This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft File: 86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json) Hash identifier: YAvcU692TGpbu+ahW7NBFwTDuTsHi4rbtl1HmZUuvYM= Subject key identifier: 74:6E:D4:1C:FD:48:01:E1:EB:00:EE:68:A2:11:62:A4:3D:2C:DB:F8 Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C Certificate issuer: /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft Manifest number: 0243 Signing time: Tue 23 Dec 2025 00:51:52 +0000 Manifest this update: Tue 23 Dec 2025 00:51:51 +0000 Manifest next update: Tue 30 Dec 2025 00:51:51 +0000 Files and hashes: 1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: Z8CB3j8i+XwGpHNaZWFN8iatfszdzCJptVOtP2w1wrQ=) 2: 5F0ACC76962011F09F73D036C4F9AE02.roa (hash: mJp++FSkSB9vBV5hzPsikmtxWjCOi95icFKxEtibOls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Validity Not Before: Dec 23 00:51:51 2025 GMT Not After : Dec 30 00:51:51 2025 GMT Subject: CN=6949e7a8-5dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:14:19:5d:c9:a1:55:7a:cc:cd:3c:2a:c9:38: 80:e2:69:db:94:40:24:39:93:9f:b5:d3:86:a7:b2: b1:f4:c9:d7:cf:77:14:ff:f8:0b:70:3c:46:2e:bc: e6:04:1f:1d:0d:e7:ef:b1:74:40:f1:18:9b:b3:c0: 89:f8:3f:07:73:92:1c:40:9e:69:88:71:67:51:69: ff:6e:01:1a:76:56:9e:ca:af:92:90:c4:f0:b9:72: 67:6a:fa:d2:55:fb:1a:67:4e:af:13:d3:75:9f:c2: 0b:9c:30:23:2a:42:32:c8:47:ed:7d:4e:98:5c:a4: 89:85:63:e6:19:ce:8d:f8:52:43:b6:3e:e2:61:d8: e2:35:99:6e:c4:4a:00:5b:97:7a:5c:dd:71:fc:4b: 4f:25:4b:da:e5:71:98:fb:8b:01:6e:8a:01:e8:57: 25:70:7d:e6:e1:02:55:0f:fb:18:98:eb:b5:3f:b0: 31:fa:d3:c5:77:f3:50:76:5c:ce:86:4a:16:42:67: 36:5a:aa:9b:5b:03:3e:85:e2:9b:3a:4b:93:38:5a: 02:58:38:88:b6:79:ad:94:e0:7f:99:d5:c3:29:c2: 8a:13:89:82:2b:ea:c0:42:86:31:ea:eb:d7:35:e0: e3:17:32:8b:a4:cf:5b:0e:d6:79:02:d0:b7:a4:5d: 4c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6E:D4:1C:FD:48:01:E1:EB:00:EE:68:A2:11:62:A4:3D:2C:DB:F8 X509v3 Authority Key Identifier: keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:6f:41:c5:d0:ce:75:b8:09:d8:bf:b5:e1:7a:cf:d9:5e:70: fb:57:d0:57:72:93:53:3f:05:5a:24:0e:b2:f1:fe:3e:76:5e: 37:cb:cf:31:00:89:2c:72:1f:90:21:dc:e8:c1:6c:cc:80:1c: 03:a5:3f:7d:b7:a3:f5:f4:07:04:a2:a1:0c:9b:4e:a7:89:22: 13:ea:07:52:ab:6e:eb:ce:fa:df:44:f6:f4:45:5f:4f:09:0b: 3a:8c:00:bc:ec:71:87:d8:b1:c4:56:fe:ef:bb:2c:20:ac:67: 21:2c:82:3f:40:1c:a0:07:8d:e7:f6:fd:7a:ad:3a:a1:bb:de: ae:9a:6f:73:e8:94:03:b1:c0:c4:b8:94:d4:9d:92:71:44:39: 55:dd:d2:1d:9b:49:ce:af:a1:6f:60:89:f2:0a:87:b5:e7:13: 3b:2a:80:ea:74:b0:90:48:c7:86:e5:0a:78:48:5a:9e:b2:43: c0:50:1b:89:22:a7:48:9c:92:73:e6:b7:c3:44:25:6e:5b:4c: ef:22:74:47:b8:18:8d:e2:31:97:af:dd:0e:0a:9e:43:98:e4: 05:b9:b0:b9:87:2f:c9:86:ef:39:9e:f0:6f:51:95:3f:cc:a6: ff:38:28:c1:50:ff:64:0e:c2:db:4d:f8:3f:e6:da:02:08:b6: 09:22:0f:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5 RkM5M0JDOEMwHhcNMjUxMjIzMDA1MTUxWhcNMjUxMjMwMDA1MTUxWjAYMRYwFAYD VQQDDA02OTQ5ZTdhOC01ZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhQZXcmhVXrMzTwqyTiA4mnblEAkOZOftdOGp7Kx9MnXz3cU//gLcDxGLrzm BB8dDefvsXRA8Ribs8CJ+D8Hc5IcQJ5piHFnUWn/bgEadlaeyq+SkMTwuXJnavrS VfsaZ06vE9N1n8ILnDAjKkIyyEftfU6YXKSJhWPmGc6N+FJDtj7iYdjiNZluxEoA W5d6XN1x/EtPJUva5XGY+4sBbooB6FclcH3m4QJVD/sYmOu1P7Ax+tPFd/NQdlzO hkoWQmc2WqqbWwM+heKbOkuTOFoCWDiItnmtlOB/mdXDKcKKE4mCK+rAQoYx6uvX NeDjFzKLpM9bDtZ5AtC3pF1MOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRu1Bz9 SAHh6wDuaKIRYqQ9LNv4MB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTM5NS81N0UxRDE4NDZBRTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5 RldvQTJmUnVxd3lmeVR2SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVb0HF0M51uAnYv7Xhes/ZXnD7V9BXcpNTPwVaJA6y8f4+dl43y88x AIksch+QIdzowWzMgBwDpT99t6P19AcEoqEMm06niSIT6gdSq27rzvrfRPb0RV9P CQs6jAC87HGH2LHEVv7vuywgrGchLII/QBygB43n9v16rTqhu96umm9z6JQDscDE uJTUnZJxRDlV3dIdm0nOr6FvYInyCoe15xM7KoDqdLCQSMeG5Qp4SFqeskPAUBuJ IqdInJJz5rfDRCVuW0zvInRHuBiN4jGXr90OCp5DmOQFubC5hy/Jhu85nvBvUZU/ zKb/OCjBUP9kDsLbTfg/5toCCLYJIg98 -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:11 2025 by rpki-client