This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft File: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json) Hash identifier: CVXJlmKcPWEVpH+kN7rbeRc8xoUjgG2VLQB2qQ/5NWM= Subject key identifier: D8:17:5E:F9:32:07:04:75:40:AD:B2:39:8A:52:BE:44:05:B4:BB:AD Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E Certificate issuer: /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Certificate serial: 216C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft Manifest number: 216C Signing time: Thu 18 Dec 2025 15:50:41 +0000 Manifest this update: Thu 18 Dec 2025 15:50:41 +0000 Manifest next update: Thu 25 Dec 2025 15:50:41 +0000 Files and hashes: 1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: sFkvEcSWIqQ7KjAOaIarDJs6omlt7kgui4gtvYiQQBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8556 (0x216c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Validity Not Before: Dec 18 15:50:41 2025 GMT Not After : Dec 25 15:50:41 2025 GMT Subject: CN=694422d1-c5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:36:29:ce:46:d6:a5:c1:e4:05:e7:e3:b3:27: e3:7e:a6:67:42:c2:8a:19:dd:22:da:0c:7b:1c:3d: c9:52:cb:52:60:e0:dd:94:d9:e6:2f:10:f6:83:94: 6b:90:16:b1:7d:58:35:6a:d7:da:1e:c2:33:69:d2: cf:47:79:97:ef:4e:ae:b9:90:f6:13:7e:2c:43:b3: 15:07:e5:5d:55:4b:a4:53:84:95:15:63:40:12:55: 46:d7:9e:bd:7d:79:64:c5:82:14:c3:c5:d6:9d:3b: d2:cd:0d:29:a1:03:94:9d:15:a8:99:e4:11:e5:36: d9:5f:15:4e:1a:22:ee:2f:75:14:db:60:ff:77:d9: 15:87:98:3a:91:40:0f:d8:8a:cc:d8:8b:a3:09:93: 6f:b1:2d:8c:19:88:44:45:09:c2:89:a0:c6:7f:65: fb:cb:9f:93:b8:73:e3:0b:c2:dc:31:c6:e5:d1:52: 43:5a:1a:16:6d:04:0d:6d:2d:5e:e2:2d:1a:50:d9: a2:8b:a2:91:10:4d:60:a3:71:f5:f7:d4:44:2d:14: d2:05:bd:0b:d0:3e:a8:23:fb:e9:1d:b4:fe:1b:82: 78:97:78:9f:9c:41:69:33:82:d8:4e:89:1e:fb:7b: 1d:19:72:6d:fe:67:c6:cb:c9:62:34:09:e6:aa:01: 72:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:17:5E:F9:32:07:04:75:40:AD:B2:39:8A:52:BE:44:05:B4:BB:AD X509v3 Authority Key Identifier: keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d2:c6:e5:7c:dd:b0:7f:a7:07:f1:61:7b:15:6a:ec:48:80: 5f:62:a9:83:51:3f:0d:73:31:4e:64:92:c9:86:61:55:05:db: 72:58:67:f8:19:68:13:82:72:31:0c:d8:47:4e:37:3d:f3:b2: f0:0a:bc:a8:12:2c:b9:bb:1f:0d:a7:ed:2b:47:b0:52:30:4f: 7c:fb:1f:5c:17:fc:a9:98:d4:52:dd:65:48:fd:ed:32:1a:86: 6a:f6:fa:2e:85:ac:a1:ee:9e:15:6e:2a:37:16:24:47:02:34: b3:a9:0e:df:8d:04:9b:15:87:71:4f:29:19:e3:02:4f:f2:54: 23:f1:cf:d7:86:34:48:4f:60:5d:36:52:19:e2:b6:f4:ee:ba: 2a:c6:bd:ba:ee:5a:e1:57:64:c2:0f:31:91:d6:f1:3a:71:2e: 3a:62:af:fe:f3:20:41:c2:e7:0a:50:87:bd:5b:68:0c:a6:30: 53:c1:68:08:18:b9:26:6f:6b:d7:a7:db:d4:16:db:8c:fc:58: a8:95:93:f6:2c:af:d4:9c:65:d9:73:dd:c3:1e:da:eb:cf:3f: 5c:43:e1:f3:77:01:66:73:9d:c5:b8:06:16:1e:43:b2:aa:92: 91:01:ef:09:0e:1a:97:de:b3:56:84:e1:e9:91:7f:71:3e:40: ee:22:92:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDcwNDVBNzE4QkJFQjI4OUYxOEQxRjkzMEZBMzMyRDYz MzJEOTU1NUUwHhcNMjUxMjE4MTU1MDQxWhcNMjUxMjI1MTU1MDQxWjAYMRYwFAYD VQQDDA02OTQ0MjJkMS1jNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDYpzkbWpcHkBefjsyfjfqZnQsKKGd0i2gx7HD3JUstSYODdlNnmLxD2g5Rr kBaxfVg1atfaHsIzadLPR3mX706uuZD2E34sQ7MVB+VdVUukU4SVFWNAElVG1569 fXlkxYIUw8XWnTvSzQ0poQOUnRWomeQR5TbZXxVOGiLuL3UU22D/d9kVh5g6kUAP 2IrM2IujCZNvsS2MGYhERQnCiaDGf2X7y5+TuHPjC8LcMcbl0VJDWhoWbQQNbS1e 4i0aUNmii6KREE1go3H199RELRTSBb0L0D6oI/vpHbT+G4J4l3ifnEFpM4LYToke +3sdGXJt/mfGy8liNAnmqgFyYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgXXvky BwR1QK2yOYpSvkQFtLutMB8GA1UdIwQYMBaAFHBFpxi76yifGNH5MPozLWMy2VVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80MDc1MTIxQUYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktKOFkwZmt3LWpNdFl6TFpW VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NFV25HTHZyS0o4WTBma3ctak10WXpMWlZWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80MDc1MTIxQUYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktK OFkwZmt3LWpNdFl6TFpWVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM0sblfN2wf6cH8WF7FWrsSIBfYqmDUT8NczFOZJLJhmFVBdtyWGf4 GWgTgnIxDNhHTjc987LwCryoEiy5ux8Np+0rR7BSME98+x9cF/ypmNRS3WVI/e0y GoZq9vouhayh7p4Vbio3FiRHAjSzqQ7fjQSbFYdxTykZ4wJP8lQj8c/XhjRIT2Bd NlIZ4rb07roqxr267lrhV2TCDzGR1vE6cS46Yq/+8yBBwucKUIe9W2gMpjBTwWgI GLkmb2vXp9vUFtuM/FiolZP2LK/UnGXZc93DHtrrzz9cQ+HzdwFmc53FuAYWHkOy qpKRAe8JDhqX3rNWhOHpkX9xPkDuIpKY -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:37 2025 by rpki-client