This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft File: 67hSKipPZGizmgkPciqw63Doi4I.mft (raw, json) Hash identifier: NflQT22CDbvebkxiT50UcAbQlils4tVjUM8lx4vvAWc= Subject key identifier: 60:B6:07:94:76:C3:92:A9:C3:D8:58:41:C4:72:E4:E5:5A:2C:E6:04 Authority key identifier: EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82 Certificate issuer: /CN=A917E27F/serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft Manifest number: 49 Signing time: Tue 23 Dec 2025 06:13:21 +0000 Manifest this update: Tue 23 Dec 2025 06:13:20 +0000 Manifest next update: Tue 30 Dec 2025 06:13:20 +0000 Files and hashes: 1: 67hSKipPZGizmgkPciqw63Doi4I.crl (hash: EQgGuMdb9bD5WGPZmJ7ldQ3pOKEXOSeKBnavwYPcPrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E27F, serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82 Validity Not Before: Dec 23 06:13:20 2025 GMT Not After : Dec 30 06:13:20 2025 GMT Subject: CN=694a3300-98df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9a:ba:34:bc:48:b7:6b:8b:36:50:78:b0:32: b8:f7:47:e7:4c:d1:27:e5:95:e1:c6:ca:a5:cb:62: e5:fa:23:83:eb:b9:17:ab:30:5a:69:63:b3:d8:96: 45:ef:05:c0:95:4a:6d:0f:37:df:8b:13:55:2c:3e: 5a:6d:d7:4e:0c:6d:1f:a4:38:59:d7:cc:59:3a:20: 6a:66:5a:5f:89:b3:29:20:8e:53:89:91:cc:f0:13: d2:6b:b7:b9:79:45:1f:df:5d:01:42:9f:6a:4c:1a: b8:f8:1c:54:a8:b2:7e:1d:e0:39:70:55:7e:6e:84: 38:2f:fc:01:a2:32:3e:06:94:43:16:29:71:ec:12: b8:f0:8a:0e:f2:18:a1:0e:96:54:9c:6d:b1:88:39: ad:17:8b:6d:f3:5c:32:d8:ce:18:30:df:10:b9:e6: cf:52:a7:5a:b7:77:84:7b:32:f8:a8:28:fb:26:0a: 8a:b6:3d:1c:05:91:8c:41:aa:34:46:13:5a:21:e7: 34:52:43:78:0b:21:51:d1:42:81:f7:e7:1b:31:3f: 16:61:1d:62:11:56:f6:2a:31:9b:2c:30:eb:2e:34: fa:7a:aa:cc:dd:59:ea:31:58:51:ef:07:d0:3a:0d: d4:c0:64:e3:b6:50:c7:3f:b4:30:23:66:58:c0:4d: 1c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B6:07:94:76:C3:92:A9:C3:D8:58:41:C4:72:E4:E5:5A:2C:E6:04 X509v3 Authority Key Identifier: keyid:EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7b:78:96:de:d5:82:e9:a2:da:63:18:36:84:59:a4:c3:a3: e1:e5:19:5b:8c:34:88:77:7c:37:d7:b4:08:f8:69:0c:b3:69: 31:ac:31:ae:99:12:96:ba:4a:d1:ed:50:3d:f7:7f:94:6e:82: bf:77:30:ea:bd:86:5e:09:39:6f:c6:1e:e9:55:50:3f:e9:39: 58:ee:bc:d3:eb:23:ba:ba:21:f2:6c:d0:86:18:a2:41:a6:cc: 09:a1:17:52:0d:0e:57:c3:20:c0:bf:ca:a1:69:62:7c:02:77: ee:3f:2e:01:e7:26:62:ff:bc:c5:ea:e1:d5:cb:70:9a:0f:d4: 45:ae:4a:da:1c:16:2f:0c:8b:d3:20:a2:18:33:06:5a:19:78: 59:92:25:bf:de:54:28:80:d1:8e:49:1a:83:e9:e3:d4:fc:b6: 2f:c9:ac:14:81:48:a1:96:31:38:27:07:3b:8e:ee:d8:87:0e: 7f:d8:85:e6:ef:02:ba:00:df:49:ea:d4:b5:84:86:7b:b5:41: 00:73:d1:68:da:a9:de:4f:3f:ed:61:0f:40:70:25:6b:8e:ac: 53:a6:19:41:de:6c:51:cf:2d:56:99:4a:1b:7f:b2:41:11:99: 1a:54:8f:63:15:6e:08:43:bc:32:e2:81:25:71:6e:09:4a:69: cb:a5:09:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTI3RjExMC8GA1UEBRMoRUJCODUyMkEyQTRGNjQ2OEIzOUEwOTBGNzIyQUIwRUI3 MEU4OEI4MjAeFw0yNTEyMjMwNjEzMjBaFw0yNTEyMzAwNjEzMjBaMBgxFjAUBgNV BAMMDTY5NGEzMzAwLTk4ZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCymro0vEi3a4s2UHiwMrj3R+dM0SflleHGyqXLYuX6I4PruRerMFppY7PYlkXv BcCVSm0PN9+LE1UsPlpt104MbR+kOFnXzFk6IGpmWl+JsykgjlOJkczwE9Jrt7l5 RR/fXQFCn2pMGrj4HFSosn4d4DlwVX5uhDgv/AGiMj4GlEMWKXHsErjwig7yGKEO llScbbGIOa0Xi23zXDLYzhgw3xC55s9Sp1q3d4R7MvioKPsmCoq2PRwFkYxBqjRG E1oh5zRSQ3gLIVHRQoH35xsxPxZhHWIRVvYqMZssMOsuNPp6qszdWeoxWFHvB9A6 DdTAZOO2UMc/tDAjZljATRxXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYLYHlHbD kqnD2FhBxHLk5Vos5gQwHwYDVR0jBBgwFoAU67hSKipPZGizmgkPciqw63Doi4Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMjdGLzdGNzVDMjE4NzJC NzExRjA5QzA0NjkwREM0RjlBRTAyLzY3aFNLaXBQWkdpem1na1BjaXF3NjNEb2k0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjdoU0tpcFBaR2l6bWdrUGNpcXc2M0RvaTRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MjdGLzdGNzVDMjE4NzJCNzExRjA5QzA0NjkwREM0RjlBRTAyLzY3aFNLaXBQWkdp em1na1BjaXF3NjNEb2k0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFp7eJbe1YLpotpjGDaEWaTDo+HlGVuMNIh3fDfXtAj4aQyzaTGsMa6Z Epa6StHtUD33f5Rugr93MOq9hl4JOW/GHulVUD/pOVjuvNPrI7q6IfJs0IYYokGm zAmhF1INDlfDIMC/yqFpYnwCd+4/LgHnJmL/vMXq4dXLcJoP1EWuStocFi8Mi9Mg ohgzBloZeFmSJb/eVCiA0Y5JGoPp49T8ti/JrBSBSKGWMTgnBzuO7tiHDn/Yhebv AroA30nq1LWEhnu1QQBz0Wjaqd5PP+1hD0BwJWuOrFOmGUHebFHPLVaZSht/skER mRpUj2MVbghDvDLigSVxbglKaculCXQ= -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:57 2025 by rpki-client