This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft File: v1g_8H2jVv3igoGfR7zuJHUTEZo.mft (raw, json) Hash identifier: uBhaF+7FvBVWLrS7E0TRC1i0nTX/nzQRoQCzMozwMrc= Subject key identifier: 62:49:39:6D:C3:59:1E:2F:37:67:89:01:C1:80:E7:6A:14:6D:A8:8D Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A Certificate issuer: /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Certificate serial: 3521 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft Manifest number: 3508 Signing time: Thu 18 Dec 2025 14:27:12 +0000 Manifest this update: Thu 18 Dec 2025 14:27:12 +0000 Manifest next update: Thu 25 Dec 2025 14:27:12 +0000 Files and hashes: 1: v1g_8H2jVv3igoGfR7zuJHUTEZo.crl (hash: 0NwlI6W7B+i0ILClivas1ISr74mMJ+/DygH157WkUOw=) 2: F73D1642F30B11EFA86D9348C4F9AE02.roa (hash: NAzmMf7NVE534MnJBMzFOT2rLSzUZpBo5WpxUwTckK0=) 3: 60629332FE4611EFB15A9D48C4F9AE02.roa (hash: /zfwzDG7n6E2JjaivpDdu+dOVBIaawCIeVKdcfBcPXY=) 4: B3C4F6FCC8E811EFA15E172AC4F9AE02.roa (hash: 7X3op8FxLKCInR/9TSODy+LRMH6+i0DMcG4PbSJZGR0=) 5: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (hash: 8VK+APK/5itIVHmFKGjT+lEuTWBUnDuSseayGMqo1ag=) 6: 6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (hash: st0pVxpUqrAEUwj53Z+GQXs6wx4AnLeV6lm/Wqla7jI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13601 (0x3521) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Validity Not Before: Dec 18 14:27:12 2025 GMT Not After : Dec 25 14:27:12 2025 GMT Subject: CN=69440f40-5761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:27:e8:2b:33:00:6b:bd:c3:f5:5d:db:42: b6:ac:1b:8c:d1:1d:71:72:99:a7:6a:f4:3f:2d:4e: 33:4a:d1:9e:7b:bd:82:1e:ab:9f:40:e1:41:f9:77: 04:5b:ec:d1:b6:a1:3d:c6:c9:40:37:8d:93:90:4c: 1c:f0:3b:30:f3:f5:13:8b:27:98:18:25:72:01:6e: 68:dc:c6:a6:f4:f9:7b:8e:a6:cd:a0:6d:02:9a:85: 0d:0d:d2:e4:d9:a1:2b:29:76:27:7b:8d:db:c5:82: a7:3f:b1:74:00:4c:c3:36:7c:dd:75:e5:10:16:90: 53:cc:3f:5b:a7:a2:3a:aa:05:d6:9b:96:43:f9:50: 8b:58:bf:a1:dd:15:79:b7:01:8d:4b:1e:88:6f:ed: 92:80:02:c6:ce:3f:12:08:62:3e:58:69:aa:69:85: 47:60:82:a3:e0:4a:dc:65:d5:6d:44:69:f9:64:b3: 1d:e7:de:75:b3:1a:15:c6:85:9f:6e:8a:58:98:c1: 71:09:71:b8:5a:e9:88:aa:c3:b3:85:d1:ea:64:13: 65:45:ec:82:b7:b0:2c:65:c3:4e:71:f7:ac:70:e6: 3d:41:58:c6:c9:4e:ce:e2:cb:bf:03:ce:15:59:25: f8:24:18:7b:55:8f:f7:45:dd:98:e0:7a:50:dd:1c: 10:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:49:39:6D:C3:59:1E:2F:37:67:89:01:C1:80:E7:6A:14:6D:A8:8D X509v3 