This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft File: t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft (raw, json) Hash identifier: 1LhU69UB+ql+RZPvpgEGR4nMG2woazZo94iGMvG9xCE= Subject key identifier: E7:BD:7A:0B:E1:89:83:3A:99:93:45:D0:25:00:F4:9A:51:41:CC:10 Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 Certificate issuer: /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft Manifest number: 0161 Signing time: Sun 07 Dec 2025 02:23:59 +0000 Manifest this update: Sun 07 Dec 2025 02:23:58 +0000 Manifest next update: Sun 14 Dec 2025 02:23:58 +0000 Files and hashes: 1: t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl (hash: +RpqjT+IdSQSs7H1+mOLJZdIAmWXAOANZ+pnXdAqt0U=) 2: 18F9209CB55411EEAD96E873C4F9AE02.roa (hash: 5qovDHOan50hnf/FjfnVrN4jiM2XyUgRA/JNpM3f5Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918897A, serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Validity Not Before: Dec 7 02:23:58 2025 GMT Not After : Dec 14 02:23:58 2025 GMT Subject: CN=6934e53e-1b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:5c:15:40:fe:d0:75:21:24:22:56:23:9e: 36:76:ae:7e:3b:df:9a:f0:1c:41:46:ac:1e:4e:da: bf:75:5c:56:d8:f9:c9:ae:d5:85:6c:3d:9e:fb:94: 1a:49:d3:db:90:cb:b8:ad:01:c3:cc:7f:ed:1c:34: f0:5a:c5:a2:e6:d5:cf:9e:06:14:30:79:2e:d6:bb: be:cb:72:c5:e2:90:e5:58:63:7c:53:49:7b:e5:20: c2:8b:30:3a:48:33:ac:ab:a8:fa:ee:c9:6f:b7:85: c4:9d:08:1b:22:64:f8:63:e2:47:cb:c6:b9:48:c3: 87:8f:c4:e4:19:b3:66:de:fd:d5:d4:6c:29:f6:a2: 86:d8:51:71:da:6e:ae:bf:d1:07:2f:3d:f9:6b:06: db:95:48:b0:79:0c:6c:13:8a:86:07:f3:35:0f:4b: 9d:21:b0:7a:97:7a:13:2f:0f:33:ee:bb:c8:8a:a6: b5:c8:5b:b4:48:8e:d3:99:6e:77:1b:13:89:ac:38: 56:9e:f7:51:44:0e:18:3d:5b:3a:3f:1a:1c:dd:0e: e6:ea:42:9e:fc:78:d8:e6:f8:fd:2b:e9:d2:97:0e: 71:e9:88:f5:fa:97:e4:41:35:a2:08:07:fc:1a:8f: 46:fe:5a:7d:58:a3:01:a0:7b:74:aa:be:2c:5c:37: bc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BD:7A:0B:E1:89:83:3A:99:93:45:D0:25:00:F4:9A:51:41:CC:10 X509v3 Authority Key Identifier: keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8a:cb:5c:28:5d:fc:56:be:c0:28:97:ef:a0:66:00:10:2e: 51:b7:c1:c3:45:7a:13:76:aa:08:75:96:7d:4e:aa:f2:ee:f1: e4:c9:ca:d0:49:c3:54:84:bb:d1:8f:bc:77:37:b9:31:41:e1: 30:24:f9:a5:a5:e5:40:59:b7:ef:a0:c3:cc:1d:ea:64:f4:89: 91:e5:fe:13:3c:1a:e7:3a:04:c6:9f:79:35:8d:08:9f:7f:4f: 54:c3:e8:e6:44:eb:fd:42:e4:fb:ad:67:18:4f:4a:61:fa:2e: d8:b2:92:8f:d6:07:09:c6:9d:70:d8:1c:49:e4:7a:fa:4c:9a: 79:f1:bd:8a:76:6d:03:7a:fe:33:32:8d:31:8d:48:c9:23:fe: 95:e2:2d:93:43:26:ac:d7:f0:0c:52:2f:f5:d5:39:d2:79:3b: ab:7d:9c:bf:a6:f5:bd:e2:a1:d1:e3:61:a9:04:9a:64:57:03: ba:7b:6b:6e:16:c4:6d:f7:60:90:50:a9:e8:0d:fe:19:ad:87: bd:19:cf:41:ff:e5:e7:6b:88:cf:8d:1f:e9:f6:3f:d0:8e:a8: 8a:4b:09:72:58:0a:0b:b1:b7:36:a7:6a:84:a3:2c:8a:83:85: 0c:f0:8e:a4:d2:2a:e5:5c:bc:3a:97:ff:6f:b6:32:12:0a:4f: 66:c8:69:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5N0ExMTAvBgNVBAUTKEI3RkE1MTIxNUJCNUMxRUY4OEVBRTE1RjAzNDMxM0Qx QjcxQjhENDQwHhcNMjUxMjA3MDIyMzU4WhcNMjUxMjE0MDIyMzU4WjAYMRYwFAYD VQQDEw02OTM0ZTUzZS0xYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1hcFUD+0HUhJCJWI542dq5+O9+a8BxBRqweTtq/dVxW2PnJrtWFbD2e+5Qa SdPbkMu4rQHDzH/tHDTwWsWi5tXPngYUMHku1ru+y3LF4pDlWGN8U0l75SDCizA6 SDOsq6j67slvt4XEnQgbImT4Y+JHy8a5SMOHj8TkGbNm3v3V1Gwp9qKG2FFx2m6u v9EHLz35awbblUiweQxsE4qGB/M1D0udIbB6l3oTLw8z7rvIiqa1yFu0SI7TmW53 GxOJrDhWnvdRRA4YPVs6Pxoc3Q7m6kKe/HjY5vj9K+nSlw5x6Yj1+pfkQTWiCAf8 Go9G/lp9WKMBoHt0qr4sXDe8MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOe9egvh iYM6mZNF0CUA9JpRQcwQMB8GA1UdIwQYMBaAFLf6USFbtcHviOrhXwNDE9G3G41E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODk3QS81MzNFMjQ2MkI1 NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdlLUk2dUZmQTBNVDBiY2Jq VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfcFJJVnUxd2UtSTZ1RmZBME1UMGJjYmpVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODk3QS81MzNFMjQ2MkI1NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdl LUk2dUZmQTBNVDBiY2JqVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANistcKF38Vr7AKJfvoGYAEC5Rt8HDRXoTdqoIdZZ9Tqry7vHkycrQ ScNUhLvRj7x3N7kxQeEwJPmlpeVAWbfvoMPMHepk9ImR5f4TPBrnOgTGn3k1jQif f09Uw+jmROv9QuT7rWcYT0ph+i7YspKP1gcJxp1w2BxJ5Hr6TJp58b2Kdm0Dev4z Mo0xjUjJI/6V4i2TQyas1/AMUi/11TnSeTurfZy/pvW94qHR42GpBJpkVwO6e2tu FsRt92CQUKnoDf4ZrYe9Gc9B/+Xna4jPjR/p9j/QjqiKSwlyWAoLsbc2p2qEoyyK g4UM8I6k0irlXLw6l/9vtjISCk9myGnW -----END CERTIFICATE-----Generated at Mon Dec 8 06:01:42 2025 by rpki-client