This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft File: RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft (raw, json) Hash identifier: RtzhI3ZxqIuCQMrUwLZ+dVDgPFMYw3KuIyzHlemSqPU= Subject key identifier: A6:98:1A:7C:29:BF:79:27:12:64:FD:55:A9:3E:02:0C:9D:A7:66:9A Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 Certificate issuer: /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573 Certificate serial: 0575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft Manifest number: 0543 Signing time: Tue 02 Dec 2025 22:27:09 +0000 Manifest this update: Tue 02 Dec 2025 22:27:08 +0000 Manifest next update: Tue 09 Dec 2025 22:27:08 +0000 Files and hashes: 1: RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl (hash: 4ldy9QMP+8/m1+d08rkvCvr6w4priqrs/hRX7VG6YCU=) 2: 7AD7390CD15111EE98EBEC1EC4F9AE02.roa (hash: xYTAg38yoW7vEoZGmEJB6isoNNBjQGepwhuw97pD1/8=) 3: 20C2C8980D4111EEB385BA83C4F9AE02.roa (hash: pqx2bVF6KFi6pAp+san9BeaofosCjXIfjaAQRpbI48w=) 4: 5A306016D15111EE98E6801EC4F9AE02.roa (hash: 0iX8GWVZfHTiPTTq9om3cBPBNC8DR5QF75DufZZXDYg=) 5: D26FE5F62BC511EEA4569A67C4F9AE02.roa (hash: nfvl8LItHRnHU7cOFArXS6hV97B38VNc9C2Ezi3lr6U=) 6: C6E67CEACB0911ECA16E4A19C4F9AE02.roa (hash: smZT0oXuvwsnfsI3CoSJhx+rXSo9yTN0/TLArPnl3aY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 22:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1397 (0x575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B2EC, serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573 Validity Not Before: Dec 2 22:27:08 2025 GMT Not After : Dec 9 22:27:08 2025 GMT Subject: CN=692f67bd-45f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:48:e2:b8:ba:57:a8:c3:eb:48:30:fa:8e: f5:bd:27:8b:97:e7:0a:2f:3b:69:ee:f5:5b:19:87: d1:d7:7e:86:79:5e:5e:16:52:a9:7d:6a:a0:20:b8: ef:46:01:78:94:f7:15:de:86:5c:2e:ff:ad:0f:64: 49:0e:4c:44:d8:06:00:39:fd:85:8f:38:b1:96:23: 3d:e3:e2:0c:7c:70:9c:7e:ba:42:3e:46:e0:d7:16: f4:12:2a:ad:fe:26:c2:fd:52:cc:bd:8c:e5:16:14: 7e:75:ea:40:81:0d:36:38:77:de:81:79:78:23:97: 38:1b:53:4d:bb:cc:c7:c0:e9:f7:3a:d6:30:6d:7d: bc:96:fa:b3:c6:0e:cc:b1:b6:97:e6:87:bd:be:f7: df:a4:f7:9d:0a:f2:fc:69:99:4e:c7:1a:93:ca:f3: f6:21:f0:73:68:95:99:3a:a3:71:9e:11:a6:f6:a0: 61:34:00:40:da:72:2e:f4:60:49:5c:5a:3c:c3:2e: fb:28:05:00:96:39:2e:8e:a1:e3:04:a0:17:57:e9: 9f:dd:38:82:96:ba:ac:b8:7b:fa:e7:de:de:78:8a: af:33:1c:5b:06:66:8e:e9:8d:65:15:d7:e8:fe:96: d2:e2:eb:df:bb:01:4a:a8:6c:23:f4:3b:01:e4:3e: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:98:1A:7C:29:BF:79:27:12:64:FD:55:A9:3E:02:0C:9D:A7:66:9A