Authority Key Identifier: keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0a:da:f6:ce:7b:be:3c:37:bd:73:82:5f:53:2e:87:30:21: f7:fb:6e:19:ac:e8:13:37:44:6e:66:bc:e7:05:b9:4e:89:b2: ea:81:01:52:27:27:02:65:f3:93:a3:0b:40:f5:ef:c0:6f:c5: 2b:25:06:25:69:95:d7:d3:bd:8b:46:98:2e:58:e5:d9:d4:e5: ab:64:44:2b:c4:3d:23:52:2e:88:1e:48:64:44:77:d4:e2:33: e2:fd:73:e4:7f:b2:42:70:c6:4b:4c:d3:12:bf:64:d6:39:ee: e7:3f:0f:b8:b3:91:b9:75:48:a5:aa:97:b9:ca:c0:46:cb:6b: fa:48:3d:b0:9c:56:86:99:73:8e:2d:70:0c:10:22:2a:2a:19: bf:99:e1:05:14:85:02:92:bb:23:5a:cf:bb:b1:63:31:7b:98: d0:0b:7e:b5:d9:dc:b9:d6:33:b4:35:a1:e9:ef:1d:87:f7:26: 13:e2:92:49:eb:fb:77:2b:b0:92:0a:ea:de:d3:e4:03:87:3d: fd:86:17:fa:93:08:13:11:c3:ff:d3:56:a7:06:00:84:d3:8d: 8b:a9:19:16:7f:d1:5b:b1:64:93:0b:d7:6a:d5:cb:b8:c5:cb: a8:50:60:8a:47:d1:38:fa:32:f2:67:cc:6b:a6:84:d2:b1:46: 22:2e:2e:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEJGNTgzRkYwN0RBMzU2RkRFMjgyODE5RjQ3QkNFRTI0 NzUxMzExOUEwHhcNMjUxMjE4MTQyNzEyWhcNMjUxMjI1MTQyNzEyWjAYMRYwFAYD VQQDDA02OTQ0MGY0MC01NzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWQn6CszAGu9w/Vd20K2rBuM0R1xcpmnavQ/LU4zStGee72CHqufQOFB+XcE W+zRtqE9xslAN42TkEwc8Dsw8/UTiyeYGCVyAW5o3Mam9Pl7jqbNoG0CmoUNDdLk 2aErKXYne43bxYKnP7F0AEzDNnzddeUQFpBTzD9bp6I6qgXWm5ZD+VCLWL+h3RV5 twGNSx6Ib+2SgALGzj8SCGI+WGmqaYVHYIKj4ErcZdVtRGn5ZLMd5951sxoVxoWf bopYmMFxCXG4WumIqsOzhdHqZBNlReyCt7AsZcNOcfescOY9QVjGyU7O4su/A84V WSX4JBh7VY/3Rd2Y4HpQ3RwQzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJJOW3D WR4vN2eJAcGA52oUbaiNMB8GA1UdIwQYMBaAFL9YP/B9o1b94oKBn0e87iR1ExGa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yMEIzN0NGRTFE ODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2M2lnb0dmUjd6dUpIVVRF Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxZ184SDJqVnYzaWdvR2ZSN3p1SkhVVEVaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yMEIzN0NGRTFEODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2 M2lnb0dmUjd6dUpIVVRFWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsCtr2znu+PDe9c4JfUy6HMCH3+24ZrOgTN0RuZrznBblOibLqgQFS JycCZfOTowtA9e/Ab8UrJQYlaZXX072LRpguWOXZ1OWrZEQrxD0jUi6IHkhkRHfU 4jPi/XPkf7JCcMZLTNMSv2TWOe7nPw+4s5G5dUilqpe5ysBGy2v6SD2wnFaGmXOO LXAMECIqKhm/meEFFIUCkrsjWs+7sWMxe5jQC3612dy51jO0NaHp7x2H9yYT4pJJ 6/t3K7CSCure0+QDhz39hhf6kwgTEcP/01anBgCE042LqRkWf9FbsWSTC9dq1cu4 xcuoUGCKR9E4+jLyZ8xrpoTSsUYiLi6m -----END CERTIFICATE-----Generated at Fri Dec 19 04:17:21 2025 by rpki-client