This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft File: cKRczAWTxHEjY1BaCmTdO3NXboo.mft (raw, json) Hash identifier: lRswHRUM0B86nGn2XQnn1dJ6TZglV+73b9vZXw2J8Ao= Subject key identifier: 7A:23:9C:04:27:14:A2:50:B0:06:24:28:3B:FE:12:FA:7A:35:08:6B Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A Certificate serial: 080C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft Manifest number: 07F1 Signing time: Mon 22 Dec 2025 20:32:03 +0000 Manifest this update: Mon 22 Dec 2025 20:32:02 +0000 Manifest next update: Mon 29 Dec 2025 20:32:02 +0000 Files and hashes: 1: cKRczAWTxHEjY1BaCmTdO3NXboo.crl (hash: IPhS1iZLgPbTg9MMHdj8NM3y5vgfjVY2d09RJaReUvE=) 2: 98657342132E11F0B588DB49C4F9AE02.roa (hash: yE5QiFArJSL1Y0Qe8DEzoUlqJzCWh7uwKPdYksWgVL8=) 3: 99551366132E11F0B588DB49C4F9AE02.roa (hash: ChslEov62Qa1I3Lz18znObEUFcN2HJhfNEJB+3L6dvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A Validity Not Before: Dec 22 20:32:02 2025 GMT Not After : Dec 29 20:32:02 2025 GMT Subject: CN=6949aac3-cff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:e0:d6:99:b3:af:44:3c:76:07:60:f7:e8: 43:88:56:0b:66:73:f7:43:7c:ea:84:80:70:dd:2f: 40:46:b0:0a:e6:83:22:40:40:1e:2c:11:91:f1:d7: 52:75:ed:b0:d7:cb:b8:16:29:31:ce:c4:5d:60:cc: 4d:36:09:09:20:ea:93:b3:0f:f6:a7:21:23:7c:f4: 81:28:cf:10:c6:e2:98:b3:c6:87:47:a6:b1:a7:b1: 87:b6:b1:51:33:11:e5:ab:27:96:c0:38:4b:34:91: 97:80:f1:63:a6:3d:13:4e:36:8c:91:c8:d6:92:c1: 95:30:be:46:1d:45:19:a5:2d:f1:f2:3b:3a:59:93: 72:9c:16:9d:d9:30:f7:09:7c:b0:96:df:75:b3:ff: 43:ca:94:81:90:a6:92:72:8b:35:d6:92:ed:23:39: a1:16:c7:04:61:a9:4b:c4:1c:1a:6f:3f:59:e0:3a: ca:6c:e0:d8:ce:3d:d6:c2:eb:06:1d:d6:9e:b3:5b: 61:94:f4:f4:fe:6e:7e:fc:00:58:ac:31:50:79:ba: b5:2b:b1:be:e0:95:c5:92:a9:6e:98:7e:11:64:a6: 01:92:e3:fb:4a:df:69:04:d9:20:3c:a0:4e:76:89: 93:0f:35:84:4c:b4:c1:94:27:9a:05:bb:65:fe:32: e9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:23:9C:04:27:14:A2:50:B0:06:24:28:3B:FE:12:FA:7A:35:08:6B X509v3 Authority Key Identifier: keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:d1:71:57:71:40:15:e7:32:5f:7c:82:ac:12:7e:5a:23:4f: b0:08:e8:ab:ec:a1:7f:a4:4c:56:4d:f6:7f:90:f6:bb:33:08: 7d:ac:b6:2f:b3:3a:79:cc:a5:65:27:f4:af:e4:dd:e3:39:76: 91:2e:b7:d0:79:c4:f3:5a:90:09:b5:6a:97:9f:01:90:90:2e: cc:1d:e3:89:8b:c0:db:b9:de:52:cd:89:1a:ac:59:ca:e7:ee: bb:b6:5d:5a:f9:0f:d6:b7:12:be:b2:55:f7:a1:a5:71:b4:66: 02:1a:e3:49:22:c3:24:8b:92:7c:6f:fe:0d:ea:64:02:99:80: e4:63:85:bf:1c:e1:e6:28:eb:5e:b8:ee:c2:a9:c4:69:d8:1d: 18:7c:72:c9:20:6c:c6:89:bf:c2:fe:7a:8b:71:01:c0:c3:e0: a5:72:77:fa:a5:7d:32:7b:79:c2:ca:a3:20:12:75:63:63:18: f0:14:54:20:c9:2c:46:83:7f:a0:48:d3:fb:9c:9f:d4:20:fd: 1f:5b:e9:90:fb:85:0e:18:ad:d6:a9:a0:a6:c2:ec:67:6e:b5: f0:18:53:24:4f:d2:cd:38:b9:06:c4:19:1d:45:22:59:3d:87: 6c:23:6d:e4:cc:d9:90:1d:9b:0a:c7:bf:81:67:cc:a5:c9:37: e9:52:d0:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwN0UxMTAvBgNVBAUTKDcwQTQ1Q0NDMDU5M0M0NzEyMzYzNTA1QTBBNjRERDNC NzM1NzZFOEEwHhcNMjUxMjIyMjAzMjAyWhcNMjUxMjI5MjAzMjAyWjAYMRYwFAYD VQQDDA02OTQ5YWFjMy1jZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPbg1pmzr0Q8dgdg9+hDiFYLZnP3Q3zqhIBw3S9ARrAK5oMiQEAeLBGR8ddS de2w18u4FikxzsRdYMxNNgkJIOqTsw/2pyEjfPSBKM8QxuKYs8aHR6axp7GHtrFR MxHlqyeWwDhLNJGXgPFjpj0TTjaMkcjWksGVML5GHUUZpS3x8js6WZNynBad2TD3 CXywlt91s/9DypSBkKaScos11pLtIzmhFscEYalLxBwabz9Z4DrKbODYzj3WwusG Hdaes1thlPT0/m5+/ABYrDFQebq1K7G+4JXFkqlumH4RZKYBkuP7St9pBNkgPKBO domTDzWETLTBlCeaBbtl/jLpVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHojnAQn FKJQsAYkKDv+Evp6NQhrMB8GA1UdIwQYMBaAFHCkXMwFk8RxI2NQWgpk3TtzV26K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODA3RS9DNEI0RTJDNjE3 OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhIRWpZMUJhQ21UZE8zTlhi b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NLUmN6QVdUeEhFalkxQmFDbVRkTzNOWGJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODA3RS9DNEI0RTJDNjE3OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhI RWpZMUJhQ21UZE8zTlhib28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ0XFXcUAV5zJffIKsEn5aI0+wCOir7KF/pExWTfZ/kPa7Mwh9rLYv szp5zKVlJ/Sv5N3jOXaRLrfQecTzWpAJtWqXnwGQkC7MHeOJi8Dbud5SzYkarFnK 5+67tl1a+Q/WtxK+slX3oaVxtGYCGuNJIsMki5J8b/4N6mQCmYDkY4W/HOHmKOte uO7CqcRp2B0YfHLJIGzGib/C/nqLcQHAw+Clcnf6pX0ye3nCyqMgEnVjYxjwFFQg ySxGg3+gSNP7nJ/UIP0fW+mQ+4UOGK3WqaCmwuxnbrXwGFMkT9LNOLkGxBkdRSJZ PYdsI23kzNmQHZsKx7+BZ8ylyTfpUtCn -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:36 2025 by rpki-client