This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json) Hash identifier: CbeHw5rOgo8PEOav+8y4GAFF0yTjeE/HW+qx4fgrhGs= Subject key identifier: B1:AF:18:CC:87:4F:E0:2D:B1:2E:89:73:72:43:2F:36:E1:E7:C4:E1 Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0DC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft Manifest number: 0D8A Signing time: Thu 18 Dec 2025 17:47:19 +0000 Manifest this update: Thu 18 Dec 2025 17:47:18 +0000 Manifest next update: Thu 25 Dec 2025 17:47:18 +0000 Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: OxVlv9qCJ9UrdQR9Jp1CbWzgamgQNQYgazWVXVTZ640=) 2: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 78fn2memSm7vBnLFbyR7taN3PwAlhw+S3wateBPSFCg=) 3: 938E408897E011EB8870DB29C4F9AE02.roa (hash: AvnHda6N9uSW4caKdT/1qliaFxGzoCjsBnC7c0M2BTI=) 4: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: F6pHZaK0p+hfG2R8U42UIH6mVTyAquKiquy2pjJGlpw=) 5: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=) 6: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo=) 7: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: P6JTGz167Z9TdfCL7daabxEJTzpdJTGmRrb0uaHZZCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3526 (0xdc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Dec 18 17:47:18 2025 GMT Not After : Dec 25 17:47:18 2025 GMT Subject: CN=69443e26-39c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:93:b1:d6:4a:17:14:2e:23:8f:41:1e:39: 68:82:12:91:83:db:79:4b:34:97:18:96:78:82:37: 22:8e:3a:4f:73:66:cc:fd:4c:ac:3b:06:09:e7:6f: be:d5:b8:64:49:af:c1:11:a0:2e:4d:d4:d9:1b:9d: fd:26:0d:c3:40:f5:68:f3:54:e6:ca:3b:e3:d8:c3: c5:b6:17:4c:50:a6:fc:d1:a5:e6:03:9c:68:4d:17: 8f:6a:e7:52:3b:e8:d1:5e:a0:ce:44:51:1e:bc:91: 7e:dd:b8:dc:aa:49:88:9d:0c:f4:a3:1f:31:a3:32: 93:bb:94:14:55:18:0f:62:bf:cf:7f:4c:60:4e:cd: 66:56:45:95:db:53:91:a5:97:e2:3b:8c:a3:cf:d1: 08:43:22:bc:04:8d:cd:12:be:22:57:7e:51:60:d8: 06:10:d8:2c:7e:5f:ab:81:8a:9a:db:37:20:7d:dc: c8:3b:db:12:a2:ac:63:bc:f0:11:50:84:ff:35:fa: c0:34:56:55:78:fa:cf:e4:7d:12:52:5c:83:70:b9: fd:f0:bb:6a:da:73:5e:a5:7e:75:75:f1:fa:21:2f: 37:87:fc:f7:eb:5d:da:90:59:c4:b7:8a:a2:e4:0b: ba:fe:c6:61:0e:15:da:da:cb:89:d1:02:2a:7a:b8: 5c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AF:18:CC:87:4F:E0:2D:B1:2E:89:73:72:43:2F:36:E1:E7:C4:E1 X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:be:52:24:5e:60:00:75:dd:e4:57:b4:49:5f:af:f8:93:17: 03:e2:d1:cf:13:18:35:73:b8:ea:d4:ac:45:2e:8c:12:8f:b0: 2a:9c:62:c7:20:ad:33:55:f8:ad:06:7b:28:5a:c8:36:47:ed: dd:99:19:b9:62:6b:50:60:8d:2e:d3:5f:b7:0f:a9:98:1e:61: bb:b0:d2:31:94:7a:46:82:2d:c4:05:f4:b8:23:8f:9b:89:45: a5:b1:df:9e:7a:95:05:ac:e9:4c:62:35:1c:cf:f3:de:3e:7f: e8:35:c2:ab:fd:f6:c2:72:b3:a0:8e:b4:6a:ca:de:88:f7:6f: 38:91:7c:b7:5c:e4:50:2c:41:ed:22:3b:e9:18:ed:1c:62:ec: 2b:72:9a:6c:d1:81:ab:8f:9a:bc:34:58:51:7f:25:aa:ff:c9: 3d:4e:e1:a5:6b:5d:3f:39:07:71:ea:54:dc:e2:b0:d1:3f:8d: 5f:37:2e:ad:94:ef:15:b3:67:7f:d9:01:29:96:e3:39:19:35: cd:21:51:3d:4c:7a:0b:d0:d0:8a:06:0a:9b:fe:a1:5d:e9:5e: ff:d5:04:9a:f4:c4:a4:0e:6e:b6:fb:2f:93:6a:2f:f3:7e:b5: e6:fc:d2:e4:e2:e5:04:49:9f:89:1b:03:00:dc:18:24:67:eb: 02:e6:9b:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjUxMjE4MTc0NzE4WhcNMjUxMjI1MTc0NzE4WjAYMRYwFAYD VQQDDA02OTQ0M2UyNi0zOWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEGTsdZKFxQuI49BHjloghKRg9t5SzSXGJZ4gjcijjpPc2bM/UysOwYJ52++ 1bhkSa/BEaAuTdTZG539Jg3DQPVo81Tmyjvj2MPFthdMUKb80aXmA5xoTRePaudS O+jRXqDORFEevJF+3bjcqkmInQz0ox8xozKTu5QUVRgPYr/Pf0xgTs1mVkWV21OR pZfiO4yjz9EIQyK8BI3NEr4iV35RYNgGENgsfl+rgYqa2zcgfdzIO9sSoqxjvPAR UIT/NfrANFZVePrP5H0SUlyDcLn98Ltq2nNepX51dfH6IS83h/z3613akFnEt4qi 5Au6/sZhDhXa2suJ0QIqerhcTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGvGMyH T+AtsS6Jc3JDLzbh58ThMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REM0NC8yOUI2QkVEQUU0RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2 ZTkzX2kxTnhtMWdJZEkwTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOvlIkXmAAdd3kV7RJX6/4kxcD4tHPExg1c7jq1KxFLowSj7AqnGLH IK0zVfitBnsoWsg2R+3dmRm5YmtQYI0u01+3D6mYHmG7sNIxlHpGgi3EBfS4I4+b iUWlsd+eepUFrOlMYjUcz/PePn/oNcKr/fbCcrOgjrRqyt6I9284kXy3XORQLEHt IjvpGO0cYuwrcpps0YGrj5q8NFhRfyWq/8k9TuGla10/OQdx6lTc4rDRP41fNy6t lO8Vs2d/2QEpluM5GTXNIVE9THoL0NCKBgqb/qFd6V7/1QSa9MSkDm62+y+Tai/z frXm/NLk4uUESZ+JGwMA3BgkZ+sC5ptb -----END CERTIFICATE-----Generated at Fri Dec 19 19:53:33 2025 by rpki-client