This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: XIzThkmDhodBivZdIaebj3IJ2ISDaBJdx38PQnK0Qfs= Subject key identifier: C6:13:7B:82:2C:FD:44:88:5A:63:ED:75:E9:29:47:C7:4C:85:6B:32 Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 0587 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 055C Signing time: Sat 06 Dec 2025 22:15:30 +0000 Manifest this update: Sat 06 Dec 2025 22:15:29 +0000 Manifest next update: Sat 13 Dec 2025 22:15:29 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: 3PjFBrZr0NPMmB4NRuA1zRVTCH3bC9rxLsQ+8olVYtg=) 2: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: XSuhAhi3kRB8kUY+l+Kw6bn9CYFf3Y2Di14tTGA1/Oo=) 3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: /zpbbyMm2w5Xcql5zfUtoN8iPAyG5aFUqVMvzNCSPuM=) 4: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: hn+qGaZCtkUKYopOyzVnHKxTxBxzaX/N9RY/bypGInA=) 5: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: 02gdGUoKaGU981qYNAOicujQXSbUOhKyvNrMWXNfXQk=) 6: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 9x2G7s9XnkzB/aoRrwX0fPhCy+k2H2dG9FDGRVFamnQ=) 7: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: vwZIGcuT/wdsi2ov5n4aKBIuwaWae+4rjnxU5e55BsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1415 (0x587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Dec 6 22:15:29 2025 GMT Not After : Dec 13 22:15:29 2025 GMT Subject: CN=6934ab02-8fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:ff:55:0f:3d:cf:07:71:d6:4e:7a:3f:c0: 36:73:1d:f9:88:3c:d0:67:cc:7f:92:20:46:7a:dd: d4:3b:02:80:c8:03:92:29:09:ae:d3:12:73:ce:2a: ce:d8:44:43:60:21:b2:bf:ea:51:f5:50:cc:d3:dc: bc:5f:e9:de:15:c7:51:92:b5:ac:de:6e:e0:2e:98: 71:a0:76:a8:4c:b7:2e:ba:4e:8a:51:2b:86:bf:a0: bc:73:df:03:33:44:5c:0f:03:e7:98:2b:2f:3d:ae: 0a:cb:67:fc:7c:00:f6:d4:24:e4:19:e1:f9:2c:6c: 92:ce:55:c5:5d:16:85:e1:ee:ee:2b:6a:8f:ec:46: b0:d9:c5:8a:ae:1f:f2:6a:d7:cf:de:b7:6d:92:66: 39:a4:e7:8f:42:43:45:a1:c2:c5:ce:63:e4:9b:cf: 35:aa:69:63:f6:a9:c3:dd:5f:b0:54:f7:0f:b3:05: ed:f6:77:86:c1:fc:a0:6e:c2:66:e1:2d:aa:41:c4: 7e:a1:07:31:c4:a3:3e:e6:0f:38:07:89:f4:38:db: 56:53:53:d2:2d:06:ee:54:16:b5:44:64:25:9f:6c: 2d:33:2d:68:81:a8:44:04:18:7c:9f:be:3d:1e:a3: 4c:81:9a:04:c8:21:7f:d1:c4:ce:4e:cd:77:78:8f: d4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:13:7B:82:2C:FD:44:88:5A:63:ED:75:E9:29:47:C7:4C:85:6B:32 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:75:fd:46:d4:fd:4c:8c:2a:2b:46:fc:1d:5f:f4:4b:f4:b1: 30:b0:98:44:70:28:0d:26:b0:86:11:d1:6f:98:69:af:3d:a3: 3b:27:61:1b:04:ba:ae:bf:0e:f3:a9:41:d7:6e:19:5f:f2:1a: 85:1c:a6:ca:8d:89:11:6b:57:d2:25:62:f1:5b:ad:11:40:41: b1:d8:b5:7a:24:b9:92:1b:e7:a8:e2:e2:ef:17:57:26:c5:16: c6:05:e2:f3:28:52:ee:dc:f0:ba:6f:63:71:dc:15:02:5c:17: c3:ee:2c:56:3a:25:17:78:d6:cf:c9:4b:4a:5a:0d:9c:c3:46: e2:79:7b:eb:c5:9a:9c:1c:50:64:dc:c0:b9:2c:5a:74:c7:29: c5:7e:6c:2e:a7:d5:ac:5b:51:92:56:09:6b:d4:15:db:e8:cd: 6a:5a:82:cb:ff:5b:22:c7:ba:ca:7c:a2:9a:9c:70:85:f3:13: 5a:db:2f:a6:49:18:3f:25:33:9d:89:cc:d5:d0:cf:25:d3:4b: 17:f1:77:e3:b5:02:5c:f3:40:09:db:33:b5:88:f0:37:07:87: a0:e9:e7:0d:cf:13:48:3a:03:23:3d:79:d0:3f:5b:a9:f1:fe: 1f:b5:61:ad:dd:9e:ca:2c:01:e4:c7:41:7c:62:78:b9:c2:93: 51:61:ea:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjUxMjA2MjIxNTI5WhcNMjUxMjEzMjIxNTI5WjAYMRYwFAYD VQQDEw02OTM0YWIwMi04ZmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYr/VQ89zwdx1k56P8A2cx35iDzQZ8x/kiBGet3UOwKAyAOSKQmu0xJzzirO 2ERDYCGyv+pR9VDM09y8X+neFcdRkrWs3m7gLphxoHaoTLcuuk6KUSuGv6C8c98D M0RcDwPnmCsvPa4Ky2f8fAD21CTkGeH5LGySzlXFXRaF4e7uK2qP7Eaw2cWKrh/y atfP3rdtkmY5pOePQkNFocLFzmPkm881qmlj9qnD3V+wVPcPswXt9neGwfygbsJm 4S2qQcR+oQcxxKM+5g84B4n0ONtWU1PSLQbuVBa1RGQln2wtMy1ogahEBBh8n749 HqNMgZoEyCF/0cTOTs13eI/UcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYTe4Is /USIWmPtdekpR8dMhWsyMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBydf1G1P1MjCorRvwdX/RL9LEwsJhEcCgNJrCGEdFvmGmvPaM7J2Eb BLquvw7zqUHXbhlf8hqFHKbKjYkRa1fSJWLxW60RQEGx2LV6JLmSG+eo4uLvF1cm xRbGBeLzKFLu3PC6b2Nx3BUCXBfD7ixWOiUXeNbPyUtKWg2cw0bieXvrxZqcHFBk 3MC5LFp0xynFfmwup9WsW1GSVglr1BXb6M1qWoLL/1six7rKfKKanHCF8xNa2y+m SRg/JTOdiczV0M8l00sX8XfjtQJc80AJ2zO1iPA3B4eg6ecNzxNIOgMjPXnQP1up 8f4ftWGt3Z7KLAHkx0F8Yni5wpNRYeoh -----END CERTIFICATE-----Generated at Sun Dec 7 19:39:43 2025 by rpki-client