This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft File: 1p-CbIwgERW0fuzDf7XgAI41a9w.mft (raw, json) Hash identifier: Vn7g4NJBkK8b8E329/vhL1tlREVJd9UcREgSXzDGInI= Subject key identifier: 29:0C:35:F8:04:99:43:4C:B2:E8:CF:2B:D4:EA:5F:90:D7:A9:40:03 Authority key identifier: D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC Certificate issuer: /CN=A918D6AD/serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft Manifest number: 15 Signing time: Wed 03 Dec 2025 06:04:06 +0000 Manifest this update: Wed 03 Dec 2025 06:04:05 +0000 Manifest next update: Wed 10 Dec 2025 06:04:05 +0000 Files and hashes: 1: 1p-CbIwgERW0fuzDf7XgAI41a9w.crl (hash: XV2jIwKToPNK8i9x3DLslqoVCwx9dxhmGiH3HI9vwZk=) 2: 2D57F1BAB90511F0BF94505DC4F9AE02.roa (hash: YJGjI5x4mclPmwg38/NdSIhL9tismW3BzliV5IxfnJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6AD, serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC Validity Not Before: Dec 3 06:04:05 2025 GMT Not After : Dec 10 06:04:05 2025 GMT Subject: CN=692fd2d6-a6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:be:b3:3b:80:e7:33:c7:c6:97:b1:b9:6e:30: 42:2e:95:1b:f0:70:54:d9:8b:17:6d:a4:55:f0:19: 9e:20:3a:98:83:26:b4:ef:53:fe:1e:f8:d6:66:87: 4a:1a:af:59:83:e8:a1:c2:2a:15:1a:50:11:ba:82: 35:ff:24:86:6f:71:0d:4e:ee:78:8c:32:af:7e:25: 72:16:30:ac:99:5a:d9:51:e6:d1:d3:2d:e3:4f:9a: 89:53:fe:ee:bb:aa:10:4d:0f:c6:40:7d:71:92:e1: 7a:3b:5b:c7:e8:aa:10:27:17:6c:38:63:86:e4:1e: 02:45:3c:a0:d8:96:45:7b:57:43:c1:f6:be:45:a8: 07:c6:ca:a0:62:71:2b:0e:21:70:bc:a2:cc:3e:da: 75:29:af:fd:c5:9a:58:bd:43:ec:ef:1b:1b:82:ac: 29:b9:8e:40:9c:62:aa:b5:f2:78:7f:35:5b:c9:af: 47:6d:28:f7:50:73:f6:e8:a1:76:71:ba:8a:ad:d3: c4:70:29:32:8e:cb:a1:7f:c0:9a:01:99:18:4d:88: 1c:1e:bb:51:44:f6:bc:c8:07:ce:fe:06:36:7e:40: c9:d7:a0:8b:26:0d:2f:04:74:ae:91:3e:05:90:4f: 06:11:30:98:ef:ce:88:19:97:3a:61:07:ed:17:df: 5a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0C:35:F8:04:99:43:4C:B2:E8:CF:2B:D4:EA:5F:90:D7:A9:40:03 X509v3 Authority Key Identifier: keyid:D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:35:19:f6:47:fa:90:6e:db:02:f2:2a:10:2d:38:4c:70:6c: 7b:ed:42:16:f6:69:28:a2:df:a0:f1:e2:01:96:ae:67:c1:b5: 44:33:77:58:ed:d1:c0:dc:43:58:0c:a0:08:24:4b:06:f3:e1: 9e:22:18:54:b4:9d:f1:44:85:79:2e:47:f2:f3:cb:69:28:22: 19:ce:22:11:1c:11:ee:f7:48:f3:0e:44:f5:5d:77:3d:ac:30: c7:91:5e:fb:ec:81:58:93:d8:2a:37:d0:a3:c3:e0:25:66:3e: 15:96:a0:6c:79:68:6a:67:d2:ba:2c:6c:f1:2b:ec:8e:70:c4: 8a:c8:cf:00:dc:19:96:9f:6b:6d:39:cd:35:c2:c1:8e:63:9a: 99:12:57:1b:54:3e:a2:1b:7c:f9:cf:60:90:99:c1:80:98:e9: 70:4f:af:d1:f2:43:5b:4b:5a:7f:01:8a:91:9e:a8:62:53:3f: 32:ee:08:2f:87:67:3e:b8:09:28:7a:8b:7e:7a:0e:b5:2b:23: cc:8c:f1:00:15:21:2b:e2:1e:2b:00:0e:1a:1d:1e:d8:56:31: bc:cf:37:17:d1:0c:bb:82:a4:50:36:02:23:78:c9:5c:4b:37: 78:13:7e:6e:97:c8:e7:a3:94:10:5f:f9:ff:0d:dc:48:54:74: b6:06:a2:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDZBRDExMC8GA1UEBRMoRDY5RjgyNkM4QzIwMTExNUI0N0VFQ0MzN0ZCNUUwMDA4 RTM1NkJEQzAeFw0yNTEyMDMwNjA0MDVaFw0yNTEyMTAwNjA0MDVaMBgxFjAUBgNV BAMTDTY5MmZkMmQ2LWE2YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPvrM7gOczx8aXsbluMEIulRvwcFTZixdtpFXwGZ4gOpiDJrTvU/4e+NZmh0oa r1mD6KHCKhUaUBG6gjX/JIZvcQ1O7niMMq9+JXIWMKyZWtlR5tHTLeNPmolT/u67 qhBND8ZAfXGS4Xo7W8foqhAnF2w4Y4bkHgJFPKDYlkV7V0PB9r5FqAfGyqBicSsO IXC8osw+2nUpr/3Fmli9Q+zvGxuCrCm5jkCcYqq18nh/NVvJr0dtKPdQc/booXZx uoqt08RwKTKOy6F/wJoBmRhNiBweu1FE9rzIB87+BjZ+QMnXoIsmDS8EdK6RPgWQ TwYRMJjvzogZlzphB+0X31o5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKQw1+ASZ Q0yy6M8r1OpfkNepQAMwHwYDVR0jBBgwFoAU1p+CbIwgERW0fuzDf7XgAI41a9ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENkFELzYzMzI3NzdBQjQ1 RTExRjBCRDY4QTkzRUM0RjlBRTAyLzFwLUNiSXdnRVJXMGZ1ekRmN1hnQUk0MWE5 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMXAtQ2JJd2dFUlcwZnV6RGY3WGdBSTQxYTl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NkFELzYzMzI3NzdBQjQ1RTExRjBCRDY4QTkzRUM0RjlBRTAyLzFwLUNiSXdnRVJX MGZ1ekRmN1hnQUk0MWE5dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIY1GfZH+pBu2wLyKhAtOExwbHvtQhb2aSii36Dx4gGWrmfBtUQzd1jt 0cDcQ1gMoAgkSwbz4Z4iGFS0nfFEhXkuR/Lzy2koIhnOIhEcEe73SPMORPVddz2s MMeRXvvsgViT2Co30KPD4CVmPhWWoGx5aGpn0rosbPEr7I5wxIrIzwDcGZafa205 zTXCwY5jmpkSVxtUPqIbfPnPYJCZwYCY6XBPr9HyQ1tLWn8BipGeqGJTPzLuCC+H Zz64CSh6i356DrUrI8yM8QAVISviHisADhodHthWMbzPNxfRDLuCpFA2AiN4yVxL N3gTfm6XyOejlBBf+f8N3EhUdLYGolI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:14 2025 by rpki-client