This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft File: pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json) Hash identifier: lEAkwxULM/Mhk0mrgF663uGTqIfZ2wuALZ5E8yU7qoY= Subject key identifier: F3:52:63:75:46:85:82:46:0A:77:2B:84:02:23:AC:7A:E9:C4:97:7D Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC Certificate issuer: /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Certificate serial: 34FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft Manifest number: 34F7 Signing time: Sat 20 Dec 2025 14:38:51 +0000 Manifest this update: Sat 20 Dec 2025 14:38:50 +0000 Manifest next update: Sat 27 Dec 2025 14:38:50 +0000 Files and hashes: 1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: Za6Rrjwj15pVeDYliWiaVD+OeMNSt27kmjkpE6AUNKE=) 2: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: lyo3KeYKS41I3zCvbwFM3YRuu5a+CzwSrlJ2GPJMVKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13566 (0x34fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Validity Not Before: Dec 20 14:38:50 2025 GMT Not After : Dec 27 14:38:50 2025 GMT Subject: CN=6946b4fb-5956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:d4:07:07:63:13:a3:ed:c7:70:d6:ac:76: 4c:15:ae:87:f7:81:7b:87:f1:a9:f1:a1:1c:60:26: 9c:b2:db:d9:3a:3d:3c:b9:55:57:0d:4e:ff:9b:7a: 72:e6:99:93:c9:cb:1b:92:22:2a:1a:7f:66:de:f1: a6:a0:bd:cc:8e:6c:e0:85:2d:ae:82:69:fe:66:05: a3:bf:c8:86:3a:21:c4:b9:81:38:41:17:da:53:86: 1e:4d:ff:40:1e:33:aa:1d:cd:8d:72:f2:45:60:d3: e6:16:18:07:27:e9:5e:78:b5:68:94:07:3f:93:30: 2a:f5:fd:3b:25:d6:94:37:bf:9e:43:3f:5f:14:7b: 18:0f:8d:22:c5:ca:81:15:d5:00:f7:af:92:67:f6: 5c:42:b5:06:99:8d:8d:6b:4a:10:8b:55:e9:b0:e3: a5:70:10:ce:af:f2:72:d3:7c:7a:c6:9b:48:59:ea: 3b:a9:c0:3d:71:14:0f:6e:a3:80:14:35:7d:21:5b: 0b:d5:a0:ac:2c:9c:07:5f:0d:d9:5f:54:32:02:ad: c6:57:86:5e:7c:80:02:c2:82:55:f9:ba:83:d3:5a: f0:dd:fc:01:ea:3d:00:07:cc:f5:80:9e:8c:e6:92: ad:91:b7:c8:39:23:a0:2f:47:08:28:ba:ed:eb:0b: d0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:52:63:75:46:85:82:46:0A:77:2B:84:02:23:AC:7A:E9:C4:97:7D X509v3 Authority Key Identifier: keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:05:77:7c:86:df:f9:c5:d9:d8:5c:40:26:d4:ac:05:48:f4: 07:01:d2:5a:12:ba:2e:e3:67:c6:3d:cd:c5:0b:8e:c9:ea:1d: 3d:81:80:3c:da:2e:28:e9:f5:15:23:30:ae:0c:f0:fd:63:f3: 5b:f2:c4:e1:85:af:53:11:b5:5f:a0:a6:8f:b8:4d:6f:2c:dd: 71:d6:d7:b8:fe:4f:cb:6f:da:d1:77:ff:9a:53:92:d9:b5:0a: e9:28:dd:ab:8a:d9:3e:88:66:7d:1a:1e:70:34:fb:dd:72:58: bf:79:62:cb:0d:72:0d:d9:6e:c1:cd:e9:f8:7f:4a:02:1b:53: c4:bf:3f:80:01:71:d4:7a:64:ce:97:5e:ac:49:4a:33:b9:2b: a6:e7:ef:a7:e7:e8:6f:bf:e1:8b:d0:a0:76:48:26:b0:b0:8f: 5e:38:6a:60:7f:16:bf:e3:e9:02:0a:10:c2:a6:83:20:a2:e1: 84:d2:97:3f:22:92:81:b8:49:95:69:29:9f:59:46:9d:88:49: 4f:18:0d:4b:65:7d:be:ba:56:bc:fd:00:f7:00:ca:87:bd:88: c3:d7:26:cf:29:82:36:92:3f:ff:82:7b:b7:69:ef:a3:15:ed: 9c:e2:31:21:92:80:9c:85:37:e2:21:51:51:fd:04:2d:a0:a8: 0f:cc:5b:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBQTUxMTAvBgNVBAUTKEE1MzY3QkUxNDI0MTU1OUMxRUI4N0QwRDVFQTNFRUM1 OTNFRENGRUMwHhcNMjUxMjIwMTQzODUwWhcNMjUxMjI3MTQzODUwWjAYMRYwFAYD VQQDDA02OTQ2YjRmYi01OTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6DUBwdjE6Ptx3DWrHZMFa6H94F7h/Gp8aEcYCacstvZOj08uVVXDU7/m3py 5pmTycsbkiIqGn9m3vGmoL3MjmzghS2ugmn+ZgWjv8iGOiHEuYE4QRfaU4YeTf9A HjOqHc2NcvJFYNPmFhgHJ+leeLVolAc/kzAq9f07JdaUN7+eQz9fFHsYD40ixcqB FdUA96+SZ/ZcQrUGmY2Na0oQi1XpsOOlcBDOr/Jy03x6xptIWeo7qcA9cRQPbqOA FDV9IVsL1aCsLJwHXw3ZX1QyAq3GV4ZefIACwoJV+bqD01rw3fwB6j0AB8z1gJ6M 5pKtkbfIOSOgL0cIKLrt6wvQZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNSY3VG hYJGCncrhAIjrHrpxJd9MB8GA1UdIwQYMBaAFKU2e+FCQVWcHrh9DV6j7sWT7c/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBNS9FNjdGNjM2NDFE OEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZad2V1SDBOWHFQdXhaUHR6 LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUWjc0VUpCVlp3ZXVIME5YcVB1eFpQdHotdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkFBNS9FNjdGNjM2NDFEOEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZa d2V1SDBOWHFQdXhaUHR6LXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBABXd8ht/5xdnYXEAm1KwFSPQHAdJaErou42fGPc3FC47J6h09gYA8 2i4o6fUVIzCuDPD9Y/Nb8sThha9TEbVfoKaPuE1vLN1x1te4/k/Lb9rRd/+aU5LZ tQrpKN2ritk+iGZ9Gh5wNPvdcli/eWLLDXIN2W7Bzen4f0oCG1PEvz+AAXHUemTO l16sSUozuSum5++n5+hvv+GL0KB2SCawsI9eOGpgfxa/4+kCChDCpoMgouGE0pc/ IpKBuEmVaSmfWUadiElPGA1LZX2+ula8/QD3AMqHvYjD1ybPKYI2kj//gnu3ae+j Fe2c4jEhkoCchTfiIVFR/QQtoKgPzFvV -----END CERTIFICATE-----Generated at Sun Dec 21 21:28:58 2025 by rpki-client