This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json) Hash identifier: QBweSZCGRVrqU1cJ8WZM08utMtZJkYU/4m4+GpLdFjo= Subject key identifier: 50:EC:93:92:19:47:96:AB:0F:22:EB:6F:EE:1B:39:73:3B:8F:FA:C7 Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft Manifest number: 0141 Signing time: Tue 23 Dec 2025 04:24:49 +0000 Manifest this update: Tue 23 Dec 2025 04:24:49 +0000 Manifest next update: Tue 30 Dec 2025 04:24:49 +0000 Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: FIZzLtpbWMr1lYpTRp3HXaAEVYr9gTOZsJ5cekb3FPE=) 2: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: RDk8brqQwOSnjYaq+zDlbRakXm4WtI5gZfQM2U1Www8=) 3: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: R5owjVusYT1yzRbPvUH5Ej87j/W5N646Aao5Y3mq5wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Validity Not Before: Dec 23 04:24:49 2025 GMT Not After : Dec 30 04:24:49 2025 GMT Subject: CN=694a1991-d3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:29:f2:c2:c1:b5:df:e3:ab:99:85:d9:ae:54: 2c:d9:e2:ec:6a:4d:87:ee:ad:c0:cd:14:8f:67:41: e2:6a:60:9a:5b:80:a7:a0:c3:94:0b:11:3f:ad:2f: 9c:f7:1b:1e:8e:b1:ee:13:61:1d:7f:c6:03:6f:2b: 82:dd:dc:1c:f7:31:b9:d2:5e:5f:5b:bd:88:e4:45: 2c:d7:71:24:82:0e:47:e6:11:53:25:ff:b6:b9:6a: b6:6e:7d:4c:0f:f8:27:14:97:b7:8c:bc:44:f5:6b: 46:9b:b5:1f:38:32:e8:e7:4a:2c:89:8e:06:06:1b: 26:84:3c:b2:eb:98:4c:27:41:ea:69:ac:e9:03:b6: 1a:5b:81:bc:2e:81:7e:b0:9e:8e:1a:23:37:c9:09: 35:70:1c:3c:20:12:be:4f:31:36:ac:68:d9:a6:60: 4b:dd:0c:2c:02:93:5f:7d:7f:79:a6:f7:b3:3b:ba: 8a:68:bb:1f:a9:40:fa:21:fe:75:41:65:d1:e0:a0: be:1f:40:76:c8:dd:da:9a:96:d3:73:c7:b4:d2:b2: 6e:b7:23:d6:0c:eb:6c:aa:47:cb:39:0c:d6:ec:cf: 80:28:fd:9c:ca:ba:a8:86:17:00:c3:7e:b7:19:2a: 27:8b:51:f3:e8:55:bc:7e:5e:18:71:c5:ce:b7:87: 15:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EC:93:92:19:47:96:AB:0F:22:EB:6F:EE:1B:39:73:3B:8F:FA:C7 X509v3 Authority Key Identifier: keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:b6:3d:16:94:34:7e:3f:05:20:9a:66:de:83:1e:07:24:c4: 02:4d:7a:2a:fa:3e:6b:32:d0:14:64:48:18:33:a2:69:eb:40: e4:c8:3f:73:c6:bc:b8:c2:63:85:06:50:93:bb:f5:9c:75:1e: 53:a7:4a:ee:4d:3d:85:3f:1b:65:1f:37:d2:e5:68:29:58:ed: 5b:c3:2b:60:77:50:1d:60:74:ca:20:2f:de:7f:b9:4b:7e:3f: ca:bf:a6:d9:12:56:3f:d3:90:a8:8f:35:1b:b1:a0:64:99:31: f5:2d:08:28:94:5d:e8:c4:9f:cf:03:86:fe:f9:b1:f6:69:6b: 47:50:a7:e3:d5:f0:e6:01:2e:74:19:a1:32:17:7b:d6:cd:63: 76:81:a4:8f:ab:5f:7e:4e:6f:54:56:e9:de:b4:f1:37:98:07: 0c:33:0a:1a:31:2a:46:29:a5:30:81:71:10:22:b6:ca:00:81: 91:26:d5:39:6b:ce:fe:3d:cb:a7:30:25:a5:5e:f2:6f:74:3f: f4:fe:21:1f:ea:b2:46:6a:76:ee:49:27:5d:34:51:44:d5:ea: 3c:30:a2:cd:eb:c5:3c:40:17:7e:29:f8:55:57:6b:36:79:a3: 35:10:2e:af:8c:64:af:19:4d:a4:04:17:7e:0d:cb:0f:dd:7a: cc:50:f0:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MkU4MEMxMTAvBgNVBAUTKEZFQkI0Mjc2Njc1QTA0NzU0QTUzNTNENTcwN0U1Nzky MUNERjQzOTIwHhcNMjUxMjIzMDQyNDQ5WhcNMjUxMjMwMDQyNDQ5WjAYMRYwFAYD VQQDDA02OTRhMTk5MS1kM2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAninywsG13+OrmYXZrlQs2eLsak2H7q3AzRSPZ0HiamCaW4CnoMOUCxE/rS+c 9xsejrHuE2Edf8YDbyuC3dwc9zG50l5fW72I5EUs13Ekgg5H5hFTJf+2uWq2bn1M D/gnFJe3jLxE9WtGm7UfODLo50osiY4GBhsmhDyy65hMJ0HqaazpA7YaW4G8LoF+ sJ6OGiM3yQk1cBw8IBK+TzE2rGjZpmBL3QwsApNffX95pvezO7qKaLsfqUD6If51 QWXR4KC+H0B2yN3ampbTc8e00rJutyPWDOtsqkfLOQzW7M+AKP2cyrqohhcAw363 GSoni1Hz6FW8fl4YccXOt4cVBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDsk5IZ R5arDyLrb+4bOXM7j/rHMB8GA1UdIwQYMBaAFP67QnZnWgR1SlNT1XB+V5Ic30OS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgwQy85QUQ4QjU1NEZC RkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJIVktVMVBWY0g1WGtoemZR NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ydENkbWRhQkhWS1UxUFZjSDVYa2h6ZlE1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTgwQy85QUQ4QjU1NEZCRkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJI VktVMVBWY0g1WGtoemZRNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAitj0WlDR+PwUgmmbegx4HJMQCTXoq+j5rMtAUZEgYM6Jp60DkyD9z xry4wmOFBlCTu/WcdR5Tp0ruTT2FPxtlHzfS5WgpWO1bwytgd1AdYHTKIC/ef7lL fj/Kv6bZElY/05CojzUbsaBkmTH1LQgolF3oxJ/PA4b++bH2aWtHUKfj1fDmAS50 GaEyF3vWzWN2gaSPq19+Tm9UVunetPE3mAcMMwoaMSpGKaUwgXEQIrbKAIGRJtU5 a87+PcunMCWlXvJvdD/0/iEf6rJGanbuSSddNFFE1eo8MKLN68U8QBd+KfhVV2s2 eaM1EC6vjGSvGU2kBBd+DcsP3XrMUPD/ -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:06 2025 by rpki-client