This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json) Hash identifier: wbhF+7jgYDfuRrmBdSf3tN95+7l+OGXHv5XvVbt0Rok= Subject key identifier: 5F:FE:61:C8:3F:F6:1B:D3:3F:FC:F8:65:ED:B4:D9:1F:E6:D6:8C:D8 Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft Manifest number: 016E Signing time: Mon 15 Dec 2025 03:22:45 +0000 Manifest this update: Mon 15 Dec 2025 03:22:45 +0000 Manifest next update: Mon 22 Dec 2025 03:22:45 +0000 Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: 5rJ3LxY582JC+yTxZCjipxCm1WwD6z1qYT/6GoszaIg=) 2: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: xLYaayOa6ljsfyz0Fl5EAR812aBmAL1bIciZu3m45qA=) 3: A17C3508168911EFBF38F580C4F9AE02.roa (hash: VX+Jv3bPS3HePtNKEWgfIHtlmIu9qG2L38hEMCHNp/A=) 4: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: VTp2ABLnUqS/Ob5XrNRvfYj53nTFMS/ZxCFHhPG4kpU=) 5: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: QWiwvzdCs9QlEtO4vjDbxuVVXBGO2+18x2vf8VSunOs=) 6: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: 5dFzBEhRX2qpf3v3P5WZEcaB5fBRXl7gbbBm5x4xFTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: Dec 15 03:22:45 2025 GMT Not After : Dec 22 03:22:45 2025 GMT Subject: CN=693f7f05-f0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:6f:ba:c0:5c:9a:e2:2f:8c:b6:bb:4c:b6: ea:89:c4:3b:5d:2b:25:4a:ec:3a:ab:11:93:7a:fb: 8e:69:cd:45:fb:ed:73:5e:2b:38:bd:b0:de:91:c9: de:d7:75:75:04:e1:63:b9:df:80:e3:5d:c7:62:a6: 17:e0:ee:ef:72:db:66:eb:02:42:2a:33:af:8c:82: 7c:3a:7f:d2:99:58:b0:3e:40:87:d0:aa:43:8a:25: 0a:5d:15:47:6c:14:77:db:2c:88:95:39:fd:af:9d: 10:47:0e:bd:0f:f9:d7:c5:8e:ca:e3:f7:69:c5:80: f2:87:32:82:e9:86:e7:4d:e6:e0:f0:ab:a1:c2:4d: 72:8d:10:46:6f:61:a4:46:cd:32:eb:3b:1f:57:3f: 58:6a:58:41:d5:bf:9e:46:28:a1:6d:86:de:66:06: 4f:b5:1a:61:b3:1c:ff:7c:97:e7:6b:bb:a2:5f:24: 50:44:df:fb:3d:8a:c6:fd:ea:2a:53:30:c8:33:84: d8:a8:97:3f:92:9a:96:9b:09:91:e1:41:ef:f3:d7: f2:d0:1e:78:83:06:09:47:47:51:05:6b:8c:07:4d: 71:83:07:39:bc:73:32:bd:a9:31:15:62:25:4a:9a: a4:dc:01:87:76:d5:62:31:68:a8:98:63:de:10:c7: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FE:61:C8:3F:F6:1B:D3:3F:FC:F8:65:ED:B4:D9:1F:E6:D6:8C:D8 X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:57:8c:fb:11:8d:47:7d:9f:d4:97:08:c7:f2:3b:ec:46:d2: 66:dd:40:81:b1:84:12:55:34:83:12:99:11:25:b4:b2:f7:86: 2e:d4:8f:65:30:28:81:9f:38:b7:be:22:26:28:80:e5:76:91: 62:fa:77:a6:15:26:b9:ce:5b:5c:e2:27:1b:e5:de:ea:d1:0a: e6:38:3c:16:68:da:b5:38:d2:46:a6:5c:55:75:5e:28:2d:66: f2:ac:8f:62:48:7d:8b:b5:05:1d:7e:b3:d3:b2:44:b6:b5:d0: 10:25:67:d9:94:1f:3a:7f:8d:d9:bb:e3:1f:5b:a0:b3:e2:16: fc:a9:6f:2c:01:84:0b:05:d7:83:6f:b1:ca:70:0b:38:d1:ce: c2:0d:12:c0:2f:bf:0c:c9:e9:57:6d:38:1d:af:fd:fa:3d:56: b4:20:5c:c2:f1:48:ab:f7:60:57:6f:eb:4f:ae:90:5f:29:7e: 75:77:c1:ca:be:84:8d:d5:4e:f2:19:5a:6c:99:76:cd:f2:3f: e1:83:87:70:3c:fa:a1:90:91:fa:4f:24:19:7a:08:99:02:0e: 49:ac:49:54:41:6e:db:72:fb:5f:5c:4c:54:ca:9f:51:16:e8: 1f:61:09:0b:8b:2f:f8:2e:13:e5:75:75:f2:62:42:ae:11:06: 6d:92:db:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjUxMjE1MDMyMjQ1WhcNMjUxMjIyMDMyMjQ1WjAYMRYwFAYD VQQDDA02OTNmN2YwNS1mMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkxvusBcmuIvjLa7TLbqicQ7XSslSuw6qxGTevuOac1F++1zXis4vbDekcne 13V1BOFjud+A413HYqYX4O7vcttm6wJCKjOvjIJ8On/SmViwPkCH0KpDiiUKXRVH bBR32yyIlTn9r50QRw69D/nXxY7K4/dpxYDyhzKC6YbnTebg8Kuhwk1yjRBGb2Gk Rs0y6zsfVz9YalhB1b+eRiihbYbeZgZPtRphsxz/fJfna7uiXyRQRN/7PYrG/eoq UzDIM4TYqJc/kpqWmwmR4UHv89fy0B54gwYJR0dRBWuMB01xgwc5vHMyvakxFWIl Spqk3AGHdtViMWiomGPeEMc8PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/+Ycg/ 9hvTP/z4Ze202R/m1ozYMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9p YVlQNS1abWhRR05pZGJhbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6V4z7EY1HfZ/UlwjH8jvsRtJm3UCBsYQSVTSDEpkRJbSy94Yu1I9l MCiBnzi3viImKIDldpFi+nemFSa5zltc4icb5d7q0QrmODwWaNq1ONJGplxVdV4o LWbyrI9iSH2LtQUdfrPTskS2tdAQJWfZlB86f43Zu+MfW6Cz4hb8qW8sAYQLBdeD b7HKcAs40c7CDRLAL78MyelXbTgdr/36PVa0IFzC8Uir92BXb+tPrpBfKX51d8HK voSN1U7yGVpsmXbN8j/hg4dwPPqhkJH6TyQZegiZAg5JrElUQW7bcvtfXExUyp9R FugfYQkLiy/4LhPldXXyYkKuEQZtktvd -----END CERTIFICATE-----Generated at Tue Dec 16 10:43:01 2025 by rpki-client