This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json) Hash identifier: lNmW8sGvJvHwXVS55feuQhYHVGM7tm8H80l379Zp4x0= Subject key identifier: 59:CC:BD:A7:B3:A1:CE:8E:F5:F5:C7:CF:C8:80:13:96:82:7A:9E:0F Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft Manifest number: 01CB Signing time: Fri 19 Dec 2025 02:11:20 +0000 Manifest this update: Fri 19 Dec 2025 02:11:19 +0000 Manifest next update: Fri 26 Dec 2025 02:11:19 +0000 Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: aE55VM8vLVZSCMQrztId0mKdeKoE5wa20IHEkPjp2oo=) 2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: Q0kMZvSMppTmP/L1MFuKtKcyvw4++N9BtkqfdKNNGdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Validity Not Before: Dec 19 02:11:19 2025 GMT Not After : Dec 26 02:11:19 2025 GMT Subject: CN=6944b448-bbc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:98:10:d9:95:d2:c6:19:01:67:6d:a1:b8:df: 92:a2:d5:ca:13:5e:9b:6c:0e:ae:03:57:15:ed:10: a9:24:66:b5:c0:20:6a:3d:f7:38:7a:0b:34:fc:f9: 87:3a:18:c3:29:33:50:40:b9:a6:fa:90:c0:68:07: b4:1f:bd:b1:22:00:cf:6e:3f:8b:70:5b:20:33:58: c6:8d:46:08:c8:70:ec:50:ab:0f:7f:85:19:b0:58: d5:1f:20:59:64:d6:13:f3:09:b3:31:6c:a5:9c:33: 14:5c:bb:20:0d:9d:2c:ce:1a:06:3e:2e:d6:ab:be: 59:38:1f:5f:3d:41:43:99:ce:c2:a5:1f:d3:11:f8: 1d:72:59:d4:87:11:b0:9c:4d:c2:37:31:31:6b:b6: ac:07:82:d6:f8:91:16:49:a4:78:bb:a5:2f:42:a5: b6:94:4d:06:da:98:df:c5:9f:aa:a7:36:ac:1e:1c: d0:0e:11:89:6a:46:65:62:24:0e:30:b4:22:42:f1: 99:2d:9f:ee:ee:8b:27:eb:dc:5d:c4:af:a8:a5:a6: 5c:6a:0d:61:b9:77:84:f2:65:72:9b:da:f9:7a:10: c4:60:4d:bf:78:76:64:1a:36:24:10:0a:e1:f2:be: d4:d4:e1:a3:45:64:ff:42:56:4a:92:3a:57:25:f1: d9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CC:BD:A7:B3:A1:CE:8E:F5:F5:C7:CF:C8:80:13:96:82:7A:9E:0F X509v3 Authority Key Identifier: keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1c:10:5c:99:aa:52:ed:2d:87:87:f1:f2:23:ed:92:9a:90: 0c:77:77:98:96:95:2e:b7:1e:9c:e2:ff:c3:f0:dd:ce:ed:7f: 97:6f:af:a9:41:c1:63:1a:c1:dd:8f:c5:87:93:23:37:43:98: 23:43:0d:f7:84:4e:f0:cc:94:6c:a4:08:04:8c:88:d7:57:df: 29:29:d6:fd:a0:c4:f7:41:59:26:e3:bb:ca:90:05:b6:5c:b8: 2f:53:dd:1e:5e:73:28:0d:18:44:76:89:a0:7f:69:b1:de:8c: fc:e1:4b:ad:fd:eb:e4:97:37:24:05:cb:5f:ce:32:5c:94:b3: 4f:f8:5b:98:2a:22:4b:a2:f7:f9:fe:96:6c:bf:bc:c0:df:5f: dc:3c:e0:66:90:8d:77:b1:cb:13:d8:81:36:b2:1b:58:f6:9e: 5e:81:df:1b:85:62:dd:63:42:56:c9:c6:af:8c:86:ac:0e:35: ad:52:8f:02:a9:ff:2f:30:61:cd:eb:70:47:52:f9:26:53:31: 91:76:d0:6c:59:d8:30:73:bd:c6:b4:19:1f:2f:c6:aa:f1:6f: 01:d4:5e:aa:50:cf:4e:d1:da:83:72:3f:26:df:32:92:a8:db: d4:00:81:e9:d5:37:02:b5:b0:03:95:92:c1:b4:47:a9:98:0c: c1:92:79:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG MDMzRDQ1QzQwHhcNMjUxMjE5MDIxMTE5WhcNMjUxMjI2MDIxMTE5WjAYMRYwFAYD VQQDDA02OTQ0YjQ0OC1iYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZgQ2ZXSxhkBZ22huN+SotXKE16bbA6uA1cV7RCpJGa1wCBqPfc4egs0/PmH OhjDKTNQQLmm+pDAaAe0H72xIgDPbj+LcFsgM1jGjUYIyHDsUKsPf4UZsFjVHyBZ ZNYT8wmzMWylnDMUXLsgDZ0szhoGPi7Wq75ZOB9fPUFDmc7CpR/TEfgdclnUhxGw nE3CNzExa7asB4LW+JEWSaR4u6UvQqW2lE0G2pjfxZ+qpzasHhzQDhGJakZlYiQO MLQiQvGZLZ/u7osn69xdxK+opaZcag1huXeE8mVym9r5ehDEYE2/eHZkGjYkEArh 8r7U1OGjRWT/QlZKkjpXJfHZcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnMvaez oc6O9fXHz8iAE5aCep4PMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw MGxnaTJaRW82N3p3TTlSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbHBBcmapS7S2Hh/HyI+2SmpAMd3eYlpUutx6c4v/D8N3O7X+Xb6+p QcFjGsHdj8WHkyM3Q5gjQw33hE7wzJRspAgEjIjXV98pKdb9oMT3QVkm47vKkAW2 XLgvU90eXnMoDRhEdomgf2mx3oz84Uut/evklzckBctfzjJclLNP+FuYKiJLovf5 /pZsv7zA31/cPOBmkI13scsT2IE2shtY9p5egd8bhWLdY0JWycavjIasDjWtUo8C qf8vMGHN63BHUvkmUzGRdtBsWdgwc73GtBkfL8aq8W8B1F6qUM9O0dqDcj8m3zKS qNvUAIHp1TcCtbADlZLBtEepmAzBknmT -----END CERTIFICATE-----Generated at Sun Dec 21 02:14:25 2025 by rpki-client