This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft File: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft (raw, json) Hash identifier: sGhunMKO7yCwfHZyqbJ//lsxhtpCN1/OIZzKOPoXpeE= Subject key identifier: 1E:4B:5D:30:25:D1:60:61:90:F8:65:BE:6D:E0:A7:6F:04:CC:C2:40 Authority key identifier: D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16 Certificate issuer: /CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft Manifest number: 01CA Signing time: Tue 02 Dec 2025 15:05:30 +0000 Manifest this update: Tue 02 Dec 2025 15:05:30 +0000 Manifest next update: Tue 09 Dec 2025 15:05:30 +0000 Files and hashes: 1: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl (hash: 5sAwbTraqxolPM2T3X7on+v+hM/VI1q5I838ENm5ydc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143684, serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16 Validity Not Before: Dec 2 15:05:30 2025 GMT Not After : Dec 9 15:05:30 2025 GMT Subject: CN=692f003a-a1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c1:04:3e:0c:54:b3:a0:19:8a:eb:aa:e7:77: e5:93:09:0b:40:bb:4d:26:96:f4:bc:4d:17:ca:4f: 5f:90:18:ac:c9:13:57:9d:09:d5:b2:7b:4b:f7:66: 11:9b:41:cb:05:3e:a1:0c:26:0e:70:58:0b:9f:9e: 99:d1:74:50:d8:d0:45:ef:b5:c6:52:88:84:76:1d: cb:d6:cd:61:40:f5:69:74:a6:f2:21:19:61:70:60: 73:dc:9f:3d:71:d2:ee:46:42:57:9f:bf:15:09:96: d9:cf:95:4c:f3:aa:2b:23:bc:07:e4:6b:92:b9:ba: 03:2d:fd:d8:11:75:0d:6f:12:7e:08:22:76:28:2e: 18:f9:f7:a0:60:09:92:e3:d2:3e:d5:75:6e:38:59: c3:1a:48:eb:97:35:70:a6:55:da:c6:de:84:00:c0: 7b:02:0d:41:16:72:53:16:a0:b0:41:45:0a:ed:de: f3:15:34:f8:d6:42:68:de:ba:10:48:85:d4:3f:2e: 5a:7c:60:0a:56:5e:42:d9:76:3b:bf:04:cb:7d:ac: ca:a2:f7:bd:78:e8:ca:57:80:e1:9e:79:ca:e2:a0: e6:f8:48:41:c4:9d:9d:d8:43:6e:0c:82:0c:7d:41: 66:2c:7f:64:20:f5:e9:2b:02:5a:6e:b3:30:7f:eb: f9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4B:5D:30:25:D1:60:61:90:F8:65:BE:6D:E0:A7:6F:04:CC:C2:40 X509v3 Authority Key Identifier: keyid:D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f4:b3:fa:26:60:4b:c8:f7:36:82:05:30:40:7f:2b:c8:8b: e8:c1:f8:8a:c6:d6:67:62:0f:6c:0f:f1:79:8a:fd:b9:a1:1d: 5f:ae:d2:29:17:79:cc:66:7a:35:41:7b:c0:88:9d:80:ef:71: 9f:cc:ec:69:6e:ec:01:ef:eb:44:51:e1:de:21:63:53:1b:04: d6:f2:a2:86:ba:a6:f2:a3:36:ce:bb:22:61:a6:70:f3:ad:61: 16:54:6d:c1:85:71:01:96:e9:72:17:15:4d:f4:9d:b5:10:c5: 15:f7:f2:2d:0f:7f:9f:5f:27:e9:31:3b:64:21:7e:bd:ad:58: fc:59:c1:1d:08:47:11:7a:3e:2b:29:3b:ef:88:2e:08:45:da: 1e:8e:b1:c0:c7:22:ed:15:90:ea:bf:ce:1e:e5:85:7c:57:c4: 36:b3:b9:4b:6e:1b:5b:fb:f0:2b:2b:cb:66:8d:de:9e:0b:af: 6c:43:f8:57:17:6e:04:62:96:be:2c:96:60:04:7b:3d:68:58: e5:cd:e3:30:aa:a7:aa:9f:0d:08:42:78:0b:aa:af:62:70:11: e1:4e:d8:6e:7d:79:af:89:ec:e5:c1:2c:e1:9a:ad:8b:64:a4: 66:91:55:d1:4d:1f:b2:d6:0e:36:0b:d4:b7:f1:9f:f0:9c:18: b4:01:37:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM2ODQxMTAvBgNVBAUTKEQxNTNGNzU4NUY2MkU5QzMxNTEyRDI4Njg4ODQwMUMx QTY4RERFMTYwHhcNMjUxMjAyMTUwNTMwWhcNMjUxMjA5MTUwNTMwWjAYMRYwFAYD VQQDEw02OTJmMDAzYS1hMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8MEEPgxUs6AZiuuq53flkwkLQLtNJpb0vE0Xyk9fkBisyRNXnQnVsntL92YR m0HLBT6hDCYOcFgLn56Z0XRQ2NBF77XGUoiEdh3L1s1hQPVpdKbyIRlhcGBz3J89 cdLuRkJXn78VCZbZz5VM86orI7wH5GuSuboDLf3YEXUNbxJ+CCJ2KC4Y+fegYAmS 49I+1XVuOFnDGkjrlzVwplXaxt6EAMB7Ag1BFnJTFqCwQUUK7d7zFTT41kJo3roQ SIXUPy5afGAKVl5C2XY7vwTLfazKove9eOjKV4DhnnnK4qDm+EhBxJ2d2ENuDIIM fUFmLH9kIPXpKwJabrMwf+v5WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5LXTAl 0WBhkPhlvm3gp28EzMJAMB8GA1UdIwQYMBaAFNFT91hfYunDFRLShoiEAcGmjd4W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzY4NC9BNkM4NDBCMjJB QjAxMUVFQUUyRTVEMUFDNEY5QUUwMi8wVlAzV0Y5aTZjTVZFdEtHaUlRQndhYU4z aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBWUDNXRjlpNmNNVkV0S0dpSVFCd2FhTjNoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzY4NC9BNkM4NDBCMjJBQjAxMUVFQUUyRTVEMUFDNEY5QUUwMi8wVlAzV0Y5aTZj TVZFdEtHaUlRQndhYU4zaFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV9LP6JmBLyPc2ggUwQH8ryIvowfiKxtZnYg9sD/F5iv25oR1frtIp F3nMZno1QXvAiJ2A73GfzOxpbuwB7+tEUeHeIWNTGwTW8qKGuqbyozbOuyJhpnDz rWEWVG3BhXEBlulyFxVN9J21EMUV9/ItD3+fXyfpMTtkIX69rVj8WcEdCEcRej4r KTvviC4IRdoejrHAxyLtFZDqv84e5YV8V8Q2s7lLbhtb+/ArK8tmjd6eC69sQ/hX F24EYpa+LJZgBHs9aFjlzeMwqqeqnw0IQngLqq9icBHhTthufXmviezlwSzhmq2L ZKRmkVXRTR+y1g42C9S38Z/wnBi0ATdz -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:37 2025 by rpki-client