This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json) Hash identifier: 2WcNAw7WfAc7w/kdzunwLs9q9nK2GBzwj0hurOmseQA= Subject key identifier: 6D:68:E6:BC:12:2B:87:6F:8C:A6:01:F9:8A:73:8C:DA:5B:02:F2:B8 Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Certificate serial: 04EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft Manifest number: 04E7 Signing time: Sat 20 Dec 2025 23:01:17 +0000 Manifest this update: Sat 20 Dec 2025 23:01:16 +0000 Manifest next update: Sat 27 Dec 2025 23:01:16 +0000 Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: rOw+SdMoyhJ7ImbKhuFbmSLOqRSWshFxxQaSqqiw74U=) 2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: QrLrf2+brQr8pET8HlSnm9rXz817aY8992jkS8DLh64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1260 (0x4ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Validity Not Before: Dec 20 23:01:16 2025 GMT Not After : Dec 27 23:01:16 2025 GMT Subject: CN=69472abd-ad7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:7d:67:b6:1e:18:1a:5f:b8:df:98:c3:ca: b4:f0:40:a2:b8:da:ac:17:4a:cb:e0:4c:c1:28:c7: cd:c4:2c:89:6f:ab:7f:98:a4:e1:bf:37:1c:6a:16: 45:d3:4f:b7:dc:25:00:9c:d1:42:ab:57:e0:b4:bc: 75:ac:fe:be:62:3c:44:e3:1b:d1:72:81:54:be:0f: 9f:52:a2:e1:40:93:4f:b7:0f:2b:54:ef:06:05:78: 24:1e:f0:8a:f9:6c:82:d7:3d:15:81:6d:e3:50:f0: d4:e5:8e:b3:88:44:8f:02:16:f3:a7:51:64:79:48: 52:2d:c6:60:b2:46:dc:e1:66:35:6a:54:1e:91:a5: 7b:33:1a:a6:fc:b2:d9:c5:bd:92:0a:62:7a:d8:f6: c1:55:db:1a:77:76:11:c9:16:ae:fc:6c:f2:88:9c: 87:55:f0:c5:ac:11:1c:89:55:c9:9d:23:f1:d5:4b: 07:08:83:97:12:8c:1d:b4:27:a2:17:67:1d:e4:2b: 96:f9:7c:ac:0d:04:41:91:72:5b:9d:05:d4:95:d8: 36:ef:61:8b:c0:8a:1d:d4:19:43:01:57:57:1c:4b: 88:22:1d:3a:96:1d:b0:0f:91:60:5d:4b:eb:6c:e3: c5:8b:1d:cd:8a:31:ac:00:de:cf:e0:92:e5:85:90: 55:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:68:E6:BC:12:2B:87:6F:8C:A6:01:F9:8A:73:8C:DA:5B:02:F2:B8 X509v3 Authority Key Identifier: keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:eb:f5:49:96:aa:43:9a:ff:6e:a7:8b:b7:8d:e3:a2:8d:bd: 20:d6:e5:e8:f8:7b:8a:1b:fe:f8:98:df:2c:71:df:05:8c:97: be:5c:d9:91:6a:5b:a2:4b:01:56:80:d6:cb:23:e0:bb:fd:91: 66:6d:db:56:30:90:f9:7b:01:3d:56:e7:85:8b:32:b8:12:9f: 99:df:ea:11:81:44:ef:89:fc:f2:ab:df:ff:33:b2:b7:fc:29: ea:1b:1b:64:2c:d5:ff:51:03:e8:4e:59:77:cc:fb:fe:44:ae: 76:3d:dc:bf:67:66:b8:78:72:ec:dc:3d:0d:6f:30:92:ed:3f: 78:27:ce:5d:27:c0:e8:4b:ec:0c:06:d6:f1:11:b0:34:79:ca: a1:48:63:10:be:11:3f:e2:9d:c9:80:4d:0b:23:31:cd:89:9c: d4:8c:65:20:71:96:27:35:d6:99:51:c8:02:54:a4:73:ba:95: 6c:e4:8e:c0:a2:9e:ae:a5:6a:76:53:1c:a1:17:a2:f2:c2:3c: f3:88:e6:9d:6c:11:0c:2c:77:b7:47:50:7b:f0:b2:b8:6d:e2: 11:4a:61:85:bf:63:67:04:4d:47:85:58:06:a1:55:21:ef:c4: 9d:6f:6c:63:6c:79:c5:27:95:2e:b3:0e:15:7a:64:c8:19:60: 6a:03:c4:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4 MjE4NTI1MTkwHhcNMjUxMjIwMjMwMTE2WhcNMjUxMjI3MjMwMTE2WjAYMRYwFAYD VQQDDA02OTQ3MmFiZC1hZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/19Z7YeGBpfuN+Yw8q08ECiuNqsF0rL4EzBKMfNxCyJb6t/mKThvzccahZF 00+33CUAnNFCq1fgtLx1rP6+YjxE4xvRcoFUvg+fUqLhQJNPtw8rVO8GBXgkHvCK +WyC1z0VgW3jUPDU5Y6ziESPAhbzp1FkeUhSLcZgskbc4WY1alQekaV7Mxqm/LLZ xb2SCmJ62PbBVdsad3YRyRau/GzyiJyHVfDFrBEciVXJnSPx1UsHCIOXEowdtCei F2cd5CuW+XysDQRBkXJbnQXUldg272GLwIod1BlDAVdXHEuIIh06lh2wD5FgXUvr bOPFix3NijGsAN7P4JLlhZBV0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1o5rwS K4dvjKYB+YpzjNpbAvK4MB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe6/VJlqpDmv9up4u3jeOijb0g1uXo+HuKG/74mN8scd8FjJe+XNmR aluiSwFWgNbLI+C7/ZFmbdtWMJD5ewE9VueFizK4Ep+Z3+oRgUTvifzyq9//M7K3 /CnqGxtkLNX/UQPoTll3zPv+RK52Pdy/Z2a4eHLs3D0NbzCS7T94J85dJ8DoS+wM BtbxEbA0ecqhSGMQvhE/4p3JgE0LIzHNiZzUjGUgcZYnNdaZUcgCVKRzupVs5I7A op6upWp2UxyhF6LywjzziOadbBEMLHe3R1B78LK4beIRSmGFv2NnBE1HhVgGoVUh 78Sdb2xjbHnFJ5Uusw4VemTIGWBqA8QD -----END CERTIFICATE-----Generated at Mon Dec 22 19:32:31 2025 by rpki-client