This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft File: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json) Hash identifier: Ag21/fqISUqikFga3IqDb1NlDXrR34+hZWXp5iPg8OU= Subject key identifier: 63:A8:27:04:65:92:29:75:66:76:27:8A:28:C2:7E:23:4D:9B:7F:BD Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED Certificate issuer: /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft Manifest number: 1B Signing time: Tue 09 Dec 2025 05:37:16 +0000 Manifest this update: Tue 09 Dec 2025 05:37:16 +0000 Manifest next update: Tue 16 Dec 2025 05:37:16 +0000 Files and hashes: 1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: A00D7A7pR5QygtGhElrLVMCDfCTumZQpQ5Xpxd6TQAg=) 2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: AgPQ+g0vVS1AcBmkA5KDmZRoTP4TQytZY60/q5U1Jhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 05:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED Validity Not Before: Dec 9 05:37:16 2025 GMT Not After : Dec 16 05:37:16 2025 GMT Subject: CN=6937b58c-20ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:a9:32:21:9c:ad:df:6b:4b:27:44:7c:ea: be:59:81:97:c9:e2:ff:9f:41:f8:b6:f9:26:4d:c7: 9d:42:ed:21:84:b0:f7:92:0f:dd:f6:d1:5f:01:1e: ab:f4:8f:2a:66:3f:51:ac:8c:de:33:b6:c8:8e:42: de:70:66:80:8a:20:81:01:c8:30:1b:64:6e:22:a4: e4:2e:0e:6f:fc:fc:03:dd:bd:7a:8d:a1:df:b6:36: 13:63:86:09:6d:2d:c1:55:11:70:71:75:9a:0d:ae: 17:b9:49:00:68:d4:46:ab:89:da:c9:d9:d4:a2:55: d3:c9:d6:2d:b4:ec:ee:f7:4a:5a:a6:4a:68:45:bb: e8:4d:ad:07:c9:49:c1:c5:da:31:19:d3:46:37:04: c1:ee:c9:42:03:7d:78:8d:2e:ab:d1:e6:8e:fc:19: 56:50:60:8f:3a:a5:26:80:81:1c:f1:08:0d:1c:63: b5:b9:4c:fc:81:9c:68:e7:73:65:19:4a:08:b7:0f: ab:2b:49:7b:8d:0f:97:f2:46:0c:54:db:e5:c4:59: 52:56:2e:3f:f3:28:40:36:41:fd:0b:65:6b:02:70: 84:c7:f5:40:ec:82:e0:fa:27:33:94:b4:2d:1c:e6: 9f:fa:b0:87:50:92:18:7a:7f:99:d1:01:75:86:3b: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A8:27:04:65:92:29:75:66:76:27:8A:28:C2:7E:23:4D:9B:7F:BD X509v3 Authority Key Identifier: keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:fc:2b:20:b4:db:89:d7:42:a0:4d:a4:25:7a:a5:1f:6d:cf: 5e:04:83:37:c3:84:66:01:e8:27:34:19:2e:43:2f:8d:c4:76: 10:de:d8:e0:31:ac:a2:4b:e1:2c:69:6f:fc:ab:31:61:81:83: 8f:6a:e3:77:d5:cb:dd:d5:c2:a7:b9:30:c4:92:0f:8d:5d:f0: 47:16:f4:2c:12:f5:39:0f:fd:7d:f5:02:3c:ed:ed:ac:50:51: ee:30:64:f0:34:20:ba:bc:0f:55:7d:10:00:1b:8b:01:46:26: 1e:f0:0b:64:5d:b1:7b:c7:0f:49:64:02:a5:9c:fb:c4:36:cd: 48:94:2d:d7:68:90:e7:fb:37:06:97:ba:7c:10:f0:72:2b:c0: 96:b0:d8:30:32:5f:9e:02:e5:e0:96:d1:bb:0e:95:ba:ae:88: 03:51:9f:fe:f1:8d:45:de:bf:15:c6:11:f5:d5:4d:93:14:c0: 24:27:8a:7e:0d:dc:6c:91:31:71:ea:88:8b:79:70:d7:98:1b: a8:c6:f9:41:fe:fa:17:a8:e5:f4:8e:fb:64:f1:72:ad:8f:80: 52:14:60:05:01:43:91:81:f8:36:b1:ca:0d:41:2b:bc:49:1f: 8a:09:d1:ca:b2:a5:8a:0c:c1:90:a3:4f:62:54:70:d8:03:97: ce:32:2a:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MTk5NjExMC8GA1UEBRMoNzA0QzM5RTlCMjMwMkVDOTdBOUNBRTk5RUNFNzk0NUI4 MUYyQ0JFRDAeFw0yNTEyMDkwNTM3MTZaFw0yNTEyMTYwNTM3MTZaMBgxFjAUBgNV BAMTDTY5MzdiNThjLTIwZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYIKkyIZyt32tLJ0R86r5ZgZfJ4v+fQfi2+SZNx51C7SGEsPeSD9320V8BHqv0 jypmP1GsjN4ztsiOQt5wZoCKIIEByDAbZG4ipOQuDm/8/APdvXqNod+2NhNjhglt LcFVEXBxdZoNrhe5SQBo1EaridrJ2dSiVdPJ1i207O73SlqmSmhFu+hNrQfJScHF 2jEZ00Y3BMHuyUIDfXiNLqvR5o78GVZQYI86pSaAgRzxCA0cY7W5TPyBnGjnc2UZ Sgi3D6srSXuND5fyRgxU2+XEWVJWLj/zKEA2Qf0LZWsCcITH9UDsguD6JzOUtC0c 5p/6sIdQkhh6f5nRAXWGO5oZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY6gnBGWS KXVmdieKKMJ+I02bf70wHwYDVR0jBBgwFoAUcEw56bIwLsl6nK6Z7OeUW4Hyy+0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxOTk2L0FGN0Y0RDZDQUU2 NzExRjBCNTM0RjYyNkM0RjlBRTAyL2NFdzU2Ykl3THNsNm5LNlo3T2VVVzRIeXkt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvY0V3NTZiSXdMc2w2bks2WjdPZVVXNEh5eS0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx OTk2L0FGN0Y0RDZDQUU2NzExRjBCNTM0RjYyNkM0RjlBRTAyL2NFdzU2Ykl3THNs Nm5LNlo3T2VVVzRIeXktMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJf8KyC024nXQqBNpCV6pR9tz14EgzfDhGYB6Cc0GS5DL43EdhDe2OAx rKJL4Sxpb/yrMWGBg49q43fVy93Vwqe5MMSSD41d8EcW9CwS9TkP/X31Ajzt7axQ Ue4wZPA0ILq8D1V9EAAbiwFGJh7wC2RdsXvHD0lkAqWc+8Q2zUiULddokOf7NwaX unwQ8HIrwJaw2DAyX54C5eCW0bsOlbquiANRn/7xjUXevxXGEfXVTZMUwCQnin4N 3GyRMXHqiIt5cNeYG6jG+UH++heo5fSO+2Txcq2PgFIUYAUBQ5GB+Daxyg1BK7xJ H4oJ0cqypYoMwZCjT2JUcNgDl84yKuM= -----END CERTIFICATE-----Generated at Wed Dec 10 09:23:14 2025 by rpki-client