This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft File: d2KqgncCDQu1x1mX3l99ilFC3xQ.mft (raw, json) Hash identifier: hXMLXfLUotbzTtGW2j3G6bknHf9vdcQIGrT+GQA9NbE= Subject key identifier: B7:B2:C7:FB:27:91:96:E6:24:3C:EE:D7:5B:1D:B8:B6:AA:F6:8F:45 Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Certificate serial: 1414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft Manifest number: 13F3 Signing time: Wed 10 Dec 2025 16:28:04 +0000 Manifest this update: Wed 10 Dec 2025 16:28:03 +0000 Manifest next update: Wed 17 Dec 2025 16:28:03 +0000 Files and hashes: 1: d2KqgncCDQu1x1mX3l99ilFC3xQ.crl (hash: 3uP7ac+epJ+ZUZQmG1PYAHb+kB1mr2gltj7iXk+r8sQ=) 2: 43A759B0C82811F0B893BE0BC4F9AE02.roa (hash: rbeldU58m4YF2/4dOPbk3su/ZdQtCAeI5lgK94z/0hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 16:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5140 (0x1414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Validity Not Before: Dec 10 16:28:03 2025 GMT Not After : Dec 17 16:28:03 2025 GMT Subject: CN=69399f94-8e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ce:0b:2b:8a:b4:93:49:dc:b0:35:19:5c:0f: 4a:92:56:55:e7:f8:6a:15:c6:10:06:c2:c5:d1:02: b1:c0:82:e4:d7:71:77:36:38:ed:b4:b9:3d:1e:7f: 62:94:b2:57:ae:57:23:15:35:a8:ed:58:a4:b7:86: 5b:24:ea:e4:2e:ee:0f:5f:1f:6f:9f:50:00:1c:a3: 32:e5:69:57:d4:2a:66:47:84:41:ab:4b:13:da:48: 72:15:b5:18:ca:e6:0c:f9:22:b9:00:55:a4:1e:97: a8:8e:76:35:23:3e:4a:40:62:f4:41:c1:e0:31:1b: cb:54:f8:96:55:c0:39:66:b4:b6:84:82:7b:27:09: 30:ac:76:ed:49:70:d4:d4:48:3c:bd:bb:fe:4a:5b: a6:77:02:33:57:fd:36:95:6f:a8:a4:87:94:10:5e: e9:de:ae:35:c0:03:c9:91:24:0a:16:30:ec:fc:0a: a3:39:7c:bf:54:d4:a2:cc:6f:95:9c:b8:7e:3c:79: c4:6c:82:05:90:1a:ad:76:95:f6:fb:f6:f0:be:55: 3f:c4:a1:65:13:4f:6f:5e:14:52:da:e9:42:9a:31: eb:fa:f1:da:bf:06:37:0a:f0:20:23:26:dc:ab:9c: 08:c7:4c:b7:2d:c2:a4:e5:63:38:81:4e:c4:96:64: 1b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B2:C7:FB:27:91:96:E6:24:3C:EE:D7:5B:1D:B8:B6:AA:F6:8F:45 X509v3 Authority Key Identifier: keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:58:b6:54:3f:21:16:22:e9:8b:26:44:da:8c:fc:5b:a0:f2: 0f:2a:19:8d:9b:7c:d4:22:c4:9e:b6:ef:35:3f:c2:b4:bc:38: 91:44:d0:d9:f9:b6:0f:46:52:e4:8d:49:ed:b2:b8:bf:fd:8a: 8e:6a:97:3c:73:f3:21:2c:8b:f5:99:a3:a2:6c:be:20:89:79: 8b:8c:92:9c:9f:cb:c4:b9:74:82:c9:d5:02:23:e5:88:23:6c: 33:d9:ff:c0:f5:64:70:db:85:22:2f:f9:20:7f:9c:2e:c1:36: ad:e3:39:d1:6e:47:4c:46:a1:01:7f:0c:c2:6c:e8:fa:30:7e: c8:d8:fd:44:15:0a:4b:c1:46:d5:81:ba:97:21:4b:01:9f:6f: db:06:68:fa:fe:bb:f9:31:a6:ac:db:ab:8f:ee:e9:5b:cc:d5: e7:81:8b:4e:1e:a0:43:40:ca:b7:c0:a3:7e:8a:8e:3e:b6:05: 31:df:cc:c6:f1:6f:d3:d8:ed:0f:01:03:8f:31:8f:97:ef:e1: 9e:c6:9f:f1:4d:d3:cd:6f:5e:97:ac:0b:c9:40:98:41:c8:1d: 82:e1:a4:91:36:da:9b:bb:b3:5e:a4:80:a5:82:89:8e:50:30: 17:9d:bf:b2:aa:17:95:50:e5:58:21:b0:b5:e4:7e:96:08:70: 82:1b:e8:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQzMxMTAvBgNVBAUTKDc3NjJBQTgyNzcwMjBEMEJCNUM3NTk5N0RFNUY3RDhB NTE0MkRGMTQwHhcNMjUxMjEwMTYyODAzWhcNMjUxMjE3MTYyODAzWjAYMRYwFAYD VQQDEw02OTM5OWY5NC04ZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz84LK4q0k0ncsDUZXA9KklZV5/hqFcYQBsLF0QKxwILk13F3NjjttLk9Hn9i lLJXrlcjFTWo7Vikt4ZbJOrkLu4PXx9vn1AAHKMy5WlX1CpmR4RBq0sT2khyFbUY yuYM+SK5AFWkHpeojnY1Iz5KQGL0QcHgMRvLVPiWVcA5ZrS2hIJ7JwkwrHbtSXDU 1Eg8vbv+SlumdwIzV/02lW+opIeUEF7p3q41wAPJkSQKFjDs/AqjOXy/VNSizG+V nLh+PHnEbIIFkBqtdpX2+/bwvlU/xKFlE09vXhRS2ulCmjHr+vHavwY3CvAgIybc q5wIx0y3LcKk5WM4gU7ElmQb/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeyx/sn kZbmJDzu11sduLaq9o9FMB8GA1UdIwQYMBaAFHdiqoJ3Ag0LtcdZl95ffYpRQt8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFDMy83Qjg2OEMwODlE RjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RRdTF4MW1YM2w5OWlsRkMz eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QyS3FnbmNDRFF1MXgxbVgzbDk5aWxGQzN4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFDMy83Qjg2OEMwODlERjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RR dTF4MW1YM2w5OWlsRkMzeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiWLZUPyEWIumLJkTajPxboPIPKhmNm3zUIsSetu81P8K0vDiRRNDZ +bYPRlLkjUntsri//YqOapc8c/MhLIv1maOibL4giXmLjJKcn8vEuXSCydUCI+WI I2wz2f/A9WRw24UiL/kgf5wuwTat4znRbkdMRqEBfwzCbOj6MH7I2P1EFQpLwUbV gbqXIUsBn2/bBmj6/rv5Maas26uP7ulbzNXngYtOHqBDQMq3wKN+io4+tgUx38zG 8W/T2O0PAQOPMY+X7+Gexp/xTdPNb16XrAvJQJhByB2C4aSRNtqbu7NepIClgomO UDAXnb+yqheVUOVYIbC15H6WCHCCG+il -----END CERTIFICATE-----Generated at Fri Dec 12 03:43:12 2025 by rpki-client