This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json) Hash identifier: Rd54nD7bDPYqbdAZRZfcnx8z+amBwgc5OJQp7+46V6A= Subject key identifier: 80:E2:C4:C1:17:2F:51:0D:7D:D0:99:46:BE:A5:F2:6D:64:2E:32:F0 Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft Manifest number: 01D1 Signing time: Fri 19 Dec 2025 02:10:26 +0000 Manifest this update: Fri 19 Dec 2025 02:10:26 +0000 Manifest next update: Fri 26 Dec 2025 02:10:26 +0000 Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: 5vs7A5C44wr6WyVJ+2HxtR+MdTfWRJ3XoPzjZ2kihRM=) 2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: WYVGzlUOokIEqc6nVBCw4EkY//RM5SfsZA3dIIIOBug=) 3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: duhm3OcJs6TmE+F67eO7tEr4XPrYJsej9u+KiPXcJ/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143848, serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Validity Not Before: Dec 19 02:10:26 2025 GMT Not After : Dec 26 02:10:26 2025 GMT Subject: CN=6944b412-f569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1c:ed:8f:66:6b:86:98:9e:15:75:33:a3:12: c8:d1:c7:6a:e1:7c:02:49:71:14:60:23:4a:e0:4b: 2d:c3:45:f2:2b:85:4d:70:68:c7:af:ce:47:fd:7a: df:1c:e0:10:76:59:91:03:72:bf:29:30:cf:7b:81: 64:a6:c0:a4:35:ce:88:b9:0c:0a:c4:39:fe:ba:d9: d2:6e:3a:6d:d0:4e:73:7d:0d:d1:12:87:95:84:9a: c4:a8:ad:dd:2e:31:19:29:38:61:8c:84:5f:a3:e1: 38:71:a7:56:36:8b:da:3d:bc:8f:8b:1c:61:0a:42: 48:19:17:a9:46:fc:9e:4a:fc:51:57:ba:be:84:35: 58:4c:18:7d:f8:f1:e4:fe:2f:bb:d1:f5:62:05:b1: 06:82:b0:a2:60:91:db:7f:22:84:ac:cd:79:59:db: e4:15:22:1b:dd:60:f8:84:a6:41:78:89:64:84:72: 8d:32:a8:b3:d4:7a:17:20:55:5d:6a:7b:3a:1c:38: 6b:7e:5f:bb:01:56:9c:80:27:50:da:c0:6e:93:68: c2:77:50:b4:dd:90:08:78:25:43:0f:95:2c:c5:53: 94:51:f9:b0:dc:51:f1:c4:a6:ac:5f:cd:23:0e:eb: ca:b0:d2:78:c6:ad:b1:43:b1:0e:00:d9:cb:16:55: 36:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E2:C4:C1:17:2F:51:0D:7D:D0:99:46:BE:A5:F2:6D:64:2E:32:F0 X509v3 Authority Key Identifier: keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:7d:c2:ed:99:28:8f:42:06:04:29:c3:37:8f:6b:ff:27:5b: 07:77:e2:ea:73:46:42:73:1f:c9:37:df:97:26:a0:8b:d5:a6: 80:ed:aa:09:e6:f0:c3:5a:07:8b:0d:95:7e:94:1c:bf:bf:dc: 3e:1e:e3:5a:1a:98:fc:41:27:b9:10:64:96:de:de:9b:7c:ae: b3:68:d2:a4:f0:e1:0a:8e:af:88:f1:25:41:8a:85:3f:41:d7: 3a:4c:f9:6d:5c:9e:c5:d2:d8:7b:ac:0d:4d:13:ac:1c:02:e7: 0d:90:d6:c1:b5:0d:5c:7a:21:00:47:e5:bd:56:29:82:64:a7: 12:2b:fa:26:63:7b:10:8d:f9:01:62:93:09:ab:ef:eb:16:1b: b5:71:c5:42:35:b9:7a:50:38:54:57:46:f5:b8:79:84:d1:4d: 3e:7f:41:c1:b6:02:59:42:c6:a6:67:55:8d:80:4f:a2:42:46: 5e:15:8c:4d:eb:1f:a8:9c:f6:84:d6:50:c1:79:67:1a:68:21: 23:5b:b5:04:4f:db:e3:8b:5d:63:90:76:42:71:41:bd:06:df: b5:a7:18:e5:2d:09:b0:2d:ac:db:d5:3c:25:ac:dd:51:f8:41: 28:63:96:95:dd:1d:4d:f3:bc:78:f5:b3:94:61:bf:68:e0:2c: 8d:33:e4:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0 RTcxMEQxMzUwHhcNMjUxMjE5MDIxMDI2WhcNMjUxMjI2MDIxMDI2WjAYMRYwFAYD VQQDDA02OTQ0YjQxMi1mNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hztj2ZrhpieFXUzoxLI0cdq4XwCSXEUYCNK4Estw0XyK4VNcGjHr85H/Xrf HOAQdlmRA3K/KTDPe4FkpsCkNc6IuQwKxDn+utnSbjpt0E5zfQ3REoeVhJrEqK3d LjEZKThhjIRfo+E4cadWNovaPbyPixxhCkJIGRepRvyeSvxRV7q+hDVYTBh9+PHk /i+70fViBbEGgrCiYJHbfyKErM15WdvkFSIb3WD4hKZBeIlkhHKNMqiz1HoXIFVd ans6HDhrfl+7AVacgCdQ2sBuk2jCd1C03ZAIeCVDD5UsxVOUUfmw3FHxxKasX80j DuvKsNJ4xq2xQ7EOANnLFlU28wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDixMEX L1ENfdCZRr6l8m1kLjLwMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgfcLtmSiPQgYEKcM3j2v/J1sHd+Lqc0ZCcx/JN9+XJqCL1aaA7aoJ 5vDDWgeLDZV+lBy/v9w+HuNaGpj8QSe5EGSW3t6bfK6zaNKk8OEKjq+I8SVBioU/ Qdc6TPltXJ7F0th7rA1NE6wcAucNkNbBtQ1ceiEAR+W9VimCZKcSK/omY3sQjfkB YpMJq+/rFhu1ccVCNbl6UDhUV0b1uHmE0U0+f0HBtgJZQsamZ1WNgE+iQkZeFYxN 6x+onPaE1lDBeWcaaCEjW7UET9vji11jkHZCcUG9Bt+1pxjlLQmwLazb1TwlrN1R +EEoY5aV3R1N87x49bOUYb9o4CyNM+Tn -----END CERTIFICATE-----Generated at Sat Dec 20 07:41:52 2025 by rpki-client