This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: HmwZ5xMnNMMvsRPMNM+9BN938WKhMxxFtPFXF2hwm6w= Subject key identifier: FA:09:EF:49:6E:94:C3:50:00:E0:25:E4:49:B8:2B:CF:98:FC:97:6E Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 1694 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 168A Signing time: Sat 20 Dec 2025 16:27:59 +0000 Manifest this update: Sat 20 Dec 2025 16:27:58 +0000 Manifest next update: Sat 27 Dec 2025 16:27:58 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: iNhTgUKZW7M/+tT3U+ZqE5qQdrDhtutnNX04y9LiwYs=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: LPGhf2+lZ/tfy7iMoJQ9mcHsSA792NuIJHPh9NLe0yI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5780 (0x1694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: Dec 20 16:27:58 2025 GMT Not After : Dec 27 16:27:58 2025 GMT Subject: CN=6946ce8e-7a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fe:e2:fe:e8:e4:ba:dc:78:3f:01:c8:93:cf: 0a:bf:97:95:53:aa:4d:31:db:32:76:f8:77:3c:63: 5a:ea:44:02:32:e4:52:08:12:27:63:61:11:fe:c8: 27:06:46:6d:b9:fc:d1:77:c5:8d:ad:e0:1c:2d:98: 69:b5:5a:e9:1e:ad:a7:5b:86:c0:33:9d:ba:81:75: 96:47:39:59:6f:cf:c3:f8:18:48:d2:a6:dd:88:1a: 3b:2a:a8:b3:65:0f:86:65:17:55:b3:39:61:0c:92: 58:3e:27:7c:3f:5a:3d:c0:9b:c0:53:46:63:f8:3e: fd:32:41:23:de:cd:63:47:a1:c3:0e:1e:82:1f:2b: 61:14:9d:e3:e4:de:ee:19:86:cd:35:61:a5:5c:b8: 1e:95:1e:b8:5e:32:f7:10:46:95:63:19:06:27:4a: 84:da:92:2d:2f:3d:39:d4:02:62:a9:1a:c1:d8:b9: fc:a6:8c:11:15:70:3d:38:56:d1:84:24:f4:84:5d: a8:79:93:ef:28:85:1d:c1:55:ef:15:08:f3:d7:b4: 32:a6:ec:38:83:2c:b6:7a:32:52:08:5c:84:06:16: 0e:35:6b:b2:8f:13:77:7b:47:48:5b:c0:fc:58:2e: 30:88:f1:12:86:10:3b:89:3c:a8:73:ad:6f:d5:d6: 38:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:09:EF:49:6E:94:C3:50:00:E0:25:E4:49:B8:2B:CF:98:FC:97:6E X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:e7:6d:d0:52:d0:52:40:49:1c:ea:64:e3:ac:18:ed:c6:32: 07:67:ff:b8:eb:ad:08:73:ac:a3:d1:d6:01:04:c6:86:a9:4b: a8:b8:b8:5d:57:20:47:f2:35:1f:5c:27:a1:8a:96:ab:e7:3b: 23:2c:6f:6e:57:48:e0:19:71:77:fa:08:d1:c0:c9:49:83:b8: 50:18:f0:ff:25:45:e7:f6:38:4d:66:c7:e5:dc:e7:ae:48:d4: 70:3c:75:da:73:37:33:fb:2c:0d:5a:94:59:19:34:5f:d4:85: 24:17:f8:c0:02:66:97:66:92:17:6b:1f:d4:89:ab:74:76:57: 2c:e1:1d:8b:f9:f5:cb:0d:63:39:be:ec:9b:ef:1e:8a:d7:f2: 25:72:6e:a7:11:fb:34:f7:a0:b6:09:47:4a:87:51:54:2e:21: 16:26:24:c3:fc:67:74:2d:a4:00:49:bf:22:9c:6b:3d:c5:b5: 7d:b7:69:8c:6a:97:96:06:82:8e:02:29:a3:77:3f:63:f9:a7: 28:64:52:43:96:b2:54:32:81:d5:69:b5:4c:9b:fb:fb:ea:6c: ad:b9:da:3f:a4:7a:ff:d0:62:4d:43:1f:a5:99:4b:60:fc:50: 65:e9:92:21:08:9a:08:8f:0d:bc:c4:47:7d:1e:79:ad:3a:f3: 98:25:b3:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjUxMjIwMTYyNzU4WhcNMjUxMjI3MTYyNzU4WjAYMRYwFAYD VQQDDA02OTQ2Y2U4ZS03YTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf7i/ujkutx4PwHIk88Kv5eVU6pNMdsydvh3PGNa6kQCMuRSCBInY2ER/sgn BkZtufzRd8WNreAcLZhptVrpHq2nW4bAM526gXWWRzlZb8/D+BhI0qbdiBo7Kqiz ZQ+GZRdVszlhDJJYPid8P1o9wJvAU0Zj+D79MkEj3s1jR6HDDh6CHythFJ3j5N7u GYbNNWGlXLgelR64XjL3EEaVYxkGJ0qE2pItLz051AJiqRrB2Ln8powRFXA9OFbR hCT0hF2oeZPvKIUdwVXvFQjz17Qypuw4gyy2ejJSCFyEBhYONWuyjxN3e0dIW8D8 WC4wiPEShhA7iTyoc61v1dY43QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoJ70lu lMNQAOAl5Em4K8+Y/JduMB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1523QUtBSQEkc6mTjrBjtxjIHZ/+4660Ic6yj0dYBBMaGqUuouLhd VyBH8jUfXCehipar5zsjLG9uV0jgGXF3+gjRwMlJg7hQGPD/JUXn9jhNZsfl3Oeu SNRwPHXaczcz+ywNWpRZGTRf1IUkF/jAAmaXZpIXax/Uiat0dlcs4R2L+fXLDWM5 vuyb7x6K1/Ilcm6nEfs096C2CUdKh1FULiEWJiTD/Gd0LaQASb8inGs9xbV9t2mM apeWBoKOAimjdz9j+acoZFJDlrJUMoHVabVMm/v76mytudo/pHr/0GJNQx+lmUtg /FBl6ZIhCJoIjw28xEd9HnmtOvOYJbO3 -----END CERTIFICATE-----Generated at Sun Dec 21 10:37:38 2025 by rpki-client