This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft File: v_236_RdfGG_nSOQip84wzKYWXA.mft (raw, json) Hash identifier: CKYUZeoy1P5SbdeouC18VXYYAM/P3Pl1kfeQZ0qYTlk= Subject key identifier: 1E:11:52:EE:10:D7:65:D3:EB:0F:55:A4:D9:99:09:A8:AE:91:B5:62 Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70 Certificate issuer: /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970 Certificate serial: 1986 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft Manifest number: 1964 Signing time: Sat 20 Dec 2025 16:13:14 +0000 Manifest this update: Sat 20 Dec 2025 16:13:14 +0000 Manifest next update: Sat 27 Dec 2025 16:13:14 +0000 Files and hashes: 1: v_236_RdfGG_nSOQip84wzKYWXA.crl (hash: v4dHO2uGyfSsbtixULSC04lnt0NtOgpsWpuQz7+tPv0=) 2: 1647AB229DF911F085AD790CC4F9AE02.roa (hash: KoG/vQ6kyOHuaJ2jgr97BIhG2nLevi1Xk1y/HRWut1o=) 3: 15B87C049DF911F085AD790CC4F9AE02.roa (hash: f7ozP310ZMgTh+DbH2cxCc+F5ij0yT7w2nX53gq8n18=) 4: 8732232CCBA011E887F87451C4F9AE02.roa (hash: eW7HUd0AqFpEmBZ5m/dr7HGk+rxZDTswhaWbGZK0g6E=) 5: 2E511546D07111F09D273F2BC4F9AE02.roa (hash: UwOWo3yxX9gqPa44fO4AhHoo35qvvDoJEKScpDmr7GI=) 6: 62B6389287C211EE949BAE7BC4F9AE02.roa (hash: ZZzTmdwRCmMAFK7A/eXFc5AgGos2Uj+JVfp6crS3xzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6534 (0x1986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F9FB, serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970 Validity Not Before: Dec 20 16:13:14 2025 GMT Not After : Dec 27 16:13:14 2025 GMT Subject: CN=6946cb1a-036c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:cc:f0:20:fc:e2:ca:c6:c2:fd:7b:29:bc: 47:0f:3c:41:fc:de:6f:17:da:bc:ab:90:47:a5:9c: bf:ee:e1:e3:90:8f:1a:0f:05:1a:5f:40:12:fc:7d: ad:eb:6a:ec:a6:2b:57:d8:67:b4:a4:1a:5d:e7:12: f8:c8:dc:88:f0:ed:97:5b:eb:c1:21:6b:5a:0f:0e: 45:e2:df:90:cb:84:0a:21:b5:76:f2:15:0f:f3:8d: 54:c3:76:96:b1:21:c3:28:75:a9:b5:c1:d5:19:90: fd:be:ba:5a:ea:cb:e7:9a:66:9c:f7:af:d5:d6:8b: 24:55:20:58:3d:5e:34:85:19:ba:60:97:c3:a0:af: b6:b1:c6:9d:4c:62:69:4a:09:21:5d:bf:b2:21:d7: fd:35:1b:11:d6:5f:73:9a:c3:c1:ae:5f:a8:74:9e: 86:ff:9f:b9:53:f7:ff:dc:ba:21:e9:2a:cc:8a:08: 1e:70:03:59:4e:be:45:3d:28:90:30:cb:a8:f3:6e: 72:27:f2:9e:72:f0:f4:0e:11:c2:19:86:78:f0:15: 9b:11:b4:02:08:00:fa:eb:0c:7d:6f:72:50:5a:dd: 54:7f:7f:d9:69:58:d1:a2:85:2a:65:e0:d8:a3:fa: e4:fa:1d:c6:df:8b:66:75:75:3d:fb:f1:6a:34:a4: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:11:52:EE:10:D7:65:D3:EB:0F:55:A4:D9:99:09:A8:AE:91:B5:62 