This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft File: 1cNfp3myIZlgnD6gpTHFoNMyrQE.mft (raw, json) Hash identifier: Z+vnDLYnHH3rtPPPGt7N8hGN57Zne+eZc/wUyh3WxX4= Subject key identifier: 72:8B:A6:FB:25:8C:2D:E0:1A:43:D5:37:CF:CF:AB:FC:89:D1:91:08 Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 Certificate issuer: /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft Manifest number: 01F1 Signing time: Tue 23 Dec 2025 01:34:29 +0000 Manifest this update: Tue 23 Dec 2025 01:34:28 +0000 Manifest next update: Tue 30 Dec 2025 01:34:28 +0000 Files and hashes: 1: 1cNfp3myIZlgnD6gpTHFoNMyrQE.crl (hash: xI4vpqdRW4TROYwTWh9xd9gm2cFZnNFwMKUmOUMFGuc=) 2: 4D962E8AE65111ED90E5833EC4F9AE02.roa (hash: 3SQV1F9slNIO5M7UqEAQZkXcxMO9bvgWNAs/r+smThc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A8BC, serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Validity Not Before: Dec 23 01:34:28 2025 GMT Not After : Dec 30 01:34:28 2025 GMT Subject: CN=6949f1a5-d81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e3:e6:28:75:72:3b:b1:89:e9:d1:41:61:0f: 4a:4e:10:25:59:0d:d1:dc:71:3c:c8:9d:01:25:3c: 1c:4a:91:bf:a4:c1:73:34:14:3c:32:d8:13:43:6f: 68:8e:42:3a:df:b3:3a:2c:d1:8d:b5:10:d5:55:3a: 45:75:2b:42:c1:54:d5:f2:b8:7c:11:74:95:a0:09: c4:41:46:0e:ab:1a:21:97:14:27:92:4e:a1:a7:9a: f3:42:28:4e:cf:23:12:dc:11:de:4a:29:05:28:83: 30:51:9a:da:11:37:5a:94:fb:c9:57:5c:b8:01:8d: 6a:2a:14:a5:41:6f:aa:0f:6d:fc:5b:66:6d:62:39: 3b:12:15:d8:05:f2:13:e9:0d:10:ae:36:8b:eb:09: 07:ef:c3:3c:ad:94:58:8e:8c:72:c9:4b:6c:bc:86: 8e:84:84:44:9e:d3:f9:bf:1d:2b:78:d0:c2:ec:0d: dd:51:6a:a3:db:3e:c0:ae:6a:b2:f6:7e:f5:f2:3b: 62:1a:bc:c9:a7:6f:e8:fa:73:a0:51:fd:f2:e8:de: 6e:45:fc:1c:66:a9:be:a5:88:2c:7e:d4:02:5b:38: e3:a7:43:53:3a:b5:47:57:8e:4a:4c:b6:a7:2e:e2: 22:d2:20:2b:bc:e0:25:c0:36:cf:15:90:b6:90:3d: 5a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8B:A6:FB:25:8C:2D:E0:1A:43:D5:37:CF:CF:AB:FC:89:D1:91:08 X509v3 Authority Key Identifier: keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:a5:53:2a:37:c9:c0:57:29:c6:58:d1:f2:8f:d2:aa:fe:2f: 64:a1:2b:bd:6a:39:8a:ba:d6:48:2c:de:6b:95:91:a7:40:f4: de:f7:2c:16:5c:82:5a:62:6e:8d:1d:2a:72:d7:66:2a:40:d2: df:b8:2a:82:00:42:1f:9b:bb:26:7b:78:ae:9d:e9:c8:18:cb: 0c:90:41:b7:17:48:24:d5:65:52:d3:c8:e5:12:6d:88:ee:e8: bb:48:33:a7:48:af:05:e1:84:a4:66:d5:3d:b0:44:f4:93:15: 8f:3b:7a:13:54:76:0b:8c:f1:39:a8:38:05:d3:8d:64:24:aa: ce:42:57:c8:1c:c8:d8:61:f9:cb:63:c2:77:40:25:0e:9e:1b: 4e:72:ae:62:a9:93:04:c1:bc:32:54:fc:1b:bf:db:20:f5:bc: 59:8a:39:fc:94:20:4c:13:72:3f:8b:72:85:cc:d6:1f:3e:77: 36:02:7a:49:8f:55:58:e5:da:f3:27:25:22:b8:52:3b:6d:0a: 5c:79:3f:bf:7e:eb:a3:82:38:63:b1:a3:16:f0:08:9e:d0:d7: be:75:d0:f3:74:cb:5c:25:6e:5e:20:77:d7:7d:72:a5:97:53: 57:eb:84:5a:46:69:a5:1d:36:c1:78:f3:ef:88:15:da:2a:b8: e2:88:42:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE4QkMxMTAvBgNVBAUTKEQ1QzM1RkE3NzlCMjIxOTk2MDlDM0VBMEE1MzFDNUEw RDMzMkFEMDEwHhcNMjUxMjIzMDEzNDI4WhcNMjUxMjMwMDEzNDI4WjAYMRYwFAYD VQQDDA02OTQ5ZjFhNS1kODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6OPmKHVyO7GJ6dFBYQ9KThAlWQ3R3HE8yJ0BJTwcSpG/pMFzNBQ8MtgTQ29o jkI637M6LNGNtRDVVTpFdStCwVTV8rh8EXSVoAnEQUYOqxohlxQnkk6hp5rzQihO zyMS3BHeSikFKIMwUZraETdalPvJV1y4AY1qKhSlQW+qD238W2ZtYjk7EhXYBfIT 6Q0QrjaL6wkH78M8rZRYjoxyyUtsvIaOhIREntP5vx0reNDC7A3dUWqj2z7Armqy 9n718jtiGrzJp2/o+nOgUf3y6N5uRfwcZqm+pYgsftQCWzjjp0NTOrVHV45KTLan LuIi0iArvOAlwDbPFZC2kD1aIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKLpvsl jC3gGkPVN8/Pq/yJ0ZEIMB8GA1UdIwQYMBaAFNXDX6d5siGZYJw+oKUxxaDTMq0B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQThCQy8wNTRBNEM1MEU2 NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUlabGduRDZncFRIRm9OTXly UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjTmZwM215SVpsZ25ENmdwVEhGb05NeXJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QThCQy8wNTRBNEM1MEU2NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUla bGduRDZncFRIRm9OTXlyUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTpVMqN8nAVynGWNHyj9Kq/i9koSu9ajmKutZILN5rlZGnQPTe9ywW XIJaYm6NHSpy12YqQNLfuCqCAEIfm7sme3iunenIGMsMkEG3F0gk1WVS08jlEm2I 7ui7SDOnSK8F4YSkZtU9sET0kxWPO3oTVHYLjPE5qDgF041kJKrOQlfIHMjYYfnL Y8J3QCUOnhtOcq5iqZMEwbwyVPwbv9sg9bxZijn8lCBME3I/i3KFzNYfPnc2AnpJ j1VY5drzJyUiuFI7bQpceT+/fuujgjhjsaMW8Aie0Ne+ddDzdMtcJW5eIHfXfXKl l1NX64RaRmmlHTbBePPviBXaKrjiiEIB -----END CERTIFICATE-----Generated at Tue Dec 23 20:40:51 2025 by rpki-client