This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft File: ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json) Hash identifier: tkpyDOHdicoLx3ljwSNKVQ05AhEzkU157bUcScNDiYo= Subject key identifier: 97:C6:C4:6C:DB:88:BE:F7:13:C2:06:6A:B1:43:AE:9D:81:93:54:F3 Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C Certificate issuer: /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft Manifest number: 6E Signing time: Tue 02 Dec 2025 19:25:35 +0000 Manifest this update: Tue 02 Dec 2025 19:25:34 +0000 Manifest next update: Tue 09 Dec 2025 19:25:34 +0000 Files and hashes: 1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: 7J6oHoB5UqeOo0NBPxW08sNWNT1uksBruOUJ2n/7sD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 19:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Validity Not Before: Dec 2 19:25:34 2025 GMT Not After : Dec 9 19:25:34 2025 GMT Subject: CN=692f3d2f-dddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:23:28:92:2f:76:ee:ed:e3:14:ff:df:9f: bb:b9:f1:47:a4:7a:8a:d5:c7:a2:e3:98:1f:23:98: 5a:b2:04:19:13:e9:fd:b1:e2:12:e2:7a:82:7b:ed: 54:60:bd:42:8e:4f:82:75:c7:d5:0f:b2:d0:fb:89: 29:47:90:10:ce:55:15:7c:6d:dc:02:98:ee:ca:6f: 94:e2:ac:5e:5f:bc:ac:86:fa:ba:cc:e7:3a:54:ee: 8e:fa:28:ed:02:cb:da:1f:d2:66:78:2c:bd:d0:82: 32:2c:61:ac:10:63:10:7a:c6:07:59:c7:1f:e9:86: 62:78:99:3a:01:f1:57:80:be:3f:1b:00:b6:4a:09: 49:dd:3c:d8:1b:68:7a:1f:d7:63:06:f2:08:c0:97: 2d:82:94:4a:2c:53:79:ef:60:32:ec:a3:73:27:59: 53:13:39:e6:83:e1:8d:ff:18:0d:7f:60:26:ef:3f: 99:a4:48:44:20:a5:68:50:25:10:d8:de:77:a4:76: 91:4b:66:b3:8a:5e:de:d9:43:f3:b0:a9:84:84:ee: 15:c0:a9:03:1c:ef:fd:ce:0c:f7:d8:66:b6:a2:b8: 47:57:1f:00:e2:85:d3:fc:d5:12:d8:e5:e5:14:8d: 4e:58:f3:80:87:87:29:54:b3:b8:2d:27:05:41:13: e0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C6:C4:6C:DB:88:BE:F7:13:C2:06:6A:B1:43:AE:9D:81:93:54:F3 X509v3 Authority Key Identifier: keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8a:36:65:52:3d:ff:7d:c3:d6:e9:88:f8:48:16:ef:3d:3b: 13:62:b2:e6:d1:0b:7b:1c:26:14:bb:e4:80:b9:fc:04:c5:8c: 13:66:68:c0:96:03:71:fa:70:8a:1b:ce:dc:9d:f2:86:4c:a6: 2f:88:63:e7:98:33:8c:0f:dd:05:df:f8:27:00:06:c0:68:54: 8a:2a:aa:2b:58:76:db:6a:bb:92:bb:6b:6a:ae:59:f6:e1:4c: 3f:6c:dc:38:6c:33:b5:c3:27:44:a8:3d:dc:b2:a7:08:a1:d7: d5:e0:0d:fe:a5:76:61:2a:75:ab:75:ed:43:4e:59:7a:a8:eb: 46:45:35:f2:32:cd:f0:76:c5:cf:3c:0c:1d:ef:02:a2:df:61: e7:f9:b8:db:1c:cf:51:1e:6c:b7:02:20:11:de:a5:b2:4d:f9: 74:0a:f7:ff:dd:6f:15:54:bb:bd:32:21:cd:19:88:48:68:af: 0b:52:32:9d:2c:53:82:d8:43:2e:dd:0d:fd:7f:8a:d9:f1:a0: b4:1f:03:bb:bb:d3:7c:f8:7d:87:29:f7:22:a9:0f:a7:0b:a2: 32:f8:b5:b2:34:2a:e5:d5:75:68:7d:19:38:c2:e0:d3:4f:c1: d5:03:32:64:15:6d:43:7a:8f:a7:e3:0c:0a:bd:a8:a6:eb:40: c0:6b:c8:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Q0MwRjExMC8GA1UEBRMoOEExMUVCNzY0QjE1Nzg1MzlENkVEM0IyOTAzQkY2MUY0 QzA4MDA3QzAeFw0yNTEyMDIxOTI1MzRaFw0yNTEyMDkxOTI1MzRaMBgxFjAUBgNV BAMTDTY5MmYzZDJmLWRkZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDgiMoki927u3jFP/fn7u58UekeorVx6LjmB8jmFqyBBkT6f2x4hLieoJ77VRg vUKOT4J1x9UPstD7iSlHkBDOVRV8bdwCmO7Kb5TirF5fvKyG+rrM5zpU7o76KO0C y9of0mZ4LL3QgjIsYawQYxB6xgdZxx/phmJ4mToB8VeAvj8bALZKCUndPNgbaHof 12MG8gjAly2ClEosU3nvYDLso3MnWVMTOeaD4Y3/GA1/YCbvP5mkSEQgpWhQJRDY 3nekdpFLZrOKXt7ZQ/OwqYSE7hXAqQMc7/3ODPfYZraiuEdXHwDihdP81RLY5eUU jU5Y84CHhylUs7gtJwVBE+CLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl8bEbNuI vvcTwgZqsUOunYGTVPMwHwYDVR0jBBgwFoAUihHrdksVeFOdbtOykDv2H0wIAHww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDQzBGLzQ5RTk5NkM0MkM2 MjExRjBBOUIxQzY1QUM0RjlBRTAyL2loSHJka3NWZUZPZGJ0T3lrRHYySDB3SUFI dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWhIcmRrc1ZlRk9kYnRPeWtEdjJIMHdJQUh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD QzBGLzQ5RTk5NkM0MkM2MjExRjBBOUIxQzY1QUM0RjlBRTAyL2loSHJka3NWZUZP ZGJ0T3lrRHYySDB3SUFIdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIqKNmVSPf99w9bpiPhIFu89OxNisubRC3scJhS75IC5/ATFjBNmaMCW A3H6cIobztyd8oZMpi+IY+eYM4wP3QXf+CcABsBoVIoqqitYdttqu5K7a2quWfbh TD9s3DhsM7XDJ0SoPdyypwih19XgDf6ldmEqdat17UNOWXqo60ZFNfIyzfB2xc88 DB3vAqLfYef5uNscz1EebLcCIBHepbJN+XQK9//dbxVUu70yIc0ZiEhorwtSMp0s U4LYQy7dDf1/itnxoLQfA7u703z4fYcp9yKpD6cLojL4tbI0KuXVdWh9GTjC4NNP wdUDMmQVbUN6j6fjDAq9qKbrQMBryAA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:33 2025 by rpki-client