X509v3 Authority Key Identifier: keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:05:f2:95:4f:89:4c:ec:a5:01:7f:70:8e:ec:4a:5b:5c:a3: e5:d9:2b:0d:05:70:cf:9a:2e:de:be:15:0d:8b:bf:1e:5e:6a: d3:21:e5:ac:1a:d4:61:d1:e2:ec:83:5e:93:58:44:ab:e3:fd: fc:b5:f4:db:79:77:f2:bb:38:25:ea:ba:0a:7e:96:75:d5:ab: d6:a4:e0:0e:33:9e:1c:95:3e:54:db:3b:1b:01:66:4d:b7:04: d9:94:a0:c2:91:56:64:3a:58:f7:6a:a0:8b:1a:fe:af:28:61: f0:95:bf:c9:58:5c:5b:ce:33:37:e2:1c:dc:5f:4c:4f:35:5e: 36:c0:8d:54:0e:76:5a:8b:9f:d2:9e:27:cd:b1:da:d7:28:39: 91:1a:21:bd:f2:65:15:f7:60:ee:4c:f0:b0:60:27:d9:85:99: ce:a9:70:4d:0c:a7:22:66:e3:af:c4:29:06:7c:15:a2:42:f0: b1:0a:8c:51:ac:6f:5a:71:ad:21:9e:54:4f:cd:02:af:57:62: 37:6b:6c:84:9a:f7:0c:e2:ef:b2:a1:a8:49:cf:17:ef:38:1c: c9:c8:7d:d9:3e:7b:a6:15:b3:f6:24:c9:a2:c1:cf:81:31:29: 59:7c:2a:70:f0:2a:ce:49:e8:72:44:4d:a7:76:6f:ef:35:90: 00:54:da:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY5RkIxMTAvBgNVBAUTKEJGRkRCN0VCRjQ1RDdDNjFCRjlEMjM5MDhBOUYzOEMz MzI5ODU5NzAwHhcNMjUxMjIwMTYxMzE0WhcNMjUxMjI3MTYxMzE0WjAYMRYwFAYD VQQDDA02OTQ2Y2IxYS0wMzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogfM8CD84srGwv17KbxHDzxB/N5vF9q8q5BHpZy/7uHjkI8aDwUaX0AS/H2t 62rspitX2Ge0pBpd5xL4yNyI8O2XW+vBIWtaDw5F4t+Qy4QKIbV28hUP841Uw3aW sSHDKHWptcHVGZD9vrpa6svnmmac96/V1oskVSBYPV40hRm6YJfDoK+2scadTGJp SgkhXb+yIdf9NRsR1l9zmsPBrl+odJ6G/5+5U/f/3Loh6SrMiggecANZTr5FPSiQ MMuo825yJ/KecvD0DhHCGYZ48BWbEbQCCAD66wx9b3JQWt1Uf3/ZaVjRooUqZeDY o/rk+h3G34tmdXU9+/FqNKRLQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4RUu4Q 12XT6w9VpNmZCaiukbViMB8GA1UdIwQYMBaAFL/9t+v0XXxhv50jkIqfOMMymFlw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjlGQi9BRjAwOThEMDg5 NkYxMUU3OEE4MUM4M0NDNEY5QUUwMi92XzIzNl9SZGZHR19uU09RaXA4NHd6S1lX WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZfMjM2X1JkZkdHX25TT1FpcDg0d3pLWVdYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjlGQi9BRjAwOThEMDg5NkYxMUU3OEE4MUM4M0NDNEY5QUUwMi92XzIzNl9SZGZH R19uU09RaXA4NHd6S1lXWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmBfKVT4lM7KUBf3CO7EpbXKPl2SsNBXDPmi7evhUNi78eXmrTIeWs GtRh0eLsg16TWESr4/38tfTbeXfyuzgl6roKfpZ11avWpOAOM54clT5U2zsbAWZN twTZlKDCkVZkOlj3aqCLGv6vKGHwlb/JWFxbzjM34hzcX0xPNV42wI1UDnZai5/S nifNsdrXKDmRGiG98mUV92DuTPCwYCfZhZnOqXBNDKciZuOvxCkGfBWiQvCxCoxR rG9aca0hnlRPzQKvV2I3a2yEmvcM4u+yoahJzxfvOBzJyH3ZPnumFbP2JMmiwc+B MSlZfCpw8CrOSehyRE2ndm/vNZAAVNrR -----END CERTIFICATE-----Generated at Sat Dec 20 23:41:36 2025 by rpki-client