This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json) Hash identifier: 1gNsd2rxrFQzIVwfLm6ZeY+2I3/4dlvcidNPfoFcNPo= Subject key identifier: 33:63:08:99:0D:FE:51:B9:8B:64:E2:D1:58:7E:8F:90:25:F4:77:0B Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 1388 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft Manifest number: 132C Signing time: Thu 04 Dec 2025 16:42:00 +0000 Manifest this update: Thu 04 Dec 2025 16:41:59 +0000 Manifest next update: Thu 11 Dec 2025 16:41:59 +0000 Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: D53xQTTdcKgDOV8N9ll24gXiQg7KSZN2NhQto6vt2YI=) 2: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: pmGjv9e4kJuui8gahJeniJTVkFZxLqAkqBkutIyaUmM=) 3: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: rzWRSvP8FzgLIAzzQm5a0g9KtMMg7ZcTgH4qB+DOkDI=) 4: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: JtAyYvcjsSIbHjMavRbf74w0IIhNg4IBABZJn0wcwzQ=) 5: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: 3fdnPO7nIXug6dYvzk2siFXVuDYGDIdJas3DCvUTWPA=) 6: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: DOUd4Ct4uA10KaiPoOZjeWOyNrfXwTZYgvv/v0X/i0Y=) 7: DEF977A6E53611EB81682769C4F9AE02.roa (hash: SO0gHlbHvBD1Qdf3mOeX+9pYdaFRkZquUMH00OZSNZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5000 (0x1388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: Dec 4 16:41:59 2025 GMT Not After : Dec 11 16:41:59 2025 GMT Subject: CN=6931b9d7-07fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7a:d6:24:95:5d:44:b0:03:5f:ad:e6:f1:0f: 2c:6d:ee:60:b9:91:3f:d9:e0:ca:f6:43:f6:87:ca: ce:79:35:45:e5:0e:ee:01:4d:2e:4a:97:5c:ea:4d: fc:e5:6f:be:c4:c9:0e:3f:85:4a:5d:fa:be:85:3b: 71:79:8b:79:6b:5a:ed:38:aa:c6:f5:e9:24:f8:4d: b8:55:e4:2d:5c:24:c2:1d:1b:6d:4a:a2:11:e4:c4: 84:e0:09:27:73:dc:26:0e:e5:ee:68:f0:ab:1f:58: cd:15:59:fb:a0:be:05:97:76:63:fd:39:5a:24:1c: be:1f:99:b4:fd:4b:7b:c6:03:72:af:f8:58:59:22: 3e:2e:7a:42:43:44:de:4f:19:03:e3:8e:ae:3e:b2: 76:97:05:9e:5a:73:ac:f2:ae:f7:29:10:89:22:0d: 8a:3a:b0:79:dd:8f:87:75:56:c5:4b:9c:c3:da:e0: 66:2e:10:e8:97:30:c8:6a:f5:e1:21:22:fe:4e:96: e8:fd:9c:13:53:8a:9b:d2:63:a8:f1:ea:40:72:27: ac:a6:49:e7:f2:08:88:d9:00:37:31:5a:6b:54:d7: 65:5e:71:67:88:e9:d6:84:f4:32:65:80:65:46:53: be:62:19:58:08:4a:07:b7:59:9a:f3:0f:ba:3e:fc: 4f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:63:08:99:0D:FE:51:B9:8B:64:E2:D1:58:7E:8F:90:25:F4:77:0B X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:37:5d:ce:ac:47:67:fa:d1:8c:d1:31:7f:ce:e2:4b:a6:f9: f4:84:7e:cf:8d:bd:45:2b:84:26:74:95:e1:25:c9:80:1b:39: 25:e9:54:56:ee:01:3f:c6:47:c9:a7:fa:7b:ed:ce:98:39:bf: c9:3b:10:11:23:48:f4:a0:c2:e4:8e:f8:61:ac:43:2a:5d:f2: 4f:99:60:10:53:7a:18:57:b2:be:b2:5b:9c:74:a3:ae:f3:be: 82:99:c6:d6:14:6b:3d:f5:7e:6f:a4:b5:1b:0f:12:5e:85:9d: 06:a8:98:8f:5d:b5:e3:6c:0b:0e:1d:bd:25:92:a6:40:e0:9e: 57:cd:47:e6:d2:f7:5e:31:37:a1:f9:93:6f:5c:b3:75:6c:d3: 99:91:01:7e:e6:1e:6e:e2:25:97:97:dd:19:a1:16:c4:e5:b0: dd:f6:1c:cf:3f:f8:a7:46:29:88:62:c8:a4:0e:69:1f:1f:30: 17:fe:88:ec:8a:e9:af:25:ac:c0:c5:55:21:b4:30:ee:4e:40: be:78:30:40:41:f2:5b:c8:c6:ce:b7:cb:39:24:f9:4d:be:c8: 6b:45:18:1a:10:54:23:a4:58:86:d5:89:29:e7:ae:f5:1c:a2: 74:0f:30:fa:c7:09:94:bf:58:da:e3:7c:7b:46:21:ea:a7:3c: 6a:19:e6:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjUxMjA0MTY0MTU5WhcNMjUxMjExMTY0MTU5WjAYMRYwFAYD VQQDEw02OTMxYjlkNy0wN2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HrWJJVdRLADX63m8Q8sbe5guZE/2eDK9kP2h8rOeTVF5Q7uAU0uSpdc6k38 5W++xMkOP4VKXfq+hTtxeYt5a1rtOKrG9ekk+E24VeQtXCTCHRttSqIR5MSE4Akn c9wmDuXuaPCrH1jNFVn7oL4Fl3Zj/TlaJBy+H5m0/Ut7xgNyr/hYWSI+LnpCQ0Te TxkD446uPrJ2lwWeWnOs8q73KRCJIg2KOrB53Y+HdVbFS5zD2uBmLhDolzDIavXh ISL+Tpbo/ZwTU4qb0mOo8epAciespknn8giI2QA3MVprVNdlXnFniOnWhPQyZYBl RlO+YhlYCEoHt1ma8w+6PvxPMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNjCJkN /lG5i2Ti0Vh+j5Al9HcLMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyN13OrEdn+tGM0TF/zuJLpvn0hH7Pjb1FK4QmdJXhJcmAGzkl6VRW 7gE/xkfJp/p77c6YOb/JOxARI0j0oMLkjvhhrEMqXfJPmWAQU3oYV7K+slucdKOu 876CmcbWFGs99X5vpLUbDxJehZ0GqJiPXbXjbAsOHb0lkqZA4J5XzUfm0vdeMTeh +ZNvXLN1bNOZkQF+5h5u4iWXl90ZoRbE5bDd9hzPP/inRimIYsikDmkfHzAX/ojs iumvJazAxVUhtDDuTkC+eDBAQfJbyMbOt8s5JPlNvshrRRgaEFQjpFiG1Ykp5671 HKJ0DzD6xwmUv1ja43x7RiHqpzxqGebQ -----END CERTIFICATE-----Generated at Fri Dec 5 21:11:23 2025 by rpki-client