This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft File: povAkQ-DHeyBilCjIUX3Q1XOY8A.mft (raw, json) Hash identifier: +unnmKV2L2Eutzbs+d2zdLJjbPuwDs7mzRQYyHQGSqA= Subject key identifier: 91:DC:B4:E9:46:73:7E:EF:44:AA:3C:55:91:85:59:73:F2:B2:34:BA Authority key identifier: A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 Certificate issuer: /CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft Manifest number: 068B Signing time: Thu 04 Dec 2025 21:15:03 +0000 Manifest this update: Thu 04 Dec 2025 21:15:02 +0000 Manifest next update: Thu 11 Dec 2025 21:15:02 +0000 Files and hashes: 1: povAkQ-DHeyBilCjIUX3Q1XOY8A.crl (hash: PtNmIlSzEPsIm5Yo6H20Zdt1MBdJEJ84L5rbo+HTU5A=) 2: 7CEDB29645AB11F0B5F06B1EC4F9AE02.roa (hash: SOend745Ty2THQMalNwJuy4Bzbzq44VzFyWqGOXgtig=) 3: 61C842F4467A11F08609BD71C4F9AE02.roa (hash: CN7R3hh6U/a3moc9IYNNpKBkUBMAltkFsKNKJ/Ee7QI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B6FC, serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Validity Not Before: Dec 4 21:15:02 2025 GMT Not After : Dec 11 21:15:02 2025 GMT Subject: CN=6931f9d6-89b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:22:dd:83:9b:44:1d:4a:e5:0c:10:20:ce: 13:3e:72:13:66:05:d7:e2:a3:80:66:ea:98:30:9c: 3d:ed:f5:a3:2f:22:c4:c6:ee:ed:ee:22:42:8e:74: a6:b8:aa:41:95:be:7d:17:a5:2a:ce:06:98:31:5a: 2b:59:0f:d0:cb:be:9e:5d:ac:8c:78:38:2b:d3:2e: 57:4c:83:6e:c1:12:dc:c6:d9:01:78:2d:e3:3f:81: a2:32:9c:da:50:cd:a3:c3:0f:41:9c:5a:98:24:86: e6:63:de:e0:82:cb:76:71:55:1c:04:ee:6d:8f:3d: ec:fe:0f:af:19:71:62:76:5d:9d:d3:4f:3b:d1:ad: 37:24:83:4e:64:c2:76:a9:3f:80:c5:c2:9c:bd:91: be:55:c8:11:d3:03:77:1f:44:9a:7d:15:68:69:03: d5:31:f5:c1:ff:6d:27:05:a5:1e:cd:b3:24:15:88: 24:1e:54:bc:84:97:25:bb:56:3b:2e:6f:eb:ca:3c: 20:a0:a7:72:a1:77:e4:2f:1e:fe:7a:d7:a8:7a:fe: 1f:92:ea:ac:97:4e:a1:f5:87:59:f1:d1:d1:dd:92: ff:97:7a:14:f6:a3:e0:44:25:a7:0c:aa:0b:86:9e: 37:48:7c:06:5f:fb:fa:75:01:d4:34:23:e3:4e:2e: 7e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DC:B4:E9:46:73:7E:EF:44:AA:3C:55:91:85:59:73:F2:B2:34:BA X509v3 Authority Key Identifier: keyid:A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:f0:b9:8f:23:d7:78:a3:61:7f:38:09:14:ad:52:9f:43:c9: 8b:20:67:d7:1b:14:fd:c7:b1:e7:d3:0c:90:66:82:99:93:e5: 02:3b:5b:57:d8:50:51:78:94:5d:b9:ad:fc:15:b1:6a:25:c6: 2d:8c:36:9d:78:20:54:44:5d:38:9f:61:7f:dc:cf:2a:c6:87: 5a:dd:54:5f:19:c0:fa:fc:28:53:3b:2a:67:b3:54:7c:62:6b: 11:c6:d8:66:cc:61:54:50:4e:63:d4:93:14:7d:6c:89:a9:a6: aa:ed:79:92:05:be:70:8f:1e:8f:6d:91:29:ca:1b:fe:5a:dc: 9b:67:7e:06:2b:4b:1f:9f:4c:5a:a3:aa:79:2d:19:eb:88:6f: ff:c5:2c:58:f0:ae:09:e3:8d:2b:aa:ab:c8:7d:77:81:83:17: 21:e1:aa:f7:24:e3:0e:18:f9:f3:83:b1:eb:c5:8b:7d:78:b3: 9d:96:a8:8a:88:ec:2c:6d:f6:da:49:a8:5a:19:34:1b:ab:0e: 49:14:52:ad:31:d4:8e:25:8c:4b:3a:f8:7f:1e:8a:e6:29:3f: 11:62:58:c7:73:f6:1c:ca:b9:0c:78:c2:1c:48:a7:ae:a8:30: 2d:30:aa:34:3f:14:ef:98:e9:ad:9a:ea:0c:34:4f:16:ee:8d: 08:8e:12:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2RkMxMTAvBgNVBAUTKEE2OEJDMDkxMEY4MzFERUM4MThBNTBBMzIxNDVGNzQz NTVDRTYzQzAwHhcNMjUxMjA0MjExNTAyWhcNMjUxMjExMjExNTAyWjAYMRYwFAYD VQQDEw02OTMxZjlkNi04OWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1Mi3YObRB1K5QwQIM4TPnITZgXX4qOAZuqYMJw97fWjLyLExu7t7iJCjnSm uKpBlb59F6UqzgaYMVorWQ/Qy76eXayMeDgr0y5XTINuwRLcxtkBeC3jP4GiMpza UM2jww9BnFqYJIbmY97ggst2cVUcBO5tjz3s/g+vGXFidl2d00870a03JINOZMJ2 qT+AxcKcvZG+VcgR0wN3H0SafRVoaQPVMfXB/20nBaUezbMkFYgkHlS8hJclu1Y7 Lm/ryjwgoKdyoXfkLx7+eteoev4fkuqsl06h9YdZ8dHR3ZL/l3oU9qPgRCWnDKoL hp43SHwGX/v6dQHUNCPjTi5+rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHctOlG c37vRKo8VZGFWXPysjS6MB8GA1UdIwQYMBaAFKaLwJEPgx3sgYpQoyFF90NVzmPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjZGQy84ODkyQ0M0QTk4 MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhleUJpbENqSVVYM1ExWE9Z OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvdkFrUS1ESGV5QmlsQ2pJVVgzUTFYT1k4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjZGQy84ODkyQ0M0QTk4MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhl eUJpbENqSVVYM1ExWE9ZOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl8LmPI9d4o2F/OAkUrVKfQ8mLIGfXGxT9x7Hn0wyQZoKZk+UCO1tX 2FBReJRdua38FbFqJcYtjDadeCBURF04n2F/3M8qxoda3VRfGcD6/ChTOypns1R8 YmsRxthmzGFUUE5j1JMUfWyJqaaq7XmSBb5wjx6PbZEpyhv+WtybZ34GK0sfn0xa o6p5LRnriG//xSxY8K4J440rqqvIfXeBgxch4ar3JOMOGPnzg7HrxYt9eLOdlqiK iOwsbfbaSahaGTQbqw5JFFKtMdSOJYxLOvh/HormKT8RYljHc/YcyrkMeMIcSKeu qDAtMKo0PxTvmOmtmuoMNE8W7o0IjhLr -----END CERTIFICATE-----Generated at Sat Dec 6 13:55:32 2025 by rpki-client