This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json) Hash identifier: xtUGZj9hrlLF3/BuTDnQ9EjKlzsCw5zM1HCcWlr9UVA= Subject key identifier: 31:85:2D:BB:BD:35:83:22:16:90:20:66:6C:B6:49:50:FC:93:F1:7A Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Certificate serial: 34EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft Manifest number: 34EC Signing time: Thu 18 Dec 2025 15:06:42 +0000 Manifest this update: Thu 18 Dec 2025 15:06:42 +0000 Manifest next update: Thu 25 Dec 2025 15:06:42 +0000 Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: GBSRCaahADz8Jde2PD7OHqyFS8XGy9Iz1jykCHueZO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13548 (0x34ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Validity Not Before: Dec 18 15:06:42 2025 GMT Not After : Dec 25 15:06:42 2025 GMT Subject: CN=69441882-697c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:07:a2:6d:8a:16:47:bb:4f:72:e0:0d:aa: fd:0a:13:5f:9e:a1:67:6e:90:05:e6:3d:0f:5b:a6: b1:a4:9f:42:e8:ab:fa:7e:99:df:9b:e6:0c:ae:ae: 98:cc:01:63:a4:d1:58:c0:17:f4:55:27:15:b7:d0: 04:af:b4:7b:5a:55:21:47:fd:8f:5f:2d:d1:de:7d: 0c:79:cb:57:f0:ec:c6:62:6f:c0:7e:e6:bd:e5:bc: 85:7a:ac:fe:ad:a3:bc:21:97:67:96:b1:81:5a:c7: 5b:cb:04:50:0c:6e:15:90:37:6c:7f:c2:7d:6c:e1: c2:e9:b3:a8:db:99:70:31:4c:d0:e7:28:9f:4f:2c: 18:ee:d2:8b:50:c5:b0:74:d3:b0:98:2c:80:05:4a: db:0f:a5:87:fc:bc:d2:6b:50:f2:a3:1a:05:8d:ce: d2:bd:84:26:ca:f5:0b:86:b2:0e:25:1a:f2:2f:ca: ca:95:54:ba:4b:59:2d:6b:5a:c2:75:33:d5:d6:ac: 28:a1:64:39:34:4f:5c:e4:2e:c6:aa:8e:fe:c9:3d: 9f:08:66:6d:a0:30:09:8f:d5:f7:ee:19:ee:a9:8d: 6d:92:87:9a:f6:4d:88:3c:c7:de:bb:9a:31:e6:1b: 71:da:3c:24:eb:29:50:f8:45:bb:70:85:85:50:d3: 20:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:85:2D:BB:BD:35:83:22:16:90:20:66:6C:B6:49:50:FC:93:F1:7A X509v3 Authority Key Identifier: keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a7:03:cb:3d:cb:f7:5a:c4:fd:68:49:3f:a9:e4:39:49:23: 84:67:69:e5:fb:3a:31:b8:c9:1c:19:18:e0:65:ad:ee:aa:1e: ba:73:82:7e:ab:ac:cf:ff:1f:15:8b:23:fa:0c:27:37:ee:a0: 81:07:d8:7a:c7:21:5f:7a:01:6b:c5:02:3a:63:0f:5c:48:2c: 66:2d:15:1c:d4:63:38:5a:e8:46:b6:7a:34:b9:c4:47:44:c1: 89:91:5c:db:ed:3b:0b:86:10:d7:14:85:83:6f:5b:4d:5d:31: 78:f0:7d:79:9b:84:9a:de:a8:7c:32:2f:52:91:ea:11:33:4c: aa:5f:ab:5a:71:c1:fa:12:8c:64:0f:2f:df:6c:12:a7:9b:35: 11:fe:74:f6:a5:ab:48:c4:0f:6b:ab:3f:5f:91:61:17:d8:48: f6:f0:4a:f7:b3:22:43:86:82:88:28:c5:39:fe:79:ae:b3:26: 50:23:1c:b1:4d:9b:c2:2e:13:6e:34:a3:bc:bb:50:34:9d:d4: 82:66:ab:1e:53:90:a2:08:f4:e0:29:07:39:c0:f1:f4:2d:51: 86:73:eb:87:47:1c:b0:ec:30:ae:85:08:9c:23:cc:50:c2:f0: 6f:ec:5d:84:e4:2d:97:4c:a5:6e:da:39:6e:79:0a:77:e7:d9: c5:d7:22:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCNUUxMTAvBgNVBAUTKDAxMUQ2MUIyMzNBREYzMENEMjQ3NTYyMTI0QkI3MThC QzYzQUQ2NEUwHhcNMjUxMjE4MTUwNjQyWhcNMjUxMjI1MTUwNjQyWjAYMRYwFAYD VQQDDA02OTQ0MTg4Mi02OTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0YHom2KFke7T3LgDar9ChNfnqFnbpAF5j0PW6axpJ9C6Kv6fpnfm+YMrq6Y zAFjpNFYwBf0VScVt9AEr7R7WlUhR/2PXy3R3n0MectX8OzGYm/Afua95byFeqz+ raO8IZdnlrGBWsdbywRQDG4VkDdsf8J9bOHC6bOo25lwMUzQ5yifTywY7tKLUMWw dNOwmCyABUrbD6WH/LzSa1DyoxoFjc7SvYQmyvULhrIOJRryL8rKlVS6S1kta1rC dTPV1qwooWQ5NE9c5C7Gqo7+yT2fCGZtoDAJj9X37hnuqY1tkoea9k2IPMfeu5ox 5htx2jwk6ylQ+EW7cIWFUNMgdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGFLbu9 NYMiFpAgZmy2SVD8k/F6MB8GA1UdIwQYMBaAFAEdYbIzrfMM0kdWISS7cYvGOtZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI1RS9GNTY1QUREMjFE QTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3elNSMVloSkx0eGk4WTYx azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSMWhzak90OHd6U1IxWWhKTHR4aThZNjFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI1RS9GNTY1QUREMjFEQTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3 elNSMVloSkx0eGk4WTYxazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARpwPLPcv3WsT9aEk/qeQ5SSOEZ2nl+zoxuMkcGRjgZa3uqh66c4J+ q6zP/x8ViyP6DCc37qCBB9h6xyFfegFrxQI6Yw9cSCxmLRUc1GM4WuhGtno0ucRH RMGJkVzb7TsLhhDXFIWDb1tNXTF48H15m4Sa3qh8Mi9SkeoRM0yqX6taccH6Eoxk Dy/fbBKnmzUR/nT2patIxA9rqz9fkWEX2Ej28Er3syJDhoKIKMU5/nmusyZQIxyx TZvCLhNuNKO8u1A0ndSCZqseU5CiCPTgKQc5wPH0LVGGc+uHRxyw7DCuhQicI8xQ wvBv7F2E5C2XTKVu2jlueQp359nF1yJc -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:53 2025 by rpki-client