This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft File: _eNrbpSTmOUtleidQL32CyXbabk.mft (raw, json) Hash identifier: MPISp339ELzE/Rxicxca0dFEOULG+GgkP5UiNoIeI5w= Subject key identifier: 4A:FE:C4:4D:54:4B:47:3F:C2:0A:D4:25:83:1A:88:CE:34:6C:9B:84 Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9 Certificate serial: 18F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft Manifest number: 1866 Signing time: Sun 14 Dec 2025 16:25:01 +0000 Manifest this update: Sun 14 Dec 2025 16:25:01 +0000 Manifest next update: Sun 21 Dec 2025 16:25:01 +0000 Files and hashes: 1: _eNrbpSTmOUtleidQL32CyXbabk.crl (hash: ljL+QZC+21AZhfWjyDquNQSSmpnYOIs8lUQ0cOwrfCs=) 2: AF2BF494314B11F0BDC2D637C4F9AE02.roa (hash: /1J4f9DUb/35uCpXwmz+NmbAI2453+Nij3SziuypiQY=) 3: 5D75149CD70D11F0B16F7C3995D3641D.roa (hash: W2WG2pihA0Y79l/nVFRnSUeCLL6oNnSZep7NvPbt3Ek=) 4: 4409B8649D1011F0B28FB758C4F9AE02.roa (hash: A/zZSRGjkMwADjlZyW6cF/auyn1kJtFRTWSHvAVO1hc=) 5: 0717511C564511F0A1E8983AC4F9AE02.roa (hash: xG2LS6C8x8CQUK4qPW/RvBSwEnqkcjEWwMOeK61dfdw=) 6: E807C5CC52A411EEB770555CC4F9AE02.roa (hash: MYDMwEH13UUV8AshJhyD48FZfAvalduY5XFAT0V7ih0=) 7: EF885538C28B11EBBF310469C4F9AE02.roa (hash: zCtYWfWmMHrxhAWz295ThSf+06H/coZnMyFAor81eJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 16:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6392 (0x18f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9 Validity Not Before: Dec 14 16:25:01 2025 GMT Not After : Dec 21 16:25:01 2025 GMT Subject: CN=693ee4dd-774a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:6d:c8:04:33:84:82:f2:46:35:e3:c0:d1: 21:14:50:9c:71:78:fe:5e:d3:b9:26:69:83:68:52: 00:4c:5e:7e:80:f4:07:fe:91:9e:2a:32:3c:e6:e2: 9f:83:32:c4:7b:51:c7:c8:4d:16:b6:10:82:a1:d3: ec:23:8b:44:a5:00:d9:1e:76:96:df:b0:20:71:5c: d8:04:60:bc:3c:6b:b3:87:15:ec:b4:69:ad:18:a2: 6f:cc:04:9b:94:c3:e1:20:5f:7d:4e:56:3a:2f:38: 4c:2c:4b:5f:2d:d1:60:2f:be:1e:30:9e:02:8c:26: 42:be:c8:76:43:49:cf:35:92:00:47:6e:f8:9e:69: 16:d4:42:86:ba:4a:c6:2d:53:fc:47:bf:75:ae:bc: 1a:ce:34:28:f0:27:a0:52:fd:04:5d:62:55:d6:e9: a4:35:fc:06:ae:94:22:2d:60:ed:23:a3:16:0a:21: cf:a2:21:5b:cc:55:dc:5e:42:30:9d:85:bb:22:e8: 40:3e:ad:0e:93:9c:a0:75:82:37:8c:6c:3a:43:0d: ce:5f:ec:4a:eb:94:83:8d:0e:c0:4f:bd:75:02:f7: 56:b7:7f:fb:72:49:29:ed:cd:83:2b:6b:01:38:79: f9:01:9d:c6:de:10:ea:4e:3e:ba:b5:32:e0:94:a8: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FE:C4:4D:54:4B:47:3F:C2:0A:D4:25:83:1A:88:CE:34:6C:9B:84 