This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json) Hash identifier: 34+5HXqtTL7d4h6YtRg6YeLI2YI/6WFaL4ThjzAc9Ak= Subject key identifier: 5C:BB:A4:E5:69:C8:93:C8:73:41:C5:83:2D:D3:56:CA:B3:25:49:F7 Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Certificate serial: 2592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft Manifest number: 257D Signing time: Mon 22 Dec 2025 15:35:03 +0000 Manifest this update: Mon 22 Dec 2025 15:35:03 +0000 Manifest next update: Mon 29 Dec 2025 15:35:03 +0000 Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: tfuRF8hRA1nRw7AjUxWxXYKh0bq41zAFPYx65+H3mz0=) 2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: SqubnCOkk8RsrmFBLZGk+dGzptnKgDT9xCotCHCxhuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9618 (0x2592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Validity Not Before: Dec 22 15:35:03 2025 GMT Not After : Dec 29 15:35:03 2025 GMT Subject: CN=69496527-7329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:65:26:27:92:10:5d:9c:0d:48:08:e8:ee: 49:36:6c:b0:e2:40:f4:48:4c:7d:b8:9c:a0:00:54: 66:b4:4a:e6:a4:ca:03:25:3e:32:f5:da:79:30:b8: dc:08:63:01:fa:f8:52:4b:78:55:c9:46:af:99:12: 3c:20:34:b5:ee:ea:1c:36:e7:5a:cd:bf:e4:10:cb: cb:5c:e2:f5:7c:a7:02:48:ff:2e:e5:45:d8:5e:03: 75:dc:16:51:43:af:ea:29:e9:77:36:c0:b7:ca:19: d7:76:71:b1:68:e1:e3:88:6f:81:a2:ac:cd:a8:fe: bc:bd:bf:13:8e:6a:27:ae:96:da:8e:b9:0f:76:a5: 90:c5:fd:64:45:a2:84:85:76:4a:f0:d9:48:70:41: da:23:ac:cc:b7:59:f9:4a:a3:2c:26:0f:ac:7d:90: 83:7b:75:8f:b4:63:23:0d:3b:78:93:ea:df:cb:ca: 7c:e2:f3:e6:50:d7:41:2d:bd:e3:ab:b4:4e:4d:99: 68:b6:90:2c:07:21:e0:35:88:ed:45:06:64:7b:a5: 22:57:51:85:1c:7e:9c:12:86:ba:ac:9f:f5:d5:5d: 33:85:78:6f:89:2f:65:bb:af:4d:2a:8a:67:76:00: 68:06:0e:65:23:15:c6:87:69:c2:de:4b:12:4e:c8: 0b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BB:A4:E5:69:C8:93:C8:73:41:C5:83:2D:D3:56:CA:B3:25:49:F7 X509v3 Authority Key Identifier: keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:86:55:e1:93:ec:bd:af:93:fc:e3:99:d9:85:c2:32:7d:36: 36:d3:37:c1:d3:68:e0:36:cb:31:2e:ee:ab:7b:da:56:d7:06: c1:ec:20:67:bd:05:8c:4b:54:0f:a3:ae:68:8f:06:61:0c:97: 23:27:5c:55:4c:3f:e3:e0:f0:f6:7c:91:b9:9c:ed:54:75:06: 3c:39:4f:f9:54:cc:8f:3c:3b:89:26:86:3a:a4:55:78:28:a6: d8:0a:dc:69:da:28:25:6d:8d:fd:b9:3f:69:4e:ad:6b:08:83: 2e:fa:d6:0a:17:67:18:e2:6e:f4:f5:4b:55:07:99:74:23:b5: ec:35:7b:39:a3:2c:41:dd:80:bc:2a:12:46:5e:52:4b:ef:19: 79:f7:97:a0:a2:f8:80:3c:68:21:f4:0a:61:f1:90:d4:ff:6a: 5d:05:51:fd:52:2d:43:62:9e:ed:9e:13:c3:dc:52:94:42:59: e3:7c:79:a6:8d:14:75:2a:e9:77:a8:77:3d:d2:39:82:e3:6b: 1d:16:43:0e:27:b2:b2:78:0f:06:1c:2e:93:62:25:76:c3:6a: 70:38:6d:ca:da:f4:ec:85:8a:11:97:9e:19:ec:4b:1e:f0:b5: 80:a1:40:7f:89:cb:13:d7:ba:74:51:af:12:e5:2d:ec:96:03: 85:ce:7d:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0ExODcxQkFEODNG RUY5REY0ODQwHhcNMjUxMjIyMTUzNTAzWhcNMjUxMjI5MTUzNTAzWjAYMRYwFAYD VQQDDA02OTQ5NjUyNy03MzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva9lJieSEF2cDUgI6O5JNmyw4kD0SEx9uJygAFRmtErmpMoDJT4y9dp5MLjc CGMB+vhSS3hVyUavmRI8IDS17uocNudazb/kEMvLXOL1fKcCSP8u5UXYXgN13BZR Q6/qKel3NsC3yhnXdnGxaOHjiG+BoqzNqP68vb8TjmonrpbajrkPdqWQxf1kRaKE hXZK8NlIcEHaI6zMt1n5SqMsJg+sfZCDe3WPtGMjDTt4k+rfy8p84vPmUNdBLb3j q7ROTZlotpAsByHgNYjtRQZke6UiV1GFHH6cEoa6rJ/11V0zhXhviS9lu69NKopn dgBoBg5lIxXGh2nC3ksSTsgLvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFy7pOVp yJPIc0HFgy3TVsqzJUn3MB8GA1UdIwQYMBaAFJPnYYzP4mSA15J6GHG62D/vnfSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjQzOC9CN0VGNTNGRTJC NEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJRFhrbm9ZY2JyWVAtLWQ5 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2stZGhqTV9pWklEWGtub1ljYnJZUC0tZDlJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjQzOC9CN0VGNTNGRTJCNEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJ RFhrbm9ZY2JyWVAtLWQ5SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwhlXhk+y9r5P845nZhcIyfTY20zfB02jgNssxLu6re9pW1wbB7CBn vQWMS1QPo65ojwZhDJcjJ1xVTD/j4PD2fJG5nO1UdQY8OU/5VMyPPDuJJoY6pFV4 KKbYCtxp2iglbY39uT9pTq1rCIMu+tYKF2cY4m709UtVB5l0I7XsNXs5oyxB3YC8 KhJGXlJL7xl595egoviAPGgh9Aph8ZDU/2pdBVH9Ui1DYp7tnhPD3FKUQlnjfHmm jRR1Kul3qHc90jmC42sdFkMOJ7KyeA8GHC6TYiV2w2pwOG3K2vTshYoRl54Z7Ese 8LWAoUB/icsT17p0Ua8S5S3slgOFzn07 -----END CERTIFICATE-----Generated at Tue Dec 23 11:06:24 2025 by rpki-client