This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft File: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json) Hash identifier: m2gyeF+Fl4PlY8hjXnOVb32UTa/U/eLI5CveTnXFrK0= Subject key identifier: 27:72:12:8C:43:C4:B5:CC:CE:65:F8:F2:D5:8D:78:45:FF:CB:13:E5 Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E Certificate issuer: /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Certificate serial: 2164 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft Manifest number: 2164 Signing time: Tue 02 Dec 2025 15:48:15 +0000 Manifest this update: Tue 02 Dec 2025 15:48:14 +0000 Manifest next update: Tue 09 Dec 2025 15:48:14 +0000 Files and hashes: 1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: +yBrNLMnJp4tGisx5oRSaRDQU6U5POvJVbB5La0WJ0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8548 (0x2164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Validity Not Before: Dec 2 15:48:14 2025 GMT Not After : Dec 9 15:48:14 2025 GMT Subject: CN=692f0a3e-2c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:02:d9:38:8a:c4:44:90:7d:57:64:35:c1:3e: 02:e8:c7:6a:42:c3:fe:39:a8:50:eb:5f:81:39:08: 6a:20:ff:5d:74:79:3e:63:20:e0:6e:b8:26:f7:69: 4a:9a:8a:f4:98:01:bd:31:45:6d:45:61:a0:4f:9a: f6:3c:95:bb:ef:55:80:20:99:22:12:f7:99:72:d5: d2:4f:26:89:28:65:50:dd:a1:ac:38:8a:74:fc:18: 7f:d0:81:57:75:ee:85:0c:59:a0:50:c1:c0:b2:05: 2a:bf:45:c7:f7:85:4a:83:fa:1f:e5:21:a0:f8:69: b6:90:14:5e:93:ff:11:d6:f9:7c:1b:ec:18:41:2c: 08:a6:36:1d:53:5a:44:67:ce:92:c7:55:87:75:e2: c2:ed:ac:93:8c:ee:ba:e4:44:c7:81:7d:16:c4:0c: 67:42:0d:9c:f6:41:2e:1d:59:80:3f:4d:4d:52:f4: ec:e9:0b:eb:64:09:76:47:a8:a9:36:32:d0:58:37: ea:b1:a5:06:0a:02:17:bd:8e:1d:5a:99:8e:21:65: 37:18:6c:40:a3:da:8f:e1:2d:e5:c5:13:ad:4a:c2: 99:7e:2f:9f:a6:fa:38:4e:88:16:2e:eb:d7:c5:06: d5:6d:da:51:db:37:71:04:cc:31:90:54:dd:81:f1: c0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:72:12:8C:43:C4:B5:CC:CE:65:F8:F2:D5:8D:78:45:FF:CB:13:E5 X509v3 Authority Key Identifier: keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:a3:45:1c:d5:fe:02:ec:51:44:e2:a3:46:1a:b7:0c:05:6d: 93:c4:6a:46:dc:bf:c2:fc:dc:d5:af:bf:d5:06:74:6b:71:06: 32:fe:7a:dd:1c:37:ed:11:49:98:af:0b:e8:1b:69:92:e7:d7: 16:36:ea:d0:73:22:82:f8:4c:ec:bf:4c:94:28:c1:46:b6:62: a0:f4:69:07:38:bf:58:14:bd:f0:82:f7:cd:91:b8:3f:87:be: b7:ac:a5:af:a3:b6:7e:d1:8c:04:ad:83:5e:33:08:03:4a:ec: 44:ee:14:d2:56:c1:48:de:c6:d8:b9:5f:b5:00:d1:8a:11:aa: 8a:8e:3f:ae:77:8e:fa:c7:40:0b:f7:57:78:dc:3a:1d:51:6d: 16:52:e4:76:67:a6:fa:67:ee:86:b4:ab:6b:16:f3:84:e7:47: c2:4f:9f:ae:d2:d4:49:8e:d9:8a:58:94:fa:b1:0a:82:a1:ff: 4e:19:65:90:f9:24:f6:5e:d0:fb:f3:e4:46:4e:23:30:8c:43: 53:2c:62:01:88:08:10:71:04:93:15:41:ba:b4:4e:10:44:48: b8:0c:2a:dd:54:6d:5f:1d:37:07:b8:3b:5a:e2:f7:36:87:e8: c2:46:e8:8f:fc:b6:be:ee:09:66:f4:1c:13:0a:92:a0:41:1f: 27:44:f3:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDcwNDVBNzE4QkJFQjI4OUYxOEQxRjkzMEZBMzMyRDYz MzJEOTU1NUUwHhcNMjUxMjAyMTU0ODE0WhcNMjUxMjA5MTU0ODE0WjAYMRYwFAYD VQQDEw02OTJmMGEzZS0yYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwALZOIrERJB9V2Q1wT4C6MdqQsP+OahQ61+BOQhqIP9ddHk+YyDgbrgm92lK mor0mAG9MUVtRWGgT5r2PJW771WAIJkiEveZctXSTyaJKGVQ3aGsOIp0/Bh/0IFX de6FDFmgUMHAsgUqv0XH94VKg/of5SGg+Gm2kBRek/8R1vl8G+wYQSwIpjYdU1pE Z86Sx1WHdeLC7ayTjO665ETHgX0WxAxnQg2c9kEuHVmAP01NUvTs6QvrZAl2R6ip NjLQWDfqsaUGCgIXvY4dWpmOIWU3GGxAo9qP4S3lxROtSsKZfi+fpvo4TogWLuvX xQbVbdpR2zdxBMwxkFTdgfHAlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdyEoxD xLXMzmX48tWNeEX/yxPlMB8GA1UdIwQYMBaAFHBFpxi76yifGNH5MPozLWMy2VVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80MDc1MTIxQUYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktKOFkwZmt3LWpNdFl6TFpW VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NFV25HTHZyS0o4WTBma3ctak10WXpMWlZWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80MDc1MTIxQUYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktK OFkwZmt3LWpNdFl6TFpWVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjo0Uc1f4C7FFE4qNGGrcMBW2TxGpG3L/C/NzVr7/VBnRrcQYy/nrd HDftEUmYrwvoG2mS59cWNurQcyKC+Ezsv0yUKMFGtmKg9GkHOL9YFL3wgvfNkbg/ h763rKWvo7Z+0YwErYNeMwgDSuxE7hTSVsFI3sbYuV+1ANGKEaqKjj+ud476x0AL 91d43DodUW0WUuR2Z6b6Z+6GtKtrFvOE50fCT5+u0tRJjtmKWJT6sQqCof9OGWWQ +ST2XtD78+RGTiMwjENTLGIBiAgQcQSTFUG6tE4QREi4DCrdVG1fHTcHuDta4vc2 h+jCRuiP/La+7glm9BwTCpKgQR8nRPN0 -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:13 2025 by rpki-client