This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft File: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft (raw, json) Hash identifier: Qu+Xi5tvcFSoi4MD188DIEZmztaBOBrsRMvKPvGeWlw= Subject key identifier: 68:A5:7D:DD:FE:94:27:11:AA:5F:8C:F7:56:E4:11:C7:CF:02:F8:1B Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 Certificate issuer: /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Certificate serial: 34E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft Manifest number: 34E0 Signing time: Fri 28 Nov 2025 14:59:10 +0000 Manifest this update: Fri 28 Nov 2025 14:59:09 +0000 Manifest next update: Fri 05 Dec 2025 14:59:09 +0000 Files and hashes: 1: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl (hash: B2xkvomxAHVWZbBKRiDGQSQujdWuAYbOjRZvOC7gZuw=) 2: 99144F3C03DB11F09FBAF32DC4F9AE02.roa (hash: 2QPhy8okP7a5b727IcPA6kh/C7CWYx/FM2MEQeDTjxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13544 (0x34e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183010, serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Validity Not Before: Nov 28 14:59:09 2025 GMT Not After : Dec 5 14:59:09 2025 GMT Subject: CN=6929b8bd-bc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0b:4f:33:d3:67:aa:11:03:c1:a1:52:0c:f5: a0:d5:40:cb:23:bd:81:d0:50:70:18:8d:ba:7f:2a: 1b:a6:46:2d:8e:66:6c:73:c4:d3:3f:9e:fc:ad:18: 14:de:27:02:82:b1:e7:d1:cc:de:56:28:fd:f1:d8: 45:1c:dc:2d:64:19:6a:a2:76:40:ba:72:96:32:74: 13:1c:c2:6e:b3:56:23:2a:3e:a3:da:f8:2f:f6:ed: b5:3b:da:a7:24:19:7a:37:45:f4:cf:33:e8:2c:1f: 3a:fb:2c:3f:92:00:9c:2f:85:f0:16:48:c9:19:1b: a2:5e:b2:c7:d1:05:d4:ce:b4:c6:0f:cb:a6:e9:0c: 8b:aa:47:d0:b4:4d:c3:54:db:e0:ff:e9:72:21:df: 89:0e:1e:fe:87:8a:b1:ea:58:57:36:a4:86:4a:e9: ed:cb:02:fb:aa:53:39:72:fa:23:89:e0:d7:cb:00: a9:00:17:bd:bb:7b:d3:52:45:20:cf:e1:ec:20:92: 14:2c:83:58:05:72:64:15:b7:65:ac:8a:46:80:d2: b0:2a:08:1d:df:b7:c4:9c:d8:64:16:75:91:15:c2: 6f:fa:63:30:29:68:e8:cf:ed:a4:65:7b:d3:9c:99: bd:9e:7d:36:fa:c9:47:44:1c:26:48:f3:3d:da:b4: 68:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A5:7D:DD:FE:94:27:11:AA:5F:8C:F7:56:E4:11:C7:CF:02:F8:1B X509v3 Authority Key Identifier: keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e4:cb:2c:82:0d:71:7e:7c:70:ba:5d:19:89:28:47:f7:c2: 3b:02:2a:34:97:e9:a2:ed:37:a9:94:cf:1c:42:1d:10:6f:b5: e4:e1:dc:cc:98:6a:c9:e0:56:ee:ab:d1:42:82:9e:b5:9f:b1: 02:76:6c:89:ac:38:57:6a:32:b4:f8:8d:29:19:5f:ae:24:0b: e6:10:b5:1c:e9:4a:e1:f6:fa:b0:46:3c:e7:96:fb:14:b5:6b: 3d:37:6c:37:a1:28:fa:18:a5:62:3c:b0:29:df:88:79:e3:2b: ee:10:f2:b7:ea:ab:49:f1:48:17:8c:bf:a8:f7:56:03:70:01: ed:51:44:e7:ea:af:ce:b4:38:5c:33:2a:b2:64:e4:63:43:98: 2b:14:d2:17:96:4e:bf:7e:4e:81:94:a2:3c:51:c8:9c:41:33: 9d:9a:1e:b0:1b:d9:d8:eb:68:22:8f:09:c5:39:0c:f1:33:a5: f9:ef:0f:85:90:0c:1d:cf:df:67:c5:2d:b9:a8:52:df:7e:40: 1a:b3:2d:96:cb:c5:a0:65:e5:a7:12:76:6a:fb:76:4a:9f:ce: 14:b3:a9:ab:ec:bf:75:96:2d:c3:f8:16:79:1e:2d:af:4b:b3: c9:62:77:e7:e5:72:5d:71:1c:2a:6b:0e:f4:ae:c1:7d:55:94: 93:79:d1:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwMTAxMTAvBgNVBAUTKDY5MDU0MTg2NzlGNDNDQTg4OENCMjNCRjJCQ0IyQkU2 OTlDMEMzNjYwHhcNMjUxMTI4MTQ1OTA5WhcNMjUxMjA1MTQ1OTA5WjAYMRYwFAYD VQQDEw02OTI5YjhiZC1iYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wtPM9NnqhEDwaFSDPWg1UDLI72B0FBwGI26fyobpkYtjmZsc8TTP578rRgU 3icCgrHn0czeVij98dhFHNwtZBlqonZAunKWMnQTHMJus1YjKj6j2vgv9u21O9qn JBl6N0X0zzPoLB86+yw/kgCcL4XwFkjJGRuiXrLH0QXUzrTGD8um6QyLqkfQtE3D VNvg/+lyId+JDh7+h4qx6lhXNqSGSuntywL7qlM5cvojieDXywCpABe9u3vTUkUg z+HsIJIULINYBXJkFbdlrIpGgNKwKggd37fEnNhkFnWRFcJv+mMwKWjoz+2kZXvT nJm9nn02+slHRBwmSPM92rRo4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGilfd3+ lCcRql+M91bkEcfPAvgbMB8GA1UdIwQYMBaAFGkFQYZ59DyoiMsjvyvLK+aZwMNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzAxMC81RjFEREIxMjFE QTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBLaUl5eU9fSzhzcjVwbkF3 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FRVkJobm4wUEtpSXl5T19LOHNyNXBuQXcyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzAxMC81RjFEREIxMjFEQTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBL aUl5eU9fSzhzcjVwbkF3MlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+5Mssgg1xfnxwul0ZiShH98I7Aio0l+mi7TeplM8cQh0Qb7Xk4dzM mGrJ4Fbuq9FCgp61n7ECdmyJrDhXajK0+I0pGV+uJAvmELUc6Urh9vqwRjznlvsU tWs9N2w3oSj6GKViPLAp34h54yvuEPK36qtJ8UgXjL+o91YDcAHtUUTn6q/OtDhc MyqyZORjQ5grFNIXlk6/fk6BlKI8UcicQTOdmh6wG9nY62gijwnFOQzxM6X57w+F kAwdz99nxS25qFLffkAasy2Wy8WgZeWnEnZq+3ZKn84Us6mr7L91li3D+BZ5Hi2v S7PJYnfn5XJdcRwqaw70rsF9VZSTedGL -----END CERTIFICATE-----Generated at Sat Nov 29 14:59:55 2025 by rpki-client