This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: bCNnAoRyN+3HTeLOzr2Fjy/4wA9T8+d76IYwaUQztGU= Subject key identifier: F3:FB:48:05:E5:A5:DC:8B:3A:69:58:41:3E:19:09:3F:39:4B:21:1B Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 020D Signing time: Sun 21 Dec 2025 01:41:20 +0000 Manifest this update: Sun 21 Dec 2025 01:41:20 +0000 Manifest next update: Sun 28 Dec 2025 01:41:20 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: ArwcV9ofASqBqvSljtVxbjlCf7RAJLzBgzyC2t+hbvk=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: DR6m9dTiQf0MQdfmKjC6TTSnRd3qda76E3er8flKLDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: Dec 21 01:41:20 2025 GMT Not After : Dec 28 01:41:20 2025 GMT Subject: CN=69475040-f4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2e:88:60:9d:af:34:e6:df:e8:ac:29:be:a8: fe:39:49:9b:0b:ec:42:d9:a8:d5:52:a6:88:a5:c4: 50:b3:89:06:2b:14:5d:e0:9c:38:b3:93:d2:b1:06: 56:49:59:a7:0d:4f:f8:11:5f:52:9b:ee:e8:61:e9: c3:6f:1a:1d:07:23:ed:2c:bf:8f:08:4f:bd:e1:65: 67:8e:f7:02:d7:66:a0:cf:f3:49:81:55:86:3a:7d: 9c:c1:d8:8e:6e:49:31:69:fc:fb:42:3a:0d:7f:e7: 58:69:09:32:48:2e:19:3f:c4:db:1a:ce:03:30:4a: 02:57:e3:79:08:99:d9:2a:10:be:7e:bc:49:43:98: 30:7c:49:c6:62:4d:4d:1f:e8:ae:a7:db:37:d2:76: 12:64:c9:a9:a3:a8:65:fe:c1:8e:6d:bc:76:30:8f: 57:47:8b:7d:ff:d8:5e:e8:c5:3c:c4:c4:39:4e:c7: ee:40:45:68:74:00:b8:e5:b4:18:f4:57:6a:44:d6: 5b:58:cc:8c:b8:e3:79:9d:59:b9:9b:1b:c5:3b:b6: 6a:c4:9a:d1:c0:fc:ec:2f:83:0e:3f:38:f6:89:7a: 42:b0:42:62:bf:28:7b:a6:4a:fe:0d:20:8e:20:c8: b2:60:7b:d8:4b:ad:1d:57:79:d3:75:70:4a:cb:15: b1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FB:48:05:E5:A5:DC:8B:3A:69:58:41:3E:19:09:3F:39:4B:21:1B X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:af:a0:f1:76:c6:3e:1d:0b:b6:26:61:84:ec:bd:76:68:8b: 6b:48:66:a3:e9:f1:7f:1b:76:3e:11:45:61:ac:a8:86:b3:68: ed:b0:77:fa:92:44:24:25:45:37:95:b7:fd:0d:fe:15:59:6e: e0:75:fb:5f:ab:5d:3a:48:8b:6c:da:85:b3:0a:d6:6e:41:c3: 61:54:11:be:42:ef:d3:a7:7d:a3:ab:2b:f9:46:d2:8a:c8:34: 4d:37:e9:05:64:a1:7d:cf:63:c8:01:74:e0:3d:e0:b0:34:4d: 81:7f:52:32:53:92:12:f5:5c:b4:3b:56:df:f1:42:0b:37:60: 73:ad:dc:b3:81:8a:8a:c7:7f:83:0c:cb:76:9c:84:6a:53:79: 2e:95:b6:2b:72:a3:10:52:97:d4:46:e3:44:b1:e1:49:97:dd: 2a:fa:4e:0b:4a:08:55:18:48:67:cf:ab:0d:ee:99:f8:18:ff: db:1c:ee:48:62:73:84:06:0b:0a:d0:c6:75:ad:47:72:ed:cc: 89:92:93:a7:a4:2d:77:40:d2:bb:25:a3:34:82:c8:48:69:ab: c0:e5:e6:e2:eb:2c:91:2f:bd:a9:d6:25:61:0d:ee:b3:17:f8: 1a:46:5e:25:4f:c3:16:1c:1f:14:52:a5:52:e0:b6:e7:4b:72: e9:99:bc:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjUxMjIxMDE0MTIwWhcNMjUxMjI4MDE0MTIwWjAYMRYwFAYD VQQDDA02OTQ3NTA0MC1mNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5i6IYJ2vNObf6Kwpvqj+OUmbC+xC2ajVUqaIpcRQs4kGKxRd4Jw4s5PSsQZW SVmnDU/4EV9Sm+7oYenDbxodByPtLL+PCE+94WVnjvcC12agz/NJgVWGOn2cwdiO bkkxafz7QjoNf+dYaQkySC4ZP8TbGs4DMEoCV+N5CJnZKhC+frxJQ5gwfEnGYk1N H+iup9s30nYSZMmpo6hl/sGObbx2MI9XR4t9/9he6MU8xMQ5TsfuQEVodAC45bQY 9FdqRNZbWMyMuON5nVm5mxvFO7ZqxJrRwPzsL4MOPzj2iXpCsEJivyh7pkr+DSCO IMiyYHvYS60dV3nTdXBKyxWxbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPP7SAXl pdyLOmlYQT4ZCT85SyEbMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMr6DxdsY+HQu2JmGE7L12aItrSGaj6fF/G3Y+EUVhrKiGs2jtsHf6 kkQkJUU3lbf9Df4VWW7gdftfq106SIts2oWzCtZuQcNhVBG+Qu/Tp32jqyv5RtKK yDRNN+kFZKF9z2PIAXTgPeCwNE2Bf1IyU5IS9Vy0O1bf8UILN2BzrdyzgYqKx3+D DMt2nIRqU3kulbYrcqMQUpfURuNEseFJl90q+k4LSghVGEhnz6sN7pn4GP/bHO5I YnOEBgsK0MZ1rUdy7cyJkpOnpC13QNK7JaM0gshIaavA5ebi6yyRL72p1iVhDe6z F/gaRl4lT8MWHB8UUqVS4LbnS3Lpmby0 -----END CERTIFICATE-----Generated at Mon Dec 22 22:33:06 2025 by rpki-client