X509v3 Authority Key Identifier: keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ea:06:22:35:1e:e7:fc:ec:f2:c9:60:16:80:25:1f:5d:46: ec:54:9f:a1:93:7b:71:3b:18:15:e2:24:33:1e:7c:c6:a6:16: 34:91:72:f3:14:45:f2:13:af:86:87:d0:e9:f6:66:29:07:e1: b4:f2:24:7b:de:84:83:a4:ca:0f:da:89:24:78:8c:cc:ec:44: d2:19:28:6a:b6:df:58:df:05:9b:99:3d:4c:7e:98:fb:3e:40: f5:68:73:21:57:88:6a:2d:3d:1a:4c:6b:08:6a:88:25:7f:8b: c7:aa:fa:c0:73:e9:cd:4e:60:50:b3:96:83:1a:ed:58:bc:dc: 35:2f:d6:d8:ed:a7:29:26:4e:7d:39:64:8a:48:a6:a2:d3:d8: 32:d3:fb:fc:93:cd:15:9b:31:92:0f:12:18:31:96:aa:d4:73: 23:67:1c:ea:d6:c7:b8:6c:9b:82:a2:ea:a9:85:64:65:91:44: 7f:30:78:b2:81:01:27:b5:3f:bf:9e:26:1c:b3:e0:3b:53:90: 81:94:3e:df:98:f7:64:35:72:8e:6b:3e:5b:3b:c4:67:4f:53: 91:1a:0c:99:01:6b:32:36:3e:39:f6:95:3b:3a:e9:cf:3b:4e: 7a:8e:79:ca:a1:74:7a:59:e6:90:b9:90:2a:f2:0d:65:4c:59: be:2e:69:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKEZERTM2QjZFOTQ5Mzk4RTUyRDk1RTg5RDQwQkRGNjBC MjVEQjY5QjkwHhcNMjUxMjE0MTYyNTAxWhcNMjUxMjIxMTYyNTAxWjAYMRYwFAYD VQQDDA02OTNlZTRkZC03NzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsd9tyAQzhILyRjXjwNEhFFCccXj+XtO5JmmDaFIATF5+gPQH/pGeKjI85uKf gzLEe1HHyE0WthCCodPsI4tEpQDZHnaW37AgcVzYBGC8PGuzhxXstGmtGKJvzASb lMPhIF99TlY6LzhMLEtfLdFgL74eMJ4CjCZCvsh2Q0nPNZIAR274nmkW1EKGukrG LVP8R791rrwazjQo8CegUv0EXWJV1umkNfwGrpQiLWDtI6MWCiHPoiFbzFXcXkIw nYW7IuhAPq0Ok5ygdYI3jGw6Qw3OX+xK65SDjQ7AT711AvdWt3/7ckkp7c2DK2sB OHn5AZ3G3hDqTj66tTLglKjHuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEr+xE1U S0c/wgrUJYMaiM40bJuEMB8GA1UdIwQYMBaAFP3ja26Uk5jlLZXonUC99gsl22m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi82MjhERTUwMkRG MjMxMUU3OTcyMjVEMkVDNEY5QUUwMi9fZU5yYnBTVG1PVXRsZWlkUUwzMkN5WGJh YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19lTnJicFNUbU9VdGxlaWRRTDMyQ3lYYmFiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi82MjhERTUwMkRGMjMxMUU3OTcyMjVEMkVDNEY5QUUwMi9fZU5yYnBTVG1P VXRsZWlkUUwzMkN5WGJhYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD6gYiNR7n/OzyyWAWgCUfXUbsVJ+hk3txOxgV4iQzHnzGphY0kXLz FEXyE6+Gh9Dp9mYpB+G08iR73oSDpMoP2okkeIzM7ETSGShqtt9Y3wWbmT1Mfpj7 PkD1aHMhV4hqLT0aTGsIaoglf4vHqvrAc+nNTmBQs5aDGu1YvNw1L9bY7acpJk59 OWSKSKai09gy0/v8k80VmzGSDxIYMZaq1HMjZxzq1se4bJuCouqphWRlkUR/MHiy gQEntT+/niYcs+A7U5CBlD7fmPdkNXKOaz5bO8RnT1ORGgyZAWsyNj459pU7OunP O056jnnKoXR6WeaQuZAq8g1lTFm+Lmlw -----END CERTIFICATE-----Generated at Mon Dec 15 13:30:30 2025 by rpki-client