This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json) Hash identifier: vBwl9BeEFf4/Z1CpsUccxjaSue+0ML14oQF+MJb2Hi8= Subject key identifier: 80:8A:F2:0B:78:AA:43:BA:96:99:8F:17:28:94:2B:7F:6D:BB:DA:97 Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft Manifest number: 011E Signing time: Tue 25 Nov 2025 02:58:14 +0000 Manifest this update: Tue 25 Nov 2025 02:58:13 +0000 Manifest next update: Tue 02 Dec 2025 02:58:13 +0000 Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: hqF1ArZHO0rLCEnml+w3bwy+MkUZX0tTwHlQOKTYBQ4=) 2: 9D979510990811F08B636355C4F9AE02.roa (hash: fmt9GCF+NE5a4tBRcGx8QWY/xoQMCska/8q7Y4AZLk0=) 3: E4EF69C0990711F082A24D54C4F9AE02.roa (hash: Y5663ZSlYh4a1sHc+ifDv616wTEz+ig5EfqmEvk1Bfw=) 4: 28E64612990811F09EE9C754C4F9AE02.roa (hash: FLkuh9f3OcXcBtbzCjm/PN/DthDSBx5c67ZjVgxH7Zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Dec 2025 02:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Validity Not Before: Nov 25 02:58:13 2025 GMT Not After : Dec 2 02:58:13 2025 GMT Subject: CN=69251b46-dc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:10:01:20:35:6e:6c:49:fc:28:21:c2:88:0b: 2b:1a:21:1d:d4:33:fb:23:c1:66:a6:c9:4c:ad:03: bb:d1:1e:99:ec:fb:04:91:09:d0:13:33:45:23:25: 84:75:a4:12:ed:59:e9:af:4e:01:68:41:f8:57:43: de:e4:98:16:eb:4e:21:25:79:9a:fd:f5:81:69:ce: d4:61:e5:7c:f0:c5:2e:45:11:4e:69:8d:57:ce:a1: 56:ed:46:42:a0:1d:59:85:78:ef:a7:49:01:78:ec: 32:f3:a5:33:51:77:86:df:ee:3c:17:fb:82:bb:91: 67:22:28:2b:c7:ca:49:9f:84:50:f1:0f:82:c3:4b: 25:31:ab:27:dd:19:fb:1c:b4:ea:11:8f:f8:83:30: 1a:f0:76:70:93:b5:64:70:ed:f0:24:1a:73:77:d2: 03:41:0c:ab:7b:ec:05:36:cb:5f:ef:a8:9d:f6:63: 22:bd:73:ef:6d:19:b9:48:f3:de:62:d2:72:2e:c0: 16:bd:c1:83:c5:0a:42:ec:4e:b6:d8:79:0e:27:7e: 6a:4d:ca:49:74:5d:16:0b:80:f0:09:ce:0d:b2:b4: ff:12:a8:50:43:37:25:e2:12:a8:e1:89:14:9e:91: fb:43:a4:aa:1b:e3:ec:2d:33:10:4b:ab:8e:ca:10: 45:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8A:F2:0B:78:AA:43:BA:96:99:8F:17:28:94:2B:7F:6D:BB:DA:97 X509v3 Authority Key Identifier: keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f9:0f:6e:d7:cb:de:d9:08:a9:d9:62:0c:d6:9f:62:79:f9: d8:1e:6c:a7:53:0a:a6:d1:65:50:7b:aa:b3:82:1e:c8:53:3b: eb:67:b6:39:0e:0f:ad:22:af:4c:2f:4a:b3:b5:6a:c1:9b:fe: 4c:93:c1:78:99:3a:27:bc:73:d8:71:21:53:53:36:73:4b:9c: e1:13:8f:b9:3e:58:ab:62:15:7c:19:99:27:31:09:df:78:ce: a6:ec:29:1a:92:04:86:7f:e6:6a:28:7e:49:80:70:c4:bd:f1: d6:57:01:61:f3:eb:9c:18:fa:55:85:54:1e:21:8f:52:ea:21: 08:96:4e:d7:74:7e:58:c6:9c:31:78:ec:bf:3c:9a:96:41:eb: 71:51:cb:e5:73:04:37:8f:df:5a:87:eb:df:01:88:21:6a:3a: 8a:8f:80:1c:e3:f2:3d:fe:a0:49:b8:a7:59:c6:83:bc:5d:01: bc:28:23:c1:f9:b2:f8:39:12:32:1e:c8:96:d6:9a:fb:88:6d: 94:ed:75:58:72:37:12:fc:83:9d:97:3e:0d:c1:a0:17:4c:61: a1:6e:aa:41:bd:0a:6d:15:d0:c0:b9:2a:c9:3d:be:05:bc:59: dc:dd:91:2d:29:e2:1f:e4:30:40:88:cc:ea:93:e0:a9:b7:11: 1e:50:d5:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFRDMxMTAvBgNVBAUTKEE3NDFFQjQxMEQ0QjhFNDZGRjQ4QUI3MEExREEwMDZB M0RDRjQxQTMwHhcNMjUxMTI1MDI1ODEzWhcNMjUxMjAyMDI1ODEzWjAYMRYwFAYD VQQDEw02OTI1MWI0Ni1kYzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RABIDVubEn8KCHCiAsrGiEd1DP7I8FmpslMrQO70R6Z7PsEkQnQEzNFIyWE daQS7Vnpr04BaEH4V0Pe5JgW604hJXma/fWBac7UYeV88MUuRRFOaY1XzqFW7UZC oB1ZhXjvp0kBeOwy86UzUXeG3+48F/uCu5FnIigrx8pJn4RQ8Q+Cw0slMasn3Rn7 HLTqEY/4gzAa8HZwk7VkcO3wJBpzd9IDQQyre+wFNstf76id9mMivXPvbRm5SPPe YtJyLsAWvcGDxQpC7E622HkOJ35qTcpJdF0WC4DwCc4NsrT/EqhQQzcl4hKo4YkU npH7Q6SqG+PsLTMQS6uOyhBF5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICK8gt4 qkO6lpmPFyiUK39tu9qXMB8GA1UdIwQYMBaAFKdB60ENS45G/0ircKHaAGo9z0Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VEMy8zQzE2MUZBNjIx NkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGprYl9TS3R3b2RvQWFqM1BR YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwSHJRUTFMamtiX1NLdHdvZG9BYWozUFFhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VEMy8zQzE2MUZBNjIxNkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGpr Yl9TS3R3b2RvQWFqM1BRYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/+Q9u18ve2Qip2WIM1p9iefnYHmynUwqm0WVQe6qzgh7IUzvrZ7Y5 Dg+tIq9ML0qztWrBm/5Mk8F4mTonvHPYcSFTUzZzS5zhE4+5PlirYhV8GZknMQnf eM6m7CkakgSGf+ZqKH5JgHDEvfHWVwFh8+ucGPpVhVQeIY9S6iEIlk7XdH5Yxpwx eOy/PJqWQetxUcvlcwQ3j99ah+vfAYghajqKj4Ac4/I9/qBJuKdZxoO8XQG8KCPB +bL4ORIyHsiW1pr7iG2U7XVYcjcS/IOdlz4NwaAXTGGhbqpBvQptFdDAuSrJPb4F vFnc3ZEtKeIf5DBAiMzqk+CptxEeUNVF -----END CERTIFICATE-----Generated at Wed Nov 26 12:02:24 2025 by rpki-client