This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: tf6m6r/eIWdoQaL1/b4RwqXmRdbZcZkJCIOT4U6ROXA= Subject key identifier: B2:01:69:FF:AC:18:07:49:C2:8B:34:B4:26:FA:F8:C6:F6:AB:6C:EE Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 128D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 1258 Signing time: Thu 04 Dec 2025 16:47:00 +0000 Manifest this update: Thu 04 Dec 2025 16:47:00 +0000 Manifest next update: Thu 11 Dec 2025 16:47:00 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: TApNNM8ne7VCt7jfQHFlKYAUfGBDMS1sNWej0A3cuPc=) 2: 2DDAF496ABD811F08750DA6CC4F9AE02.roa (hash: jvF4AHWc7m7ZqI2zF3mfzsXTE42RWmBksodUplqDm6Q=) 3: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: yc5Wpx2pnLB6guboninc18l3eTqDU3/v4bwKPQPqPjM=) 4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: h9ciRWLJSdS0atFvu++kaB1ITj06IUzdCtx5wytomjU=) 5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: mZ42GzLjePORGPsx4cUiGS3yWSydLNxKAMaA/1jB8jc=) 6: 6470410AABD811F08E1F646DC4F9AE02.roa (hash: dPDIVkMTdtOEZEGNrrSKg00cxdj3q2OK74zNJlVoHRk=) 7: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: 7vUaCwhIHYmymYhzXLTd2mT71lJe+Jcy16L9hwRgmBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4749 (0x128d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Dec 4 16:47:00 2025 GMT Not After : Dec 11 16:47:00 2025 GMT Subject: CN=6931bb04-2090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:01:a3:3e:91:cd:2e:c5:13:cb:17:8d:c0:b2: 37:14:99:0f:2a:57:ee:d5:f2:fd:c1:1a:a7:6f:94: 07:e7:ec:d7:0f:3c:64:10:e7:1d:3c:47:d6:66:8a: 30:04:16:6f:5e:03:7f:92:f3:79:40:16:43:ae:da: 55:8f:c2:1c:a3:21:bc:61:f2:7b:4b:20:7c:74:6d: 1c:66:5a:3c:0c:97:88:ed:e8:3d:29:cb:c5:f8:04: 10:2f:96:f2:4f:7d:14:56:79:7b:7a:74:30:ec:6a: e6:90:9a:59:83:ab:e8:6c:6e:06:42:33:02:99:6e: af:7c:8d:e3:ff:97:05:15:a1:1b:a6:c6:3d:61:48: 1c:8b:d4:cb:25:e5:73:c9:03:2d:85:0f:c9:e8:45: 6d:62:a1:cd:b3:70:58:ad:d2:3c:1f:0c:08:39:ea: d2:57:1a:d4:0d:50:bd:20:34:fe:da:f6:10:6b:46: 3f:77:70:94:78:27:8d:34:6d:af:79:69:7d:89:88: 30:1e:40:d4:92:0f:9d:13:41:26:c3:6b:85:f6:91: 20:22:e6:56:85:ac:95:55:e1:29:fc:3a:6b:83:3e: cb:16:e6:f8:9b:98:23:5b:3a:40:cf:d1:15:f2:2a: b7:e8:ab:49:39:d0:f8:95:f0:7c:06:b3:e2:f5:60: 1b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:01:69:FF:AC:18:07:49:C2:8B:34:B4:26:FA:F8:C6:F6:AB:6C:EE X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:6b:c5:79:31:b6:e7:46:3d:21:4c:c5:a2:3f:0c:ef:f0:39: b0:ae:a8:24:c5:6e:f8:28:ec:ce:ed:e9:d8:75:2c:45:72:2d: e0:7b:93:3e:05:19:b5:de:c4:df:e0:64:e5:d2:a4:32:94:b2: d4:c1:c9:c7:39:e4:57:aa:78:1d:b9:20:a8:a3:96:c6:79:00: 95:7e:c6:26:44:fb:01:71:a3:19:2d:d1:f4:02:aa:b1:b6:a5: 1a:89:3c:11:fc:1c:10:d7:c4:eb:26:0e:61:79:b3:67:ae:c0: 75:cb:63:bd:60:68:88:70:65:fb:93:94:7a:bb:bf:c4:80:ee: d8:a1:ea:f1:67:41:72:2b:c4:9f:72:11:e5:5f:13:2b:fc:20: 95:fd:3f:26:00:0c:ca:79:a5:29:a0:22:de:e1:d0:63:33:15: 4d:08:a1:9c:5c:24:ef:70:02:88:4e:1d:9d:35:5a:e8:65:c9: b6:20:2e:c8:e9:c1:d3:ed:2b:4c:42:1a:96:a1:04:8e:c6:bc: 48:c5:81:ce:64:85:40:bb:5d:e1:83:d9:e5:ff:83:02:d2:73: 1b:03:b3:de:65:94:ca:c8:7c:5a:82:1c:34:ae:07:fc:cf:85: 20:a6:8a:75:55:ee:e2:b5:e6:28:16:fa:dc:ce:9c:9f:a7:a4: 6d:45:f2:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjUxMjA0MTY0NzAwWhcNMjUxMjExMTY0NzAwWjAYMRYwFAYD VQQDEw02OTMxYmIwNC0yMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygGjPpHNLsUTyxeNwLI3FJkPKlfu1fL9wRqnb5QH5+zXDzxkEOcdPEfWZoow BBZvXgN/kvN5QBZDrtpVj8IcoyG8YfJ7SyB8dG0cZlo8DJeI7eg9KcvF+AQQL5by T30UVnl7enQw7GrmkJpZg6vobG4GQjMCmW6vfI3j/5cFFaEbpsY9YUgci9TLJeVz yQMthQ/J6EVtYqHNs3BYrdI8HwwIOerSVxrUDVC9IDT+2vYQa0Y/d3CUeCeNNG2v eWl9iYgwHkDUkg+dE0Emw2uF9pEgIuZWhayVVeEp/Dprgz7LFub4m5gjWzpAz9EV 8iq36KtJOdD4lfB8BrPi9WAbXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIBaf+s GAdJwos0tCb6+Mb2q2zuMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2a8V5MbbnRj0hTMWiPwzv8DmwrqgkxW74KOzO7enYdSxFci3ge5M+ BRm13sTf4GTl0qQylLLUwcnHOeRXqngduSCoo5bGeQCVfsYmRPsBcaMZLdH0Aqqx tqUaiTwR/BwQ18TrJg5hebNnrsB1y2O9YGiIcGX7k5R6u7/EgO7YoerxZ0FyK8Sf chHlXxMr/CCV/T8mAAzKeaUpoCLe4dBjMxVNCKGcXCTvcAKITh2dNVroZcm2IC7I 6cHT7StMQhqWoQSOxrxIxYHOZIVAu13hg9nl/4MC0nMbA7PeZZTKyHxaghw0rgf8 z4Ugpop1Ve7iteYoFvrczpyfp6RtRfKA -----END CERTIFICATE-----Generated at Sat Dec 6 11:20:40 2025 by rpki-client