This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: F+W4pIHoX8ofJlgcxK+z4i3I6L9ynHoLYlC23Ij0FiE= Subject key identifier: BA:D5:50:FA:F3:16:96:9C:E6:F6:F6:BE:EA:D5:03:D6:2F:D3:C4:A7 Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 02DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 02DB Signing time: Tue 23 Dec 2025 00:20:18 +0000 Manifest this update: Tue 23 Dec 2025 00:20:17 +0000 Manifest next update: Tue 30 Dec 2025 00:20:17 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: FnIocykli5fndl8rzzx4s8bbRspFcr6OeUQUcZ7SQnU=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: 5LLhaXKcNjdSvxtPIbCpTbd8HLd8mRgw+b6A/xz88zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: Dec 23 00:20:17 2025 GMT Not After : Dec 30 00:20:17 2025 GMT Subject: CN=6949e042-54ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:77:3a:15:c7:cd:52:8d:91:a8:48:79:48:e8: d7:6b:74:d7:f9:eb:a0:e2:88:a9:31:13:3d:e8:93: bc:4a:b6:ed:f4:16:4a:ea:c0:0f:5a:23:ca:0d:24: df:e5:03:36:2a:fb:ce:c4:b8:06:49:25:0e:63:e4: 6f:99:78:1c:d9:1d:4b:03:97:44:c9:d5:52:da:1d: a4:77:f4:eb:7e:bc:0a:71:e0:1d:10:89:42:0a:90: 93:f5:16:a3:88:bf:fa:75:8c:25:59:c4:c3:0a:78: c3:3e:28:02:05:2f:a4:85:cc:38:3f:4a:67:85:52: 82:ec:96:88:70:27:ea:da:12:70:14:85:b4:33:eb: b6:95:dc:a2:f5:f8:1f:b1:e2:8a:6b:22:0c:9a:72: ed:ec:aa:70:92:d9:27:e6:89:13:2c:a4:58:60:79: 33:ad:36:00:06:fc:37:a1:e7:c1:61:5e:5f:32:d0: 67:6c:6f:d8:9b:ee:1d:33:9c:46:ff:98:13:9b:6b: 01:99:5e:71:53:d3:6d:e7:5d:af:81:47:bf:1e:a4: bb:ab:66:ec:60:f7:e4:91:d3:5c:6b:ba:ea:fd:01: 59:68:c4:e8:87:00:97:5d:f6:ad:c3:fc:1a:84:2c: 62:ae:45:c1:a1:93:11:e2:a4:ad:bb:91:ff:52:71: 10:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D5:50:FA:F3:16:96:9C:E6:F6:F6:BE:EA:D5:03:D6:2F:D3:C4:A7 X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:44:bb:04:5f:df:b3:ea:f4:a0:d7:e0:99:33:d7:a9:31:77: 99:9f:ae:36:5e:f2:ef:2e:fd:aa:76:2b:84:c4:3a:13:14:f0: ea:1c:1e:e1:ab:8b:96:e2:21:35:87:a9:d5:7b:db:d2:5b:f4: ab:42:e2:e8:92:80:ab:f5:5b:ab:81:d4:9c:e5:d4:88:13:19: 00:c7:2e:6c:b7:b8:c6:70:84:d0:5a:47:c2:da:b1:5b:f5:cf: 2d:bd:9b:54:c9:a0:ee:5f:7e:c4:55:42:7d:40:2c:12:66:c0: 06:2d:4c:d5:8f:b1:9e:19:9a:be:d3:46:9c:95:a9:97:b9:c1: d8:ea:18:97:6a:ef:9b:b6:5f:27:30:0c:b5:7f:c3:11:c8:b6: 78:4b:57:96:15:ae:59:3f:7d:3f:5f:16:64:24:c6:65:20:03: 30:4f:62:5d:7b:d8:15:9c:81:75:2e:68:ee:56:a9:04:5c:1b: 1d:d9:fe:26:69:7b:19:a3:97:0a:ce:21:f1:a3:01:df:d2:52: ea:64:c8:ca:a6:9d:be:d5:44:22:40:7e:2d:3e:70:02:06:b4: f8:3a:92:ba:43:cd:9b:70:7b:5b:ce:9e:2c:f8:82:d0:48:01: e4:11:b8:da:71:15:de:72:c8:43:34:6f:fd:1c:48:5e:c1:fa: 5d:15:21:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjUxMjIzMDAyMDE3WhcNMjUxMjMwMDAyMDE3WjAYMRYwFAYD VQQDDA02OTQ5ZTA0Mi01NGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHc6FcfNUo2RqEh5SOjXa3TX+eug4oipMRM96JO8Srbt9BZK6sAPWiPKDSTf 5QM2KvvOxLgGSSUOY+RvmXgc2R1LA5dEydVS2h2kd/TrfrwKceAdEIlCCpCT9Raj iL/6dYwlWcTDCnjDPigCBS+khcw4P0pnhVKC7JaIcCfq2hJwFIW0M+u2ldyi9fgf seKKayIMmnLt7Kpwktkn5okTLKRYYHkzrTYABvw3oefBYV5fMtBnbG/Ym+4dM5xG /5gTm2sBmV5xU9Nt512vgUe/HqS7q2bsYPfkkdNca7rq/QFZaMTohwCXXfatw/wa hCxirkXBoZMR4qStu5H/UnEQ/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrVUPrz Fpac5vb2vurVA9Yv08SnMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqRLsEX9+z6vSg1+CZM9epMXeZn642XvLvLv2qdiuExDoTFPDqHB7h q4uW4iE1h6nVe9vSW/SrQuLokoCr9VurgdSc5dSIExkAxy5st7jGcITQWkfC2rFb 9c8tvZtUyaDuX37EVUJ9QCwSZsAGLUzVj7GeGZq+00aclamXucHY6hiXau+btl8n MAy1f8MRyLZ4S1eWFa5ZP30/XxZkJMZlIAMwT2Jde9gVnIF1LmjuVqkEXBsd2f4m aXsZo5cKziHxowHf0lLqZMjKpp2+1UQiQH4tPnACBrT4OpK6Q82bcHtbzp4s+ILQ SAHkEbjacRXecshDNG/9HEhewfpdFSG5 -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:35 2025 by rpki-client