This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft File: u7hAsFOTTV4f7dQN0CPvevQouuA.mft (raw, json) Hash identifier: frMLzWcs0hnfmcS1wemee5sRdps5oPkxZN6/Jb9Td6A= Subject key identifier: 51:68:23:6F:3C:97:DF:FE:C6:C6:C2:DE:D3:91:9B:B8:BF:08:B8:DD Authority key identifier: BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 Certificate issuer: /CN=A912AD2E/serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Certificate serial: 1831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft Manifest number: 1825 Signing time: Mon 22 Dec 2025 16:17:20 +0000 Manifest this update: Mon 22 Dec 2025 16:17:19 +0000 Manifest next update: Mon 29 Dec 2025 16:17:19 +0000 Files and hashes: 1: u7hAsFOTTV4f7dQN0CPvevQouuA.crl (hash: jaPfZvVWB8zHOLql0OimlLpRJ3HLZVErtgh1Chkp4GE=) 2: E3D5A6F4422411E8804DBC3AC4F9AE02.roa (hash: E/6I3qQjCBxjGs7jFLaCU1bmuGjPrQh25a7j/aLYowA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6193 (0x1831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AD2E, serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Validity Not Before: Dec 22 16:17:19 2025 GMT Not After : Dec 29 16:17:19 2025 GMT Subject: CN=69496f10-7ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:cb:7a:4c:87:61:24:6a:cc:b3:2d:59:7f:b9: f5:e2:15:d5:6b:db:09:fb:8b:bc:3c:59:eb:7b:76: c8:2f:90:60:3e:ba:7f:32:a5:ea:3c:ad:44:c6:38: 33:bb:33:d5:7d:a6:9d:82:ba:df:f9:bc:b7:77:30: b1:2c:25:d1:2a:3e:2c:8b:dd:ae:72:a2:14:b1:d1: 7e:4f:4a:d3:d4:53:99:6a:86:f6:7e:78:84:1a:49: c0:82:75:a5:23:1f:0c:31:31:ee:c2:8f:a4:7e:94: 27:1f:30:b9:b2:4d:02:ad:d0:0a:59:e5:8c:8d:aa: 97:e9:ac:4a:cf:d2:69:26:98:34:6b:60:5c:a4:6c: a1:56:3d:e8:c6:68:58:bb:d5:5f:34:0c:54:d7:1b: 00:4f:60:8e:82:02:29:17:cc:37:e1:0b:5d:c1:1d: 9e:cb:9c:eb:be:ed:16:99:2b:81:60:89:37:8f:6d: 64:00:25:32:57:6d:ca:b3:ad:49:85:72:4d:16:54: 5b:3f:43:7f:29:54:02:7a:99:7f:05:37:47:c7:c3: 08:bf:6c:3a:5b:1b:74:a3:6d:94:98:87:37:2a:0d: 9b:08:a8:e1:74:5d:a5:7a:33:8d:4d:f9:c3:7c:74: b1:a3:b7:fd:4b:92:12:43:7e:b0:d8:c9:e4:5b:d2: 22:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:68:23:6F:3C:97:DF:FE:C6:C6:C2:DE:D3:91:9B:B8:BF:08:B8:DD X509v3 Authority Key Identifier: keyid:BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:87:be:01:7e:29:22:31:69:62:25:c9:0e:1e:5a:17:d5:0a: e6:c1:dc:60:65:af:b6:22:08:5f:ca:e1:8e:94:cc:d0:e2:6e: ed:93:4d:c3:d7:aa:14:59:f7:1d:e9:b5:2a:34:fd:33:d6:14: c3:b3:f6:69:87:15:74:04:2e:e4:ef:f1:c5:45:8c:b1:c1:ce: 4d:8d:0d:60:ea:3b:1d:43:9e:11:95:7b:3d:c1:82:45:c5:53: e7:08:57:40:54:2c:e2:70:aa:d5:87:13:15:25:20:56:d7:4d: 48:d0:44:75:66:16:22:79:c1:0c:f6:0e:37:7c:38:0a:37:61: c4:7e:41:26:c4:79:72:f5:77:5b:ae:5b:c6:11:47:47:e6:8c: b6:42:0d:57:62:7b:d2:d8:14:66:5f:59:55:b8:88:0f:41:4b: e9:d2:d8:27:61:2a:6e:25:49:23:94:4b:b5:bd:94:64:b1:62: 7a:aa:31:4c:e0:32:00:af:b5:65:dc:68:4d:2c:50:fd:71:c1: b8:f9:ae:fd:0e:42:37:62:bf:95:ae:f6:ef:26:14:b7:f6:eb: 76:c3:68:e3:87:8a:9c:57:0b:46:1d:a1:1e:ec:89:0b:62:16: d9:e0:f7:1b:55:48:d4:8c:53:33:e5:04:74:45:66:ca:ed:b4: 24:bd:ec:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFEMkUxMTAvBgNVBAUTKEJCQjg0MEIwNTM5MzRENUUxRkVERDQwREQwMjNFRjdB RjQyOEJBRTAwHhcNMjUxMjIyMTYxNzE5WhcNMjUxMjI5MTYxNzE5WjAYMRYwFAYD VQQDDA02OTQ5NmYxMC03YmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8st6TIdhJGrMsy1Zf7n14hXVa9sJ+4u8PFnre3bIL5BgPrp/MqXqPK1Exjgz uzPVfaadgrrf+by3dzCxLCXRKj4si92ucqIUsdF+T0rT1FOZaob2fniEGknAgnWl Ix8MMTHuwo+kfpQnHzC5sk0CrdAKWeWMjaqX6axKz9JpJpg0a2BcpGyhVj3oxmhY u9VfNAxU1xsAT2COggIpF8w34QtdwR2ey5zrvu0WmSuBYIk3j21kACUyV23Ks61J hXJNFlRbP0N/KVQCepl/BTdHx8MIv2w6Wxt0o22UmIc3Kg2bCKjhdF2lejONTfnD fHSxo7f9S5ISQ36w2MnkW9Ii2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFoI288 l9/+xsbC3tORm7i/CLjdMB8GA1UdIwQYMBaAFLu4QLBTk01eH+3UDdAj73r0KLrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUQyRS8wNzhDNjJBQUM1 MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRWNGY3ZFFOMENQdmV2UW91 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3aEFzRk9UVFY0ZjdkUU4wQ1B2ZXZRb3V1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUQyRS8wNzhDNjJBQUM1MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRW NGY3ZFFOMENQdmV2UW91dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZh74BfikiMWliJckOHloX1QrmwdxgZa+2IghfyuGOlMzQ4m7tk03D 16oUWfcd6bUqNP0z1hTDs/ZphxV0BC7k7/HFRYyxwc5NjQ1g6jsdQ54RlXs9wYJF xVPnCFdAVCzicKrVhxMVJSBW101I0ER1ZhYiecEM9g43fDgKN2HEfkEmxHly9Xdb rlvGEUdH5oy2Qg1XYnvS2BRmX1lVuIgPQUvp0tgnYSpuJUkjlEu1vZRksWJ6qjFM 4DIAr7Vl3GhNLFD9ccG4+a79DkI3Yr+VrvbvJhS39ut2w2jjh4qcVwtGHaEe7IkL YhbZ4PcbVUjUjFMz5QR0RWbK7bQkveyR -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:42 2025 by rpki-client