This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft File: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft (raw, json) Hash identifier: Xmibl2Wu6kE2x9Ihv0Islhl0hkeWf2z/QT4UNONWY4I= Subject key identifier: 09:06:59:95:5B:31:B9:14:F1:A2:5B:82:0C:3B:39:39:52:76:1F:25 Authority key identifier: 09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99 Certificate issuer: /CN=A918FA35/serialNumber=0958D7C7B57567D965E148048152E2B478FC4399 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft Manifest number: 27 Signing time: Fri 05 Dec 2025 05:32:04 +0000 Manifest this update: Fri 05 Dec 2025 05:32:04 +0000 Manifest next update: Fri 12 Dec 2025 05:32:04 +0000 Files and hashes: 1: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl (hash: eAyqdt8coQ81KgI0Z299u/yJ4wIX/GhVAy0zTBZKBGs=) 2: EC6B1EDAC3F811F0BE50C87AC4F9AE02.roa (hash: origqBJ9k2Zq/uSGJkI8lTn3lJpMgamfpnZM73+HcnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FA35, serialNumber=0958D7C7B57567D965E148048152E2B478FC4399 Validity Not Before: Dec 5 05:32:04 2025 GMT Not After : Dec 12 05:32:04 2025 GMT Subject: CN=69326e54-3265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e9:a4:fa:e8:5e:dd:ea:d4:0f:59:5f:75:41: c1:73:b5:54:01:ff:cb:a3:59:b2:42:a6:f4:ab:20: 82:23:02:b1:78:6a:96:6c:80:06:f1:52:ce:53:f3: 80:36:c3:7a:ea:89:49:f2:6b:f8:42:30:2b:5e:a0: 81:bd:a9:70:c1:67:65:aa:9b:86:ee:70:66:e1:3b: 12:51:41:c3:49:98:6f:e6:94:2d:a6:ca:8b:57:71: bd:06:d7:a0:05:2d:a4:d0:63:81:20:90:ca:09:88: 79:3b:8e:d7:d6:ea:70:88:96:86:66:92:20:09:a2: 80:8a:ef:9c:6e:29:9b:c8:87:7d:2b:f8:80:75:06: 7a:b4:80:ef:0a:1a:55:2b:c3:0b:d6:77:43:c8:f9: 72:0e:cb:2b:22:d9:f1:df:4b:da:9e:88:c8:a8:cc: 64:c4:6c:c2:02:01:10:8b:a1:78:53:fe:2e:5b:32: fa:a5:98:32:72:8c:1c:b4:6e:e3:9b:5c:ad:d1:c3: 57:f5:08:e2:e8:e1:0b:f4:96:16:ad:2f:aa:5a:ae: 29:6e:1f:7f:73:31:57:5b:7f:9d:bc:69:f0:97:a7: f3:16:18:3d:ed:5e:44:09:d1:0f:eb:33:e1:18:a5: bb:b5:23:2c:15:2d:dd:bb:68:f3:c9:a6:3d:71:16: 43:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:06:59:95:5B:31:B9:14:F1:A2:5B:82:0C:3B:39:39:52:76:1F:25 X509v3 Authority Key Identifier: keyid:09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:7f:1a:d7:f6:e6:3b:89:06:00:d8:3a:7c:89:77:cb:71:06: b8:ea:fb:d4:47:00:e4:3e:e4:c0:8f:ad:9e:02:dc:12:27:33: e4:5a:8c:97:7c:dc:df:a7:4d:0a:e4:5d:22:aa:ad:7c:ee:2a: 16:ee:33:3a:8b:8b:22:83:7c:78:40:35:3a:84:1a:3d:a0:39: 6d:f5:ce:99:d4:1c:36:67:ef:05:eb:d0:19:d4:11:ce:c8:f7: 5f:10:47:34:49:45:e2:55:9e:73:df:0a:ef:8c:81:fa:d0:e2: 7b:dd:dc:a8:e1:87:21:82:45:6d:b6:43:01:62:fe:da:65:f1: eb:1b:77:78:83:c5:34:bf:a3:32:7e:0e:3f:b9:3c:12:75:09: 9d:d5:33:a5:a3:9e:4b:4f:07:ed:50:8f:9b:ce:e9:26:52:d7: f5:eb:51:65:a2:ca:0e:ff:ed:6c:e5:ef:b5:79:fb:5f:3c:d8: ee:8f:3d:e8:e4:1d:dc:36:cc:e0:b5:ce:7c:84:6c:c8:98:e3: cb:c9:fb:ef:76:35:b4:3a:5e:78:36:7b:d3:5b:2f:0f:86:c4: 49:90:4d:9e:2d:d7:28:f1:d9:82:a9:18:45:99:a7:59:a4:fd: 2f:36:7e:85:41:69:35:e9:ba:4a:a5:55:32:e2:7a:22:d8:b9: 7f:41:f9:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkEzNTExMC8GA1UEBRMoMDk1OEQ3QzdCNTc1NjdEOTY1RTE0ODA0ODE1MkUyQjQ3 OEZDNDM5OTAeFw0yNTEyMDUwNTMyMDRaFw0yNTEyMTIwNTMyMDRaMBgxFjAUBgNV BAMTDTY5MzI2ZTU0LTMyNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK6aT66F7d6tQPWV91QcFztVQB/8ujWbJCpvSrIIIjArF4apZsgAbxUs5T84A2 w3rqiUnya/hCMCteoIG9qXDBZ2Wqm4bucGbhOxJRQcNJmG/mlC2myotXcb0G16AF LaTQY4EgkMoJiHk7jtfW6nCIloZmkiAJooCK75xuKZvIh30r+IB1Bnq0gO8KGlUr wwvWd0PI+XIOyysi2fHfS9qeiMiozGTEbMICARCLoXhT/i5bMvqlmDJyjBy0buOb XK3Rw1f1COLo4Qv0lhatL6pariluH39zMVdbf528afCXp/MWGD3tXkQJ0Q/rM+EY pbu1IywVLd27aPPJpj1xFkPPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCQZZlVsx uRTxoluCDDs5OVJ2HyUwHwYDVR0jBBgwFoAUCVjXx7V1Z9ll4UgEgVLitHj8Q5kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGQTM1LzVFNDAzNERFOThC OTExRjBCOTk2MEIyMEM0RjlBRTAyL0NWalh4N1YxWjlsbDRVZ0VnVkxpdEhqOFE1 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1ZqWHg3VjFaOWxsNFVnRWdWTGl0SGo4UTVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG QTM1LzVFNDAzNERFOThCOTExRjBCOTk2MEIyMEM0RjlBRTAyL0NWalh4N1YxWjls bDRVZ0VnVkxpdEhqOFE1ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKp/Gtf25juJBgDYOnyJd8txBrjq+9RHAOQ+5MCPrZ4C3BInM+RajJd8 3N+nTQrkXSKqrXzuKhbuMzqLiyKDfHhANTqEGj2gOW31zpnUHDZn7wXr0BnUEc7I 918QRzRJReJVnnPfCu+MgfrQ4nvd3KjhhyGCRW22QwFi/tpl8esbd3iDxTS/ozJ+ Dj+5PBJ1CZ3VM6WjnktPB+1Qj5vO6SZS1/XrUWWiyg7/7Wzl77V5+1882O6PPejk Hdw2zOC1znyEbMiY48vJ++92NbQ6Xng2e9NbLw+GxEmQTZ4t1yjx2YKpGEWZp1mk /S82foVBaTXpukqlVTLieiLYuX9B+eg= -----END CERTIFICATE-----Generated at Sat Dec 6 23:20:58 2025 by rpki-client