This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft File: PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json) Hash identifier: k5vf7onb3L3EZTWKsuJZu2tazp0XIbJoOXgLVAVE0Y8= Subject key identifier: FF:06:16:E1:21:E6:3B:83:63:75:5A:DD:35:BE:E7:B9:11:E2:F3:27 Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Certificate serial: 0EA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft Manifest number: 0E9E Signing time: Mon 22 Dec 2025 17:21:12 +0000 Manifest this update: Mon 22 Dec 2025 17:21:11 +0000 Manifest next update: Mon 29 Dec 2025 17:21:11 +0000 Files and hashes: 1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: L3MpOzcUXa8Bsm8QsoX8VcqR25zspdbPuzq5jI/0tMw=) 2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: F23CXCLEdHEHx/0prljjzO2nfGEWKXpGSMmp6uriDiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3751 (0xea7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Validity Not Before: Dec 22 17:21:11 2025 GMT Not After : Dec 29 17:21:11 2025 GMT Subject: CN=69497e07-a48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:93:1e:e4:b1:1d:42:8b:56:ab:e1:cf:0c: 94:14:a0:23:23:06:94:a9:84:2b:73:1d:b9:e7:0d: 9f:23:22:f7:bb:6f:3e:e9:3d:da:72:38:e1:64:7f: 0a:89:76:cd:1b:30:0a:e4:b0:dd:6e:81:e0:86:a3: 9b:aa:c4:33:0d:53:8a:11:ba:89:cb:24:f1:0e:bb: b5:14:73:9d:3e:45:09:aa:d3:bd:f3:b9:92:47:84: 7c:22:0b:bb:c2:00:cf:82:bc:58:59:ca:b8:e6:9d: 67:5c:f0:70:90:44:0b:bb:20:a2:f0:dc:83:34:e2: 25:85:45:1d:7f:1c:b7:fd:59:68:82:31:13:ee:7f: 11:20:e1:da:c7:bd:07:a4:b9:3f:69:c0:98:9c:97: b3:58:79:47:b4:3d:10:d2:4b:2d:cb:f9:85:c6:ed: 54:6f:bc:b8:fd:55:4a:0e:f8:da:c5:5a:9d:dc:7d: b8:ae:ff:ac:b7:a6:4b:a7:8f:48:6f:c8:65:00:af: ee:dc:8b:a7:a6:2c:43:d5:c7:a7:42:de:2b:25:e7: 76:4c:54:78:8d:d0:c9:43:3c:fd:60:68:18:86:c0: c5:9e:e9:70:a8:d7:53:d8:2c:08:a0:5e:43:d9:d7: f9:67:ac:40:e6:9d:b7:03:b1:84:22:f5:7d:8b:67: 98:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:06:16:E1:21:E6:3B:83:63:75:5A:DD:35:BE:E7:B9:11:E2:F3:27 X509v3 Authority Key Identifier: keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e3:2c:13:29:19:3d:b7:5a:0a:ab:01:ff:6f:db:b8:3b:05: c8:13:89:66:9d:8c:38:ff:4d:ef:dc:86:f3:68:86:a3:2d:a6: df:82:0b:a7:6f:2e:ec:01:a3:16:1a:32:42:6d:95:98:24:4c: 99:27:60:5b:ec:e1:ca:09:39:ca:14:67:95:cb:1a:93:af:89: d0:db:d1:35:50:0b:84:0d:28:3c:94:a0:70:26:d3:90:76:d9: e8:1e:2d:cb:83:0e:5b:6f:a5:98:d1:a3:16:bd:c8:fe:8f:1a: b6:67:b1:20:1f:cd:54:e1:a4:be:e8:1a:68:90:10:67:74:d2: 5a:f3:38:bb:05:ad:14:67:48:ae:e9:64:28:49:18:07:7b:a8: 34:4a:f6:fa:53:af:b0:ca:94:2a:91:9e:fa:de:9a:98:18:9f: d3:dd:be:46:6e:33:5c:78:67:a2:5b:0f:fc:e1:09:64:80:c8: 1e:e3:62:2f:75:ef:8a:81:e8:58:d5:1f:15:58:e7:0b:77:a8: c5:71:da:b8:33:db:1f:ed:8d:58:bb:aa:23:b4:03:1a:00:eb: 8a:6f:9f:8c:9c:19:a7:72:f9:90:af:f2:b2:9d:38:39:4a:84: 5a:65:f4:d5:60:2d:5e:a0:6c:b1:e5:5b:5e:62:a3:25:4c:c9: 65:19:14:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4 NzUyODE5ODMwHhcNMjUxMjIyMTcyMTExWhcNMjUxMjI5MTcyMTExWjAYMRYwFAYD VQQDDA02OTQ5N2UwNy1hNDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEGTHuSxHUKLVqvhzwyUFKAjIwaUqYQrcx255w2fIyL3u28+6T3acjjhZH8K iXbNGzAK5LDdboHghqObqsQzDVOKEbqJyyTxDru1FHOdPkUJqtO987mSR4R8Igu7 wgDPgrxYWcq45p1nXPBwkEQLuyCi8NyDNOIlhUUdfxy3/VlogjET7n8RIOHax70H pLk/acCYnJezWHlHtD0Q0ksty/mFxu1Ub7y4/VVKDvjaxVqd3H24rv+st6ZLp49I b8hlAK/u3IunpixD1cenQt4rJed2TFR4jdDJQzz9YGgYhsDFnulwqNdT2CwIoF5D 2df5Z6xA5p23A7GEIvV9i2eYgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8GFuEh 5juDY3Va3TW+57kR4vMnMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjg4MC8xRjUxMThBNEEyRUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZl OExONURRNTVZZWlIVW9HWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk4ywTKRk9t1oKqwH/b9u4OwXIE4lmnYw4/03v3IbzaIajLabfggun by7sAaMWGjJCbZWYJEyZJ2Bb7OHKCTnKFGeVyxqTr4nQ29E1UAuEDSg8lKBwJtOQ dtnoHi3Lgw5bb6WY0aMWvcj+jxq2Z7EgH81U4aS+6BpokBBndNJa8zi7Ba0UZ0iu 6WQoSRgHe6g0Svb6U6+wypQqkZ763pqYGJ/T3b5GbjNceGeiWw/84QlkgMge42Iv de+KgehY1R8VWOcLd6jFcdq4M9sf7Y1Yu6ojtAMaAOuKb5+MnBmncvmQr/KynTg5 SoRaZfTVYC1eoGyx5VteYqMlTMllGRR/ -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:17 2025 by rpki-client