X509v3 Authority Key Identifier: keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:27:ac:35:76:59:c3:23:15:82:c3:9f:0c:1a:e2:15:3a:f8: dc:83:10:25:24:29:bd:55:77:4a:e2:b4:80:49:a0:52:b3:f9: b2:09:c9:19:49:94:06:d7:50:b3:a8:c6:6f:72:1d:f0:31:d4: ac:72:30:2c:6a:b7:78:34:d5:39:15:16:69:f0:58:19:b8:a4: 2e:64:29:ac:7c:a7:78:89:8b:a0:fd:34:41:d5:16:8d:e3:c7: bb:fd:7f:32:ec:96:ef:90:ea:81:d4:1a:97:36:81:d0:f3:30: 60:f3:8c:e5:48:bd:f0:53:da:3a:d3:cc:1a:ba:cf:3c:8d:00: 49:d6:31:83:29:b1:19:c3:15:2d:0d:49:64:95:02:ec:3c:10: 0a:07:45:96:b7:fc:54:9b:50:3f:6d:08:59:30:75:2a:74:61: 92:7f:6f:4b:6b:ee:48:92:46:59:fe:de:33:72:06:28:0c:3b: ec:fb:ab:6e:de:43:96:ff:ca:39:67:96:87:a9:82:05:83:0b: 2b:03:53:94:c1:41:62:72:a6:0b:e0:33:75:ba:fc:0c:e9:91: a2:b8:45:cd:4b:02:c1:34:fe:fb:20:9b:11:ec:85:7d:56:30: 27:ce:99:87:e6:79:3a:4c:64:78:af:0c:3d:1f:e9:0f:d4:7a: 55:72:6f:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyRUMxMTAvBgNVBAUTKDQ2OTIyQzU2NTQ0MDA0MEJEOTlBRkQ0RTMyOUVEOURF QjZGOTI1NzMwHhcNMjUxMjAyMjIyNzA4WhcNMjUxMjA5MjIyNzA4WjAYMRYwFAYD VQQDEw02OTJmNjdiZC00NWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEhI4ri6V6jD60gw+o71vSeLl+cKLztp7vVbGYfR136GeV5eFlKpfWqgILjv RgF4lPcV3oZcLv+tD2RJDkxE2AYAOf2FjzixliM94+IMfHCcfrpCPkbg1xb0Eiqt /ibC/VLMvYzlFhR+depAgQ02OHfegXl4I5c4G1NNu8zHwOn3OtYwbX28lvqzxg7M sbaX5oe9vvffpPedCvL8aZlOxxqTyvP2IfBzaJWZOqNxnhGm9qBhNABA2nIu9GBJ XFo8wy77KAUAljkujqHjBKAXV+mf3TiClrqsuHv6597eeIqvMxxbBmaO6Y1lFdfo /pbS4uvfuwFKqGwj9DsB5D5g5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaYGnwp v3knEmT9Vak+Agydp2aaMB8GA1UdIwQYMBaAFEaSLFZUQAQL2Zr9TjKe2d62+SVz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJFQy84NDI3NTk1NjJC MDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJBdlptdjFPTXA3WjNyYjVK WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JwSXNWbFJBQkF2Wm12MU9NcDdaM3JiNUpYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjJFQy84NDI3NTk1NjJCMDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJB dlptdjFPTXA3WjNyYjVKWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRJ6w1dlnDIxWCw58MGuIVOvjcgxAlJCm9VXdK4rSASaBSs/myCckZ SZQG11CzqMZvch3wMdSscjAsard4NNU5FRZp8FgZuKQuZCmsfKd4iYug/TRB1RaN 48e7/X8y7JbvkOqB1BqXNoHQ8zBg84zlSL3wU9o608waus88jQBJ1jGDKbEZwxUt DUlklQLsPBAKB0WWt/xUm1A/bQhZMHUqdGGSf29La+5IkkZZ/t4zcgYoDDvs+6tu 3kOW/8o5Z5aHqYIFgwsrA1OUwUFicqYL4DN1uvwM6ZGiuEXNSwLBNP77IJsR7IV9 VjAnzpmH5nk6TGR4rww9H+kP1HpVcm8S -----END CERTIFICATE-----Generated at Wed Dec 3 19:32:02 2025 by rpki-client