This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft File: h2JAwXQl4PPi4Vds30t527-rVe4.mft (raw, json) Hash identifier: I4iy1d+wMz1vLqNGyqn9ZIxrlrGpMs8lJTZvjw/SJbI= Subject key identifier: A0:C9:68:3F:71:A8:B4:3B:CA:19:82:66:B0:76:5A:2A:83:C0:38:C1 Authority key identifier: 87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE Certificate issuer: /CN=A918FE4B/serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft Manifest number: 0289 Signing time: Fri 05 Dec 2025 00:27:05 +0000 Manifest this update: Fri 05 Dec 2025 00:27:05 +0000 Manifest next update: Fri 12 Dec 2025 00:27:05 +0000 Files and hashes: 1: h2JAwXQl4PPi4Vds30t527-rVe4.crl (hash: +yS11W0Kk4SurUv7kKJgylim8XRrHuOF70qWS1CuBfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.crl rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FE4B, serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE Validity Not Before: Dec 5 00:27:05 2025 GMT Not After : Dec 12 00:27:05 2025 GMT Subject: CN=693226d9-8b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:06:eb:73:05:ae:e1:bd:26:97:ca:85:55:bf: a6:a5:f9:18:2a:b0:f7:61:0a:90:cc:ab:9d:21:31: 3e:f4:cf:4f:99:5a:45:b0:a5:0e:0b:1b:78:65:ae: 64:71:54:15:36:f8:7f:cd:69:fa:9b:99:a8:18:9c: 48:18:28:7a:f9:c5:3c:32:95:b1:d2:55:f1:0a:19: 9c:6d:51:cc:56:c2:4e:3c:c1:b4:2f:06:e1:ff:d3: 7e:1f:61:bb:60:0b:e7:a5:06:5b:fa:d6:18:c2:65: 59:dd:1b:13:df:fe:e4:10:fc:0a:b9:74:82:f7:96: c7:99:b2:36:d9:56:33:d0:2f:6d:cc:8d:aa:7a:ef: c1:1b:a0:56:8a:1e:05:f9:50:5b:54:b0:e5:da:a2: 52:3c:d8:02:ef:a4:08:71:76:00:3f:2e:fd:ea:ab: e8:48:9a:b2:29:0b:66:37:7d:11:b2:56:0b:1a:9e: 54:36:4d:46:84:72:51:6b:18:8f:a0:7f:a3:d3:cb: a4:27:ea:10:f4:3f:14:d1:2f:72:b1:b0:d6:92:d6: de:d7:dc:bf:97:48:93:f3:33:24:a0:5f:ac:62:19: 2f:99:d4:7f:e5:e7:b7:dd:c6:76:7d:00:a0:ec:00: 4f:51:65:76:f6:45:c6:05:31:90:6a:6d:9f:6a:a6: 3d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C9:68:3F:71:A8:B4:3B:CA:19:82:66:B0:76:5A:2A:83:C0:38:C1 X509v3 Authority Key Identifier: keyid:87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:d6:ef:e5:ee:ca:c3:65:e5:7b:39:4f:eb:65:c1:9a:60:cb: 2c:58:5b:0f:78:b4:44:0b:a9:da:04:13:3e:03:c4:9a:32:d7: 0b:91:62:97:a4:45:40:bc:77:cc:50:eb:69:c7:e6:5b:10:98: 57:fb:76:a5:84:c5:f9:4a:85:b7:63:3d:01:5e:e1:47:49:57: 02:e4:ba:de:59:44:a2:eb:ec:5a:02:92:de:2f:93:db:e7:d3: 69:64:3f:e4:c5:c8:d8:76:42:ff:27:88:44:e9:e3:7b:e4:7e: fd:06:46:93:c1:89:5b:08:94:f8:eb:8a:5e:3f:bd:fc:ad:7e: 14:6c:0b:9b:9a:ad:c4:09:89:50:69:19:3a:49:16:a1:04:4a: 84:b1:6e:f9:e9:47:48:9f:3f:42:d5:95:a3:78:56:96:70:bc: 70:a3:8b:98:de:16:35:67:20:3d:be:e8:00:51:6b:61:29:7c: 8c:48:79:63:53:99:8b:88:69:17:4d:60:2a:fa:e0:d2:c5:73: d3:1b:a2:07:9a:be:a2:75:a0:77:22:e1:69:e9:37:90:06:76: e2:04:b9:62:87:6b:f1:2e:dc:df:d7:dc:da:2e:0d:0e:f9:89: 1a:d8:35:f5:8f:a2:6e:e2:0a:64:de:f9:e6:e8:0f:91:6e:46: a1:10:6a:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFNEIxMTAvBgNVBAUTKDg3NjI0MEMxNzQyNUUwRjNFMkUxNTc2Q0RGNEI3OURC QkZBQjU1RUUwHhcNMjUxMjA1MDAyNzA1WhcNMjUxMjEyMDAyNzA1WjAYMRYwFAYD VQQDEw02OTMyMjZkOS04YjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AbrcwWu4b0ml8qFVb+mpfkYKrD3YQqQzKudITE+9M9PmVpFsKUOCxt4Za5k cVQVNvh/zWn6m5moGJxIGCh6+cU8MpWx0lXxChmcbVHMVsJOPMG0Lwbh/9N+H2G7 YAvnpQZb+tYYwmVZ3RsT3/7kEPwKuXSC95bHmbI22VYz0C9tzI2qeu/BG6BWih4F +VBbVLDl2qJSPNgC76QIcXYAPy796qvoSJqyKQtmN30RslYLGp5UNk1GhHJRaxiP oH+j08ukJ+oQ9D8U0S9ysbDWktbe19y/l0iT8zMkoF+sYhkvmdR/5ee33cZ2fQCg 7ABPUWV29kXGBTGQam2faqY9JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDJaD9x qLQ7yhmCZrB2WiqDwDjBMB8GA1UdIwQYMBaAFIdiQMF0JeDz4uFXbN9Ledu/q1Xu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkU0Qi9DMTQwMTZCNDhE N0YxMUVEQjdEQjg1NENDNEY5QUUwMi9oMkpBd1hRbDRQUGk0VmRzMzB0NTI3LXJW ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gySkF3WFFsNFBQaTRWZHMzMHQ1MjctclZlNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkU0Qi9DMTQwMTZCNDhEN0YxMUVEQjdEQjg1NENDNEY5QUUwMi9oMkpBd1hRbDRQ UGk0VmRzMzB0NTI3LXJWZTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB1u/l7srDZeV7OU/rZcGaYMssWFsPeLREC6naBBM+A8SaMtcLkWKX pEVAvHfMUOtpx+ZbEJhX+3alhMX5SoW3Yz0BXuFHSVcC5LreWUSi6+xaApLeL5Pb 59NpZD/kxcjYdkL/J4hE6eN75H79BkaTwYlbCJT464peP738rX4UbAubmq3ECYlQ aRk6SRahBEqEsW756UdInz9C1ZWjeFaWcLxwo4uY3hY1ZyA9vugAUWthKXyMSHlj U5mLiGkXTWAq+uDSxXPTG6IHmr6idaB3IuFp6TeQBnbiBLlih2vxLtzf19zaLg0O +Yka2DX1j6Ju4gpk3vnm6A+RbkahEGph -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:43 2025 by rpki-client