This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json) Hash identifier: NLUlDkPGuC+nofMG3c+zW31rYISyElmaI32BpgqAvDE= Subject key identifier: EA:4A:E0:A9:2F:68:AD:2D:74:E3:F9:D8:7C:3A:C0:73:4E:8B:D1:A9 Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Certificate serial: 034B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft Manifest number: 033D Signing time: Sat 06 Dec 2025 23:38:30 +0000 Manifest this update: Sat 06 Dec 2025 23:38:29 +0000 Manifest next update: Sat 13 Dec 2025 23:38:29 +0000 Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: AypcdsagouS17Df+nb/qYmc1LHJ1smEKyqgKYl8fLSY=) 2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: m+WKn873Hl55Khy/g6RA/gEeVV9c4cRJl02WKXW/PsA=) 3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: 5bJUFy/NaNMyZ9zgSNCfZmx6vdOpGOHo3QK1QhFuhLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 843 (0x34b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Validity Not Before: Dec 6 23:38:29 2025 GMT Not After : Dec 13 23:38:29 2025 GMT Subject: CN=6934be75-a4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:42:e9:a7:44:36:2c:f4:c9:59:98:2f:38: 60:b6:49:51:46:a0:ce:46:c5:7e:59:af:48:47:16: eb:da:87:d3:25:f8:15:22:c5:71:db:f2:b0:31:6d: 50:7e:9c:00:55:d2:45:c9:f9:dd:bd:d3:59:cf:ba: 62:3d:b0:08:4a:34:19:c3:90:5d:47:f8:75:98:08: ad:f0:c5:8e:ec:54:3f:b1:a6:a5:a3:22:a6:49:93: 05:33:5c:32:26:6f:88:d2:9d:4c:78:4f:44:09:b6: ff:97:4d:e3:89:cd:c1:28:84:94:e6:03:8f:1c:85: 70:1d:44:d2:48:17:2f:79:fd:01:13:20:a3:97:1b: 8d:b7:bd:61:56:52:f2:5f:b4:dc:9c:13:f1:0d:9b: 4b:c6:0d:d6:87:cb:79:73:5e:1c:5a:0b:ac:9a:e7: 35:d6:da:ef:b7:32:86:28:b6:87:b4:c3:87:22:b5: a6:f2:be:ae:86:43:58:71:40:62:40:d8:cb:29:cc: 3a:49:cc:8f:44:f2:5c:b6:bb:b3:7f:43:08:1a:fe: 92:92:04:77:c6:48:c6:96:dc:d7:d4:8f:87:93:6f: fe:6c:bf:69:74:e9:4b:ac:f8:57:61:31:54:d1:b0: e6:96:51:88:5d:87:7b:9e:88:24:72:9f:f4:b4:a0: e1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4A:E0:A9:2F:68:AD:2D:74:E3:F9:D8:7C:3A:C0:73:4E:8B:D1:A9 X509v3 Authority Key Identifier: keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bb:6b:d7:5c:38:b1:69:41:b6:fc:ab:e1:71:1c:a0:69:2d: 18:55:57:68:f6:05:d6:c5:f5:61:3b:7f:22:0f:28:a1:80:bf: 03:d5:b7:d8:66:97:7e:54:d6:e7:a8:c5:23:30:4c:a1:34:38: a2:e1:c1:17:88:b9:bf:10:e8:0a:39:90:6c:48:4b:7a:95:12: d6:06:6b:00:dd:06:3a:50:ad:df:9c:e7:36:c3:6b:63:8f:6b: 2a:99:8d:e6:91:31:b9:29:17:a3:6f:bb:28:13:f4:32:69:e7: 03:65:39:48:74:d9:34:b1:ea:1c:70:a5:b7:60:e8:ca:07:80: 9d:1f:f9:c6:00:7f:c9:65:21:59:56:ed:10:e7:4d:fa:9b:d4: aa:8d:45:6f:71:93:12:3b:83:06:7b:af:70:97:db:6c:10:f0: 1f:d0:49:5e:31:29:67:7a:40:55:9f:36:a8:15:04:d9:4c:34: 1f:c9:cb:fe:2b:d4:62:7b:aa:5f:2b:bf:bc:f0:f9:bc:c8:5b: 6c:8b:66:17:ec:a0:28:0c:0c:ff:57:1e:f4:9b:0e:41:33:04: 50:03:49:fe:a5:d2:0b:3d:77:b2:41:dd:4a:7a:5f:12:70:72: 72:40:2f:f2:98:82:e4:eb:0c:fe:95:77:13:94:86:0d:a6:64: 93:07:7d:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2RTExMTAvBgNVBAUTKEUzNEIyODU0MjA1NkNFOUUwNjUwRkVGQzBBQjEyNDIx NkNCNUY5QzEwHhcNMjUxMjA2MjMzODI5WhcNMjUxMjEzMjMzODI5WjAYMRYwFAYD VQQDEw02OTM0YmU3NS1hNGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVhC6adENiz0yVmYLzhgtklRRqDORsV+Wa9IRxbr2ofTJfgVIsVx2/KwMW1Q fpwAVdJFyfndvdNZz7piPbAISjQZw5BdR/h1mAit8MWO7FQ/saaloyKmSZMFM1wy Jm+I0p1MeE9ECbb/l03jic3BKISU5gOPHIVwHUTSSBcvef0BEyCjlxuNt71hVlLy X7TcnBPxDZtLxg3Wh8t5c14cWgusmuc11trvtzKGKLaHtMOHIrWm8r6uhkNYcUBi QNjLKcw6ScyPRPJctruzf0MIGv6SkgR3xkjGltzX1I+Hk2/+bL9pdOlLrPhXYTFU 0bDmllGIXYd7nogkcp/0tKDhMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpK4Kkv aK0tdOP52Hw6wHNOi9GpMB8GA1UdIwQYMBaAFONLKFQgVs6eBlD+/AqxJCFstfnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzZFMS9BNTdEODZEOEU3 REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pwNEdVUDc4Q3JFa0lXeTEt Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwc29WQ0JXenA0R1VQNzhDckVrSVd5MS1jRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzZFMS9BNTdEODZEOEU3REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pw NEdVUDc4Q3JFa0lXeTEtY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKu2vXXDixaUG2/KvhcRygaS0YVVdo9gXWxfVhO38iDyihgL8D1bfY Zpd+VNbnqMUjMEyhNDii4cEXiLm/EOgKOZBsSEt6lRLWBmsA3QY6UK3fnOc2w2tj j2sqmY3mkTG5KRejb7soE/QyaecDZTlIdNk0seoccKW3YOjKB4CdH/nGAH/JZSFZ Vu0Q5036m9SqjUVvcZMSO4MGe69wl9tsEPAf0EleMSlnekBVnzaoFQTZTDQfycv+ K9Rie6pfK7+88Pm8yFtsi2YX7KAoDAz/Vx70mw5BMwRQA0n+pdILPXeyQd1Kel8S cHJyQC/ymILk6wz+lXcTlIYNpmSTB32g -----END CERTIFICATE-----Generated at Sun Dec 7 06:03:36 2025 by rpki-client