This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft File: k_rViPOepYxliN36F70Nb856YGo.mft (raw, json) Hash identifier: ifn8wB8OlQF/B9tuEw0jFrc57kj0hMPHgjyt0yzwHpk= Subject key identifier: 2B:43:D6:BE:2D:30:9A:33:C5:1D:C5:8C:E0:40:64:20:67:5E:D4:A9 Authority key identifier: 93:FA:D5:88:F3:9E:A5:8C:65:88:DD:FA:17:BD:0D:6F:CE:7A:60:6A Certificate issuer: /CN=A917F5F0/serialNumber=93FAD588F39EA58C6588DDFA17BD0D6FCE7A606A Certificate serial: 0878 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_rViPOepYxliN36F70Nb856YGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft Manifest number: 0872 Signing time: Mon 22 Dec 2025 19:58:05 +0000 Manifest this update: Mon 22 Dec 2025 19:58:05 +0000 Manifest next update: Mon 29 Dec 2025 19:58:05 +0000 Files and hashes: 1: k_rViPOepYxliN36F70Nb856YGo.crl (hash: 5ebpeYmoxK9QAzsEnT4dtWtP20TAqGdI+FTnHErm/sc=) 2: 4C89E536DC6311EA8C998087C4F9AE02.roa (hash: nq8qpRsk9rXbJOHGglWhSt6QeR+0FuC7rTR0xPKJN7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.crl rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_rViPOepYxliN36F70Nb856YGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2168 (0x878) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F5F0, serialNumber=93FAD588F39EA58C6588DDFA17BD0D6FCE7A606A Validity Not Before: Dec 22 19:58:05 2025 GMT Not After : Dec 29 19:58:05 2025 GMT Subject: CN=6949a2cd-4824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:2d:39:b5:3d:f2:3d:5e:a5:1e:82:93:f7: c7:5e:e6:41:59:ad:69:84:05:ae:dd:97:12:18:71: 26:19:26:c1:53:26:4d:8f:bc:f9:ca:24:94:e1:80: 4a:49:66:1a:3a:d7:f2:f8:e5:f8:c6:c0:09:d6:03: da:63:e6:80:eb:74:c7:33:91:65:74:6c:e3:a1:d3: aa:b6:d3:c5:89:c8:f3:a5:6f:36:d0:cc:f1:70:f4: ff:84:c0:4f:5e:b4:b5:45:ed:e0:e5:5d:07:c6:28: e5:ec:d2:22:fe:65:5c:e1:9e:f9:ed:87:17:74:2c: 15:9f:9b:58:32:6e:19:b9:9f:d3:5d:43:18:81:af: 87:13:04:1a:ba:e8:58:43:e6:11:58:bd:41:27:d9: 93:94:26:c6:63:15:ec:5e:8e:b4:ec:ec:10:e0:95: 19:41:1e:c2:ad:cb:f9:d6:d7:05:6f:4d:6c:4a:16: da:62:d9:ec:3e:fe:2a:7f:30:c6:a6:76:f5:47:04: 55:2c:f3:93:05:3f:f1:03:61:42:17:35:86:6a:bb: 19:a3:50:04:24:0e:cc:7d:54:4c:8d:83:73:ec:94: f2:85:10:63:f2:2f:68:4f:2e:b4:4a:e3:10:c3:5a: 15:96:cd:24:6e:12:8c:84:57:41:84:03:39:0d:b5: 77:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:43:D6:BE:2D:30:9A:33:C5:1D:C5:8C:E0:40:64:20:67:5E:D4:A9 X509v3 Authority Key Identifier: