This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft File: CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft (raw, json) Hash identifier: c2bElYPaAo+DEaQDcQYoIXQU+QIqZHh2xbp3ybZQb6A= Subject key identifier: 5C:53:6F:2D:8B:B9:21:10:17:30:0F:30:05:F8:34:95:BA:94:CD:DB Authority key identifier: 09:E2:C7:58:14:1C:01:44:F4:62:B9:F0:F8:FB:E7:48:AA:05:CB:21 Certificate issuer: /CN=A919C203/serialNumber=09E2C758141C0144F462B9F0F8FBE748AA05CB21 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft Manifest number: 015B Signing time: Sun 21 Dec 2025 03:16:33 +0000 Manifest this update: Sun 21 Dec 2025 03:16:32 +0000 Manifest next update: Sun 28 Dec 2025 03:16:32 +0000 Files and hashes: 1: CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl (hash: v/E31EOAw0J4iMvyuhl1lTIMtdBKX/SNJ0o0tLxnsAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C203, serialNumber=09E2C758141C0144F462B9F0F8FBE748AA05CB21 Validity Not Before: Dec 21 03:16:32 2025 GMT Not After : Dec 28 03:16:32 2025 GMT Subject: CN=69476691-2a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a1:00:84:5a:a9:9c:5f:bc:e5:5b:f4:87:2e: 72:8d:5e:c7:f9:16:77:f0:2c:3c:1e:91:79:8a:da: d7:36:c8:07:24:e1:fa:dc:8f:0b:ba:37:66:58:9a: 87:2c:be:00:61:d9:13:ca:17:9b:04:bd:59:b4:bc: 70:09:4a:18:f7:82:4d:6a:68:9f:3e:e3:55:12:8b: 48:96:a1:db:18:2a:a2:94:e2:3e:e2:8f:d9:6a:1a: 46:da:8a:40:c5:f2:ee:91:4b:9f:69:c4:16:3e:9a: 70:42:9f:d6:da:cc:4b:7c:07:2c:3c:8d:58:e9:63: aa:f8:74:18:46:25:65:cd:f7:7e:a6:d2:20:5a:97: 55:e8:10:2f:4f:f6:83:b8:9c:bb:54:ae:82:af:f0: b4:e8:8f:4c:7a:66:5a:7a:cb:1d:e5:fc:c8:9f:ac: 39:fb:40:88:2d:f9:c6:1b:7b:06:28:13:05:58:3c: 93:e9:b3:28:ac:d1:d0:dc:95:74:d1:59:40:a3:cb: 1b:40:16:a4:7c:07:6a:ce:db:c5:d3:92:ab:81:bb: bb:1d:5c:a7:7c:ff:54:b8:9b:9e:67:47:ad:dc:d8: d0:ae:7e:7b:9c:a3:b1:92:01:e1:70:69:aa:e3:ab: 99:e9:30:0c:2d:b6:5a:f4:ab:d9:51:19:08:2b:3a: 3c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:53:6F:2D:8B:B9:21:10:17:30:0F:30:05:F8:34:95:BA:94:CD:DB X509v3 Authority Key Identifier: keyid:09:E2:C7:58:14:1C:01:44:F4:62:B9:F0:F8:FB:E7:48:AA:05:CB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:11:61:7e:de:3b:9c:7b:a4:71:04:14:a1:73:cd:8b:9a:30: 92:ac:d2:5c:bd:88:ee:a1:9d:5d:be:eb:8e:a5:fd:e2:17:a0: b2:a9:7f:84:84:b7:93:d7:b4:65:0b:a8:a8:2d:0e:c2:b6:42: 64:27:1c:05:8d:f4:de:e9:cd:ff:68:46:80:eb:9f:e7:4c:46: f6:65:31:42:26:5c:17:33:43:e6:20:52:d4:bb:fa:70:4f:4a: 32:20:7a:07:ee:17:9f:11:96:cf:66:4d:3c:6c:28:e3:24:0f: 1a:58:5e:e3:67:e9:34:0d:99:7b:95:db:e3:8b:84:63:e8:73: d9:97:bc:a9:99:0c:86:25:22:5d:43:f2:40:d5:96:e1:dd:e3: 1a:ad:96:0f:1c:95:50:50:c7:ba:59:ca:cc:a5:42:2a:e3:6f: 72:de:40:8f:60:76:f8:99:65:9a:52:a0:fa:72:44:92:7e:81: 76:01:f3:fe:3e:60:36:f7:c2:e0:e6:d8:6c:f0:30:e2:09:70: 15:3e:68:d1:e4:ea:20:e1:af:28:e9:5b:90:fa:d4:64:94:d0: 0f:c6:ae:a0:5e:6f:c2:5e:15:c6:d0:36:86:ee:f0:9a:d4:4c: d9:0e:0e:50:a0:d4:91:1c:9f:0e:65:e6:2d:2b:0b:9d:c9:a0: 96:76:7c:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMDMxMTAvBgNVBAUTKDA5RTJDNzU4MTQxQzAxNDRGNDYyQjlGMEY4RkJFNzQ4 QUEwNUNCMjEwHhcNMjUxMjIxMDMxNjMyWhcNMjUxMjI4MDMxNjMyWjAYMRYwFAYD VQQDDA02OTQ3NjY5MS0yYTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6EAhFqpnF+85Vv0hy5yjV7H+RZ38Cw8HpF5itrXNsgHJOH63I8LujdmWJqH LL4AYdkTyhebBL1ZtLxwCUoY94JNamifPuNVEotIlqHbGCqilOI+4o/ZahpG2opA xfLukUufacQWPppwQp/W2sxLfAcsPI1Y6WOq+HQYRiVlzfd+ptIgWpdV6BAvT/aD uJy7VK6Cr/C06I9MemZaessd5fzIn6w5+0CILfnGG3sGKBMFWDyT6bMorNHQ3JV0 0VlAo8sbQBakfAdqztvF05Krgbu7HVynfP9UuJueZ0et3NjQrn57nKOxkgHhcGmq 46uZ6TAMLbZa9KvZURkIKzo8MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxTby2L uSEQFzAPMAX4NJW6lM3bMB8GA1UdIwQYMBaAFAnix1gUHAFE9GK58Pj750iqBcsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIwMy9DRUMxMjJDQUM1 ODYxMUVFOTExNjZCODNDNEY5QUUwMi9DZUxIV0JRY0FVVDBZcm53LVB2blNLb0Z5 eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NlTEhXQlFjQVVUMFlybnctUHZuU0tvRnl5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIwMy9DRUMxMjJDQUM1ODYxMUVFOTExNjZCODNDNEY5QUUwMi9DZUxIV0JRY0FV VDBZcm53LVB2blNLb0Z5eUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBREWF+3juce6RxBBShc82LmjCSrNJcvYjuoZ1dvuuOpf3iF6CyqX+E hLeT17RlC6ioLQ7CtkJkJxwFjfTe6c3/aEaA65/nTEb2ZTFCJlwXM0PmIFLUu/pw T0oyIHoH7hefEZbPZk08bCjjJA8aWF7jZ+k0DZl7ldvji4Rj6HPZl7ypmQyGJSJd Q/JA1Zbh3eMarZYPHJVQUMe6WcrMpUIq429y3kCPYHb4mWWaUqD6ckSSfoF2AfP+ PmA298Lg5ths8DDiCXAVPmjR5Oog4a8o6VuQ+tRklNAPxq6gXm/CXhXG0DaG7vCa 1EzZDg5QoNSRHJ8OZeYtKwudyaCWdnyE -----END CERTIFICATE-----Generated at Mon Dec 22 08:54:13 2025 by rpki-client