This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft File: p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json) Hash identifier: fJr7uj7ap25qIIQ8Pn90sCKwuY42CgvTqfdMRYS/nxo= Subject key identifier: A3:95:81:2A:DB:D4:9F:78:6B:E0:30:02:A6:95:06:2A:16:7E:F8:2B Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE Certificate issuer: /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft Manifest number: 0125 Signing time: Sun 21 Dec 2025 03:51:10 +0000 Manifest this update: Sun 21 Dec 2025 03:51:09 +0000 Manifest next update: Sun 28 Dec 2025 03:51:09 +0000 Files and hashes: 1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: 00h9pv+/yFfCYQVXKXN9CMjZ54DXseK1erJVSPsJHao=) 2: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QIMDScliq15LdkPQsPXmCzkeCzTbM6NI7el8bqF5qD8=) 3: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: Jf2arvBq83FoSm5BKtxRrGvm4pEMUSYC+oIeuz2JcN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE Validity Not Before: Dec 21 03:51:09 2025 GMT Not After : Dec 28 03:51:09 2025 GMT Subject: CN=69476eae-6f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:10:0a:40:81:38:45:91:10:1f:fe:69:dc:fe: f8:82:56:82:96:cc:d9:82:5e:1a:e3:28:04:26:85: a2:80:5d:63:9b:91:1d:c2:71:3e:f6:3b:c8:c0:b1: 4a:b5:cb:6b:ae:63:b9:64:77:ec:a3:e5:d8:5a:4a: dc:06:e9:37:68:63:5f:6c:ed:f8:bb:ee:a2:fb:38: 65:84:89:88:a1:b7:7a:07:7a:00:09:5a:df:56:33: f7:8d:e9:bb:2a:b2:0b:e6:89:20:a3:5c:d3:0c:e0: 8e:b6:4b:c1:9c:3d:e8:e6:73:bd:44:ec:29:bc:df: f9:55:7d:ce:b3:1e:13:3e:94:1d:58:68:27:f1:8c: c5:89:f6:c8:81:eb:f4:43:e9:17:d7:86:12:c4:f3: 2b:bc:f7:cf:8c:98:49:11:92:fb:dc:b6:2b:df:95: fa:0e:86:60:aa:8a:1b:e0:f9:bb:0a:95:d7:6d:93: 88:6a:82:39:25:a9:4d:f1:70:3c:a8:a6:7e:a1:d7: 2a:15:2a:72:a7:20:e4:7e:eb:4a:9e:e4:04:63:3b: 73:95:5a:19:26:73:d7:7d:6b:17:3b:fe:a5:49:97: 28:41:7e:fb:d1:4a:0d:68:5e:92:ff:b5:67:a2:3b: f0:f6:ed:7d:aa:a4:c5:02:2d:10:b5:06:d5:f2:ce: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:95:81:2A:DB:D4:9F:78:6B:E0:30:02:A6:95:06:2A:16:7E:F8:2B X509v3 Authority Key Identifier: keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:6d:09:7c:15:fa:77:c6:c9:81:02:b0:03:ba:bb:27:d0:64: 80:57:ba:16:21:18:a5:8f:d8:2f:ed:b3:37:3c:fd:21:25:4b: 4a:6f:fb:39:18:32:8e:ee:e6:f2:f2:ad:c0:f4:20:f8:e6:56: 67:d5:55:36:96:02:c0:37:83:28:93:c8:bc:e4:36:3f:de:6d: 36:68:8c:04:3f:41:74:07:e2:10:19:1e:fd:80:f5:73:79:4c: ed:13:5f:5a:20:7b:bc:d4:38:a6:f8:09:8a:bf:a5:1d:90:1a: 38:cd:ca:5a:a6:f8:06:04:d3:e2:e8:b7:47:4d:e6:f8:49:20: ad:8a:2a:24:30:58:db:ca:bb:e9:3d:c5:0a:39:8a:a3:1f:e1: 82:fb:ff:1a:88:c6:dd:3b:2e:b9:9f:bb:f5:10:6c:31:c5:06: c5:d1:a3:b3:22:35:d8:db:57:bc:c7:a8:c1:54:a8:a6:43:00: ea:94:57:ab:5c:16:fd:dc:4d:eb:2c:bd:94:0a:c6:fe:20:51: 9b:04:e0:b2:ca:69:5f:05:31:30:aa:ac:f1:c4:70:df:3f:cb: 16:15:e3:9d:02:f0:fe:3b:16:af:aa:f8:07:59:85:92:65:d4: af:cf:55:71:1c:a9:d8:99:dc:24:44:40:51:18:69:15:44:48: a0:59:37:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJCMTMxMTAvBgNVBAUTKEE3Q0VGQzE3MDBBNEUxODQ2NjI1MDhDNzgxNUY3RUIx RDAxMjlFQkUwHhcNMjUxMjIxMDM1MTA5WhcNMjUxMjI4MDM1MTA5WjAYMRYwFAYD VQQDDA02OTQ3NmVhZS02ZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphAKQIE4RZEQH/5p3P74glaClszZgl4a4ygEJoWigF1jm5EdwnE+9jvIwLFK tctrrmO5ZHfso+XYWkrcBuk3aGNfbO34u+6i+zhlhImIobd6B3oACVrfVjP3jem7 KrIL5okgo1zTDOCOtkvBnD3o5nO9ROwpvN/5VX3Osx4TPpQdWGgn8YzFifbIgev0 Q+kX14YSxPMrvPfPjJhJEZL73LYr35X6DoZgqoob4Pm7CpXXbZOIaoI5JalN8XA8 qKZ+odcqFSpypyDkfutKnuQEYztzlVoZJnPXfWsXO/6lSZcoQX770UoNaF6S/7Vn ojvw9u19qqTFAi0QtQbV8s6K7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOVgSrb 1J94a+AwAqaVBioWfvgrMB8GA1UdIwQYMBaAFKfO/BcApOGEZiUIx4FffrHQEp6+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkIxMy9EQzQ4M0YzMDFF QzAxMUVGOTYyOTQyN0RDNEY5QUUwMi9wODc4RndDazRZUm1KUWpIZ1Y5LXNkQVNu cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A4NzhGd0NrNFlSbUpRakhnVjktc2RBU25yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkIxMy9EQzQ4M0YzMDFFQzAxMUVGOTYyOTQyN0RDNEY5QUUwMi9wODc4RndDazRZ Um1KUWpIZ1Y5LXNkQVNucjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0bQl8Ffp3xsmBArADursn0GSAV7oWIRilj9gv7bM3PP0hJUtKb/s5 GDKO7uby8q3A9CD45lZn1VU2lgLAN4Mok8i85DY/3m02aIwEP0F0B+IQGR79gPVz eUztE19aIHu81Dim+AmKv6UdkBo4zcpapvgGBNPi6LdHTeb4SSCtiiokMFjbyrvp PcUKOYqjH+GC+/8aiMbdOy65n7v1EGwxxQbF0aOzIjXY21e8x6jBVKimQwDqlFer XBb93E3rLL2UCsb+IFGbBOCyymlfBTEwqqzxxHDfP8sWFeOdAvD+OxavqvgHWYWS ZdSvz1VxHKnYmdwkREBRGGkVREigWTc/ -----END CERTIFICATE-----Generated at Mon Dec 22 04:26:42 2025 by rpki-client