOicujQXSbUOhKyvNrMWXNfXQk=) 6: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 9x2G7s9XnkzB/aoRrwX0fPhCy+k2H2dG9FDGRVFamnQ=) 7: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: vwZIGcuT/wdsi2ov5n4aKBIuwaWae+4rjnxU5e55BsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1414 (0x586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Dec 4 22:04:59 2025 GMT Not After : Dec 11 22:04:59 2025 GMT Subject: CN=6932058b-ec1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c6:29:9a:96:ed:10:c0:f9:e0:59:c3:c2:59: ae:4b:0c:10:be:b8:b9:90:76:d3:fc:da:ab:44:ff: fc:63:be:81:d9:ce:69:dd:c5:0f:72:2c:83:17:2f: 47:ad:a6:d9:cf:e1:37:b6:bc:10:e6:56:f9:66:6c: 17:bc:85:fd:2d:d7:34:b7:74:4e:86:11:33:3c:81: a0:fe:f9:b2:35:64:51:33:8e:d5:64:4f:0c:73:58: c9:b9:80:21:1a:4b:93:c9:20:cd:56:ba:43:33:78: 2c:73:14:38:92:16:dd:69:89:9c:61:4e:6e:df:cd: 83:36:47:9c:ab:6d:39:b4:86:d9:da:0b:13:f6:df: e1:72:0c:15:68:17:66:71:b6:ff:24:26:e8:ca:35: 48:3e:2f:ac:b5:ab:e9:b5:44:12:0c:0a:ba:7e:04: ba:85:b9:66:5c:99:21:01:a4:99:aa:77:73:9d:73: 2b:77:3a:94:5b:9b:60:d9:04:09:35:e9:92:9a:b1: c0:b8:92:1c:08:6d:b0:bf:6e:51:5a:a1:a0:eb:1b: de:5b:07:d2:21:57:95:b1:4d:af:d8:5d:a3:90:21: 4a:dc:57:04:2b:03:94:f4:d8:8b:95:3a:b7:89:13: d7:34:92:32:fb:fe:e8:a8:a8:c7:78:78:a0:36:a5: 02:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:87:B4:17:8C:61:D9:1F:D9:DB:08:01:B0:0F:75:0E:55:9D:EE:36 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:42:0b:e0:bc:aa:41:5b:33:76:19:7f:ad:c8:ca:8c:1f:31: 15:bd:92:53:10:2b:97:c4:7a:75:ee:e3:22:65:a5:19:7a:56: eb:f5:f7:b6:75:f0:31:ed:54:a5:67:bd:bd:21:ca:ec:cd:b1: 83:4d:b4:a6:f7:d4:28:24:ac:54:53:15:af:9f:e1:cc:e7:3a: f6:82:e2:04:dc:19:29:d0:46:b9:ba:f5:e4:c6:9f:a1:69:2b: c9:25:84:2e:1d:68:38:c8:21:13:c7:79:b3:d1:d2:25:45:7c: 97:4b:a6:40:13:5a:42:0e:56:d4:31:75:f6:ee:4c:a0:b8:e1: 4c:ea:e1:98:26:f7:40:35:d4:15:f1:03:e2:60:e5:ff:af:f0: 5b:e3:c3:e5:04:5c:29:e5:58:98:d7:67:c7:b1:8d:5d:41:73: f1:6a:c0:2e:49:a2:5f:f2:26:66:0b:04:61:d3:14:d2:68:fb: de:f4:eb:28:f6:89:1f:86:73:25:8e:a1:55:ab:84:00:98:45: 1b:1a:46:2c:5e:a6:cf:ea:9f:bf:75:01:2b:e6:8f:47:07:99: f7:69:66:fc:71:1a:4e:c6:59:9f:f0:91:7d:53:22:df:94:df: ff:2f:8f:60:86:2f:bf:73:62:94:63:b1:1e:70:f8:44:e0:46: b5:f9:32:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjUxMjA0MjIwNDU5WhcNMjUxMjExMjIwNDU5WjAYMRYwFAYD VQQDEw02OTMyMDU4Yi1lYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMYpmpbtEMD54FnDwlmuSwwQvri5kHbT/NqrRP/8Y76B2c5p3cUPciyDFy9H rabZz+E3trwQ5lb5ZmwXvIX9Ldc0t3ROhhEzPIGg/vmyNWRRM47VZE8Mc1jJuYAh GkuTySDNVrpDM3gscxQ4khbdaYmcYU5u382DNkecq205tIbZ2gsT9t/hcgwVaBdm cbb/JCboyjVIPi+stavptUQSDAq6fgS6hblmXJkhAaSZqndznXMrdzqUW5tg2QQJ NemSmrHAuJIcCG2wv25RWqGg6xveWwfSIVeVsU2v2F2jkCFK3FcEKwOU9NiLlTq3 iRPXNJIy+/7oqKjHeHigNqUCQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGHtBeM Ydkf2dsIAbAPdQ5Vne42MB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZQgvgvKpBWzN2GX+tyMqMHzEVvZJTECuXxHp17uMiZaUZelbr9fe2 dfAx7VSlZ729IcrszbGDTbSm99QoJKxUUxWvn+HM5zr2guIE3Bkp0Ea5uvXkxp+h aSvJJYQuHWg4yCETx3mz0dIlRXyXS6ZAE1pCDlbUMXX27kyguOFM6uGYJvdANdQV 8QPiYOX/r/Bb48PlBFwp5ViY12fHsY1dQXPxasAuSaJf8iZmCwRh0xTSaPve9Oso 9okfhnMljqFVq4QAmEUbGkYsXqbP6p+/dQEr5o9HB5n3aWb8cRpOxlmf8JF9UyLf lN//L49ghi+/c2KUY7EecPhE4Ea1+TJ4 -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:42 2025 by rpki-client