This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft File: 1iOjklgIuuhMJxThaoeEBOBgSNE.mft (raw, json) Hash identifier: 61GRMSRn3IV5nu9TC0lFYbj9FopjemInmFBnSxhqyGU= Subject key identifier: AA:D2:69:5D:4A:02:25:06:89:37:88:56:4B:81:4C:3C:22:56:41:FD Authority key identifier: D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1 Certificate issuer: /CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1 Certificate serial: 0590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft Manifest number: 0588 Signing time: Mon 22 Dec 2025 22:24:16 +0000 Manifest this update: Mon 22 Dec 2025 22:24:16 +0000 Manifest next update: Mon 29 Dec 2025 22:24:16 +0000 Files and hashes: 1: 1iOjklgIuuhMJxThaoeEBOBgSNE.crl (hash: fshQGRL3yk2SEB5iBDXBS3kMBhz6xxPLntybvQ9g4jY=) 2: C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa (hash: ym0ByuNOndht95n45vmzI/LTnp1dbpbPf/6SayzC+38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1424 (0x590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A1E7, serialNumber=D623A3925808BAE84C2714E16A878404E06048D1 Validity Not Before: Dec 22 22:24:16 2025 GMT Not After : Dec 29 22:24:16 2025 GMT Subject: CN=6949c510-4f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7b:e3:5c:2b:42:8b:ae:49:f6:79:22:ac:0f: 3c:ea:13:98:4c:d6:51:f3:ea:2e:a8:3d:af:c5:1a: dd:a7:2c:e2:fb:12:52:36:50:87:68:bf:73:6d:e3: 4d:df:45:5c:91:73:3e:5e:d2:ce:75:98:3e:74:ae: 6c:bd:8d:b4:45:ad:51:51:53:54:68:96:18:36:87: 1e:9f:41:c1:b3:fe:5d:70:cc:97:65:55:49:b8:7f: d5:be:7d:12:c4:25:18:37:49:a2:ff:a0:a7:11:10: 0f:3b:d9:30:1c:05:7f:c2:bf:7e:d6:37:2c:f5:18: 51:e7:be:97:84:c4:d9:33:01:01:8e:96:6e:2d:a9: 0e:87:8d:4d:4a:1e:b3:1c:75:66:96:e0:6c:c0:38: 4e:dc:dc:66:2b:28:b2:a4:57:8a:fc:ca:e9:d8:d0: 0b:fd:f1:9e:f3:42:84:08:e0:a5:59:cd:0a:8e:18: e3:6c:08:f2:db:e0:9c:08:12:76:cd:a8:e4:3d:e3: cb:f6:f1:66:23:38:04:a6:d8:08:41:60:98:ea:b8: b4:96:a6:dc:1d:b0:1b:b1:70:a8:3c:ca:46:12:6f: 5d:fb:3e:64:f6:9c:e7:00:f5:da:07:a5:1c:7a:96: 7d:48:b7:46:6f:1d:cc:92:f0:9d:ba:29:df:1b:40: 22:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D2:69:5D:4A:02:25:06:89:37:88:56:4B:81:4C:3C:22:56:41:FD X509v3 Authority Key Identifier: keyid:D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:21:b1:91:f3:70:b5:07:19:00:cb:30:e5:ad:4d:bd:e5:7d: 2c:ea:5c:bf:26:b3:30:23:b6:aa:b5:4d:49:91:60:0f:40:f6: 3e:dd:3d:78:3a:72:cd:ee:c4:8d:bc:7a:c9:4d:fd:5d:c6:79: 8b:62:85:f7:7a:0c:e2:52:71:81:53:ef:0a:1a:d0:dc:c2:e2: b4:5f:d4:00:ac:3c:db:f4:53:bc:f5:69:ba:f2:d4:e1:4a:a6: e1:f6:8f:cb:d7:42:7d:91:aa:67:1c:b1:04:2d:65:8a:a1:e2: c4:8d:00:61:41:ef:d5:6b:61:68:4e:d2:76:ff:e9:55:06:92: bb:2e:cb:30:af:54:b1:9c:10:0a:33:71:c7:4e:f4:2b:a7:cf: 0c:ca:a4:c9:20:3c:f7:0d:e6:84:c6:9d:54:58:e1:5c:80:78: eb:2a:d2:7c:44:d7:81:0a:6a:00:16:ab:f2:bb:fc:4d:eb:7a: 01:d5:21:46:df:0e:f2:a0:56:30:75:41:de:9c:35:02:95:fb: 7c:84:fe:ed:2f:02:7d:d2:aa:18:c2:b1:ad:28:cc:aa:4b:64: 61:de:d3:49:df:99:a8:47:ba:f1:f5:3c:14:43:85:75:0f:b0: 1a:07:0a:db:98:ec:cc:c0:0c:80:0e:91:a9:a2:40:80:48:c2: 81:75:cb:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkExRTcxMTAvBgNVBAUTKEQ2MjNBMzkyNTgwOEJBRTg0QzI3MTRFMTZBODc4NDA0 RTA2MDQ4RDEwHhcNMjUxMjIyMjIyNDE2WhcNMjUxMjI5MjIyNDE2WjAYMRYwFAYD VQQDDA02OTQ5YzUxMC00Zjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nvjXCtCi65J9nkirA886hOYTNZR8+ouqD2vxRrdpyzi+xJSNlCHaL9zbeNN 30VckXM+XtLOdZg+dK5svY20Ra1RUVNUaJYYNocen0HBs/5dcMyXZVVJuH/Vvn0S xCUYN0mi/6CnERAPO9kwHAV/wr9+1jcs9RhR576XhMTZMwEBjpZuLakOh41NSh6z HHVmluBswDhO3NxmKyiypFeK/Mrp2NAL/fGe80KECOClWc0KjhjjbAjy2+CcCBJ2 zajkPePL9vFmIzgEptgIQWCY6ri0lqbcHbAbsXCoPMpGEm9d+z5k9pznAPXaB6Uc epZ9SLdGbx3MkvCduinfG0AiTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrSaV1K AiUGiTeIVkuBTDwiVkH9MB8GA1UdIwQYMBaAFNYjo5JYCLroTCcU4WqHhATgYEjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTFFNy8xMEZBQkVEMjAy NTUxMUVDOEVEMjQwODVDNEY5QUUwMi8xaU9qa2xnSXV1aE1KeFRoYW9lRUJPQmdT TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFpT2prbGdJdXVoTUp4VGhhb2VFQk9CZ1NORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTFFNy8xMEZBQkVEMjAyNTUxMUVDOEVEMjQwODVDNEY5QUUwMi8xaU9qa2xnSXV1 aE1KeFRoYW9lRUJPQmdTTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+IbGR83C1BxkAyzDlrU295X0s6ly/JrMwI7aqtU1JkWAPQPY+3T14 OnLN7sSNvHrJTf1dxnmLYoX3egziUnGBU+8KGtDcwuK0X9QArDzb9FO89Wm68tTh Sqbh9o/L10J9kapnHLEELWWKoeLEjQBhQe/Va2FoTtJ2/+lVBpK7Lsswr1SxnBAK M3HHTvQrp88MyqTJIDz3DeaExp1UWOFcgHjrKtJ8RNeBCmoAFqvyu/xN63oB1SFG 3w7yoFYwdUHenDUClft8hP7tLwJ90qoYwrGtKMyqS2Rh3tNJ35moR7rx9TwUQ4V1 D7AaBwrbmOzMwAyADpGpokCASMKBdctg -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:15 2025 by rpki-client