This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: zAGafE5JFlFyMvqn30ZK08foEHdCC+OT5e9XLh210RE= Subject key identifier: 25:FB:53:1E:55:44:33:9E:62:3D:CB:EF:F4:86:F9:46:91:77:14:B0 Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 1693 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 1689 Signing time: Thu 18 Dec 2025 16:34:31 +0000 Manifest this update: Thu 18 Dec 2025 16:34:31 +0000 Manifest next update: Thu 25 Dec 2025 16:34:31 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: 8BXfcB/G1ysz0xo8V5fIYn0YMuy/D7blpi78x34y0Ew=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: LPGhf2+lZ/tfy7iMoJQ9mcHsSA792NuIJHPh9NLe0yI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 02:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5779 (0x1693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: Dec 18 16:34:31 2025 GMT Not After : Dec 25 16:34:31 2025 GMT Subject: CN=69442d17-c371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:15:ea:a5:0a:89:a4:6e:30:65:a4:fa:51:7d: f6:85:f1:32:a4:26:07:a9:35:54:b5:f0:32:d5:88: d3:15:7f:ef:59:dc:3f:8b:ec:52:5b:21:6b:81:0a: 2a:f9:e8:fe:12:9d:3a:ae:fd:f1:91:84:34:04:c6: 8c:28:4d:ef:d2:1d:ea:13:24:76:b9:45:c3:ec:b0: 71:08:bc:97:3d:a4:42:d4:c6:4a:78:71:fc:3f:2e: 14:34:02:ce:50:7f:ab:eb:e9:e8:ab:9a:78:17:f5: fe:3a:b2:ca:29:eb:5f:c2:1d:fc:48:08:f3:df:19: 82:6c:7a:af:02:04:b7:69:44:e2:6e:c4:2f:29:9c: 76:79:9f:8e:b5:c8:02:30:55:2d:ef:83:05:89:4c: 2b:32:23:6e:aa:3c:1f:d5:e7:63:38:90:eb:6a:5e: f0:7c:a9:d6:5e:cb:2f:a1:ec:c0:c9:ca:6a:b4:ef: e2:20:ab:c7:ae:92:54:fe:49:9a:dc:81:ae:bf:71: 6b:ee:ec:7a:d7:c3:2c:bf:ca:75:99:27:aa:b2:0b: 44:2f:99:1a:63:dd:b2:5f:a4:7a:71:b2:e3:83:1f: 64:95:37:fd:9f:ad:72:53:9b:2a:4f:b7:f4:b7:e7: 6b:43:fa:af:31:f0:7e:76:f3:ef:e1:59:b1:55:b4: 61:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FB:53:1E:55:44:33:9E:62:3D:CB:EF:F4:86:F9:46:91:77:14:B0 X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:46:d9:fc:79:13:4e:6b:fc:b6:b5:80:2c:30:84:58:17:61: cd:3d:08:64:bd:40:40:e4:31:e7:02:2c:e3:01:ef:a5:57:b4: 3d:af:6f:35:a7:eb:93:00:3d:2b:0d:9f:5d:c7:9b:29:8b:3c: a8:3a:3b:f7:4b:52:75:8f:f9:a0:1a:83:40:65:75:62:29:de: a1:66:eb:2f:7e:5e:5d:f2:ba:43:23:9c:71:17:1a:cd:9b:db: 6d:3a:05:ce:86:26:cf:14:ba:df:e5:f6:42:68:d8:44:11:1a: 9e:bc:87:3f:7b:0b:c7:2d:5b:e7:60:c6:9e:f8:ba:8e:4c:6d: 2d:68:5f:1b:5a:5a:6f:c6:81:40:eb:a8:2a:ca:e0:cb:17:e0: df:d7:4d:5e:c6:72:98:a8:0f:6f:cd:00:83:c3:97:da:34:7b: 65:43:71:b2:1b:24:9f:4c:ad:12:4e:6c:7a:fb:ca:8b:36:6f: 56:70:0c:b5:3d:97:b4:43:55:b4:e8:ae:10:d5:a6:52:85:89: c4:c3:86:1c:76:03:0c:a9:11:87:0a:c1:b9:a5:b3:99:be:13: de:0a:19:c2:e5:4e:9a:b6:21:0d:ca:77:90:10:53:44:84:5c: 01:c4:4e:99:f8:ce:91:d1:e7:cc:cc:2d:39:3f:30:4a:fe:e3: 36:3a:eb:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjUxMjE4MTYzNDMxWhcNMjUxMjI1MTYzNDMxWjAYMRYwFAYD VQQDDA02OTQ0MmQxNy1jMzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+hXqpQqJpG4wZaT6UX32hfEypCYHqTVUtfAy1YjTFX/vWdw/i+xSWyFrgQoq +ej+Ep06rv3xkYQ0BMaMKE3v0h3qEyR2uUXD7LBxCLyXPaRC1MZKeHH8Py4UNALO UH+r6+noq5p4F/X+OrLKKetfwh38SAjz3xmCbHqvAgS3aUTibsQvKZx2eZ+OtcgC MFUt74MFiUwrMiNuqjwf1edjOJDral7wfKnWXssvoezAycpqtO/iIKvHrpJU/kma 3IGuv3Fr7ux618Msv8p1mSeqsgtEL5kaY92yX6R6cbLjgx9klTf9n61yU5sqT7f0 t+drQ/qvMfB+dvPv4VmxVbRhRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCX7Ux5V RDOeYj3L7/SG+UaRdxSwMB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBERtn8eRNOa/y2tYAsMIRYF2HNPQhkvUBA5DHnAizjAe+lV7Q9r281 p+uTAD0rDZ9dx5spizyoOjv3S1J1j/mgGoNAZXViKd6hZusvfl5d8rpDI5xxFxrN m9ttOgXOhibPFLrf5fZCaNhEERqevIc/ewvHLVvnYMae+LqOTG0taF8bWlpvxoFA 66gqyuDLF+Df101exnKYqA9vzQCDw5faNHtlQ3GyGySfTK0STmx6+8qLNm9WcAy1 PZe0Q1W06K4Q1aZShYnEw4YcdgMMqRGHCsG5pbOZvhPeChnC5U6atiENyneQEFNE hFwBxE6Z+M6R0efMzC05PzBK/uM2Ouui -----END CERTIFICATE-----Generated at Thu Dec 18 19:29:34 2025 by rpki-client