This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft File: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft (raw, json) Hash identifier: t7X/gGPkew6Kf6coGJE+ALL+145S6Etgu6OTFyS3F4g= Subject key identifier: 20:5D:B1:FB:E0:04:B9:27:DB:39:EE:66:43:18:75:42:55:BA:F0:E7 Authority key identifier: EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 Certificate issuer: /CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Certificate serial: 0EB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft Manifest number: 0EAB Signing time: Thu 04 Dec 2025 17:13:50 +0000 Manifest this update: Thu 04 Dec 2025 17:13:50 +0000 Manifest next update: Thu 11 Dec 2025 17:13:50 +0000 Files and hashes: 1: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl (hash: 4hwD5mgqPW0dsVig0AnpwwDq+U+ai8jnrz33apM13+s=) 2: 0DFAD3529E1611E98059B049C4F9AE02.roa (hash: xrn7kqtWfpKDJ8ptvmKz6itXOdAPKg554aAbP2n2DQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3763 (0xeb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FEA1, serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Validity Not Before: Dec 4 17:13:50 2025 GMT Not After : Dec 11 17:13:50 2025 GMT Subject: CN=6931c14e-cbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:45:34:38:66:c6:3a:0d:f9:d6:53:71:59:80: c3:62:2c:f5:8e:b2:9a:88:91:67:d6:52:96:e5:7c: d0:1d:c1:d0:20:2a:c9:4e:7d:0b:f6:e5:a2:84:c5: d5:36:6e:9c:6e:b5:35:5e:8a:9b:e4:6b:5a:5c:0f: 44:6d:3e:51:fd:b8:2d:74:d3:b6:44:69:79:7c:7e: fe:f3:d9:bf:ba:bd:a6:c4:9a:e5:28:c2:b6:93:a8: 3e:ca:ff:e0:be:e7:42:af:91:cd:d0:b6:8e:4a:2a: 02:ce:b5:4e:fa:a1:8d:d4:72:36:07:c2:6e:0e:56: 33:79:c8:61:4a:67:cf:b3:7a:36:f4:09:c0:83:52: ff:ea:8c:34:e3:88:85:88:b5:08:49:9a:a3:25:68: 7d:b8:7e:8b:41:83:01:b8:ed:8c:cf:01:1f:7f:e9: 5b:9b:70:e3:30:3e:64:ad:88:3e:49:2f:96:c2:35: 45:0c:d2:d8:38:29:94:6d:10:7e:a8:64:bc:17:46: 7b:c2:60:1f:b8:d8:9b:10:85:26:6a:bb:17:16:ad: 89:6e:7c:dc:cd:f3:23:b6:95:53:8a:d1:45:3f:9d: d5:4b:23:4e:ac:91:28:02:92:74:3f:75:ec:95:af: 8e:4a:94:b3:6d:48:cc:e0:b4:1c:55:53:9d:9f:c7: ea:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5D:B1:FB:E0:04:B9:27:DB:39:EE:66:43:18:75:42:55:BA:F0:E7 X509v3 Authority Key Identifier: keyid:EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:a0:b0:a6:77:dd:65:a0:84:f4:f4:5b:d6:88:6e:88:01:23: e8:e2:8f:47:13:0c:13:0e:9a:34:70:85:4d:c4:0b:ff:f4:60: e1:ef:7e:3b:b2:44:29:aa:3a:6d:4e:19:08:17:e5:2d:c9:43: 79:df:e6:04:b0:cf:4d:cc:29:53:6f:8a:ba:82:a6:b9:a8:62: 7b:d9:5c:77:b4:f1:2f:24:e7:01:89:48:6d:76:db:d6:f8:f5: 60:9d:8a:41:1b:bb:46:67:aa:fc:2c:b2:e9:23:f6:8b:c6:b2: bd:59:ea:15:3f:11:cd:f6:9b:e1:fa:84:f5:c9:12:84:89:20: 51:b7:c1:1e:d2:77:a4:92:e7:19:b2:ae:96:f0:8d:31:63:0c: fa:d7:98:01:b7:d6:aa:76:73:59:6a:cd:71:d8:e6:7b:e8:e8: 76:d4:59:ef:c0:8d:27:4c:a6:2d:7f:0d:3e:56:53:9f:05:73: c0:ba:5b:71:46:52:f0:bb:33:cf:2f:76:0e:d8:d0:08:61:8d: 8c:3b:38:30:26:94:19:82:e6:56:c0:b8:1b:21:16:4f:c7:e9: 5c:13:93:52:88:fa:9f:6b:24:0c:9f:c4:5e:10:7b:49:bb:d9: 8e:38:ef:c3:f9:06:cd:6e:b8:65:37:ae:7a:8a:c5:41:23:76: 08:c7:fe:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFQTExMTAvBgNVBAUTKEVGNkMxOTRCQjI4OTREMzNFNkRFMDY0MjIzMkQ5NENF NEU5RUYxOTQwHhcNMjUxMjA0MTcxMzUwWhcNMjUxMjExMTcxMzUwWjAYMRYwFAYD VQQDEw02OTMxYzE0ZS1jYmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0U0OGbGOg351lNxWYDDYiz1jrKaiJFn1lKW5XzQHcHQICrJTn0L9uWihMXV Nm6cbrU1Xoqb5GtaXA9EbT5R/bgtdNO2RGl5fH7+89m/ur2mxJrlKMK2k6g+yv/g vudCr5HN0LaOSioCzrVO+qGN1HI2B8JuDlYzechhSmfPs3o29AnAg1L/6ow044iF iLUISZqjJWh9uH6LQYMBuO2MzwEff+lbm3DjMD5krYg+SS+WwjVFDNLYOCmUbRB+ qGS8F0Z7wmAfuNibEIUmarsXFq2JbnzczfMjtpVTitFFP53VSyNOrJEoApJ0P3Xs la+OSpSzbUjM4LQcVVOdn8fqHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBdsfvg BLkn2znuZkMYdUJVuvDnMB8GA1UdIwQYMBaAFO9sGUuyiU0z5t4GQiMtlM5OnvGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkVBMS9CRkNCODVFQzlF MTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRUUG0zZ1pDSXkyVXprNmU4 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyd1pTN0tKVFRQbTNnWkNJeTJVems2ZThaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkVBMS9CRkNCODVFQzlFMTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRU UG0zZ1pDSXkyVXprNmU4WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4oLCmd91loIT09FvWiG6IASPo4o9HEwwTDpo0cIVNxAv/9GDh7347 skQpqjptThkIF+UtyUN53+YEsM9NzClTb4q6gqa5qGJ72Vx3tPEvJOcBiUhtdtvW +PVgnYpBG7tGZ6r8LLLpI/aLxrK9WeoVPxHN9pvh+oT1yRKEiSBRt8Ee0nekkucZ sq6W8I0xYwz615gBt9aqdnNZas1x2OZ76Oh21FnvwI0nTKYtfw0+VlOfBXPAultx RlLwuzPPL3YO2NAIYY2MOzgwJpQZguZWwLgbIRZPx+lcE5NSiPqfayQMn8ReEHtJ u9mOOO/D+QbNbrhlN656isVBI3YIx/7a -----END CERTIFICATE-----Generated at Sat Dec 6 18:06:12 2025 by rpki-client