This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json) Hash identifier: L6GtRVx6Pzc7KYWEcQwIeVfR4BoujjrAbE60+c2bo/Y= Subject key identifier: FE:F8:9E:E2:2D:B3:D9:57:0F:97:9C:8C:D5:84:95:DC:C8:26:80:89 Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft Manifest number: 043C Signing time: Mon 22 Dec 2025 23:19:41 +0000 Manifest this update: Mon 22 Dec 2025 23:19:40 +0000 Manifest next update: Mon 29 Dec 2025 23:19:40 +0000 Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: UoNAllfIGgQJMJcweGb7/ZDaRfqBzNsK0UxfSqe3/Kw=) 2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: gOa0TpZKNAKtEp1z7Y7hA0Mkc96+IudmzfWq1Ab24PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Validity Not Before: Dec 22 23:19:40 2025 GMT Not After : Dec 29 23:19:40 2025 GMT Subject: CN=6949d20d-8fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:e0:69:88:50:3f:c1:88:58:02:d7:74:f7: 58:4b:49:e3:90:f2:a5:5b:90:67:8a:33:db:ce:96: db:70:08:d1:8d:ad:c0:ed:e9:58:1f:81:55:ce:00: 48:5a:4d:c6:a3:a5:91:5a:68:db:37:f6:c7:f4:dc: 20:46:d8:1c:8c:2b:91:e3:2a:3b:db:fb:13:d0:58: de:27:bb:5a:d7:ba:53:0d:75:26:18:bd:9c:3d:6e: 16:ac:91:8a:b1:ad:9a:09:fb:03:b9:e3:59:a7:2b: 40:7a:55:c6:05:93:f9:2d:89:5f:9b:ee:67:eb:53: 5b:8d:df:fc:dd:4a:17:5f:26:99:67:47:0f:37:3f: 69:5d:15:eb:84:cb:17:ea:ba:5a:9e:a7:41:8b:6b: 19:f5:6f:64:57:16:90:76:55:b5:b0:c8:7e:b5:82: e8:7a:15:82:46:fc:d3:70:f7:a7:05:7e:a2:73:0c: 6c:f8:b4:4a:77:b5:5c:06:2a:b7:df:6f:45:d3:59: 8a:4f:22:fa:9b:8d:c3:2a:b4:0b:2c:6d:03:74:c4: ac:d7:28:43:a8:f7:ea:fc:3f:8a:36:c2:e3:e9:42: fb:07:2f:46:bd:b7:09:6d:04:dc:ac:63:7b:26:d9: d1:7b:75:94:51:be:06:65:2d:a6:b7:82:63:61:0b: 2e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F8:9E:E2:2D:B3:D9:57:0F:97:9C:8C:D5:84:95:DC:C8:26:80:89 X509v3 Authority Key Identifier: keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:77:63:d7:6d:d1:7d:f7:d3:bf:d8:1a:4d:a1:a5:fc:92:db: da:cb:48:69:47:03:82:0c:a5:36:f5:5e:4e:ec:30:84:72:d3: 2e:cd:19:6a:96:58:29:e5:97:e8:0f:4c:a5:3f:eb:31:76:6e: 14:3b:8b:c8:16:46:f8:e3:00:96:61:bd:19:84:de:9f:2d:36: fa:39:2b:1a:ff:a4:64:c9:b2:82:48:3f:54:c0:a1:04:d5:f7: b4:c5:7e:01:9d:79:e4:52:14:4f:4a:13:18:54:04:b5:f8:5e: 86:07:39:b3:d8:62:95:ec:89:83:b7:c3:60:2d:5a:ed:24:53: 7e:69:f9:71:f3:00:01:ce:1f:2d:1e:bd:61:60:02:43:3c:75: 88:b8:31:1c:47:fc:07:87:d6:e0:c5:9c:f3:66:53:99:0b:5a: dd:b2:6a:1d:26:0e:09:9b:6f:71:09:ed:85:9b:ff:c5:53:e3: 04:b1:af:69:08:df:69:47:2f:59:c3:bd:44:87:c0:c8:f0:bf: 73:1b:03:22:4f:66:7b:10:93:fb:aa:95:5b:43:a0:00:96:d2: b6:ab:ed:6d:c2:ef:0d:9c:0c:24:fc:0c:76:33:2a:ff:25:42: 4e:bc:ca:fc:e8:23:c7:60:53:bb:76:26:71:d2:da:89:16:df: df:85:ae:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3NDIxMTAvBgNVBAUTKDBDRUUwRDk2NzczRDVEREFENDY3OUUwRTgzOUE4REMx MjY2OUUyMzIwHhcNMjUxMjIyMjMxOTQwWhcNMjUxMjI5MjMxOTQwWjAYMRYwFAYD VQQDDA02OTQ5ZDIwZC04ZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkbgaYhQP8GIWALXdPdYS0njkPKlW5BnijPbzpbbcAjRja3A7elYH4FVzgBI Wk3Go6WRWmjbN/bH9NwgRtgcjCuR4yo72/sT0FjeJ7ta17pTDXUmGL2cPW4WrJGK sa2aCfsDueNZpytAelXGBZP5LYlfm+5n61Nbjd/83UoXXyaZZ0cPNz9pXRXrhMsX 6rpanqdBi2sZ9W9kVxaQdlW1sMh+tYLoehWCRvzTcPenBX6icwxs+LRKd7VcBiq3 329F01mKTyL6m43DKrQLLG0DdMSs1yhDqPfq/D+KNsLj6UL7By9GvbcJbQTcrGN7 JtnRe3WUUb4GZS2mt4JjYQsuwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP74nuIt s9lXD5ecjNWEldzIJoCJMB8GA1UdIwQYMBaAFAzuDZZ3PV3a1GeeDoOajcEmaeIy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc0Mi8wNDE1RDZGRTg0 QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhkclVaNTRPZzVxTndTWnA0 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPNE5sbmM5WGRyVVo1NE9nNXFOd1NacDRqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc0Mi8wNDE1RDZGRTg0QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhk clVaNTRPZzVxTndTWnA0akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSd2PXbdF999O/2BpNoaX8ktvay0hpRwOCDKU29V5O7DCEctMuzRlq llgp5ZfoD0ylP+sxdm4UO4vIFkb44wCWYb0ZhN6fLTb6OSsa/6RkybKCSD9UwKEE 1fe0xX4BnXnkUhRPShMYVAS1+F6GBzmz2GKV7ImDt8NgLVrtJFN+aflx8wABzh8t Hr1hYAJDPHWIuDEcR/wHh9bgxZzzZlOZC1rdsmodJg4Jm29xCe2Fm//FU+MEsa9p CN9pRy9Zw71Eh8DI8L9zGwMiT2Z7EJP7qpVbQ6AAltK2q+1twu8NnAwk/Ax2Myr/ JUJOvMr86CPHYFO7diZx0tqJFt/fha7W -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:13 2025 by rpki-client