This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft File: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft (raw, json) Hash identifier: rMxzq/20LgQZN9GQXcsgyW0ngFg49Xm7Mar1kxLbPm0= Subject key identifier: CA:73:CE:F6:8E:DA:4A:9E:DA:93:01:85:01:77:63:F7:2F:26:CB:87 Authority key identifier: D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 Certificate issuer: /CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Certificate serial: 34F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft Manifest number: 34F2 Signing time: Sat 20 Dec 2025 14:41:25 +0000 Manifest this update: Sat 20 Dec 2025 14:41:24 +0000 Manifest next update: Sat 27 Dec 2025 14:41:24 +0000 Files and hashes: 1: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl (hash: aODGGPKJFv0BjIVdzhw5fGnzeiHYfSaBKJnqw2+vpxE=) 2: 5A530D08ADE611EDB7013F5DC4F9AE02.roa (hash: 3lKC8Qsq5K7lIYNSCr2N1N8GbsdjQHyz9EFfPLQHf8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13560 (0x34f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912879A, serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Validity Not Before: Dec 20 14:41:24 2025 GMT Not After : Dec 27 14:41:24 2025 GMT Subject: CN=6946b595-fbed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ed:59:71:7f:3b:04:3c:45:4f:e6:d2:7b:33: d2:06:e0:73:d2:ef:17:63:94:0a:f7:04:12:49:a7: 7b:50:a8:a0:96:a4:6a:af:e3:8e:b2:4e:3f:e5:5b: 3f:8b:7c:2b:fa:22:d9:bb:90:cf:ee:0c:c1:e1:ed: 5e:fc:31:eb:74:55:ea:31:9d:d5:a7:d4:86:08:d9: e3:82:74:2d:4f:a8:4b:bb:23:67:c4:04:d3:53:98: 11:06:9c:13:8e:83:64:fa:da:66:5e:69:8e:05:d4: 2d:76:c6:3c:22:e1:ee:b8:b8:ea:37:8d:20:43:ca: d1:f6:b0:9e:0a:99:b1:a9:2f:79:01:d7:f6:d5:f1: ec:7f:8c:b3:87:5d:b2:62:0d:02:4c:36:1c:a4:3e: ca:aa:6a:55:5b:30:7c:2e:f4:9f:b9:98:0a:80:29: 76:ca:34:8e:f4:1f:92:00:9b:a4:a9:34:64:2a:57: e8:4a:1f:29:63:26:1d:1f:09:2f:7d:b1:1f:71:8b: 5c:ff:3b:93:a3:3d:0b:6d:e0:d6:e0:9e:13:b7:fd: 14:71:cb:12:cb:93:f4:97:c7:1a:e8:15:6a:d4:57: 77:c1:95:82:4e:21:b6:e0:ee:df:9c:23:da:d1:3c: d0:02:30:b6:93:2b:65:f1:8d:c7:d8:cf:5d:55:86: 6e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:73:CE:F6:8E:DA:4A:9E:DA:93:01:85:01:77:63:F7:2F:26:CB:87 X509v3 Authority Key Identifier: keyid:D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:e3:a4:80:21:9d:b7:47:33:15:57:55:e0:d5:7f:c3:0c:96: 96:e7:45:44:19:e5:f4:58:95:a9:c4:a4:67:9f:02:8e:80:03: 8a:89:c9:e2:d1:bc:f8:d1:3c:c0:f8:e6:4b:bd:df:77:fe:98: f4:41:8b:2b:78:9c:ff:86:60:71:ec:10:c6:07:6b:2f:36:6c: 63:a3:43:5b:a0:88:6c:da:42:9f:00:75:95:03:fc:4a:39:25: 84:46:a5:60:54:c8:c6:95:ec:4f:54:01:34:c0:0e:5b:1b:68: 45:da:01:96:eb:a6:b5:1b:72:20:e2:3e:bc:79:a8:09:a2:e5: 86:22:02:87:8f:0d:13:03:96:05:b8:0b:e4:0c:d8:ce:03:c3: 90:08:5a:38:30:73:a7:56:77:fa:52:c2:ee:3e:bf:83:74:81: 7b:58:38:74:dc:95:d0:ca:b7:8b:7d:3c:93:b6:81:d0:4c:d2: 77:e9:fc:38:62:11:bc:70:35:c9:70:2a:f4:f4:97:43:db:52: fe:72:4f:25:48:8b:0d:8b:5f:7c:4d:52:b3:5f:0d:f1:4b:a0: 14:fc:50:f6:c6:8a:85:ed:f6:c4:55:c1:5f:97:ad:3d:41:8c: a7:e2:59:87:3f:ef:80:9a:45:d6:12:85:0d:3a:f4:1c:15:42: 54:87:b3:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg3OUExMTAvBgNVBAUTKEQ1NTYwNEUxQ0RCMDk1QjFBQzBBRDQzMTdCNjU1NzA2 MjMwNEIxRDAwHhcNMjUxMjIwMTQ0MTI0WhcNMjUxMjI3MTQ0MTI0WjAYMRYwFAYD VQQDDA02OTQ2YjU5NS1mYmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2O1ZcX87BDxFT+bSezPSBuBz0u8XY5QK9wQSSad7UKiglqRqr+OOsk4/5Vs/ i3wr+iLZu5DP7gzB4e1e/DHrdFXqMZ3Vp9SGCNnjgnQtT6hLuyNnxATTU5gRBpwT joNk+tpmXmmOBdQtdsY8IuHuuLjqN40gQ8rR9rCeCpmxqS95Adf21fHsf4yzh12y Yg0CTDYcpD7KqmpVWzB8LvSfuZgKgCl2yjSO9B+SAJukqTRkKlfoSh8pYyYdHwkv fbEfcYtc/zuToz0LbeDW4J4Tt/0UccsSy5P0l8ca6BVq1Fd3wZWCTiG24O7fnCPa 0TzQAjC2kytl8Y3H2M9dVYZuxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpzzvaO 2kqe2pMBhQF3Y/cvJsuHMB8GA1UdIwQYMBaAFNVWBOHNsJWxrArUMXtlVwYjBLHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODc5QS8wQzUzNjQyNjFE OTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xiR3NDdFF4ZTJWWEJpTUVz ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFWWUU0YzJ3bGJHc0N0UXhlMlZYQmlNRXNkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODc5QS8wQzUzNjQyNjFEOTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xi R3NDdFF4ZTJWWEJpTUVzZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ46SAIZ23RzMVV1Xg1X/DDJaW50VEGeX0WJWpxKRnnwKOgAOKicni 0bz40TzA+OZLvd93/pj0QYsreJz/hmBx7BDGB2svNmxjo0NboIhs2kKfAHWVA/xK OSWERqVgVMjGlexPVAE0wA5bG2hF2gGW66a1G3Ig4j68eagJouWGIgKHjw0TA5YF uAvkDNjOA8OQCFo4MHOnVnf6UsLuPr+DdIF7WDh03JXQyreLfTyTtoHQTNJ36fw4 YhG8cDXJcCr09JdD21L+ck8lSIsNi198TVKzXw3xS6AU/FD2xoqF7fbEVcFfl609 QYyn4lmHP++AmkXWEoUNOvQcFUJUh7Ni -----END CERTIFICATE-----Generated at Sun Dec 21 06:19:54 2025 by rpki-client