This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json) Hash identifier: ykgiwVz50lyY8EjC6QRUwL+R1RTKdtfRp07WRH5cM0w= Subject key identifier: 6C:20:72:5D:EF:24:B4:17:98:31:0E:0E:DB:E0:37:0D:92:35:99:ED Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft Manifest number: 03CB Signing time: Thu 18 Dec 2025 23:56:27 +0000 Manifest this update: Thu 18 Dec 2025 23:56:27 +0000 Manifest next update: Thu 25 Dec 2025 23:56:27 +0000 Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: y7qC6ls3ScgfPcaPwv/hoMmwwP6gv8fpzbOzGolUP4I=) 2: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: jSZIZjYKkStn9QppODMFCLkxqd3q8dcDZLkti6SpjkQ=) 3: A201A06CB42B11F0849A7A7AC4F9AE02.roa (hash: naDT4mj+S+S7gTqhgPY4e5xWl/al1LzU7j3FtO35LsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Validity Not Before: Dec 18 23:56:27 2025 GMT Not After : Dec 25 23:56:27 2025 GMT Subject: CN=694494ab-24a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:37:50:d6:22:7e:f2:f2:10:ad:ff:38:8e:cb: 00:b1:0a:c4:58:c1:a5:42:a1:ab:db:7e:8c:19:8c: fc:18:6d:37:4e:02:c2:de:e5:18:b2:77:3b:ac:4c: 63:5d:91:4b:01:43:a3:6c:3d:aa:ef:58:b0:cc:86: 2a:f6:cb:d6:55:45:5c:28:4a:f9:af:07:8c:84:3b: 3f:92:97:5f:e7:cb:3d:1d:75:d5:74:72:14:bd:c4: e1:dd:cc:a6:82:07:e0:0f:fc:b8:0e:43:33:60:5f: 40:a1:21:f7:76:59:c3:eb:65:d5:5d:33:18:1a:ba: 3e:ad:d1:41:14:3d:93:f1:0d:f1:60:b3:ce:ce:1b: d8:f5:b4:e4:8b:8d:d3:5a:da:ed:a9:d3:25:de:7b: f7:ae:a4:a8:e7:7d:d1:c2:7f:a5:b5:be:19:1e:23: 5f:d2:d9:ef:31:12:87:c0:07:b0:96:6f:7c:1e:bb: 30:0c:49:a1:db:d7:c6:70:98:01:74:82:af:0d:dd: 39:4b:4b:67:0f:d6:2f:65:c1:a7:2e:76:9b:d1:3d: 25:7b:af:cf:e8:6c:c0:55:67:43:98:6c:60:ca:9c: ae:f9:8a:3b:5b:1a:7f:39:ad:9c:b3:35:6b:e5:34: 30:90:50:fd:aa:4a:53:9d:f5:5a:2a:75:43:f8:b1: a1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:20:72:5D:EF:24:B4:17:98:31:0E:0E:DB:E0:37:0D:92:35:99:ED X509v3 Authority Key Identifier: keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b0:ca:d4:94:02:ba:8a:82:71:a6:4b:3d:6b:50:c8:82:f8: 93:30:f6:94:95:cd:bc:0c:df:e8:47:60:79:66:44:b8:8e:34: 63:31:9b:ae:2f:dc:d9:e3:08:c3:31:d8:0c:ec:64:dc:81:be: 04:66:22:5e:64:a3:42:c0:05:17:97:f1:5e:41:fc:b5:f5:b8: 3c:47:d1:8f:f7:77:aa:3b:0a:16:09:89:d3:d1:6c:dd:f5:0e: e9:3b:d8:2f:77:ab:4d:e5:a9:64:9a:ab:f6:e1:47:47:aa:6a: 22:43:fc:1d:6e:f1:88:c5:40:50:32:7a:f1:66:28:cb:86:ec: 93:40:2e:33:c4:30:4b:47:a5:ce:c7:52:43:1c:10:61:9d:8e: 7b:5f:b2:f3:5b:09:cf:6f:3a:cd:e8:b1:8a:50:6c:9c:81:d1: 99:52:6b:e8:2b:73:a1:5e:65:2e:28:75:f7:dc:45:8d:b3:13: c2:39:6a:32:16:3d:77:19:4f:ec:62:df:d7:7e:2c:c1:04:29: 35:8b:f2:64:bc:d1:6b:b1:8c:9a:ee:b6:15:7b:26:57:d9:74: 44:d4:29:e1:ad:95:04:8f:a4:fd:3a:03:29:77:48:6c:ab:b9: 70:23:5b:1a:32:3c:75:ea:18:aa:8c:51:b6:68:e2:0e:a8:4a: 11:4b:2e:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND NDE0RjE2QjUwHhcNMjUxMjE4MjM1NjI3WhcNMjUxMjI1MjM1NjI3WjAYMRYwFAYD VQQDDA02OTQ0OTRhYi0yNGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTdQ1iJ+8vIQrf84jssAsQrEWMGlQqGr236MGYz8GG03TgLC3uUYsnc7rExj XZFLAUOjbD2q71iwzIYq9svWVUVcKEr5rweMhDs/kpdf58s9HXXVdHIUvcTh3cym ggfgD/y4DkMzYF9AoSH3dlnD62XVXTMYGro+rdFBFD2T8Q3xYLPOzhvY9bTki43T WtrtqdMl3nv3rqSo533Rwn+ltb4ZHiNf0tnvMRKHwAewlm98HrswDEmh29fGcJgB dIKvDd05S0tnD9YvZcGnLnab0T0le6/P6GzAVWdDmGxgypyu+Yo7Wxp/Oa2cszVr 5TQwkFD9qkpTnfVaKnVD+LGh1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwgcl3v JLQXmDEODtvgNw2SNZntMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5 QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm b1ljcTN1VFBKaVBFRlBGclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnsMrUlAK6ioJxpks9a1DIgviTMPaUlc28DN/oR2B5ZkS4jjRjMZuu L9zZ4wjDMdgM7GTcgb4EZiJeZKNCwAUXl/FeQfy19bg8R9GP93eqOwoWCYnT0Wzd 9Q7pO9gvd6tN5alkmqv24UdHqmoiQ/wdbvGIxUBQMnrxZijLhuyTQC4zxDBLR6XO x1JDHBBhnY57X7LzWwnPbzrN6LGKUGycgdGZUmvoK3OhXmUuKHX33EWNsxPCOWoy Fj13GU/sYt/XfizBBCk1i/JkvNFrsYya7rYVeyZX2XRE1CnhrZUEj6T9OgMpd0hs q7lwI1saMjx16hiqjFG2aOIOqEoRSy6l -----END CERTIFICATE-----Generated at Fri Dec 19 03:49:25 2025 by rpki-client