This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft File: CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json) Hash identifier: 4ykqyuz2Fz4tC+bP25yKHnsujGvguNfskUorLYZLHNY= Subject key identifier: 4A:8F:35:E4:91:63:28:DD:D7:86:0B:8C:5F:67:6D:EB:4D:8D:62:5F Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft Manifest number: 02BA Signing time: Sun 21 Dec 2025 00:40:56 +0000 Manifest this update: Sun 21 Dec 2025 00:40:56 +0000 Manifest next update: Sun 28 Dec 2025 00:40:56 +0000 Files and hashes: 1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: ykNhNDZmUun7l+AKdxk+ZqQYwsE5Ni5xuGrHFlnZK2U=) 2: 899B070834D511ED99B1921FC4F9AE02.roa (hash: E2jgKCB77LKF020RJqzV0qIOyodnwpIo1f8JMHYql9k=) 3: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: oG24+gBdb2MAENTwTgbndjpIPtUaekwdniISkv1l3L4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Validity Not Before: Dec 21 00:40:56 2025 GMT Not After : Dec 28 00:40:56 2025 GMT Subject: CN=69474218-d365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:70:d5:1f:20:cb:08:1c:e6:c6:a2:34:ce:df: 83:24:2d:e6:27:4f:d5:59:a7:09:48:a8:d9:73:56: dc:64:e6:25:50:70:06:3d:e2:15:a4:3d:a5:d3:9f: e3:d0:11:d0:e4:79:53:ce:00:f8:17:16:c6:42:4b: 34:d4:5b:ef:54:f3:29:ca:db:6a:61:88:89:03:7d: b3:c3:9e:ef:35:b5:e5:da:69:6c:b3:4f:6e:02:be: 68:b2:be:47:cb:77:48:2f:43:8c:5a:29:97:78:9a: 37:bb:1e:12:34:e6:f6:b4:6e:2b:00:f9:53:d8:e7: 15:47:fa:5c:68:d2:fa:47:6c:62:0c:01:b3:bb:fc: 7d:45:d1:58:b8:5d:b9:37:c0:50:4f:d2:8a:5e:7b: ca:e8:9e:76:4e:b1:cc:4e:f4:59:76:4a:04:14:c6: 39:94:84:c2:e7:8e:cb:fb:68:8b:70:c8:8d:5f:5f: 90:88:48:e3:25:d9:b4:4a:2b:bd:d0:03:8d:68:dc: 6a:55:8f:b6:a4:99:94:aa:ae:ba:8b:7e:99:c2:35: 39:37:b7:d5:03:1a:3a:c0:fc:a5:f8:62:ba:6c:fa: aa:7f:02:cf:1c:9a:01:85:04:0e:7c:5d:c8:a1:2e: 8e:47:69:6a:6f:03:db:f6:66:a2:da:ad:69:72:4d: 62:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8F:35:E4:91:63:28:DD:D7:86:0B:8C:5F:67:6D:EB:4D:8D:62:5F X509v3 Authority Key Identifier: keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:a6:78:44:4f:03:57:52:b4:d5:d2:d1:48:15:bb:81:8e:ae: 72:18:50:68:0f:2c:65:46:58:a9:6c:93:8b:ee:9c:fa:e0:95: 70:15:4d:46:bb:bf:a5:54:b6:74:39:32:77:00:07:1b:c2:8f: 61:d4:23:f5:98:c6:9b:53:b0:6f:d9:04:d2:e7:d6:df:25:9b: 1d:2e:31:09:f7:be:ff:03:03:09:bc:79:c7:16:58:e8:5c:b9: 5f:f1:a7:51:ca:64:9b:6c:20:ff:ce:af:38:46:a8:a3:a5:02: 5c:a8:b7:14:d0:3c:e8:14:d0:9e:e8:a2:ba:56:7f:5f:9f:83: a7:7d:08:49:7f:08:1d:c0:e0:28:af:d4:98:28:95:0b:5a:e8: 42:af:9a:ed:83:68:58:e8:6d:dd:49:82:eb:16:89:5c:f0:06: 79:3c:8e:a2:61:c7:34:6a:ee:da:83:1a:32:9c:03:ea:d6:70: 25:c1:82:3b:4a:ee:65:36:6e:10:c7:d6:28:f4:94:16:99:e9: c5:ca:88:60:77:1e:b2:47:8f:37:24:30:b8:c3:9a:af:bf:b0: 06:d1:e7:7f:c4:56:bd:bc:65:9f:5b:9f:68:c3:98:97:58:50: 66:1a:f1:f7:e1:e8:fa:e1:69:29:de:fe:5c:48:30:20:a7:f0: 57:6d:d6:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGMUUxMTAvBgNVBAUTKDBBQjNGMTE0OUNGNUMzQkFEQTY4NUIxQzZBMTM3OUI2 ODhENzQzODQwHhcNMjUxMjIxMDA0MDU2WhcNMjUxMjI4MDA0MDU2WjAYMRYwFAYD VQQDDA02OTQ3NDIxOC1kMzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAknDVHyDLCBzmxqI0zt+DJC3mJ0/VWacJSKjZc1bcZOYlUHAGPeIVpD2l05/j 0BHQ5HlTzgD4FxbGQks01FvvVPMpyttqYYiJA32zw57vNbXl2mlss09uAr5osr5H y3dIL0OMWimXeJo3ux4SNOb2tG4rAPlT2OcVR/pcaNL6R2xiDAGzu/x9RdFYuF25 N8BQT9KKXnvK6J52TrHMTvRZdkoEFMY5lITC547L+2iLcMiNX1+QiEjjJdm0Siu9 0AONaNxqVY+2pJmUqq66i36ZwjU5N7fVAxo6wPyl+GK6bPqqfwLPHJoBhQQOfF3I oS6OR2lqbwPb9mai2q1pck1iwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqPNeSR Yyjd14YLjF9nbetNjWJfMB8GA1UdIwQYMBaAFAqz8RSc9cO62mhbHGoTebaI10OE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYxRS9DQzY1QTY2QTFG OUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3cmFhRnNjYWhONXRvalhR NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyUHhGSnoxdzdyYWFGc2NhaE41dG9qWFE0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYxRS9DQzY1QTY2QTFGOUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3 cmFhRnNjYWhONXRvalhRNFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBppnhETwNXUrTV0tFIFbuBjq5yGFBoDyxlRlipbJOL7pz64JVwFU1G u7+lVLZ0OTJ3AAcbwo9h1CP1mMabU7Bv2QTS59bfJZsdLjEJ977/AwMJvHnHFljo XLlf8adRymSbbCD/zq84RqijpQJcqLcU0DzoFNCe6KK6Vn9fn4OnfQhJfwgdwOAo r9SYKJULWuhCr5rtg2hY6G3dSYLrFolc8AZ5PI6iYcc0au7agxoynAPq1nAlwYI7 Su5lNm4Qx9Yo9JQWmenFyohgdx6yR483JDC4w5qvv7AG0ed/xFa9vGWfW59ow5iX WFBmGvH34ej64Wkp3v5cSDAgp/BXbdYu -----END CERTIFICATE-----Generated at Sun Dec 21 18:59:07 2025 by rpki-client