This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: ckmCJXig2XBmcqiA2sv5J4bQ5BmEvr2y26+hkPnzHgs= Subject key identifier: 3B:2A:C9:D9:3B:AA:B2:03:FE:87:19:3E:15:68:DF:9B:D4:A9:6F:43 Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 02BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 02B9 Signing time: Tue 23 Dec 2025 00:26:38 +0000 Manifest this update: Tue 23 Dec 2025 00:26:38 +0000 Manifest next update: Tue 30 Dec 2025 00:26:38 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: O0i9Hl0itfe4UudjKleFMXbMhoK10nPJyQt6CyGqiHk=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: nUMhsxhIRqeHeQEDGBtbEEh0D5JOlIzRcfpKkf1PF5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 701 (0x2bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: Dec 23 00:26:38 2025 GMT Not After : Dec 30 00:26:38 2025 GMT Subject: CN=6949e1be-4110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8e:30:63:74:d3:08:19:f8:14:77:6b:3e:7e: ef:d0:c2:e1:87:6b:a5:ff:53:70:4f:d3:6b:2b:6f: d9:ba:a4:79:7b:f5:a6:ca:4d:1d:86:e4:78:5d:2b: 62:e0:a7:65:77:ec:a0:9f:1f:f8:16:cf:f4:ac:53: 3a:1b:c3:b2:07:a2:af:66:8f:a8:22:68:8e:c7:ab: ef:c3:05:f4:f7:ed:88:93:99:bd:78:21:cc:57:b0: 8b:62:0c:37:2c:4e:05:3e:02:53:75:1a:8c:33:a4: 32:0f:7c:02:72:88:ca:64:7f:b0:83:e5:11:37:b9: 51:67:7d:c6:a9:7f:af:42:6f:64:4c:85:45:c6:f3: e0:67:98:20:2b:62:bc:67:7b:e1:cf:ea:1f:c0:c4: a3:01:db:61:61:bc:fb:1c:4e:86:fb:71:e9:84:7a: 98:66:29:56:c8:1e:67:a7:0f:73:64:5b:bc:0f:58: 92:42:29:a5:97:47:5f:a7:1b:a0:00:df:08:7a:cb: 0b:8b:e1:a8:d8:32:4c:0b:09:2b:1d:f8:9d:86:d0: 8b:23:f5:79:3d:f7:18:39:63:30:ab:02:0b:09:74: 1a:8f:1c:68:31:85:fc:2d:7f:41:cc:18:12:71:5a: 96:84:05:37:31:23:d1:48:22:43:a6:61:18:c9:76: f2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2A:C9:D9:3B:AA:B2:03:FE:87:19:3E:15:68:DF:9B:D4:A9:6F:43 X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1b:4c:0e:18:40:84:52:5f:94:f9:8c:61:48:52:5c:76:48: c7:57:2d:b4:04:a6:36:9d:ee:2f:02:c4:04:c7:61:60:f0:c9: c7:0f:30:e2:2d:9e:f3:09:b5:d5:24:7f:fa:50:7b:eb:21:b3: 85:90:39:35:59:7e:9a:fe:c5:0a:54:92:65:09:09:85:1f:09: e1:09:7d:a3:bb:df:89:b7:65:9d:f5:e9:41:da:f8:9f:08:06: f2:06:2f:b5:2c:3d:a6:60:cc:a3:d2:63:d2:8c:87:41:4c:4c: 96:b7:01:b3:ec:2f:bc:d4:bb:aa:bd:0b:5d:c2:32:26:c8:95: d4:8e:15:e6:23:8f:6a:0d:a4:82:6c:b7:6c:42:5e:5b:44:ca: 95:d0:88:cc:e0:ff:93:66:71:d5:e3:a2:57:21:63:d8:43:e2: 14:fc:23:85:c7:9b:9f:b4:6c:c5:a5:a6:6a:34:ba:9f:09:37: 22:9e:b7:ef:5c:dc:34:44:de:61:93:c0:c0:06:8e:ba:55:40: fb:af:35:ec:42:85:14:4a:5a:d2:91:0f:27:d6:1d:93:4d:20: 95:2d:ed:bf:9f:a8:19:b4:1b:e3:08:66:12:47:e0:6d:12:78: f4:39:fd:2c:b0:ba:04:07:99:f6:c3:ce:6d:d5:67:30:88:57: f6:08:90:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjUxMjIzMDAyNjM4WhcNMjUxMjMwMDAyNjM4WjAYMRYwFAYD VQQDDA02OTQ5ZTFiZS00MTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo44wY3TTCBn4FHdrPn7v0MLhh2ul/1NwT9NrK2/ZuqR5e/Wmyk0dhuR4XSti 4Kdld+ygnx/4Fs/0rFM6G8OyB6KvZo+oImiOx6vvwwX09+2Ik5m9eCHMV7CLYgw3 LE4FPgJTdRqMM6QyD3wCcojKZH+wg+URN7lRZ33GqX+vQm9kTIVFxvPgZ5ggK2K8 Z3vhz+ofwMSjAdthYbz7HE6G+3HphHqYZilWyB5npw9zZFu8D1iSQimll0dfpxug AN8IessLi+Go2DJMCwkrHfidhtCLI/V5PfcYOWMwqwILCXQajxxoMYX8LX9BzBgS cVqWhAU3MSPRSCJDpmEYyXbyywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsqydk7 qrID/ocZPhVo35vUqW9DMB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsG0wOGECEUl+U+YxhSFJcdkjHVy20BKY2ne4vAsQEx2Fg8MnHDzDi LZ7zCbXVJH/6UHvrIbOFkDk1WX6a/sUKVJJlCQmFHwnhCX2ju9+Jt2Wd9elB2vif CAbyBi+1LD2mYMyj0mPSjIdBTEyWtwGz7C+81LuqvQtdwjImyJXUjhXmI49qDaSC bLdsQl5bRMqV0IjM4P+TZnHV46JXIWPYQ+IU/COFx5uftGzFpaZqNLqfCTcinrfv XNw0RN5hk8DABo66VUD7rzXsQoUUSlrSkQ8n1h2TTSCVLe2/n6gZtBvjCGYSR+Bt Enj0Of0ssLoEB5n2w85t1WcwiFf2CJB+ -----END CERTIFICATE-----Generated at Thu Dec 25 00:36:35 2025 by rpki-client