This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft File: -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json) Hash identifier: GqaPVfeYVrYVRjv3d9qchbmmCcXolyNna7NlvYDR0wU= Subject key identifier: 59:2D:78:04:5C:C8:F9:35:32:B9:C6:E4:95:1F:A1:8A:4F:D1:B3:A0 Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB Certificate issuer: /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft Manifest number: AE Signing time: Tue 23 Dec 2025 05:05:49 +0000 Manifest this update: Tue 23 Dec 2025 05:05:48 +0000 Manifest next update: Tue 30 Dec 2025 05:05:48 +0000 Files and hashes: 1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: zl0Qlu/T8o2YQdsLGl3bfvp+qX8nmIg8uYmp9x+p0x0=) 2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: Q8ipP3E5cVxqpK+wwh4P32pECYgAwVU6B1+eB8QC8yE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB Validity Not Before: Dec 23 05:05:48 2025 GMT Not After : Dec 30 05:05:48 2025 GMT Subject: CN=694a232d-ea80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:47:07:5f:93:1e:1b:e6:42:fa:36:53:84: af:6e:f1:11:6d:be:8b:8c:f5:67:c5:18:3f:8a:f9: 27:11:ce:43:6f:3f:49:48:52:15:e9:03:42:c5:0f: ec:b4:1a:3a:6c:d0:7a:4b:2b:15:3b:42:cc:60:a8: df:09:a9:fe:72:04:8d:ec:aa:a4:95:98:38:a9:61: 9d:4f:c3:51:ec:3c:05:22:17:76:c2:24:f0:b4:19: 49:9d:d1:6f:17:5e:c2:66:af:40:f0:80:fc:a9:78: 33:48:37:de:b1:df:c6:80:2e:bb:b0:20:74:b3:18: cf:d8:42:ab:ee:81:cb:af:0a:f1:18:9a:22:92:5a: 5c:83:c5:e5:c8:bf:3c:fa:66:db:d4:87:27:e7:83: da:0e:92:75:37:5a:57:9c:8b:7f:23:8c:b9:43:d4: 5a:a3:3a:2a:b9:03:e4:fc:8b:b7:b2:29:8a:85:f7: cf:d0:a9:41:e1:a2:d1:3a:5f:92:c8:a7:a2:69:20: b9:15:d2:9b:6d:6f:5f:ab:8b:54:a4:ab:98:27:2c: b1:0d:a7:da:89:a1:96:93:48:34:c9:c3:35:f8:f9: 13:50:43:fc:7f:bb:84:c4:dd:9b:70:63:c8:5f:67: 68:af:68:0c:ca:c6:fa:cf:90:02:00:43:30:da:c2: 4f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2D:78:04:5C:C8:F9:35:32:B9:C6:E4:95:1F:A1:8A:4F:D1:B3:A0 X509v3 Authority Key Identifier: keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d5:62:c3:89:a2:7c:f3:b2:5f:7a:7d:39:23:79:b9:a2:0b: c4:20:c5:20:e9:b7:dd:7a:5e:6a:f4:1d:d1:2e:bf:c5:4f:a9: e4:7e:d7:9f:ec:6f:79:3a:3f:fe:7f:29:e9:d2:a5:76:55:14: 62:81:d4:81:b8:4d:65:86:06:27:84:87:9d:13:d3:cd:f1:2a: c7:7c:d6:c4:99:47:59:55:06:48:40:f6:94:c5:b8:67:fe:18: 4c:78:3e:3a:99:7f:15:cc:d8:33:1e:65:b5:88:fc:8f:86:1f: b3:67:c9:cc:67:d1:9d:d8:ae:a8:d5:bd:77:b6:b6:d2:7f:d8: 8d:a1:6c:94:7a:5a:18:61:ad:52:a8:5d:29:ed:24:ca:ad:14: 39:bd:ba:ed:d0:56:d1:c8:fc:2b:7c:4f:5e:3f:f7:8a:96:0e: 45:ba:46:56:d2:16:fd:f1:5a:a0:9d:65:c3:80:16:06:7e:5b: de:22:d6:21:a8:2d:00:62:24:51:d1:67:b8:66:a0:50:95:38: c9:0b:34:ad:25:0e:57:1d:71:4b:0d:99:89:4c:79:85:31:cd: d9:5b:38:e3:28:a3:9c:28:47:2e:f1:b0:9f:40:a8:a1:9a:8b: 00:3c:d5:7d:80:07:8e:69:79:1c:45:ec:bb:41:18:a4:cd:50: f7:01:fc:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1OUQxMTAvBgNVBAUTKEZCNDg4NTY4RTc1MjBCQzc4MkExMTk4OTc2MjkwMzBF RDA2OTVDREIwHhcNMjUxMjIzMDUwNTQ4WhcNMjUxMjMwMDUwNTQ4WjAYMRYwFAYD VQQDDA02OTRhMjMyZC1lYTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JZHB1+THhvmQvo2U4SvbvERbb6LjPVnxRg/ivknEc5Dbz9JSFIV6QNCxQ/s tBo6bNB6SysVO0LMYKjfCan+cgSN7KqklZg4qWGdT8NR7DwFIhd2wiTwtBlJndFv F17CZq9A8ID8qXgzSDfesd/GgC67sCB0sxjP2EKr7oHLrwrxGJoiklpcg8XlyL88 +mbb1Icn54PaDpJ1N1pXnIt/I4y5Q9RaozoquQPk/Iu3simKhffP0KlB4aLROl+S yKeiaSC5FdKbbW9fq4tUpKuYJyyxDafaiaGWk0g0ycM1+PkTUEP8f7uExN2bcGPI X2dor2gMysb6z5ACAEMw2sJPWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkteARc yPk1MrnG5JUfoYpP0bOgMB8GA1UdIwQYMBaAFPtIhWjnUgvHgqEZiXYpAw7QaVzb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU5RC8wQjNGNjY1QUQ2 MEYxMUVGQjBGQTUzM0ZDNEY5QUUwMi8tMGlGYU9kU0M4ZUNvUm1KZGlrRER0QnBY TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0waUZhT2RTQzhlQ29SbUpkaWtERHRCcFhOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDU5RC8wQjNGNjY1QUQ2MEYxMUVGQjBGQTUzM0ZDNEY5QUUwMi8tMGlGYU9kU0M4 ZUNvUm1KZGlrRER0QnBYTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ1WLDiaJ887Jfen05I3m5ogvEIMUg6bfdel5q9B3RLr/FT6nkftef 7G95Oj/+fynp0qV2VRRigdSBuE1lhgYnhIedE9PN8SrHfNbEmUdZVQZIQPaUxbhn /hhMeD46mX8VzNgzHmW1iPyPhh+zZ8nMZ9Gd2K6o1b13trbSf9iNoWyUeloYYa1S qF0p7STKrRQ5vbrt0FbRyPwrfE9eP/eKlg5FukZW0hb98VqgnWXDgBYGflveItYh qC0AYiRR0We4ZqBQlTjJCzStJQ5XHXFLDZmJTHmFMc3ZWzjjKKOcKEcu8bCfQKih mosAPNV9gAeOaXkcRey7QRikzVD3Afw7 -----END CERTIFICATE-----Generated at Wed Dec 24 14:08:55 2025 by rpki-client