This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: HjkgvX3A0A5mGEE6wzM031UH6fLHaDdSa/MdrzbfPpU= Subject key identifier: 5A:39:4F:FE:E1:55:57:DF:6F:61:FA:C0:F8:2E:62:9B:64:41:C6:84 Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 1299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 1263 Signing time: Sat 20 Dec 2025 16:52:01 +0000 Manifest this update: Sat 20 Dec 2025 16:52:01 +0000 Manifest next update: Sat 27 Dec 2025 16:52:01 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: weojh7H2GXjkJVXujLPwRxzQhg8oNXMb4osaSa6NAwc=) 2: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: mZ42GzLjePORGPsx4cUiGS3yWSydLNxKAMaA/1jB8jc=) 3: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: h9ciRWLJSdS0atFvu++kaB1ITj06IUzdCtx5wytomjU=) 4: 6470410AABD811F08E1F646DC4F9AE02.roa (hash: dPDIVkMTdtOEZEGNrrSKg00cxdj3q2OK74zNJlVoHRk=) 5: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: 7vUaCwhIHYmymYhzXLTd2mT71lJe+Jcy16L9hwRgmBQ=) 6: 2DDAF496ABD811F08750DA6CC4F9AE02.roa (hash: yqFNpSSmaxdNadip8sVOPzWdAXABErfvh2vCh2L72xg=) 7: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: yc5Wpx2pnLB6guboninc18l3eTqDU3/v4bwKPQPqPjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4761 (0x1299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Dec 20 16:52:01 2025 GMT Not After : Dec 27 16:52:01 2025 GMT Subject: CN=6946d431-235c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:64:ed:d3:69:ac:24:dd:e7:05:66:42:57: 9f:39:10:f7:e1:c0:64:a2:e3:ed:5f:db:08:45:a6: 09:9e:39:9c:cf:3e:83:b5:3b:f7:14:be:72:56:87: 95:a3:ac:78:d0:7e:ea:f2:6f:b7:6e:0e:2c:59:9a: 56:38:5a:a7:2c:52:fd:4a:ca:10:ba:25:6b:da:4c: 6f:da:91:ce:87:37:7e:df:3c:16:90:11:e4:3b:5b: fd:81:07:f3:e9:bc:92:60:c7:f9:e8:75:b4:42:dc: e6:9c:b6:61:de:50:3b:5c:46:15:e9:9e:5f:2b:20: ae:ab:bf:be:5f:ff:01:e3:0f:f3:87:21:c1:1f:af: cd:69:31:59:e6:8d:f4:a1:c5:08:68:b5:0b:94:d1: 91:ea:1e:f7:22:96:21:0e:34:4f:a5:0e:85:2c:f4: c6:1e:64:3a:f3:97:5b:4d:e8:07:2e:e4:64:68:1c: f2:a0:ca:1b:7f:b8:74:73:65:ad:0c:b7:f5:3a:9d: c6:f4:f7:97:96:fe:36:b7:ed:b8:b6:48:ad:8f:59: be:2c:42:30:aa:4b:97:30:07:84:7d:ec:ba:c3:0e: 44:2a:47:fa:31:2d:dc:e2:6b:46:2c:5c:33:52:ad: 2e:c0:8d:97:e6:1f:11:18:76:c9:81:4f:99:97:de: e2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:39:4F:FE:E1:55:57:DF:6F:61:FA:C0:F8:2E:62:9B:64:41:C6:84 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:db:a2:45:f5:a7:84:d5:a5:f4:69:a5:c2:49:db:1a:70:bc: d4:6e:50:f1:50:b1:e1:5b:cd:7c:1f:cb:bc:01:39:c6:35:d7: d1:9f:db:c0:8c:04:81:70:4a:ef:94:d2:ac:ba:dd:7a:20:de: 59:4d:f4:5d:56:cd:e3:3c:43:67:a8:f2:9e:6a:02:7d:60:1b: a1:b8:e9:07:ff:4f:56:a8:fd:97:0d:31:f8:fa:10:72:44:5c: 77:cb:b5:e2:92:d8:c3:b7:a2:70:b1:07:e4:e2:4f:04:c9:c5: e6:e2:6f:b7:fd:a3:e4:e8:5d:e8:2f:b2:7b:be:ae:19:f4:7b: 0e:34:97:b3:76:d8:f7:79:b2:55:d2:db:e5:63:6a:b1:da:9d: 1b:12:c7:53:da:9a:97:30:bf:02:7f:0e:14:bd:b6:ee:1e:4c: f7:d7:49:bd:86:0d:9b:99:64:c2:d6:b2:6c:2b:43:f2:8d:23: 27:c4:25:79:47:4f:76:44:01:f3:80:95:82:a9:bc:2b:aa:03: 05:d1:d2:18:4b:87:f7:7c:83:c2:d4:25:b2:38:90:09:c7:84: c0:c2:9a:0f:e0:a1:0f:24:52:7f:38:91:0d:9d:43:82:57:23: 6a:32:f4:e9:8b:95:0e:78:f0:ca:81:ee:25:07:de:dd:c5:13: 61:a1:50:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjUxMjIwMTY1MjAxWhcNMjUxMjI3MTY1MjAxWjAYMRYwFAYD VQQDDA02OTQ2ZDQzMS0yMzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTVk7dNprCTd5wVmQlefORD34cBkouPtX9sIRaYJnjmczz6DtTv3FL5yVoeV o6x40H7q8m+3bg4sWZpWOFqnLFL9SsoQuiVr2kxv2pHOhzd+3zwWkBHkO1v9gQfz 6bySYMf56HW0QtzmnLZh3lA7XEYV6Z5fKyCuq7++X/8B4w/zhyHBH6/NaTFZ5o30 ocUIaLULlNGR6h73IpYhDjRPpQ6FLPTGHmQ685dbTegHLuRkaBzyoMobf7h0c2Wt DLf1Op3G9PeXlv42t+24tkitj1m+LEIwqkuXMAeEfey6ww5EKkf6MS3c4mtGLFwz Uq0uwI2X5h8RGHbJgU+Zl97iawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFo5T/7h VVffb2H6wPguYptkQcaEMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi26JF9aeE1aX0aaXCSdsacLzUblDxULHhW818H8u8ATnGNdfRn9vA jASBcErvlNKsut16IN5ZTfRdVs3jPENnqPKeagJ9YBuhuOkH/09WqP2XDTH4+hBy RFx3y7XiktjDt6JwsQfk4k8EycXm4m+3/aPk6F3oL7J7vq4Z9HsONJezdtj3ebJV 0tvlY2qx2p0bEsdT2pqXML8Cfw4UvbbuHkz310m9hg2bmWTC1rJsK0PyjSMnxCV5 R092RAHzgJWCqbwrqgMF0dIYS4f3fIPC1CWyOJAJx4TAwpoP4KEPJFJ/OJENnUOC VyNqMvTpi5UOePDKge4lB97dxRNhoVAA -----END CERTIFICATE-----Generated at Sat Dec 20 20:27:46 2025 by rpki-client