keyid:93:FA:D5:88:F3:9E:A5:8C:65:88:DD:FA:17:BD:0D:6F:CE:7A:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_rViPOepYxliN36F70Nb856YGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d3:05:74:b7:a7:5b:74:dd:8a:26:73:99:2d:6f:34:aa:79: 03:f3:59:06:48:9a:38:c0:ba:a2:b3:a5:07:66:34:16:5d:ac: cd:38:fa:56:66:a4:8e:55:e7:bf:97:93:0c:cf:05:ad:82:41: 39:0e:27:46:00:67:db:fe:20:3b:ae:4b:84:55:b1:89:07:db: c7:5b:86:5f:a8:f3:9e:04:21:dd:8a:ee:b6:38:16:16:e0:03: c2:01:47:cd:9a:60:42:2a:17:30:92:40:e0:58:03:25:35:e5: 41:a6:c6:7d:7e:31:04:9c:20:13:5e:f0:1a:0f:63:9d:c0:33: 4a:12:e6:0d:35:97:c1:cc:7e:de:59:b8:e6:39:1a:98:ac:6f: 31:9d:96:e3:ad:17:fd:b4:2a:d2:13:6b:95:d5:91:43:e7:e4: 57:fe:7d:9a:75:b7:d8:01:51:64:26:15:b9:a5:78:05:c6:b3: 95:46:94:c8:77:b7:e2:89:f2:93:6e:82:d3:2d:2f:e5:3d:58: c6:47:ae:5f:c3:00:4b:81:2e:04:74:7d:cb:71:c1:ac:32:31: 48:78:3f:3e:88:71:8b:f0:75:92:b2:a0:79:5e:6c:25:e9:7a: 89:38:4b:4d:e9:e8:03:25:95:53:fa:6d:84:7b:03:85:95:b1: bf:69:b2:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y1RjAxMTAvBgNVBAUTKDkzRkFENTg4RjM5RUE1OEM2NTg4RERGQTE3QkQwRDZG Q0U3QTYwNkEwHhcNMjUxMjIyMTk1ODA1WhcNMjUxMjI5MTk1ODA1WjAYMRYwFAYD VQQDDA02OTQ5YTJjZC00ODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqgtObU98j1epR6Ck/fHXuZBWa1phAWu3ZcSGHEmGSbBUyZNj7z5yiSU4YBK SWYaOtfy+OX4xsAJ1gPaY+aA63THM5FldGzjodOqttPFicjzpW820MzxcPT/hMBP XrS1Re3g5V0Hxijl7NIi/mVc4Z757YcXdCwVn5tYMm4ZuZ/TXUMYga+HEwQauuhY Q+YRWL1BJ9mTlCbGYxXsXo607OwQ4JUZQR7Crcv51tcFb01sShbaYtnsPv4qfzDG pnb1RwRVLPOTBT/xA2FCFzWGarsZo1AEJA7MfVRMjYNz7JTyhRBj8i9oTy60SuMQ w1oVls0kbhKMhFdBhAM5DbV36QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtD1r4t MJozxR3FjOBAZCBnXtSpMB8GA1UdIwQYMBaAFJP61YjznqWMZYjd+he9DW/OemBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjVGMC83MDlGOTdBNkRD NjExMUVBQkNBNENBODRDNEY5QUUwMi9rX3JWaVBPZXBZeGxpTjM2RjcwTmI4NTZZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tfclZpUE9lcFl4bGlOMzZGNzBOYjg1NllHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjVGMC83MDlGOTdBNkRDNjExMUVBQkNBNENBODRDNEY5QUUwMi9rX3JWaVBPZXBZ eGxpTjM2RjcwTmI4NTZZR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW0wV0t6dbdN2KJnOZLW80qnkD81kGSJo4wLqis6UHZjQWXazNOPpW ZqSOVee/l5MMzwWtgkE5DidGAGfb/iA7rkuEVbGJB9vHW4ZfqPOeBCHdiu62OBYW 4APCAUfNmmBCKhcwkkDgWAMlNeVBpsZ9fjEEnCATXvAaD2OdwDNKEuYNNZfBzH7e WbjmORqYrG8xnZbjrRf9tCrSE2uV1ZFD5+RX/n2adbfYAVFkJhW5pXgFxrOVRpTI d7fiifKTboLTLS/lPVjGR65fwwBLgS4EdH3LccGsMjFIeD8+iHGL8HWSsqB5Xmwl 6XqJOEtN6egDJZVT+m2EewOFlbG/abL2 -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:18 2025 by rpki-client