This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft File: k32ZUe4fk_ysJDM7CD-dfy458Pk.mft (raw, json) Hash identifier: Rs2mC9Sue2gwXcDH48lYFC7rSqZkSqSaNGuUOWwGn1s= Subject key identifier: ED:22:2A:1F:43:F4:88:DA:66:E4:56:E6:4F:15:EA:FD:4D:11:4A:66 Authority key identifier: 93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 Certificate issuer: /CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Certificate serial: 08FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft Manifest number: 08F7 Signing time: Sat 06 Dec 2025 19:30:58 +0000 Manifest this update: Sat 06 Dec 2025 19:30:57 +0000 Manifest next update: Sat 13 Dec 2025 19:30:57 +0000 Files and hashes: 1: k32ZUe4fk_ysJDM7CD-dfy458Pk.crl (hash: zMLyp0JR0+uYm3FbExwSbrTphcvu9IvKY8fzVFFOs1w=) 2: 6A3C327ABD1711EA8A3C8E20C4F9AE02.roa (hash: chUNg5uPEOUI/4y/JkNyLjCI88SKibEBtbB6b3Giy1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2302 (0x8fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C8C4, serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Validity Not Before: Dec 6 19:30:57 2025 GMT Not After : Dec 13 19:30:57 2025 GMT Subject: CN=69348472-4366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:68:5d:e6:20:64:ce:ca:b6:e6:dd:1f:39:c4: a1:37:7b:10:94:b6:b1:25:dc:38:1d:7b:7c:de:5a: c3:9f:11:4f:eb:3a:5a:1c:2d:cc:14:53:4b:05:d3: ae:c4:fd:7d:c8:59:05:3e:1d:dd:ef:67:de:8c:b2: 8f:b6:16:64:97:4a:6b:43:8b:e2:79:8c:8c:be:46: 9c:7b:40:77:e6:de:52:ba:e5:21:81:f4:b9:90:7c: 53:61:60:98:c4:17:c5:f5:a5:74:35:a4:ac:37:d3: 2b:0b:f6:7c:e6:da:ba:f3:fa:ff:65:ed:da:7e:a3: 9e:83:f4:84:5d:75:d8:0d:4f:e8:93:70:9d:8d:ed: aa:92:39:79:e9:93:e0:3d:3c:2d:7d:d3:cc:cc:96: bd:21:00:e4:13:0f:0c:aa:b6:89:a4:8d:e5:f9:be: eb:8e:9c:83:5c:42:c0:b8:b0:27:da:a5:e6:65:24: 35:5a:65:6c:3d:d8:53:66:a4:91:f6:24:8a:38:82: 72:2f:cc:10:58:d2:69:7b:31:61:40:be:5f:69:f0: 1a:ff:0e:f4:a4:d3:c8:b5:08:87:6c:d3:30:73:19: 6a:de:4a:ba:0c:0c:fa:66:be:4c:60:7b:7b:0b:b0: 57:46:7e:f7:b8:a7:14:fe:5b:3d:62:7a:34:b8:b6: d8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:22:2A:1F:43:F4:88:DA:66:E4:56:E6:4F:15:EA:FD:4D:11:4A:66 X509v3 Authority Key Identifier: keyid:93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e9:fa:72:09:49:cb:44:87:39:3f:57:cc:63:c6:15:a3:6a: 4e:ff:f5:0d:0e:c8:d8:b3:ec:1e:18:17:58:0b:c0:71:6c:90: f0:9f:9b:22:9c:b5:71:6c:be:4e:11:ce:87:2c:af:df:c1:6a: 3e:92:d1:22:af:ed:83:73:fb:97:38:ff:83:99:3d:5b:9a:67: 44:34:d8:ac:54:13:8f:da:42:a7:82:b6:b8:70:8f:aa:7f:80: 72:78:7f:54:18:b2:df:e7:25:53:30:b0:86:c5:58:e0:7a:80: 55:30:72:60:85:a4:ea:c3:15:75:e3:f3:7a:25:dc:cd:b0:6b: 89:c9:64:f8:f1:60:e1:33:b4:05:26:01:1f:f6:79:68:95:8d: 22:4c:c3:85:2b:1b:51:ab:2d:22:2d:eb:8a:be:e6:49:13:6d: 34:dd:3e:dd:4d:28:1f:69:a2:25:ea:07:d4:b8:90:fe:09:1d: 4a:0d:4d:1c:05:9a:6e:ac:dc:58:e2:39:90:d6:b7:d0:d8:b0: 6f:c3:2f:da:37:30:16:a2:4f:59:44:90:ea:c5:60:a5:0d:0e: 6c:28:c4:52:86:18:8d:dc:89:f7:4e:ef:e4:df:0d:33:ba:d4: cd:99:e8:f6:8d:58:8b:d9:23:44:65:50:e9:37:9f:71:39:d9: 40:d4:d9:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4QzQxMTAvBgNVBAUTKDkzN0Q5OTUxRUUxRjkzRkNBQzI0MzMzQjA4M0Y5RDdG MkUzOUYwRjkwHhcNMjUxMjA2MTkzMDU3WhcNMjUxMjEzMTkzMDU3WjAYMRYwFAYD VQQDEw02OTM0ODQ3Mi00MzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmhd5iBkzsq25t0fOcShN3sQlLaxJdw4HXt83lrDnxFP6zpaHC3MFFNLBdOu xP19yFkFPh3d72fejLKPthZkl0prQ4vieYyMvkace0B35t5SuuUhgfS5kHxTYWCY xBfF9aV0NaSsN9MrC/Z85tq68/r/Ze3afqOeg/SEXXXYDU/ok3Cdje2qkjl56ZPg PTwtfdPMzJa9IQDkEw8MqraJpI3l+b7rjpyDXELAuLAn2qXmZSQ1WmVsPdhTZqSR 9iSKOIJyL8wQWNJpezFhQL5fafAa/w70pNPItQiHbNMwcxlq3kq6DAz6Zr5MYHt7 C7BXRn73uKcU/ls9Yno0uLbYnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0iKh9D 9IjaZuRW5k8V6v1NEUpmMB8GA1UdIwQYMBaAFJN9mVHuH5P8rCQzOwg/nX8uOfD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzhDNC9DMjQ0QzgzQUJE MTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0ZmtfeXNKRE03Q0QtZGZ5NDU4 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szMlpVZTRma195c0pETTdDRC1kZnk0NThQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzhDNC9DMjQ0QzgzQUJEMTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0Zmtf eXNKRE03Q0QtZGZ5NDU4UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI6fpyCUnLRIc5P1fMY8YVo2pO//UNDsjYs+weGBdYC8BxbJDwn5si nLVxbL5OEc6HLK/fwWo+ktEir+2Dc/uXOP+DmT1bmmdENNisVBOP2kKngra4cI+q f4ByeH9UGLLf5yVTMLCGxVjgeoBVMHJghaTqwxV14/N6JdzNsGuJyWT48WDhM7QF JgEf9nlolY0iTMOFKxtRqy0iLeuKvuZJE2003T7dTSgfaaIl6gfUuJD+CR1KDU0c BZpurNxY4jmQ1rfQ2LBvwy/aNzAWok9ZRJDqxWClDQ5sKMRShhiN3In3Tu/k3w0z utTNmej2jViL2SNEZVDpN59xOdlA1Nlj -----END CERTIFICATE-----Generated at Sat Dec 6 20:56:24 2025 by rpki-client