This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: HRzUri4nFQqX2ePfRNtR4BDt1iSz/e1N8tTK+BAA0GU= Subject key identifier: 91:A1:85:E3:4A:D4:CC:27:CE:D8:3A:C8:B4:0F:00:F8:88:60:66:13 Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 058D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 0562 Signing time: Thu 18 Dec 2025 22:48:20 +0000 Manifest this update: Thu 18 Dec 2025 22:48:19 +0000 Manifest next update: Thu 25 Dec 2025 22:48:19 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: 4T0BYAJhR92NP4qJfsYUBzLXZFg4Pl5Loqf0p1ekChk=) 2: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: hn+qGaZCtkUKYopOyzVnHKxTxBxzaX/N9RY/bypGInA=) 3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: /zpbbyMm2w5Xcql5zfUtoN8iPAyG5aFUqVMvzNCSPuM=) 4: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: vwZIGcuT/wdsi2ov5n4aKBIuwaWae+4rjnxU5e55BsU=) 5: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: XSuhAhi3kRB8kUY+l+Kw6bn9CYFf3Y2Di14tTGA1/Oo=) 6: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: 02gdGUoKaGU981qYNAOicujQXSbUOhKyvNrMWXNfXQk=) 7: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 9x2G7s9XnkzB/aoRrwX0fPhCy+k2H2dG9FDGRVFamnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1421 (0x58d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Dec 18 22:48:19 2025 GMT Not After : Dec 25 22:48:19 2025 GMT Subject: CN=694484b3-672d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:a7:e0:15:1c:ed:b7:49:67:14:38:c0:cd: 64:37:bb:e7:bf:c3:a2:d2:35:83:28:4c:33:12:6d: 1f:f5:d5:da:13:83:1c:78:71:2b:27:0b:12:54:61: 8f:a6:c1:28:23:d8:81:47:c9:d1:ad:66:74:3e:40: ad:47:62:79:07:32:f7:cd:8d:2f:2e:86:4a:3b:60: 2c:5f:bb:8d:e1:08:84:28:3e:eb:16:a6:69:4e:d9: 30:08:43:f3:5e:cd:37:64:57:57:97:1b:48:36:e6: cc:39:74:42:9c:e1:ac:21:79:28:1a:97:33:0f:e4: e3:19:c9:98:42:d2:70:13:6a:47:39:69:09:fd:dc: 07:67:8a:58:38:ec:6e:38:14:95:ce:eb:18:68:d9: 73:9a:6d:d6:e8:56:8d:a7:19:c3:33:14:e8:19:71: 0c:8f:1f:9d:db:62:ff:45:20:94:13:44:6b:d3:d0: 79:67:17:d2:b8:4a:a3:83:ab:ac:60:4a:d4:8a:70: 98:c8:fe:35:d8:90:7c:44:bb:64:93:09:18:23:a1: 94:fc:c5:fb:ed:2b:38:73:a1:0d:b8:71:db:7e:fb: 15:d4:12:8e:0c:ff:d7:6b:5f:9c:bf:c9:4d:f7:04: f0:aa:82:bf:be:0a:35:ee:20:fd:c7:1b:b1:99:eb: 1b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A1:85:E3:4A:D4:CC:27:CE:D8:3A:C8:B4:0F:00:F8:88:60:66:13 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f3:af:ca:00:ab:66:c8:fa:23:a3:fb:86:f2:cd:0c:bb:2d: ae:b5:ff:44:3e:fa:28:9f:a2:a8:32:39:ae:4d:68:52:c9:df: 2b:ae:15:3e:ea:79:e6:80:04:d4:a6:06:1e:57:64:27:7a:0d: be:de:f0:5d:12:ff:5c:8d:61:a8:b2:d1:27:b3:58:33:ab:b7: ce:fd:21:a2:d8:3b:91:8f:ae:41:75:e8:e8:e8:f8:9e:65:10: 1b:29:25:75:d7:ad:c2:6c:f7:dc:12:61:1a:8a:35:07:65:37: d7:a5:c2:70:39:9b:fe:eb:e7:28:ee:0d:d3:88:96:24:49:de: df:f4:50:7b:e7:48:53:b3:65:9b:c3:a9:13:31:d8:b3:4b:f2: 8e:af:98:3a:85:9c:64:f9:fe:65:5d:b9:d1:6c:75:9b:23:e5: fa:fd:91:c8:98:43:90:d4:52:df:10:48:0c:7f:70:f3:17:be: 1c:f1:52:2f:b4:59:4b:ed:f4:71:5d:0b:be:6e:8a:78:12:02: 95:8a:ce:10:00:f2:73:8b:61:eb:b5:bd:c0:5a:09:55:d6:2f: 13:86:de:55:d0:52:aa:5f:0a:d7:5a:6c:20:cb:3b:a6:25:60: d3:90:9c:b0:0c:1f:e7:13:78:3e:74:0c:92:6b:77:b6:4a:99: 5c:03:61:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjUxMjE4MjI0ODE5WhcNMjUxMjI1MjI0ODE5WjAYMRYwFAYD VQQDDA02OTQ0ODRiMy02NzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqw2n4BUc7bdJZxQ4wM1kN7vnv8Oi0jWDKEwzEm0f9dXaE4MceHErJwsSVGGP psEoI9iBR8nRrWZ0PkCtR2J5BzL3zY0vLoZKO2AsX7uN4QiEKD7rFqZpTtkwCEPz Xs03ZFdXlxtINubMOXRCnOGsIXkoGpczD+TjGcmYQtJwE2pHOWkJ/dwHZ4pYOOxu OBSVzusYaNlzmm3W6FaNpxnDMxToGXEMjx+d22L/RSCUE0Rr09B5ZxfSuEqjg6us YErUinCYyP412JB8RLtkkwkYI6GU/MX77Ss4c6ENuHHbfvsV1BKODP/Xa1+cv8lN 9wTwqoK/vgo17iD9xxuxmesbMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGhheNK 1Mwnztg6yLQPAPiIYGYTMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB986/KAKtmyPojo/uG8s0Muy2utf9EPvoon6KoMjmuTWhSyd8rrhU+ 6nnmgATUpgYeV2Qneg2+3vBdEv9cjWGostEns1gzq7fO/SGi2DuRj65Bdejo6Pie ZRAbKSV1163CbPfcEmEaijUHZTfXpcJwOZv+6+co7g3TiJYkSd7f9FB750hTs2Wb w6kTMdizS/KOr5g6hZxk+f5lXbnRbHWbI+X6/ZHImEOQ1FLfEEgMf3DzF74c8VIv tFlL7fRxXQu+bop4EgKVis4QAPJzi2Hrtb3AWglV1i8Tht5V0FKqXwrXWmwgyzum JWDTkJywDB/nE3g+dAySa3e2SplcA2HN -----END CERTIFICATE-----Generated at Sat Dec 20 21:08:27 2025 by rpki-client