This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft File: fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft (raw, json) Hash identifier: aQ6L+7FktxNyguvg90ZRvQrpl1Bq3lbh/7Nx7wpc04A= Subject key identifier: E1:9C:49:C8:93:A6:11:E5:B9:0E:5C:62:6B:4B:94:4A:C5:EF:96:2C Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 Certificate issuer: /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Certificate serial: 3562 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft Manifest number: 351F Signing time: Wed 24 Dec 2025 14:44:54 +0000 Manifest this update: Wed 24 Dec 2025 14:44:54 +0000 Manifest next update: Wed 31 Dec 2025 14:44:54 +0000 Files and hashes: 1: fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl (hash: K/fIYr/4mlvyN0d3fhNqovsx7Q+9rL1pc4Qr8d1pBkw=) 2: C5859C724D7611EFBA188667C4F9AE02.roa (hash: aTe2/qHECp604MTOZNBT11/TWC/3VIpR1RLRNWUq1YA=) 3: 0D47881A9EB311EC90138473C4F9AE02.roa (hash: jtNYB2wRKxdcsyRMOMGrPRMxmPYLg6mXDKTfhKPhrtw=) 4: B34FF580C40C11EB9C21CF7BC4F9AE02.roa (hash: y1aP2xpWM5Z9p4X69/I0EqD92yLEHPJ0HdxDyd7A8wI=) 5: E652AA52C40911EBA930053BC4F9AE02.roa (hash: 059V5evvVlwvqhYmAH8RCR6WncgUFs2g2N8S+IGfKUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 14:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13666 (0x3562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Validity Not Before: Dec 24 14:44:54 2025 GMT Not After : Dec 31 14:44:54 2025 GMT Subject: CN=694bfc66-c45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e8:a2:2c:b1:ac:18:4b:dd:8e:5d:a1:c8:ab: 14:e1:51:1b:11:1f:f9:ce:a8:84:a8:2a:66:0e:e4: 3e:b9:6b:56:51:f8:89:00:76:63:c0:30:af:09:f2: 76:fe:69:af:97:5b:b4:db:55:13:37:ef:54:65:a3: 7f:ae:ba:f0:f3:0b:3b:3a:96:e2:50:15:ad:02:2e: 3d:2c:11:c3:8e:9e:79:70:b3:f8:87:74:b8:e4:a5: 7e:ec:5d:13:f9:01:56:d7:03:45:4f:ab:98:e9:e0: d8:d4:be:11:07:6f:9f:48:32:a2:f1:1c:bd:58:fd: 80:0f:ed:e8:fc:85:eb:7b:23:d9:dc:b8:af:35:1e: 85:49:8b:4d:ef:44:a2:40:f4:f9:64:86:e1:75:9c: e9:3d:88:d4:07:7e:62:75:be:25:3f:c7:d1:49:a3: 32:1b:cd:10:28:9d:be:54:41:0b:ee:d7:5f:9a:af: 4f:2b:dd:5f:43:81:27:30:bb:a3:1b:39:cb:50:a6: 8e:65:1e:e1:f0:fc:ff:02:e5:54:d6:00:a7:65:d0: 6d:1f:7a:25:d6:47:6f:ea:8a:05:88:31:1f:62:c3: 2a:98:78:38:f6:5f:d7:6b:59:7b:4b:9b:e8:75:7d: 06:75:d4:48:05:a5:67:cc:21:73:ac:66:6d:4c:fe: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9C:49:C8:93:A6:11:E5:B9:0E:5C:62:6B:4B:94:4A:C5:EF:96:2C X509v3 Authority Key Identifier: keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:b1:36:7a:04:88:48:1c:fd:06:60:6d:1a:eb:06:42:00:6e: b0:7a:ff:02:11:de:19:43:c1:d1:c0:4a:ab:bf:65:8a:cd:68: 63:45:0e:b0:1e:74:4f:70:5a:e8:17:be:c2:f8:8a:7b:13:d7: 5d:45:80:4b:a7:33:69:b0:ac:20:c0:c1:ae:58:1d:01:23:39: 28:40:7e:00:0e:97:5d:19:f9:97:71:bb:15:41:2d:56:79:e2: 02:ab:0e:4f:24:97:9e:0c:37:eb:6f:9c:92:96:c8:4f:a4:1d: c6:c9:07:3e:4f:f3:c2:d2:31:d7:94:cf:4e:5e:32:3a:37:3e: 76:1d:79:6b:dd:59:d6:ce:16:cc:3b:28:e4:32:57:47:8b:d1: a8:fa:c3:7c:2d:51:86:87:e1:dd:6d:99:7f:d3:18:c9:b5:8b: ef:2a:68:0a:58:c0:b4:4b:7d:40:16:c2:8a:71:d5:45:17:f4: d5:32:ab:d0:e6:3e:ad:13:cb:b9:bb:d5:11:44:e9:2f:2b:0e: 8c:3e:19:f3:72:dc:c6:98:62:40:eb:6e:13:99:4a:2d:50:09: d9:83:a1:9b:9d:1b:70:81:9a:5d:af:47:b2:a5:a3:ce:80:5e: 5a:57:66:fd:70:22:63:32:44:3b:0a:7c:33:5f:46:bb:9f:c8: ac:fc:d7:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VEMzUxMTAvBgNVBAUTKDdFRTk0NUU5RTVFNTFDNEI0MUQ5OUM0MzMyOTUyRjlD OTU4NzY2MDgwHhcNMjUxMjI0MTQ0NDU0WhcNMjUxMjMxMTQ0NDU0WjAYMRYwFAYD VQQDDA02OTRiZmM2Ni1jNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+iiLLGsGEvdjl2hyKsU4VEbER/5zqiEqCpmDuQ+uWtWUfiJAHZjwDCvCfJ2 /mmvl1u021UTN+9UZaN/rrrw8ws7OpbiUBWtAi49LBHDjp55cLP4h3S45KV+7F0T +QFW1wNFT6uY6eDY1L4RB2+fSDKi8Ry9WP2AD+3o/IXreyPZ3LivNR6FSYtN70Si QPT5ZIbhdZzpPYjUB35idb4lP8fRSaMyG80QKJ2+VEEL7tdfmq9PK91fQ4EnMLuj GznLUKaOZR7h8Pz/AuVU1gCnZdBtH3ol1kdv6ooFiDEfYsMqmHg49l/Xa1l7S5vo dX0GddRIBaVnzCFzrGZtTP5hRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGcSciT phHluQ5cYmtLlErF75YsMB8GA1UdIwQYMBaAFH7pRenl5RxLQdmcQzKVL5yVh2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUQzNS9CNjNCQTdFRTFE OTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhFdEIyWnhETXBVdm5KV0ha Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1bEY2ZVhsSEV0QjJaeERNcFV2bkpXSFpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUQzNS9CNjNCQTdFRTFEOTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhF dEIyWnhETXBVdm5KV0haZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDasTZ6BIhIHP0GYG0a6wZCAG6wev8CEd4ZQ8HRwEqrv2WKzWhjRQ6w HnRPcFroF77C+Ip7E9ddRYBLpzNpsKwgwMGuWB0BIzkoQH4ADpddGfmXcbsVQS1W eeICqw5PJJeeDDfrb5ySlshPpB3GyQc+T/PC0jHXlM9OXjI6Nz52HXlr3VnWzhbM OyjkMldHi9Go+sN8LVGGh+HdbZl/0xjJtYvvKmgKWMC0S31AFsKKcdVFF/TVMqvQ 5j6tE8u5u9URROkvKw6MPhnzctzGmGJA624TmUotUAnZg6GbnRtwgZpdr0eypaPO gF5aV2b9cCJjMkQ7CnwzX0a7n8is/Nf8 -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:09 2025 by rpki-client