This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft File: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft (raw, json) Hash identifier: YQqB+umUiVIqDF9bMZTlKYHG2NZNmy3T/+VYZGTX+NQ= Subject key identifier: CC:4D:E6:46:4E:22:E9:7E:10:9D:CA:A0:16:35:1C:6D:F0:A6:8F:E5 Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D Certificate issuer: /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Certificate serial: 11F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft Manifest number: 11E6 Signing time: Mon 22 Dec 2025 16:52:32 +0000 Manifest this update: Mon 22 Dec 2025 16:52:31 +0000 Manifest next update: Mon 29 Dec 2025 16:52:31 +0000 Files and hashes: 1: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl (hash: lGDJoudwZ8DFpK7rFtYpIzxYMN9Zb6P9izR792VxO74=) 2: 9467361CFEAA11E89E73E75BC4F9AE02.roa (hash: a/gC4lAR8I+9GlaLEIrNcMq2t/2/TV0+WCxlGU4GibY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4592 (0x11f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D1F2, serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Validity Not Before: Dec 22 16:52:31 2025 GMT Not After : Dec 29 16:52:31 2025 GMT Subject: CN=69497750-70fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:24:ab:00:30:4c:e3:09:60:e2:b9:47:ee:24: 02:2b:31:34:89:d2:92:6d:e8:b5:1d:6e:3a:40:57: 4d:7e:e8:97:4e:69:28:09:85:d1:87:fa:d1:6b:40: 6a:22:6e:60:d2:a1:1a:ec:3d:25:65:0e:32:f6:96: b0:8b:f4:c7:87:2a:21:17:1e:10:2a:0c:fa:df:e4: cd:08:0e:74:33:9b:7d:ee:00:93:cc:27:23:06:66: 4b:7c:5f:80:8c:89:c5:99:17:82:6a:b0:45:30:83: 8e:ca:c9:aa:c0:e5:4a:ec:dc:11:23:62:81:1e:45: 4d:2c:47:37:ff:67:a9:75:ad:5b:5f:31:63:dc:3c: d6:90:5a:a1:d6:d3:c6:93:7d:c2:a9:7e:fc:bc:70: 39:2d:d3:6f:c5:63:cc:03:80:92:15:bf:60:6d:96: b0:23:9f:7a:33:73:52:f0:0c:24:10:40:16:9f:db: c6:a1:e7:5e:cb:99:06:14:fe:87:56:fd:85:b3:0d: d5:a8:64:e3:36:1a:74:08:d1:5b:8f:fa:f2:cc:f3: 06:be:c9:ca:ea:4c:4a:60:d2:e9:4f:da:b6:05:7b: 57:cf:81:67:9c:8a:bc:f6:11:b7:82:f9:3e:a4:5a: 3a:7b:8a:8a:88:27:90:39:7f:b9:07:db:62:7b:4f: 1e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4D:E6:46:4E:22:E9:7E:10:9D:CA:A0:16:35:1C:6D:F0:A6:8F:E5 X509v3 Authority Key Identifier: keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6a:a2:76:83:9b:bd:05:19:62:e8:91:0c:16:29:37:6f:10: 53:eb:03:99:9b:c2:fc:10:58:4d:91:b9:8d:51:25:4f:c4:43: b8:31:02:ec:11:f0:4b:05:44:6c:e8:6b:04:fd:f0:c1:ab:02: 96:0c:00:64:a5:c0:69:a9:2a:1a:69:20:b1:23:5a:9d:82:4f: 1f:4c:2c:b6:47:7f:2f:70:52:c4:fc:ba:0d:38:4a:fd:79:4b: bf:9c:a6:10:da:73:79:4f:7d:82:c1:7d:df:e8:69:ef:38:cc: e3:14:aa:2e:9b:45:96:e9:21:5c:fd:80:53:bc:bd:f9:8c:0a: 02:ac:9a:46:26:77:50:bd:ae:46:d8:41:39:49:75:22:17:1a: b0:f8:73:d4:7b:98:86:69:93:c9:46:b6:ba:f0:ec:3d:45:43: 0b:85:96:fe:ec:69:bd:a6:15:f7:54:f7:af:b5:e9:cf:ba:51: bf:b2:f7:d6:17:44:d4:b1:a7:1c:1b:7e:99:ec:e2:bb:4e:6a: 7d:94:88:ff:17:e7:3c:8f:8f:f8:30:cd:3d:8f:50:a0:d6:a8: b8:b3:84:8d:de:14:57:c1:02:34:09:22:32:87:e0:ba:d5:c0: 0a:88:8f:cf:31:84:a6:9b:dd:17:2a:7e:23:60:e3:46:22:da: 89:56:87:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxRjIxMTAvBgNVBAUTKDA3NTMyQ0Y2RDJCQzRDQTlEOTI3RjMwN0QwRTZCODI4 NzdEOEVFNEQwHhcNMjUxMjIyMTY1MjMxWhcNMjUxMjI5MTY1MjMxWjAYMRYwFAYD VQQDDA02OTQ5Nzc1MC03MGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiSrADBM4wlg4rlH7iQCKzE0idKSbei1HW46QFdNfuiXTmkoCYXRh/rRa0Bq Im5g0qEa7D0lZQ4y9pawi/THhyohFx4QKgz63+TNCA50M5t97gCTzCcjBmZLfF+A jInFmReCarBFMIOOysmqwOVK7NwRI2KBHkVNLEc3/2epda1bXzFj3DzWkFqh1tPG k33CqX78vHA5LdNvxWPMA4CSFb9gbZawI596M3NS8AwkEEAWn9vGoedey5kGFP6H Vv2Fsw3VqGTjNhp0CNFbj/ryzPMGvsnK6kxKYNLpT9q2BXtXz4FnnIq89hG3gvk+ pFo6e4qKiCeQOX+5B9tie08eCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxN5kZO Iul+EJ3KoBY1HG3wpo/lMB8GA1UdIwQYMBaAFAdTLPbSvEyp2SfzB9DmuCh32O5N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFGMi9BRjMyMUQzQ0ZF N0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRLblpKX01IME9hNEtIZlk3 azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IxTXM5dEs4VEtuWkpfTUgwT2E0S0hmWTdrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDFGMi9BRjMyMUQzQ0ZFN0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRL blpKX01IME9hNEtIZlk3azAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbaqJ2g5u9BRli6JEMFik3bxBT6wOZm8L8EFhNkbmNUSVPxEO4MQLs EfBLBURs6GsE/fDBqwKWDABkpcBpqSoaaSCxI1qdgk8fTCy2R38vcFLE/LoNOEr9 eUu/nKYQ2nN5T32CwX3f6GnvOMzjFKoum0WW6SFc/YBTvL35jAoCrJpGJndQva5G 2EE5SXUiFxqw+HPUe5iGaZPJRra68Ow9RUMLhZb+7Gm9phX3VPevtenPulG/svfW F0TUsaccG36Z7OK7Tmp9lIj/F+c8j4/4MM09j1Cg1qi4s4SN3hRXwQI0CSIyh+C6 1cAKiI/PMYSmm90XKn4jYONGItqJVoee -----END CERTIFICATE-----Generated at Tue Dec 23 03:32:23 2025 by rpki-client