This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft File: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft (raw, json) Hash identifier: FO1jsOEFxvul/cZXrvUNXKHpSb0FiDtMUSkjJDJ4pZs= Subject key identifier: A4:AB:CF:20:87:F2:D2:45:16:B1:A8:89:77:19:25:E2:B9:81:55:9A Authority key identifier: 4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD Certificate issuer: /CN=A915BDD9/serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft Manifest number: 013D Signing time: Fri 19 Dec 2025 03:33:18 +0000 Manifest this update: Fri 19 Dec 2025 03:33:18 +0000 Manifest next update: Fri 26 Dec 2025 03:33:18 +0000 Files and hashes: 1: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl (hash: XLZRcRaoqYJmT5NJXJOUAB+wrH6cZgL4CVOdTMpOxew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BDD9, serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD Validity Not Before: Dec 19 03:33:18 2025 GMT Not After : Dec 26 03:33:18 2025 GMT Subject: CN=6944c77e-159e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:af:49:6b:18:fe:f9:3f:d4:f1:42:b4:91: ec:62:c9:9b:c3:a5:5c:94:2d:f6:fc:26:94:71:38: 07:7e:c8:d6:f0:ba:3d:16:aa:39:46:43:26:a1:4d: 93:9c:8f:62:cd:18:5c:ed:98:1f:8c:4b:8f:0e:9a: 41:a7:da:9b:9d:70:05:a3:ec:b2:f1:63:06:08:cc: a2:54:14:1b:a2:e8:2d:a5:d8:a9:e3:5e:c8:69:4f: 19:9f:1f:32:c6:f1:b9:ae:ed:ff:a4:e7:63:de:67: 92:ad:82:0a:10:95:f4:bf:f4:9a:15:79:09:88:54: 3b:aa:41:00:31:b7:69:5e:bf:26:2d:42:42:88:bb: dc:a7:1d:37:1f:79:f7:3a:4d:9d:d6:4a:f0:b9:26: 6c:a1:17:5b:76:a2:dd:da:90:fd:f4:a7:ad:84:83: 67:12:4b:e5:b8:1a:1f:3b:35:89:c2:28:3f:e4:1e: 10:ba:ee:78:b7:8b:b8:70:07:5c:77:53:34:77:f1: bd:82:73:5f:6a:7e:fd:c8:42:6b:19:d1:e9:c5:55: 3b:13:fc:27:0d:70:fd:f0:a1:11:71:db:f8:88:a0: d4:38:79:a9:92:a4:1c:95:4b:f5:c9:3b:31:00:a6: 9f:f9:05:af:85:88:ac:38:c9:b4:9d:4e:cc:13:21: 63:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AB:CF:20:87:F2:D2:45:16:B1:A8:89:77:19:25:E2:B9:81:55:9A X509v3 Authority Key Identifier: keyid:4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:74:03:37:0a:91:27:c7:55:1f:3a:d8:02:1b:1d:ba:8f:03: 63:15:b6:4e:4c:f5:b7:a7:88:91:52:15:21:d1:57:21:f2:c4: 81:ac:66:e1:bb:fa:28:4b:2c:67:1b:72:4a:63:8d:3c:da:6e: 9c:cd:da:73:8f:de:ad:da:2a:ef:e6:c5:8b:43:be:34:49:4e: fa:e8:36:89:f4:a0:38:7e:ab:5b:52:fb:13:34:15:9c:2c:fe: 96:00:28:18:0f:fb:59:9c:89:58:23:39:d6:b6:4f:ea:4e:16: 85:44:b0:d1:fe:fd:ab:43:0d:90:4d:9d:79:55:89:b6:87:ee: d8:e0:ed:da:de:6c:88:52:52:87:01:12:a7:e9:a3:0b:07:cc: e6:7d:ee:66:cb:7c:18:4b:11:96:b0:ba:2b:49:80:f6:61:83: 78:1d:6f:a4:c2:4b:65:4c:bf:08:75:40:ca:9e:39:5a:5c:04: 61:25:f8:db:24:35:ca:e0:c3:49:d9:44:80:bb:60:8e:53:34: c1:40:4d:cc:24:e5:b3:20:35:3a:9f:7f:f5:da:0c:0a:34:f9: 42:76:cb:f6:80:fb:66:f1:3b:d5:62:1f:19:6b:a7:44:4f:a5: 0d:a8:b2:fa:01:55:e8:1e:9b:03:f9:fe:66:b5:02:2a:91:c0: 6f:6c:27:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJERDkxMTAvBgNVBAUTKDRBMTZFMUVCM0JERjhERDQ2MDczQzI1NTczNTNBNEZD RTg3MDg3Q0QwHhcNMjUxMjE5MDMzMzE4WhcNMjUxMjI2MDMzMzE4WjAYMRYwFAYD VQQDDA02OTQ0Yzc3ZS0xNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD+vSWsY/vk/1PFCtJHsYsmbw6VclC32/CaUcTgHfsjW8Lo9Fqo5RkMmoU2T nI9izRhc7ZgfjEuPDppBp9qbnXAFo+yy8WMGCMyiVBQbougtpdip417IaU8Znx8y xvG5ru3/pOdj3meSrYIKEJX0v/SaFXkJiFQ7qkEAMbdpXr8mLUJCiLvcpx03H3n3 Ok2d1krwuSZsoRdbdqLd2pD99KethINnEkvluBofOzWJwig/5B4Quu54t4u4cAdc d1M0d/G9gnNfan79yEJrGdHpxVU7E/wnDXD98KERcdv4iKDUOHmpkqQclUv1yTsx AKaf+QWvhYisOMm0nU7MEyFjkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSrzyCH 8tJFFrGoiXcZJeK5gVWaMB8GA1UdIwQYMBaAFEoW4es7343UYHPCVXNTpPzocIfN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkREOS8yMjcyQzVGMEYx QjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2ZmpkUmdjOEpWYzFPa19PaHdo ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoYmg2enZmamRSZ2M4SlZjMU9rX09od2g4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkREOS8yMjcyQzVGMEYxQjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2Zmpk UmdjOEpWYzFPa19PaHdoODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANdAM3CpEnx1UfOtgCGx26jwNjFbZOTPW3p4iRUhUh0Vch8sSBrGbh u/ooSyxnG3JKY4082m6czdpzj96t2irv5sWLQ740SU766DaJ9KA4fqtbUvsTNBWc LP6WACgYD/tZnIlYIznWtk/qThaFRLDR/v2rQw2QTZ15VYm2h+7Y4O3a3myIUlKH ARKn6aMLB8zmfe5my3wYSxGWsLorSYD2YYN4HW+kwktlTL8IdUDKnjlaXARhJfjb JDXK4MNJ2USAu2COUzTBQE3MJOWzIDU6n3/12gwKNPlCdsv2gPtm8TvVYh8Za6dE T6UNqLL6AVXoHpsD+f5mtQIqkcBvbCff -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:00 2025 by rpki-client