This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json) Hash identifier: D0CFbigSbg/eLucmbrmpPRBcblGBnOP6EEwn5hFgWSY= Subject key identifier: 3F:58:A7:1D:33:93:E3:98:C8:DC:15:B5:AE:B5:E0:5F:65:AA:13:FF Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft Manifest number: C8 Signing time: Tue 23 Dec 2025 04:50:11 +0000 Manifest this update: Tue 23 Dec 2025 04:50:10 +0000 Manifest next update: Tue 30 Dec 2025 04:50:10 +0000 Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: 6wL5VaWLbVMe3PnRvYDzpl2hrCY1it+zr8nLYuNg/s0=) 2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: d/RYVa2HakPJmaoS9wpWgMIzB9sEpveR7yts219Nv14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Validity Not Before: Dec 23 04:50:10 2025 GMT Not After : Dec 30 04:50:10 2025 GMT Subject: CN=694a1f83-a779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:02:27:1a:da:6b:9a:26:bf:1f:61:63:19: fa:5c:c1:35:ec:ed:84:e3:10:15:ca:2c:b0:2a:c1: 72:47:94:be:73:00:7b:cf:7f:b4:f7:92:95:3f:5f: 22:20:01:2c:e4:75:a8:4d:b2:1e:df:9e:9d:cf:83: 4f:67:b1:b6:f8:4d:7e:c3:6f:65:42:d2:c3:c8:38: af:a2:29:a8:74:b9:24:6f:09:ac:04:0b:c1:eb:58: 9f:3b:dd:64:98:38:85:0e:7f:97:78:ed:33:95:cc: e4:7f:6c:dd:16:c5:6e:4a:01:66:a9:0c:6e:3b:c1: 19:a9:4c:f1:8d:6b:7f:83:21:f9:d4:71:54:cc:aa: 96:c5:44:79:dc:60:27:f5:2c:4b:b0:cd:cc:1f:97: fb:57:75:67:39:46:18:5d:1a:3b:79:0b:8f:f3:49: 2b:5b:4d:06:4a:35:8c:2e:dd:92:9e:5d:9e:61:6f: c3:4d:bf:65:70:46:95:e8:df:5f:fe:4c:63:75:5b: 28:b8:a7:72:d4:14:b7:43:dd:d5:70:df:0f:aa:b7: bb:53:52:71:14:6c:21:4a:29:ec:02:44:bd:f0:b5: bc:41:8a:37:31:38:fe:54:36:ff:d5:26:4e:d1:73: 49:0b:4a:6e:54:0b:74:71:5a:7c:06:d7:a1:42:80: f3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:58:A7:1D:33:93:E3:98:C8:DC:15:B5:AE:B5:E0:5F:65:AA:13:FF X509v3 Authority Key Identifier: keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:a0:ea:d3:e1:19:bc:8d:e0:c7:9b:ae:04:e5:d0:70:78:7f: fc:3c:95:da:d2:42:77:25:4f:f9:43:74:37:73:12:f6:de:be: f6:57:bd:25:e3:dc:ec:c4:75:52:72:85:ae:91:a7:3d:80:26: 0f:64:ec:59:58:41:4c:d9:10:83:e9:a1:98:ff:30:6c:ae:88: 37:84:8f:ea:91:0e:50:f1:aa:2e:26:61:14:76:30:06:c9:ab: c7:9d:60:98:60:c1:c6:5f:e8:ec:fc:04:0a:ca:70:d4:48:38: 05:fd:68:72:90:86:85:25:e5:c8:42:bd:2a:41:bc:34:a1:74: 6f:db:d7:fd:53:6d:94:f3:89:eb:63:44:0c:1c:06:d0:3c:fa: 09:48:7c:05:b1:02:9d:19:4e:43:b7:0f:fa:ed:18:ad:88:fa: a5:61:56:04:db:d0:6a:da:e2:9d:eb:13:1d:75:e9:61:7c:07: 23:b5:6e:22:46:bc:69:70:96:b8:19:9d:23:07:a1:b7:51:d1: 40:1a:91:d8:5e:c0:e9:4e:e7:78:8c:ea:e9:cd:de:03:ea:10: 10:c8:b7:11:32:2f:d9:21:6b:44:24:78:cd:5e:32:05:8b:05: c8:1f:57:5f:5d:e4:6b:f9:01:fb:49:b7:ba:cd:e3:6a:11:f4: 80:1a:c3:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzQzcxMTAvBgNVBAUTKDg5M0FDNTc5MDE0MTU2MTg2QUVBRjUwMzRCQTBCNDky NkY5MkUzNzQwHhcNMjUxMjIzMDQ1MDEwWhcNMjUxMjMwMDQ1MDEwWjAYMRYwFAYD VQQDDA02OTRhMWY4My1hNzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhgCJxraa5omvx9hYxn6XME17O2E4xAVyiywKsFyR5S+cwB7z3+095KVP18i IAEs5HWoTbIe356dz4NPZ7G2+E1+w29lQtLDyDivoimodLkkbwmsBAvB61ifO91k mDiFDn+XeO0zlczkf2zdFsVuSgFmqQxuO8EZqUzxjWt/gyH51HFUzKqWxUR53GAn 9SxLsM3MH5f7V3VnOUYYXRo7eQuP80krW00GSjWMLt2Snl2eYW/DTb9lcEaV6N9f /kxjdVsouKdy1BS3Q93VcN8Pqre7U1JxFGwhSinsAkS98LW8QYo3MTj+VDb/1SZO 0XNJC0puVAt0cVp8BtehQoDzdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9Ypx0z k+OYyNwVta614F9lqhP/MB8GA1UdIwQYMBaAFIk6xXkBQVYYaur1A0ugtJJvkuN0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTNDNy84NjU4ODdCNkIy NjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZoaHE2dlVEUzZDMGttLVM0 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lUckZlUUZCVmhocTZ2VURTNkMwa20tUzQzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTNDNy84NjU4ODdCNkIyNjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZo aHE2dlVEUzZDMGttLVM0M1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxoOrT4Rm8jeDHm64E5dBweH/8PJXa0kJ3JU/5Q3Q3cxL23r72V70l 49zsxHVScoWukac9gCYPZOxZWEFM2RCD6aGY/zBsrog3hI/qkQ5Q8aouJmEUdjAG yavHnWCYYMHGX+js/AQKynDUSDgF/WhykIaFJeXIQr0qQbw0oXRv29f9U22U84nr Y0QMHAbQPPoJSHwFsQKdGU5Dtw/67RitiPqlYVYE29Bq2uKd6xMddelhfAcjtW4i RrxpcJa4GZ0jB6G3UdFAGpHYXsDpTud4jOrpzd4D6hAQyLcRMi/ZIWtEJHjNXjIF iwXIH1dfXeRr+QH7Sbe6zeNqEfSAGsO1 -----END CERTIFICATE-----Generated at Thu Dec 25 00:56:38 2025 by rpki-client