This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: hKnhZYt5jusS4mPUJKckcLGE2gmUUGlNLbdGXeo+5rw= Subject key identifier: BE:5F:CD:B8:16:DE:73:F4:64:43:A8:78:19:8A:5B:62:60:5D:A9:7F Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0E85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0E7C Signing time: Mon 22 Dec 2025 17:22:55 +0000 Manifest this update: Mon 22 Dec 2025 17:22:55 +0000 Manifest next update: Mon 29 Dec 2025 17:22:55 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: 0MjgnU+H7wD16+uNvyb9HmtKwEZdWb8lDrJLQxYy2uE=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: NeUqjo2VYHUQAlZoEGW65z9tYOjTgZvuRZo90c+p6gU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3717 (0xe85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: Dec 22 17:22:55 2025 GMT Not After : Dec 29 17:22:55 2025 GMT Subject: CN=69497e6f-87c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:15:0a:b4:64:7e:7a:b1:c6:46:cc:13:76:67: aa:dd:27:01:9b:d1:77:29:ec:9f:15:ff:2d:36:79: 74:96:54:37:ed:d0:8d:39:bc:88:c7:d1:40:d2:95: e0:15:20:20:30:b3:1a:2c:aa:7c:43:c7:3f:1b:fc: 2a:ea:62:e4:11:fb:de:fe:2a:87:9b:bf:47:a9:be: 99:1e:2a:3b:02:1c:3e:48:a2:18:8e:05:a4:e8:37: 60:86:83:df:c0:2f:4b:37:d9:6d:58:e9:6e:fd:15: 17:69:f5:a2:15:70:26:79:0d:79:42:a5:76:f9:03: 6e:89:d7:69:f8:5a:44:73:69:53:0b:0d:ea:fe:e9: d4:4b:10:e3:ab:d2:51:3c:4c:3c:c3:ec:c5:35:c5: a4:f4:95:1d:b8:38:7d:2d:c9:4c:2a:27:f1:00:95: 90:98:58:a9:82:21:82:93:d4:ba:bb:c6:15:63:1d: 1e:56:6b:42:61:da:db:68:15:91:3d:67:d2:6e:4e: 73:17:83:6e:19:c3:ea:5c:1b:7c:b1:1b:11:af:72: 09:84:07:d8:45:0c:f4:16:c5:93:e1:15:20:3e:a3: 68:bf:fd:7f:2c:4b:13:dc:6b:18:d5:87:c6:c7:95: 55:7b:96:2d:7b:58:4f:c6:cc:b1:20:df:b7:db:27: 3c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5F:CD:B8:16:DE:73:F4:64:43:A8:78:19:8A:5B:62:60:5D:A9:7F X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d5:d9:d4:47:25:30:ce:8a:61:78:98:9c:a4:34:b9:31:55: 42:7b:3f:a0:32:c7:bd:71:4f:19:d2:e2:05:76:07:85:95:9c: 55:2d:fe:a1:18:a7:bb:bf:1c:b0:24:57:c9:9f:29:b6:54:79: 6e:6c:8e:cf:45:e5:26:c6:bd:69:a3:ad:5f:15:db:d5:75:39: 08:79:79:20:69:31:a5:39:ac:2b:29:82:7d:37:0d:ac:7c:ae: 1d:17:78:9d:46:19:c2:d1:d7:9f:24:25:f3:91:87:6c:21:d8: c8:17:60:17:a7:82:0c:53:4f:07:d4:c9:cc:ed:88:61:b5:2a: 84:77:94:5a:9c:5c:2d:2c:0d:47:3f:2f:ad:d4:1e:ac:cb:5d: 6f:c2:58:61:74:17:29:ff:5b:0e:10:e7:d1:7a:cd:3c:94:3e: 13:b6:80:dd:24:99:5e:85:b4:6e:2e:71:5b:40:47:24:76:1e: 1c:94:74:91:bc:9f:89:81:45:9a:3b:b4:08:8b:9d:32:a8:c1: 1c:c9:d0:60:6f:60:7d:84:7b:2b:af:0e:52:69:de:c7:38:31: 60:22:09:4a:c8:fb:de:dc:68:d4:97:06:ee:f1:89:2b:3a:fb: 86:84:6e:0b:6c:8d:91:9f:2c:63:66:37:4d:94:4b:91:c2:dc: 72:4a:a4:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjUxMjIyMTcyMjU1WhcNMjUxMjI5MTcyMjU1WjAYMRYwFAYD VQQDDA02OTQ5N2U2Zi04N2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshUKtGR+erHGRswTdmeq3ScBm9F3KeyfFf8tNnl0llQ37dCNObyIx9FA0pXg FSAgMLMaLKp8Q8c/G/wq6mLkEfve/iqHm79Hqb6ZHio7Ahw+SKIYjgWk6DdghoPf wC9LN9ltWOlu/RUXafWiFXAmeQ15QqV2+QNuiddp+FpEc2lTCw3q/unUSxDjq9JR PEw8w+zFNcWk9JUduDh9LclMKifxAJWQmFipgiGCk9S6u8YVYx0eVmtCYdrbaBWR PWfSbk5zF4NuGcPqXBt8sRsRr3IJhAfYRQz0FsWT4RUgPqNov/1/LEsT3GsY1YfG x5VVe5Yte1hPxsyxIN+32yc8QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5fzbgW 3nP0ZEOoeBmKW2JgXal/MB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO1dnURyUwzopheJicpDS5MVVCez+gMse9cU8Z0uIFdgeFlZxVLf6h GKe7vxywJFfJnym2VHlubI7PReUmxr1po61fFdvVdTkIeXkgaTGlOawrKYJ9Nw2s fK4dF3idRhnC0defJCXzkYdsIdjIF2AXp4IMU08H1MnM7YhhtSqEd5RanFwtLA1H Py+t1B6sy11vwlhhdBcp/1sOEOfRes08lD4TtoDdJJlehbRuLnFbQEckdh4clHSR vJ+JgUWaO7QIi50yqMEcydBgb2B9hHsrrw5Sad7HODFgIglKyPve3GjUlwbu8Ykr OvuGhG4LbI2RnyxjZjdNlEuRwtxySqTP -----END CERTIFICATE-----Generated at Tue Dec 23 23:31:24 2025 by rpki-client