This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft File: P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json) Hash identifier: jRkKD6kweWf4/nBlvU7/bCkOZHlOqKZ4mB0IOSkcf0Y= Subject key identifier: 68:37:96:A9:CF:62:94:03:90:23:A9:C4:5C:08:E1:5F:35:7D:CC:95 Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 Certificate issuer: /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Certificate serial: 0647 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft Manifest number: 0642 Signing time: Mon 22 Dec 2025 21:51:16 +0000 Manifest this update: Mon 22 Dec 2025 21:51:16 +0000 Manifest next update: Mon 29 Dec 2025 21:51:16 +0000 Files and hashes: 1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: rZPCAz0Sc11gYvJIR4Q4vMdaxtSYCA1ECgq+gAhErX4=) 2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: l216klg+EdFhZXizpzBgdSx3W8LT8OTJYqEFSmlWpW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C59A, serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Validity Not Before: Dec 22 21:51:16 2025 GMT Not After : Dec 29 21:51:16 2025 GMT Subject: CN=6949bd54-b0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9d:bf:9a:d0:5a:8f:72:b4:06:94:3c:d2:63: db:e6:15:b5:d3:37:a8:05:ed:53:c6:58:96:0b:d5: f7:fb:cd:d2:56:44:c8:07:06:47:4c:ec:6b:53:8c: 93:d9:d1:ab:03:a6:83:c3:99:bf:5c:f8:86:e8:34: 00:df:61:89:03:0b:f9:4b:bb:95:29:e1:16:6b:91: 5a:49:af:53:e2:51:f8:c1:4d:8f:ae:ad:ba:0c:c6: 9e:dd:66:a9:cf:3e:25:5e:3c:f3:8b:b2:f2:c8:b0: f8:d6:31:4b:b1:e9:89:3c:73:ed:f1:f0:55:44:54: 42:e8:8a:3a:9a:8f:af:c2:69:67:8d:11:bd:a5:e9: bb:b4:30:41:26:49:e5:12:10:d1:11:bf:98:db:2a: 06:c9:d7:b5:0d:59:17:70:0f:4a:0e:78:89:cc:3d: 8c:db:90:92:d6:c1:e9:07:3a:f9:1c:d3:97:80:4a: 4c:cf:ac:2d:0f:e6:87:e3:48:c5:ce:4f:d7:b9:42: 32:0b:55:9a:ab:f4:99:03:2d:dd:01:22:56:4b:09: ca:29:e5:2f:52:3e:a7:34:e6:04:06:53:62:9e:34: 16:d6:12:e0:25:fa:5c:6a:1c:27:a1:46:e7:7c:d9: c3:7c:99:17:62:02:3d:8a:d1:a5:33:22:03:88:8d: 46:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:37:96:A9:CF:62:94:03:90:23:A9:C4:5C:08:E1:5F:35:7D:CC:95 X509v3 Authority Key Identifier: keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b1:b5:b9:40:61:e6:4c:fe:07:94:30:27:32:b7:db:c0:17: 35:f7:f6:e1:78:fc:56:31:11:b5:7f:36:a5:7d:09:18:2f:32: 07:51:b2:46:af:7a:de:f5:ab:ed:e5:1b:52:8f:dc:bc:71:ca: 16:14:bc:4b:cb:51:b5:b9:1e:46:45:5d:3a:1e:5e:1c:b7:73: 1e:8f:3c:ba:64:7d:a4:f0:d1:07:63:c3:ec:11:b7:8f:8f:1b: 40:6a:93:ee:80:7e:b7:c3:c6:c2:78:dd:98:c1:8a:db:48:42: 77:1d:bc:e8:5f:d7:75:4e:13:09:5f:f1:22:f6:e2:3f:13:8e: c5:f4:42:34:9b:38:84:34:39:93:af:67:b0:37:e2:68:e4:d5: 09:d9:14:2e:fa:12:f4:c2:b5:9e:ed:2b:e0:4c:61:fb:30:f3: 2b:d0:43:94:e7:60:ec:19:36:2e:41:5e:77:47:c2:01:0f:91: d9:14:cc:e5:69:13:71:6c:0d:43:96:99:0f:06:c0:83:73:7e: 9a:07:f6:95:16:c6:b0:4b:b6:17:2a:8d:86:03:ae:60:90:32: 91:93:be:66:cb:12:aa:57:6b:1b:68:00:c0:1d:33:4a:68:f2: 47:93:29:2c:46:09:92:c7:1b:7c:9b:93:65:65:ac:69:6d:b2: 3c:c8:66:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1OUExMTAvBgNVBAUTKDNGQ0ExOTFGMTU2OEFBN0E5REQxNjBGRDYwOTg5OTg5 MzM2QzgyQjgwHhcNMjUxMjIyMjE1MTE2WhcNMjUxMjI5MjE1MTE2WjAYMRYwFAYD VQQDDA02OTQ5YmQ1NC1iMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2J2/mtBaj3K0BpQ80mPb5hW10zeoBe1TxliWC9X3+83SVkTIBwZHTOxrU4yT 2dGrA6aDw5m/XPiG6DQA32GJAwv5S7uVKeEWa5FaSa9T4lH4wU2Prq26DMae3Wap zz4lXjzzi7LyyLD41jFLsemJPHPt8fBVRFRC6Io6mo+vwmlnjRG9pem7tDBBJknl EhDREb+Y2yoGyde1DVkXcA9KDniJzD2M25CS1sHpBzr5HNOXgEpMz6wtD+aH40jF zk/XuUIyC1Waq/SZAy3dASJWSwnKKeUvUj6nNOYEBlNinjQW1hLgJfpcahwnoUbn fNnDfJkXYgI9itGlMyIDiI1GFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGg3lqnP YpQDkCOpxFwI4V81fcyVMB8GA1UdIwQYMBaAFD/KGR8VaKp6ndFg/WCYmYkzbIK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzU5QS9CRDI1NEVGMkI3 QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3FucWQwV0Q5WUppWmlUTnNn cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4b1pIeFZvcW5xZDBXRDlZSmlaaVROc2dyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzU5QS9CRDI1NEVGMkI3QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3Fu cWQwV0Q5WUppWmlUTnNncmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPsbW5QGHmTP4HlDAnMrfbwBc19/bhePxWMRG1fzalfQkYLzIHUbJG r3re9avt5RtSj9y8ccoWFLxLy1G1uR5GRV06Hl4ct3Mejzy6ZH2k8NEHY8PsEbeP jxtAapPugH63w8bCeN2YwYrbSEJ3HbzoX9d1ThMJX/Ei9uI/E47F9EI0mziENDmT r2ewN+Jo5NUJ2RQu+hL0wrWe7SvgTGH7MPMr0EOU52DsGTYuQV53R8IBD5HZFMzl aRNxbA1DlpkPBsCDc36aB/aVFsawS7YXKo2GA65gkDKRk75myxKqV2sbaADAHTNK aPJHkyksRgmSxxt8m5NlZaxpbbI8yGb1 -----END CERTIFICATE-----Generated at Tue Dec 23 05:48:15 2025 by rpki-client