This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft File: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft (raw, json) Hash identifier: bmqHoFwmYs/eQ30SfXATVZGEk8kLR6PvIqtPNWpDqI0= Subject key identifier: 3B:95:9E:91:3C:AB:C6:EC:53:7E:03:50:64:EA:84:DE:E5:57:9E:E2 Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC Certificate issuer: /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft Manifest number: DA Signing time: Tue 23 Dec 2025 04:36:20 +0000 Manifest this update: Tue 23 Dec 2025 04:36:20 +0000 Manifest next update: Tue 30 Dec 2025 04:36:20 +0000 Files and hashes: 1: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl (hash: il5SaiT1PUCnv1G9NI4RQ30j0C/v2pta0RcRuSURqtk=) 2: 10B69CB69A7811EFB88E9513C4F9AE02.roa (hash: h0Ix2v/co1mQt8N7/1X7T+jzKKiC9C9BGQ0eCb34Oxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD87, serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Validity Not Before: Dec 23 04:36:20 2025 GMT Not After : Dec 30 04:36:20 2025 GMT Subject: CN=694a1c44-aebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:f1:ab:6d:9e:55:3a:62:b2:bc:f1:2a:58: e2:81:d7:01:6b:8e:a3:fe:b2:ca:64:38:a4:44:d2: 9c:d3:1e:d4:d4:2f:b3:3f:34:d9:23:cf:99:62:33: 4b:22:53:4e:f6:e4:4d:58:8a:d8:6f:26:bb:05:82: fa:af:04:26:08:69:ee:32:33:12:dd:f9:49:db:e5: 97:ab:8f:3f:65:11:7b:b1:66:d2:5d:41:c1:49:d2: 01:5f:79:8d:26:a7:18:f4:db:7d:a9:a4:db:99:b0: 4a:46:db:af:7c:70:7c:b0:86:88:dd:43:3b:72:75: 38:97:47:87:4b:94:71:55:8c:2b:ea:ac:b6:d6:b0: 2c:82:62:1c:46:85:be:9b:4a:58:d2:84:92:cb:99: 58:38:35:5b:76:85:a9:e1:44:49:2e:54:bd:2d:ca: ff:87:0c:8f:7a:3c:e7:0d:77:00:16:bb:37:73:a4: e1:5a:ea:ac:04:8b:06:b9:4e:1c:97:5a:9a:85:b2: 34:15:82:6f:b7:87:16:41:c4:51:9b:8d:64:a5:04: 61:0d:92:fa:42:c0:a7:df:bc:e6:9d:82:26:c8:50: b0:61:e5:e3:48:2b:6e:85:32:23:bf:f4:3d:4e:6c: 40:43:7b:72:8e:de:cb:49:fd:d1:3e:b5:f4:71:c9: 8e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:95:9E:91:3C:AB:C6:EC:53:7E:03:50:64:EA:84:DE:E5:57:9E:E2 X509v3 Authority Key Identifier: keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:cd:5b:2d:9a:df:72:a4:cc:98:78:d7:44:3b:2a:ac:ff:5d: f9:39:48:df:9a:cf:74:a0:67:b0:51:20:50:01:8f:0b:81:06: 7e:73:7d:23:f0:97:71:01:b1:e1:ff:cf:49:73:e4:95:59:4d: 65:68:12:4e:a0:dd:35:b6:b8:51:ce:1d:d0:9f:80:e4:db:4d: 14:84:a3:82:45:d8:76:23:1c:10:46:f7:88:8f:34:d0:8b:ec: b8:43:65:e2:a5:23:5b:d0:d2:8c:13:45:25:da:99:f6:0d:e2: 79:d1:2e:3f:33:91:dc:ee:97:11:72:a2:df:43:3a:d7:82:51: bc:ab:6d:a9:e7:92:61:49:48:9c:e7:6c:94:7f:7d:16:65:96: ed:50:0c:20:c9:72:62:2a:2c:6c:22:6e:f0:50:59:ff:d7:22: 49:09:69:08:7b:4b:86:5c:1b:a0:e4:6a:fe:1b:fe:5f:85:b9: 54:f3:83:74:83:0a:83:ce:a7:cf:c5:07:65:d9:6d:ef:66:12: f4:b3:90:4d:be:9c:c8:8a:5b:5e:1e:4c:ed:2f:81:d0:aa:50: bb:e1:f7:89:1f:04:17:f7:e6:55:d5:b0:f2:2d:3d:53:0f:fb: 6e:7a:3a:1a:37:4a:24:54:27:42:52:c8:9c:4f:60:46:14:23: 0f:72:02:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0REODcxMTAvBgNVBAUTKEYzN0YyMzRGM0E4N0QxOEZDQzY3MTNFNDUxMDY3OENB MDU2MUMyRkMwHhcNMjUxMjIzMDQzNjIwWhcNMjUxMjMwMDQzNjIwWjAYMRYwFAYD VQQDDA02OTRhMWM0NC1hZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04nxq22eVTpisrzxKljigdcBa46j/rLKZDikRNKc0x7U1C+zPzTZI8+ZYjNL IlNO9uRNWIrYbya7BYL6rwQmCGnuMjMS3flJ2+WXq48/ZRF7sWbSXUHBSdIBX3mN JqcY9Nt9qaTbmbBKRtuvfHB8sIaI3UM7cnU4l0eHS5RxVYwr6qy21rAsgmIcRoW+ m0pY0oSSy5lYODVbdoWp4URJLlS9Lcr/hwyPejznDXcAFrs3c6ThWuqsBIsGuU4c l1qahbI0FYJvt4cWQcRRm41kpQRhDZL6QsCn37zmnYImyFCwYeXjSCtuhTIjv/Q9 TmxAQ3tyjt7LSf3RPrX0ccmOIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuVnpE8 q8bsU34DUGTqhN7lV57iMB8GA1UdIwQYMBaAFPN/I086h9GPzGcT5FEGeMoFYcL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ4Ny9FQzU2QjcyMDk3 RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZX01aeFBrVVFaNHlnVmh3 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzOGpUenFIMFlfTVp4UGtVUVo0eWdWaHd2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REQ4Ny9FQzU2QjcyMDk3RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZ X01aeFBrVVFaNHlnVmh3dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0zVstmt9ypMyYeNdEOyqs/135OUjfms90oGewUSBQAY8LgQZ+c30j 8JdxAbHh/89Jc+SVWU1laBJOoN01trhRzh3Qn4Dk200UhKOCRdh2IxwQRveIjzTQ i+y4Q2XipSNb0NKME0Ul2pn2DeJ50S4/M5Hc7pcRcqLfQzrXglG8q22p55JhSUic 52yUf30WZZbtUAwgyXJiKixsIm7wUFn/1yJJCWkIe0uGXBug5Gr+G/5fhblU84N0 gwqDzqfPxQdl2W3vZhL0s5BNvpzIilteHkztL4HQqlC74feJHwQX9+ZV1bDyLT1T D/tuejoaN0okVCdCUsicT2BGFCMPcgL4 -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:21 2025 by rpki-client