This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft File: g--P6e5IafC5SpX3RvWJS6H7MPA.mft (raw, json) Hash identifier: oQYdeO7Dh3b7Nk/CQ/BJPMRnGUg5TuGmOUJxaR32sl8= Subject key identifier: 78:A5:04:A7:E6:2B:66:79:7E:80:1B:5B:04:A5:F5:68:0A:D6:C6:68 Authority key identifier: 83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 Certificate issuer: /CN=A914EB9A/serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft Manifest number: 0121 Signing time: Tue 23 Dec 2025 03:42:55 +0000 Manifest this update: Tue 23 Dec 2025 03:42:55 +0000 Manifest next update: Tue 30 Dec 2025 03:42:55 +0000 Files and hashes: 1: g--P6e5IafC5SpX3RvWJS6H7MPA.crl (hash: RN9cNtMkWoplRjdcOO4xbrPNfpTlKQN1FPklUsAw3uM=) 2: A368B23623C411EFB7164123C4F9AE02.roa (hash: xksJk5Cwcy8+0Thge3EVjB2r6Pp+L19aLaysM6rp0MI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A, serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Validity Not Before: Dec 23 03:42:55 2025 GMT Not After : Dec 30 03:42:55 2025 GMT Subject: CN=694a0fbf-f351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:67:33:45:ca:bf:96:f5:ca:41:13:34:9e:1e: bf:a5:8b:f3:4b:e5:e8:0f:10:23:ff:3e:cc:19:5f: 8a:54:61:15:ec:87:a4:5d:57:4c:d5:c3:db:2a:ea: a1:09:ea:18:d2:38:88:43:77:b1:21:2f:49:cb:93: dc:be:37:a4:52:26:f3:6d:4c:6a:5f:ad:74:1d:b4: c6:44:c3:cd:39:47:fb:6f:ee:4f:c4:09:b2:f2:71: e6:69:59:4b:d0:59:d0:c2:fe:74:ba:d1:19:ca:de: c7:00:3f:00:c2:70:59:16:44:f0:58:ae:9c:c5:92: ca:c0:30:16:20:81:48:80:35:d9:af:81:d0:54:1b: c6:7d:cf:11:9d:3b:8e:ea:bc:fa:75:2e:3c:1b:9a: 4f:a7:9b:58:55:ea:ec:b3:cf:44:27:9c:60:37:e1: 63:a6:78:3b:63:63:58:d0:76:1b:f7:26:89:89:23: c4:b2:5c:7f:ef:59:84:cf:13:0c:e1:bf:cf:2e:1e: 29:bf:06:ac:f2:46:b1:63:50:0b:b6:31:d6:a7:9c: 13:07:b0:fd:bd:9b:9f:4c:b5:d2:11:fb:d7:7b:25: 71:bd:01:9c:a4:28:2b:d2:84:da:79:84:c6:3b:b5: e1:6f:01:87:00:c4:09:55:32:3c:37:6b:65:f6:a5: 49:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A5:04:A7:E6:2B:66:79:7E:80:1B:5B:04:A5:F5:68:0A:D6:C6:68 X509v3 Authority Key Identifier: keyid:83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:d9:ef:95:71:b5:de:5e:be:88:d8:f2:97:7d:22:42:82:ea: 3e:d2:99:f6:58:9c:f5:ed:93:a0:7b:2c:89:67:2c:77:fe:22: 17:4c:6d:d5:4d:cf:48:23:0f:60:9a:58:fb:29:0c:90:db:5a: d2:2b:11:2e:6e:f1:33:15:2b:0c:41:88:d9:e1:34:f3:e3:50: 74:38:04:6b:05:f0:aa:33:a4:dd:05:83:11:53:94:6a:0b:08: 5d:b9:29:e8:6b:21:e1:d9:a0:99:5e:c1:85:f8:f1:0a:02:ba: c6:64:d8:f2:33:1e:0d:6d:5d:ea:b3:b5:69:8f:d7:5e:7c:3a: 23:e6:3d:a5:65:5d:aa:71:b5:50:4e:81:8c:5d:20:d3:0e:d6: 7b:9d:c4:b2:f8:3e:c5:e7:39:69:d5:11:96:a4:6e:f4:22:4d: 79:be:0a:b0:27:79:bf:82:0a:09:6e:4b:47:80:fe:3f:f7:f8: 08:e4:d9:2d:4a:49:6a:de:76:c5:65:38:c0:2c:55:a9:51:9f: ba:5d:f7:66:8e:4d:df:3b:25:b6:b3:98:92:de:ce:a2:b3:99: 41:3f:81:8a:d2:05:32:d7:45:f7:e3:22:74:bc:a1:78:96:af: 3a:54:53:3f:62:d9:65:65:a5:82:75:41:0f:4b:28:93:ba:f5: b6:1a:ad:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKDgzRUY4RkU5RUU0ODY5RjBCOTRBOTVGNzQ2RjU4OTRC QTFGQjMwRjAwHhcNMjUxMjIzMDM0MjU1WhcNMjUxMjMwMDM0MjU1WjAYMRYwFAYD VQQDDA02OTRhMGZiZi1mMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlGczRcq/lvXKQRM0nh6/pYvzS+XoDxAj/z7MGV+KVGEV7IekXVdM1cPbKuqh CeoY0jiIQ3exIS9Jy5PcvjekUibzbUxqX610HbTGRMPNOUf7b+5PxAmy8nHmaVlL 0FnQwv50utEZyt7HAD8AwnBZFkTwWK6cxZLKwDAWIIFIgDXZr4HQVBvGfc8RnTuO 6rz6dS48G5pPp5tYVerss89EJ5xgN+Fjpng7Y2NY0HYb9yaJiSPEslx/71mEzxMM 4b/PLh4pvwas8kaxY1ALtjHWp5wTB7D9vZufTLXSEfvXeyVxvQGcpCgr0oTaeYTG O7XhbwGHAMQJVTI8N2tl9qVJ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHilBKfm K2Z5foAbWwSl9WgK1sZoMB8GA1UdIwQYMBaAFIPvj+nuSGnwuUqV90b1iUuh+zDw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9FNEE2NUVERTIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi9nLS1QNmU1SWFmQzVTcFgzUnZXSlM2SDdN UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ctLVA2ZTVJYWZDNVNwWDNSdldKUzZIN01QQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9FNEE2NUVERTIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi9nLS1QNmU1SWFm QzVTcFgzUnZXSlM2SDdNUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH2e+VcbXeXr6I2PKXfSJCguo+0pn2WJz17ZOgeyyJZyx3/iIXTG3V Tc9IIw9gmlj7KQyQ21rSKxEubvEzFSsMQYjZ4TTz41B0OARrBfCqM6TdBYMRU5Rq CwhduSnoayHh2aCZXsGF+PEKArrGZNjyMx4NbV3qs7Vpj9defDoj5j2lZV2qcbVQ ToGMXSDTDtZ7ncSy+D7F5zlp1RGWpG70Ik15vgqwJ3m/ggoJbktHgP4/9/gI5Nkt Sklq3nbFZTjALFWpUZ+6Xfdmjk3fOyW2s5iS3s6is5lBP4GK0gUy10X34yJ0vKF4 lq86VFM/YtllZaWCdUEPSyiTuvW2Gq0g -----END CERTIFICATE-----Generated at Tue Dec 23 15:23:01 2025 by rpki-client