This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft File: PVoEjy0O64mMxmE79kE3I3iWTLA.mft (raw, json) Hash identifier: Aan3vqRxW+PZ/nKzwp1HL1c8PdaHaUTVvEizluwsU/Y= Subject key identifier: 28:DB:3A:B0:9D:C2:0F:97:44:CE:BA:8B:76:56:56:B8:6D:7E:F5:49 Authority key identifier: 3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0 Certificate issuer: /CN=A919AFBE/serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft Manifest number: 11 Signing time: Fri 05 Dec 2025 05:45:00 +0000 Manifest this update: Fri 05 Dec 2025 05:45:00 +0000 Manifest next update: Fri 12 Dec 2025 05:45:00 +0000 Files and hashes: 1: PVoEjy0O64mMxmE79kE3I3iWTLA.crl (hash: iNBG1vpBDtNFlUCPphv8lcXXf2+snUw3PkPAK1cHHuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AFBE, serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0 Validity Not Before: Dec 5 05:45:00 2025 GMT Not After : Dec 12 05:45:00 2025 GMT Subject: CN=6932715c-f5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:3d:bc:35:53:ad:c4:6c:e6:40:7b:5a:64: dd:48:5d:0e:d3:46:91:37:93:99:e8:4e:f6:23:2c: 39:2c:82:8f:30:ca:69:d8:6b:72:cf:cd:60:cb:4f: ef:82:97:a1:8b:2f:ce:e3:fe:8c:d7:e0:67:57:2c: 9b:38:d9:68:4a:7d:fe:55:bc:5c:53:af:c2:01:b0: ce:81:bc:cf:fc:54:11:2a:54:db:38:3f:59:c9:c9: d6:98:98:27:00:cc:a3:88:5f:12:77:db:e9:45:72: 9f:0d:d4:34:54:6a:41:11:3a:d6:18:a1:db:5b:84: ff:1c:20:26:df:af:5d:e1:3e:2d:75:e1:15:6a:a3: 60:3f:10:41:2d:b2:2c:35:ca:bf:27:92:04:ca:fd: d7:af:7d:cc:a6:bf:8c:f4:18:61:9f:c6:44:8b:5f: b2:11:94:55:ae:51:ef:1d:fe:75:96:ac:46:fa:08: 90:40:4a:98:0d:fa:77:6d:f6:3d:23:6d:e5:c2:31: 8c:70:0a:66:f2:fb:25:52:7a:7d:b0:22:9f:82:fc: af:5c:ef:da:44:f6:ac:8e:6b:b5:88:45:bc:3c:c6: 8b:89:ad:40:92:01:d8:d4:1f:df:06:00:37:4d:81: a2:b6:25:cf:98:ce:c0:08:e9:ff:bd:66:b8:80:5e: 87:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DB:3A:B0:9D:C2:0F:97:44:CE:BA:8B:76:56:56:B8:6D:7E:F5:49 X509v3 Authority Key Identifier: keyid:3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:27:54:2f:03:2d:89:b0:54:c7:5d:e1:d8:29:fe:1b:d4:56: 11:86:40:32:e8:48:e1:f6:60:e8:14:5d:92:4b:f0:fe:c7:72: f5:47:97:f6:65:84:da:dc:07:15:6c:aa:34:63:75:47:d1:fd: a3:21:58:93:21:bf:b5:16:94:35:4a:99:e4:20:38:47:df:99: a7:3d:3e:87:a0:8a:42:3c:5f:c1:8e:ff:f4:84:28:76:4f:73: 0a:37:5f:6c:c5:20:e1:ae:f4:01:d6:7f:c0:1a:b2:17:4c:8c: 6f:b1:0d:b7:b8:6d:e5:0e:23:fd:f3:d1:3d:ce:08:91:c7:33: 86:e3:21:95:d0:d0:7b:82:7c:ad:2c:a4:9b:af:cf:fe:c3:91: d9:69:ec:b3:19:fb:1e:31:f6:8d:6a:bd:ad:93:27:d9:26:b8: a9:36:ba:42:53:b2:b2:c1:fa:f8:39:7a:6f:f5:fc:ea:cd:d9: e5:b0:57:c5:15:a9:af:12:58:41:e3:f9:94:3a:79:f9:f1:6a: d8:b8:0f:43:39:08:f1:1e:86:79:8b:1f:f8:05:ce:27:d3:32: 00:39:83:f7:98:ed:2d:46:9b:d7:18:d6:62:98:02:8d:93:73: cb:03:d0:ed:15:d8:9f:f4:26:da:09:5c:06:56:1e:f9:1c:c5: 42:0e:f5:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QUZCRTExMC8GA1UEBRMoM0Q1QTA0OEYyRDBFRUI4OThDQzY2MTNCRjY0MTM3MjM3 ODk2NENCMDAeFw0yNTEyMDUwNTQ1MDBaFw0yNTEyMTIwNTQ1MDBaMBgxFjAUBgNV BAMTDTY5MzI3MTVjLWY1ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5lD28NVOtxGzmQHtaZN1IXQ7TRpE3k5noTvYjLDksgo8wymnYa3LPzWDLT++C l6GLL87j/ozX4GdXLJs42WhKff5VvFxTr8IBsM6BvM/8VBEqVNs4P1nJydaYmCcA zKOIXxJ32+lFcp8N1DRUakEROtYYodtbhP8cICbfr13hPi114RVqo2A/EEEtsiw1 yr8nkgTK/devfcymv4z0GGGfxkSLX7IRlFWuUe8d/nWWrEb6CJBASpgN+ndt9j0j beXCMYxwCmby+yVSen2wIp+C/K9c79pE9qyOa7WIRbw8xouJrUCSAdjUH98GADdN gaK2Jc+YzsAI6f+9ZriAXofxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKNs6sJ3C D5dEzrqLdlZWuG1+9UkwHwYDVR0jBBgwFoAUPVoEjy0O64mMxmE79kE3I3iWTLAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBRkJFL0MzODgyNzYyQkEx RTExRjBCOTg3MzkzQkM0RjlBRTAyL1BWb0VqeTBPNjRtTXhtRTc5a0UzSTNpV1RM QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFZvRWp5ME82NG1NeG1FNzlrRTNJM2lXVExBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB RkJFL0MzODgyNzYyQkExRTExRjBCOTg3MzkzQkM0RjlBRTAyL1BWb0VqeTBPNjRt TXhtRTc5a0UzSTNpV1RMQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKMnVC8DLYmwVMdd4dgp/hvUVhGGQDLoSOH2YOgUXZJL8P7HcvVHl/Zl hNrcBxVsqjRjdUfR/aMhWJMhv7UWlDVKmeQgOEffmac9PoegikI8X8GO//SEKHZP cwo3X2zFIOGu9AHWf8AashdMjG+xDbe4beUOI/3z0T3OCJHHM4bjIZXQ0HuCfK0s pJuvz/7Dkdlp7LMZ+x4x9o1qva2TJ9kmuKk2ukJTsrLB+vg5em/1/OrN2eWwV8UV qa8SWEHj+ZQ6efnxati4D0M5CPEehnmLH/gFzifTMgA5g/eY7S1Gm9cY1mKYAo2T c8sD0O0V2J/0JtoJXAZWHvkcxUIO9Ro= -----END CERTIFICATE-----Generated at Sat Dec 6 15:24:25 2025 by rpki-client