This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft File: G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json) Hash identifier: Fx1HDn++PleCMWOMWD3BU1Nv18wVnWFdBzuL4nGe1Qg= Subject key identifier: 5D:D7:A6:29:8A:D6:D4:3A:A0:87:30:77:61:FA:BC:3B:0B:34:B7:AB Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 Certificate issuer: /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Certificate serial: 0946 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft Manifest number: 0946 Signing time: Thu 04 Dec 2025 19:22:58 +0000 Manifest this update: Thu 04 Dec 2025 19:22:58 +0000 Manifest next update: Thu 11 Dec 2025 19:22:58 +0000 Files and hashes: 1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: 746MBILmMiR+He+UWQiHG7p0TqPaTn0NPIlTv4UUQ+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2374 (0x946) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Validity Not Before: Dec 4 19:22:58 2025 GMT Not After : Dec 11 19:22:58 2025 GMT Subject: CN=6931df92-a6a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:2a:83:89:ca:25:5f:44:b9:7f:50:44:81: 28:bd:53:29:5b:81:35:98:ca:d4:ae:f0:e7:62:91: a5:77:e9:48:88:6b:d9:da:d8:5b:fb:e1:a6:08:79: 03:ea:d3:2b:e4:b3:01:e1:f1:79:be:d6:08:ac:a5: e8:20:84:07:fc:b7:88:35:c7:c4:70:83:5b:69:9f: 8f:26:95:6a:de:ae:37:72:ea:88:8e:81:30:9c:a4: 7b:ae:0c:f7:62:62:20:1b:4b:48:f3:a6:32:13:08: b7:aa:43:d0:f6:f9:1f:3d:3a:b0:d6:7e:ff:61:e4: ad:e8:cf:25:e3:90:4a:61:bb:b0:f8:75:9e:97:8c: 13:c8:72:e2:e0:dd:31:68:4f:bf:c4:cc:69:68:63: d5:59:a8:44:8d:be:5e:60:9e:17:ec:8c:cb:31:45: 7f:1a:b0:76:d1:c5:17:df:20:2e:cc:c9:d5:70:3a: 4e:7e:e5:4d:f4:6e:c8:54:19:d8:71:8e:74:1c:ac: 99:0f:d0:a3:ce:13:88:ee:05:95:f3:a8:da:65:5f: 9a:32:ed:da:77:ea:69:a9:19:77:e6:ba:dd:1f:a5: 07:6e:94:37:ab:79:12:b0:d1:99:fd:89:ee:1d:b3: 85:3c:98:28:21:85:0a:71:fd:19:12:36:81:fc:9d: ba:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D7:A6:29:8A:D6:D4:3A:A0:87:30:77:61:FA:BC:3B:0B:34:B7:AB X509v3 Authority Key Identifier: keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:59:03:02:36:f9:3e:0f:4e:16:b8:fc:bf:86:4a:aa:7e:81: c4:8b:4c:e7:ad:7f:81:cc:e6:dd:07:02:3f:b8:65:07:2b:44: fa:c3:46:23:3d:74:21:a3:77:4e:87:41:42:80:5e:d8:75:dd: 51:a9:e6:0f:7d:cb:7b:dc:2f:a0:82:9f:30:2a:b9:9d:4e:a7: 2d:a8:1b:7f:e4:df:cb:e8:e3:86:38:83:ab:06:7b:41:24:eb: 09:e9:da:ff:7e:c2:e9:f2:00:e6:98:95:f9:4e:a7:3b:4a:9b: f6:ba:f6:dc:63:7c:f3:a7:04:31:da:e6:29:9b:c2:89:d6:4d: 27:56:75:df:ae:e3:fc:87:65:28:68:76:31:2d:10:d0:01:38: 72:0a:ea:97:4d:b9:ed:8b:d5:88:bd:e6:b3:43:fc:36:fa:3c: e7:d5:1e:5b:84:18:6d:67:45:30:ac:1e:04:46:ae:d9:19:66: 72:e1:f0:8c:f7:5b:be:c5:2d:48:ca:f6:6f:3a:b7:68:06:3f: 6f:14:5f:db:58:7f:91:6d:3a:58:13:b9:a9:c8:92:0d:7f:67: c4:b7:52:13:fd:53:d8:95:98:f9:52:16:c0:d5:bb:00:57:22: 33:0c:3d:24:b3:67:09:18:e2:50:5a:c6:8e:e4:1e:31:c7:c2: 03:d3:78:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKDFCOTAyMjY2MzIyMUQ4Q0U3QUVFQjAzRjNGNTc5OUYw RDU3RUE2MTYwHhcNMjUxMjA0MTkyMjU4WhcNMjUxMjExMTkyMjU4WjAYMRYwFAYD VQQDEw02OTMxZGY5Mi1hNmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmAqg4nKJV9EuX9QRIEovVMpW4E1mMrUrvDnYpGld+lIiGvZ2thb++GmCHkD 6tMr5LMB4fF5vtYIrKXoIIQH/LeINcfEcINbaZ+PJpVq3q43cuqIjoEwnKR7rgz3 YmIgG0tI86YyEwi3qkPQ9vkfPTqw1n7/YeSt6M8l45BKYbuw+HWel4wTyHLi4N0x aE+/xMxpaGPVWahEjb5eYJ4X7IzLMUV/GrB20cUX3yAuzMnVcDpOfuVN9G7IVBnY cY50HKyZD9CjzhOI7gWV86jaZV+aMu3ad+ppqRl35rrdH6UHbpQ3q3kSsNGZ/Ynu HbOFPJgoIYUKcf0ZEjaB/J26IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3XpimK 1tQ6oIcwd2H6vDsLNLerMB8GA1UdIwQYMBaAFBuQImYyIdjOeu6wPz9XmfDVfqYW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9GNDdCNkNENEFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJNNTY3ckFfUDFlWjhOVi1w aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0c1QWlaakloMk01NjdyQV9QMWVaOE5WLXBoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9GNDdCNkNENEFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJN NTY3ckFfUDFlWjhOVi1waFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQWQMCNvk+D04WuPy/hkqqfoHEi0znrX+BzObdBwI/uGUHK0T6w0Yj PXQho3dOh0FCgF7Ydd1RqeYPfct73C+ggp8wKrmdTqctqBt/5N/L6OOGOIOrBntB JOsJ6dr/fsLp8gDmmJX5Tqc7Spv2uvbcY3zzpwQx2uYpm8KJ1k0nVnXfruP8h2Uo aHYxLRDQAThyCuqXTbnti9WIveazQ/w2+jzn1R5bhBhtZ0UwrB4ERq7ZGWZy4fCM 91u+xS1IyvZvOrdoBj9vFF/bWH+RbTpYE7mpyJINf2fEt1IT/VPYlZj5UhbA1bsA VyIzDD0ks2cJGOJQWsaO5B4xx8ID03gR -----END CERTIFICATE-----Generated at Sat Dec 6 20:08:39 2025 by rpki-client