This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft File: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft (raw, json) Hash identifier: ik2ziNrqyuXDxHEKnr7sDLNNS6dgT5qBo6KAOTpp17g= Subject key identifier: 6A:96:D8:40:44:35:D4:B3:2B:07:05:3D:9C:82:0A:03:D8:D2:32:8F Authority key identifier: 09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99 Certificate issuer: /CN=A918FA35/serialNumber=0958D7C7B57567D965E148048152E2B478FC4399 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft Manifest number: 30 Signing time: Tue 23 Dec 2025 06:26:41 +0000 Manifest this update: Tue 23 Dec 2025 06:26:41 +0000 Manifest next update: Tue 30 Dec 2025 06:26:41 +0000 Files and hashes: 1: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl (hash: jS4CmXjiZCGofBh0T0Q2kR9SsZGpDMay9ZAg/5g41gM=) 2: EC6B1EDAC3F811F0BE50C87AC4F9AE02.roa (hash: origqBJ9k2Zq/uSGJkI8lTn3lJpMgamfpnZM73+HcnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FA35, serialNumber=0958D7C7B57567D965E148048152E2B478FC4399 Validity Not Before: Dec 23 06:26:41 2025 GMT Not After : Dec 30 06:26:41 2025 GMT Subject: CN=694a3621-0a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:5c:17:02:d1:ad:b7:c3:17:64:a8:e5:60: 63:a5:89:e2:d5:52:d7:dc:65:a9:db:91:05:7c:db: 43:f7:17:e2:7d:2b:18:bb:ad:78:91:c9:86:d8:26: b9:50:c8:ae:03:7c:13:3f:1f:a6:42:5c:eb:49:82: 96:c1:9d:9e:80:94:ba:85:4f:b0:e7:bf:1b:c7:ac: 51:7e:50:79:73:bd:84:d9:2f:a2:3d:8b:23:2e:89: 97:c2:6a:c7:b0:23:1e:b3:51:e0:c5:52:53:86:b2: cd:95:2b:4f:40:cc:12:2c:a4:f7:ef:bb:ee:e4:23: d3:0f:5d:9d:70:3e:c8:f2:e9:aa:8c:5a:c7:8f:ad: 1a:0c:d1:4f:a6:d7:ab:9b:4c:f4:20:18:b9:b3:84: 8f:f7:83:47:4b:b2:a7:d7:c0:7e:5e:fe:a1:28:d0: b5:d7:35:2c:3b:df:52:53:8e:46:cb:04:ba:f7:a5: 14:70:43:f2:53:39:e5:21:6c:be:30:7c:71:fd:fc: 78:cb:2f:34:07:a0:df:33:72:2a:b9:d4:77:ea:60: a5:9a:f2:d0:1e:2b:ed:50:6b:b4:ca:08:56:32:f9: b3:38:26:98:64:e3:36:a2:c2:a7:e3:74:e6:b0:2f: 20:3d:15:06:2e:44:67:45:13:09:05:1b:53:ae:5d: a5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:96:D8:40:44:35:D4:B3:2B:07:05:3D:9C:82:0A:03:D8:D2:32:8F X509v3 Authority Key Identifier: keyid:09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:5b:05:0b:3a:9e:bd:72:c9:cb:cb:bb:74:86:c3:ee:c8:65: bb:98:1c:6b:82:ca:9e:5d:a1:23:af:d3:d6:b1:80:6c:8e:8e: 15:04:a2:0f:39:b4:fe:34:87:4a:d0:90:11:28:dc:9e:7c:cd: 4f:32:56:64:70:21:f2:d1:40:a7:fc:47:f7:91:90:47:3b:08: 91:53:53:c6:68:e8:6d:a8:19:b5:1f:d2:c9:e3:5a:c2:33:c3: 9e:1c:b5:9d:dc:90:fd:df:a5:52:e0:fa:cc:f4:75:b5:ff:06: 3f:02:6f:af:6f:fa:59:ee:57:b0:93:f0:39:c4:f2:13:78:8e: 07:cf:b8:86:a0:22:db:0a:08:ea:78:e3:c8:d8:c3:44:47:b7: 9a:02:d5:cb:ff:ae:b0:82:3a:38:1f:dc:36:db:a7:d3:14:c9: d1:d4:bf:39:80:8f:2b:ff:6b:14:de:0a:2d:98:9b:4c:9b:fa: 20:75:48:c9:6d:ca:30:87:43:24:b2:93:25:d4:8c:f1:41:94: 9a:33:98:ac:f4:53:21:6e:4c:f4:a2:5f:44:98:23:e7:91:66: 4f:d5:b2:45:15:09:55:00:5e:0c:81:a7:8d:bd:3d:b5:df:88: 49:fe:82:be:1f:21:ac:69:b1:35:2a:d3:01:d4:7f:3a:87:f7: 57:04:f0:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkEzNTExMC8GA1UEBRMoMDk1OEQ3QzdCNTc1NjdEOTY1RTE0ODA0ODE1MkUyQjQ3 OEZDNDM5OTAeFw0yNTEyMjMwNjI2NDFaFw0yNTEyMzAwNjI2NDFaMBgxFjAUBgNV BAMMDTY5NGEzNjIxLTBhNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9l1wXAtGtt8MXZKjlYGOlieLVUtfcZanbkQV820P3F+J9Kxi7rXiRyYbYJrlQ yK4DfBM/H6ZCXOtJgpbBnZ6AlLqFT7DnvxvHrFF+UHlzvYTZL6I9iyMuiZfCasew Ix6zUeDFUlOGss2VK09AzBIspPfvu+7kI9MPXZ1wPsjy6aqMWsePrRoM0U+m16ub TPQgGLmzhI/3g0dLsqfXwH5e/qEo0LXXNSw731JTjkbLBLr3pRRwQ/JTOeUhbL4w fHH9/HjLLzQHoN8zciq51HfqYKWa8tAeK+1Qa7TKCFYy+bM4Jphk4zaiwqfjdOaw LyA9FQYuRGdFEwkFG1OuXaW5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUapbYQEQ1 1LMrBwU9nIIKA9jSMo8wHwYDVR0jBBgwFoAUCVjXx7V1Z9ll4UgEgVLitHj8Q5kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGQTM1LzVFNDAzNERFOThC OTExRjBCOTk2MEIyMEM0RjlBRTAyL0NWalh4N1YxWjlsbDRVZ0VnVkxpdEhqOFE1 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1ZqWHg3VjFaOWxsNFVnRWdWTGl0SGo4UTVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG QTM1LzVFNDAzNERFOThCOTExRjBCOTk2MEIyMEM0RjlBRTAyL0NWalh4N1YxWjls bDRVZ0VnVkxpdEhqOFE1ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFJbBQs6nr1yycvLu3SGw+7IZbuYHGuCyp5doSOv09axgGyOjhUEog85 tP40h0rQkBEo3J58zU8yVmRwIfLRQKf8R/eRkEc7CJFTU8Zo6G2oGbUf0snjWsIz w54ctZ3ckP3fpVLg+sz0dbX/Bj8Cb69v+lnuV7CT8DnE8hN4jgfPuIagItsKCOp4 48jYw0RHt5oC1cv/rrCCOjgf3Dbbp9MUydHUvzmAjyv/axTeCi2Ym0yb+iB1SMlt yjCHQySykyXUjPFBlJozmKz0UyFuTPSiX0SYI+eRZk/VskUVCVUAXgyBp429PbXf iEn+gr4fIaxpsTUq0wHUfzqH91cE8BQ= -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:05 2025 by rpki-client