This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json) Hash identifier: XDoHumNCZHtOWphf24BmatB8RnwJKNhgA6BfudFuAyA= Subject key identifier: C0:49:DC:0E:03:0F:11:6C:27:04:AF:6E:E2:55:F3:8F:31:DF:94:B9 Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft Manifest number: 014B Signing time: Tue 23 Dec 2025 03:18:27 +0000 Manifest this update: Tue 23 Dec 2025 03:18:27 +0000 Manifest next update: Tue 30 Dec 2025 03:18:27 +0000 Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: AbeqFmpokaX/IXjZypULVYGiFARbEs6peHUopM9aQGs=) 2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: Ga1jsRYecaBQWadBOEJf3Y9akBHnUgs+85T4mwwYjp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Validity Not Before: Dec 23 03:18:27 2025 GMT Not After : Dec 30 03:18:27 2025 GMT Subject: CN=694a0a03-22ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:28:3e:b2:22:a0:db:50:47:7d:ec:5e:52:6b: 47:c6:2b:3a:ec:d8:75:d0:76:17:1d:a0:e2:ae:0f: 3e:24:e5:8a:a5:44:e6:aa:07:2e:4d:bf:0b:eb:17: 71:23:e2:76:3e:12:18:7d:2d:06:1e:72:de:d2:80: 5e:28:60:ae:4a:e2:ac:cc:82:14:36:2d:f7:84:90: 90:3f:b6:df:b7:1f:2a:f6:fa:b3:ec:50:2b:05:7f: 8d:17:7a:ed:bd:45:a7:99:34:c1:77:07:60:91:5c: 09:d0:64:e1:9c:12:d5:b5:49:c3:a2:bf:7e:8b:8f: 30:a8:55:61:23:c8:d8:b6:4f:db:d0:4b:92:d2:95: 0d:94:1b:17:de:b5:7b:57:c3:28:85:e0:70:6b:c7: 86:90:75:7c:91:eb:6e:fa:0f:3f:b6:2c:79:30:a8: e0:51:82:20:3b:20:c5:e2:af:b8:29:e0:92:85:90: 1f:db:69:bd:5c:03:73:65:13:9c:1e:18:ae:21:24: 20:81:83:6e:4e:13:39:a4:59:ae:22:41:81:53:fd: a6:69:b8:c2:54:8e:e5:7c:49:ea:26:c6:c0:ca:a3: 72:9b:93:1f:f0:23:6c:de:d2:4a:f4:98:72:71:2d: f1:c6:f4:e2:34:2e:12:3a:cd:6f:d5:73:7f:7d:71: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:49:DC:0E:03:0F:11:6C:27:04:AF:6E:E2:55:F3:8F:31:DF:94:B9 X509v3 Authority Key Identifier: keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:6a:35:2c:cc:62:eb:19:ee:c4:5c:6a:8a:dc:5d:72:f1:a9: 01:f1:81:a1:39:b8:d7:47:ca:e4:2e:e8:e4:40:f2:a1:a9:7d: a7:24:39:50:8e:9d:35:81:b9:e3:67:96:57:59:68:4f:3c:79: bd:f6:42:b7:db:4b:58:25:88:6c:e2:a6:24:ce:f1:5f:3c:4c: 80:e5:3f:c9:92:fe:a1:bf:8b:64:17:69:6c:1a:35:dd:b6:7b: c3:4a:09:f2:5b:2f:ae:e2:68:9c:58:c8:c4:86:35:6b:7e:59: 52:21:c7:e7:37:c3:b6:6d:c6:c9:e9:f1:e0:f8:6d:48:e3:dc: 93:cf:dc:4f:3c:3f:0b:1b:79:f8:7a:70:3d:15:62:a8:9d:3e: 52:9c:3e:3b:cd:d4:38:84:dd:77:1e:63:56:14:2c:c0:c6:5d: f9:05:f4:d4:55:a0:7b:8b:cb:73:81:42:de:c5:09:c6:a5:16: b7:e7:e7:50:7d:88:8f:bc:68:5f:6e:65:95:e8:47:f0:f2:0d: 41:61:59:b9:d8:a6:5c:c9:63:40:a8:af:12:00:a9:7c:5d:ca: bf:c1:e1:42:19:7d:39:13:92:72:f9:26:0d:46:6b:bb:fb:69: 9c:05:bd:86:73:30:c9:a6:7d:62:ae:c8:05:f2:6b:28:ee:33: ee:bf:58:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz MzQ3MjEwODIwHhcNMjUxMjIzMDMxODI3WhcNMjUxMjMwMDMxODI3WjAYMRYwFAYD VQQDDA02OTRhMGEwMy0yMmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmyg+siKg21BHfexeUmtHxis67Nh10HYXHaDirg8+JOWKpUTmqgcuTb8L6xdx I+J2PhIYfS0GHnLe0oBeKGCuSuKszIIUNi33hJCQP7bftx8q9vqz7FArBX+NF3rt vUWnmTTBdwdgkVwJ0GThnBLVtUnDor9+i48wqFVhI8jYtk/b0EuS0pUNlBsX3rV7 V8MoheBwa8eGkHV8ketu+g8/tix5MKjgUYIgOyDF4q+4KeCShZAf22m9XANzZROc HhiuISQggYNuThM5pFmuIkGBU/2mabjCVI7lfEnqJsbAyqNym5Mf8CNs3tJK9Jhy cS3xxvTiNC4SOs1v1XN/fXEn+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBJ3A4D DxFsJwSvbuJV848x35S5MB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2 NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhB M3cybE96MlRFMll6UnlFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtajUszGLrGe7EXGqK3F1y8akB8YGhObjXR8rkLujkQPKhqX2nJDlQ jp01gbnjZ5ZXWWhPPHm99kK320tYJYhs4qYkzvFfPEyA5T/Jkv6hv4tkF2lsGjXd tnvDSgnyWy+u4micWMjEhjVrfllSIcfnN8O2bcbJ6fHg+G1I49yTz9xPPD8LG3n4 enA9FWKonT5SnD47zdQ4hN13HmNWFCzAxl35BfTUVaB7i8tzgULexQnGpRa35+dQ fYiPvGhfbmWV6Efw8g1BYVm52KZcyWNAqK8SAKl8Xcq/weFCGX05E5Jy+SYNRmu7 +2mcBb2GczDJpn1irsgF8mso7jPuv1j9 -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:32 2025 by rpki-client