This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json) Hash identifier: 5sCblaD3kwiCh4hW8AXA+AKbLvX7LMSCOsiNTrwxPbE= Subject key identifier: 32:D1:93:97:64:9A:A4:EE:38:53:9B:B6:26:1C:43:32:BE:C3:8A:07 Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 04EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft Manifest number: 04E2 Signing time: Thu 18 Dec 2025 23:06:45 +0000 Manifest this update: Thu 18 Dec 2025 23:06:45 +0000 Manifest next update: Thu 25 Dec 2025 23:06:45 +0000 Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: FhsMruqpD+cEVwP5W5sC78aPwjQ+WqvnmfIQK54J0M0=) 2: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: NIvct8fJn9M1iEY9RRPmR0E04PRAFDynGMtQ70vSFyE=) 3: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: 7VHkgX/mbThqgLkAc7wHG3m+rvoalBNxxWk0mMeVuao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1260 (0x4ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Dec 18 23:06:45 2025 GMT Not After : Dec 25 23:06:45 2025 GMT Subject: CN=69448905-bf85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c5:96:01:97:3f:c2:9c:d0:6c:9f:f0:6b:43: 2a:5a:cb:8a:79:d6:00:ec:d4:88:ec:fc:c6:83:f3: 29:13:cf:3e:46:c8:47:db:aa:4b:8f:a8:ff:05:52: 0e:77:3f:46:8a:3c:70:11:00:d0:0e:21:91:79:0c: 15:47:92:42:31:f6:ca:4c:0d:83:0e:03:76:e2:ca: 59:65:f4:02:5a:fe:6b:67:8e:42:37:c0:df:fd:72: ae:00:71:bf:50:14:e7:b0:72:37:93:2f:07:4a:e9: 5a:c7:06:19:42:07:30:0c:3a:75:3f:b3:dc:3f:a2: 1d:a2:94:f0:d8:aa:47:47:be:f1:7b:ca:9d:15:e2: 85:c8:06:ac:70:c4:f4:89:32:42:51:c9:77:75:1a: 16:49:bf:8a:18:09:e9:9d:86:26:cb:ad:6b:4e:d9: 23:7d:41:45:d9:80:68:f2:57:90:fe:56:67:af:19: 62:59:4d:6d:f1:0e:46:c5:c5:1b:dd:9f:eb:d6:43: b2:08:39:75:8f:9d:ff:47:54:92:dd:ea:9d:51:bd: 9d:17:ac:1e:26:2d:5e:02:63:84:67:ca:54:46:0b: 62:b0:6d:5f:bf:77:c0:6b:b0:bd:65:db:46:75:e2: 7f:fc:6e:62:cd:5e:b4:d6:2b:44:15:4e:f9:be:1a: 16:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D1:93:97:64:9A:A4:EE:38:53:9B:B6:26:1C:43:32:BE:C3:8A:07 X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:bf:68:18:5c:34:4e:f8:42:de:06:e2:1e:36:9f:12:6c:d3: ea:00:39:aa:9f:82:c5:f0:cd:08:ad:3e:46:2b:e5:0a:cc:d6: 73:e6:27:32:2b:46:23:4f:9f:be:f0:e7:99:ea:05:5f:91:cc: dc:b8:2a:6b:48:20:09:ed:d6:a3:05:3b:b0:dd:11:b1:62:3b: d5:51:ec:44:cd:b9:d3:f7:d1:ce:be:ec:9c:95:bf:9e:ba:dd: 1f:56:ab:96:66:f7:69:1c:88:ca:2f:ad:7f:e5:89:79:1d:fe: 47:1d:6a:d6:29:c7:56:94:c7:7e:82:cf:6c:1c:d9:f2:93:54: 65:57:cb:3e:e0:04:fa:b9:97:a0:43:5e:e2:2b:21:94:2a:9e: 66:fd:e7:9e:6d:84:d2:48:67:b7:37:87:31:92:d8:44:46:d4: 06:a2:93:63:5f:c8:8a:a7:91:de:b9:03:7d:e2:87:ed:5a:5e: ce:0e:bb:11:d8:74:06:a6:97:f6:ce:9e:3f:51:c6:ca:3e:ad: 56:1d:dc:9e:b8:2a:13:53:44:77:2e:4d:ff:27:8c:de:8f:ff: f3:13:7e:83:e6:d0:bb:dd:ff:ee:83:63:e9:21:4c:ce:20:63: f9:d4:5a:b9:cc:aa:49:59:ee:87:80:2c:65:e7:22:33:29:a7: 87:29:7b:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjUxMjE4MjMwNjQ1WhcNMjUxMjI1MjMwNjQ1WjAYMRYwFAYD VQQDDA02OTQ0ODkwNS1iZjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sWWAZc/wpzQbJ/wa0MqWsuKedYA7NSI7PzGg/MpE88+RshH26pLj6j/BVIO dz9GijxwEQDQDiGReQwVR5JCMfbKTA2DDgN24spZZfQCWv5rZ45CN8Df/XKuAHG/ UBTnsHI3ky8HSulaxwYZQgcwDDp1P7PcP6IdopTw2KpHR77xe8qdFeKFyAascMT0 iTJCUcl3dRoWSb+KGAnpnYYmy61rTtkjfUFF2YBo8leQ/lZnrxliWU1t8Q5GxcUb 3Z/r1kOyCDl1j53/R1SS3eqdUb2dF6weJi1eAmOEZ8pURgtisG1fv3fAa7C9ZdtG deJ//G5izV601itEFU75vhoWHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLRk5dk mqTuOFObtiYcQzK+w4oHMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y aS1hVm5XbURfaldQTzNxU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARv2gYXDRO+ELeBuIeNp8SbNPqADmqn4LF8M0IrT5GK+UKzNZz5icy K0YjT5++8OeZ6gVfkczcuCprSCAJ7dajBTuw3RGxYjvVUexEzbnT99HOvuyclb+e ut0fVquWZvdpHIjKL61/5Yl5Hf5HHWrWKcdWlMd+gs9sHNnyk1RlV8s+4AT6uZeg Q17iKyGUKp5m/eeebYTSSGe3N4cxkthERtQGopNjX8iKp5HeuQN94oftWl7ODrsR 2HQGppf2zp4/UcbKPq1WHdyeuCoTU0R3Lk3/J4zej//zE36D5tC73f/ug2PpIUzO IGP51Fq5zKpJWe6HgCxl5yIzKaeHKXt8 -----END CERTIFICATE-----Generated at Fri Dec 19 17:59:06 2025 by rpki-client