This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json) Hash identifier: qrXU01SmQGJ9DWjE/GI4jGnvHggPwanqhudu9P1k5sA= Subject key identifier: D6:1B:02:79:00:8A:33:33:A4:0B:84:AB:E9:64:09:15:7A:A4:17:6D Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 04B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft Manifest number: 04B0 Signing time: Mon 22 Dec 2025 23:02:45 +0000 Manifest this update: Mon 22 Dec 2025 23:02:44 +0000 Manifest next update: Mon 29 Dec 2025 23:02:44 +0000 Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: sXe71RjlqjJmuQfU9GvnRshyegPOvfRFUHE8CdNpvs4=) 2: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (hash: r19jWUfm6ne9mMhoLOU3FQVzD9TqdTUiA0fmQoFhQKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1209 (0x4b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Validity Not Before: Dec 22 23:02:44 2025 GMT Not After : Dec 29 23:02:44 2025 GMT Subject: CN=6949ce15-e00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:82:0c:66:2e:a6:f6:02:3c:85:46:07:22:33: 73:6a:24:13:bf:f8:65:79:ef:89:b8:94:d7:1a:04: f2:11:52:59:7a:e6:6e:23:7c:a3:bc:de:bc:76:6f: dc:dc:98:06:bd:b5:8d:69:cf:f3:6c:af:39:a1:72: 10:4c:f9:fa:59:79:9b:bd:0d:68:30:11:72:75:4e: 80:91:37:11:6a:03:1d:b9:18:fe:18:17:72:89:e7: 51:72:20:ff:6f:8a:21:bf:86:61:90:1d:a3:32:8b: 0a:31:09:31:c9:f9:6f:a0:fc:ad:af:06:bf:6b:ec: f6:ce:15:fc:a4:cb:79:c9:66:e5:af:9d:ae:59:2f: 47:92:30:12:5e:1e:d9:5d:9b:6f:aa:27:02:65:42: 94:99:e8:47:96:23:4e:1b:a4:c8:70:4e:48:2b:fd: d4:fd:41:b5:05:25:f6:58:79:6d:a7:f6:78:09:f4: 8e:b3:eb:9a:41:6c:87:a6:62:68:b3:a8:8f:23:a9: a2:96:8b:b0:ba:43:4d:e2:1e:44:f4:5c:fb:94:0c: 0c:30:35:8f:02:42:9f:8f:43:e0:51:90:ec:99:62: ed:ba:68:38:db:25:ee:95:1e:7e:75:c9:b2:e2:f8: 4b:a0:6d:0f:0e:43:ab:11:3f:d8:b1:4c:b7:d8:cb: 81:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1B:02:79:00:8A:33:33:A4:0B:84:AB:E9:64:09:15:7A:A4:17:6D X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:94:d0:8d:c6:ca:c7:f3:72:3f:ad:93:c0:fb:c7:40:aa:39: 20:29:dd:cb:d0:0f:a3:55:87:62:5c:1f:d0:fe:73:54:c8:70: 29:1e:b9:f9:5f:6e:19:1c:00:1d:69:0e:28:2e:e4:23:c4:20: ac:3c:71:e0:15:7a:99:f8:a1:a6:6f:a6:26:96:e9:8c:fd:e4: e5:a7:7f:c4:90:eb:e8:85:48:89:99:e6:cf:aa:11:2d:2f:7a: a5:11:f7:84:de:6f:0d:aa:f2:6b:1f:ec:e7:63:fb:42:bf:9c: 34:01:e0:96:7d:de:d6:16:b6:ab:ca:db:5a:b4:47:84:88:b1: 32:8c:fd:f9:68:06:c3:5e:21:e2:73:79:b4:d2:02:81:57:ee: 0b:e8:9e:41:42:3f:ef:1e:a3:38:f5:89:c0:a1:4e:cc:ee:34: 69:91:b1:d3:86:3b:00:ff:9c:ae:15:1b:b9:20:e1:5c:e4:94: de:d9:0f:1a:88:3f:02:a5:99:52:d8:91:71:45:8d:c3:01:ca: 36:48:78:da:92:20:18:e2:0d:c8:16:dd:41:e0:1d:57:fa:72: b2:59:67:ad:dc:84:27:70:0e:08:ba:c9:74:6f:f6:be:62:7b: 9e:65:f9:2d:d7:42:2a:4f:8b:22:61:dc:8b:9d:90:74:bf:5b: 03:5a:16:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjUxMjIyMjMwMjQ0WhcNMjUxMjI5MjMwMjQ0WjAYMRYwFAYD VQQDDA02OTQ5Y2UxNS1lMDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkYIMZi6m9gI8hUYHIjNzaiQTv/hlee+JuJTXGgTyEVJZeuZuI3yjvN68dm/c 3JgGvbWNac/zbK85oXIQTPn6WXmbvQ1oMBFydU6AkTcRagMduRj+GBdyiedRciD/ b4ohv4ZhkB2jMosKMQkxyflvoPytrwa/a+z2zhX8pMt5yWblr52uWS9HkjASXh7Z XZtvqicCZUKUmehHliNOG6TIcE5IK/3U/UG1BSX2WHltp/Z4CfSOs+uaQWyHpmJo s6iPI6milouwukNN4h5E9Fz7lAwMMDWPAkKfj0PgUZDsmWLtumg42yXulR5+dcmy 4vhLoG0PDkOrET/YsUy32MuBjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYbAnkA ijMzpAuEq+lkCRV6pBdtMB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243 ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8lNCNxsrH83I/rZPA+8dAqjkgKd3L0A+jVYdiXB/Q/nNUyHApHrn5 X24ZHAAdaQ4oLuQjxCCsPHHgFXqZ+KGmb6YmlumM/eTlp3/EkOvohUiJmebPqhEt L3qlEfeE3m8NqvJrH+znY/tCv5w0AeCWfd7WFraryttatEeEiLEyjP35aAbDXiHi c3m00gKBV+4L6J5BQj/vHqM49YnAoU7M7jRpkbHThjsA/5yuFRu5IOFc5JTe2Q8a iD8CpZlS2JFxRY3DAco2SHjakiAY4g3IFt1B4B1X+nKyWWet3IQncA4Iusl0b/a+ YnueZfkt10IqT4siYdyLnZB0v1sDWhaE -----END CERTIFICATE-----Generated at Wed Dec 24 16:01:05 2025 by rpki-client