This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: kVlPBF7L3aDh4OWsOCXj1UkEtiYBZ51w9RkR+BEezHQ= Subject key identifier: B0:FE:EE:73:18:06:6F:15:9F:ED:2A:D9:AB:22:AE:3A:AA:77:F5:46 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 03C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 03B6 Signing time: Sun 14 Dec 2025 23:58:52 +0000 Manifest this update: Sun 14 Dec 2025 23:58:52 +0000 Manifest next update: Sun 21 Dec 2025 23:58:52 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: yJT/Y7YDOO+oNfda9LYbdfJ1gI2JTMTUxfmE0dt0sBI=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: OB3c0FOnO7U7Cy2O3WKkzCkZvRGF4Swy8zD33qNbalg=) 3: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: JCVj+AscF7hWsvaIqNJTPDabzygkqnGZEfVjCkrIsro=) 4: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: PCa5nWLR+HuKgmwdVX9BOmG2ZZvLJrtIyJd8CbPbXng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 23:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Dec 14 23:58:52 2025 GMT Not After : Dec 21 23:58:52 2025 GMT Subject: CN=693f4f3c-fa3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:23:b5:2a:6e:9d:2c:de:1c:5f:1f:66:0b:c4: 03:1b:af:06:32:6f:3c:da:f7:77:a8:72:3a:c9:85: fa:0a:c6:fd:b8:22:92:83:b0:00:1d:ed:99:a1:ac: b7:e6:9b:89:a7:ff:26:3e:21:65:a3:52:6f:73:f9: 57:b3:98:dd:ef:cf:a3:62:c0:76:fd:3c:ae:e5:19: 17:64:4e:55:8b:b8:ca:ae:14:07:cb:d9:63:c5:28: 1c:2c:1e:6e:f5:4b:04:71:13:0d:bf:8b:c7:a0:df: 53:aa:c2:8a:cd:3d:ce:ff:22:ff:cb:f4:1f:f0:66: 38:44:ef:b1:05:a4:e5:57:37:12:29:6c:06:2c:82: de:a1:89:4f:fa:6f:06:c4:41:dd:5f:42:af:a5:2b: 7b:9c:a6:db:1e:9e:60:8b:93:df:7d:e7:29:40:b1: 60:28:41:be:f1:57:1a:e1:34:88:d0:b7:14:33:5b: e4:d0:37:6d:b3:38:a2:5c:a7:84:97:21:3d:7c:e7: c0:f4:46:31:09:d4:85:9b:7e:d9:f6:e0:10:a5:16: cd:dd:8a:36:8d:60:95:b8:95:8c:f8:91:8d:76:c3: e4:c5:bd:e7:ec:ec:81:51:d1:eb:12:b6:6b:d1:c2: 73:4e:09:db:e0:9c:f7:57:91:77:e2:ea:d1:c0:1d: 2c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FE:EE:73:18:06:6F:15:9F:ED:2A:D9:AB:22:AE:3A:AA:77:F5:46 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:96:1a:37:bb:72:e1:2b:f3:ba:27:4a:5d:7c:90:b5:25:49: c4:0e:15:17:54:0a:9e:c3:06:53:8c:be:9d:62:49:36:07:6b: 07:1f:82:af:a3:eb:9b:25:44:95:16:1f:c9:8c:ef:3e:c4:e5: 40:ca:ce:04:e4:c0:08:d0:35:35:22:e9:0d:74:ce:1e:52:19: b2:b8:65:56:02:98:cd:18:fb:56:8f:db:22:73:c5:ec:ee:a5: 5b:45:41:66:26:8a:62:e9:a6:07:a5:0e:ec:ec:09:77:2a:fe: de:33:c0:7d:be:cc:12:5f:a2:68:fc:94:0a:43:9f:ba:79:ef: d3:c1:f5:37:24:af:1f:e7:03:c2:3b:25:03:d2:1b:f7:2e:fd: b9:24:13:d2:01:bb:de:65:b4:7f:ca:f6:82:99:d2:de:3d:3a: 31:6f:89:51:9d:93:f8:87:d7:24:c8:4e:a5:4b:8c:b2:91:03: 4b:dd:ca:8d:f1:d4:9e:60:22:4e:09:94:e3:bf:5f:90:ee:ae: 27:9e:45:5d:c3:f5:9b:76:54:2b:e4:13:52:5d:1f:77:ed:b4: dd:f8:ec:7e:45:4e:69:04:86:0b:08:45:c5:1a:4b:90:e6:3b: ed:2d:f6:dd:dc:96:9a:80:f1:ef:a0:8f:3c:39:2f:b0:df:cf: 6d:eb:75:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjUxMjE0MjM1ODUyWhcNMjUxMjIxMjM1ODUyWjAYMRYwFAYD VQQDDA02OTNmNGYzYy1mYTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCO1Km6dLN4cXx9mC8QDG68GMm882vd3qHI6yYX6Csb9uCKSg7AAHe2Zoay3 5puJp/8mPiFlo1Jvc/lXs5jd78+jYsB2/Tyu5RkXZE5Vi7jKrhQHy9ljxSgcLB5u 9UsEcRMNv4vHoN9TqsKKzT3O/yL/y/Qf8GY4RO+xBaTlVzcSKWwGLILeoYlP+m8G xEHdX0KvpSt7nKbbHp5gi5PffecpQLFgKEG+8Vca4TSI0LcUM1vk0DdtsziiXKeE lyE9fOfA9EYxCdSFm37Z9uAQpRbN3Yo2jWCVuJWM+JGNdsPkxb3n7OyBUdHrErZr 0cJzTgnb4Jz3V5F34urRwB0skwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLD+7nMY Bm8Vn+0q2asirjqqd/VGMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADlho3u3LhK/O6J0pdfJC1JUnEDhUXVAqewwZTjL6dYkk2B2sHH4Kv o+ubJUSVFh/JjO8+xOVAys4E5MAI0DU1IukNdM4eUhmyuGVWApjNGPtWj9sic8Xs 7qVbRUFmJopi6aYHpQ7s7Al3Kv7eM8B9vswSX6Jo/JQKQ5+6ee/TwfU3JK8f5wPC OyUD0hv3Lv25JBPSAbveZbR/yvaCmdLePToxb4lRnZP4h9ckyE6lS4yykQNL3cqN 8dSeYCJOCZTjv1+Q7q4nnkVdw/WbdlQr5BNSXR937bTd+Ox+RU5pBIYLCEXFGkuQ 5jvtLfbd3JaagPHvoI88OS+w389t63Uq -----END CERTIFICATE-----Generated at Wed Dec 17 00:30:16 2025 by rpki-client