This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft File: _D34EL_Cm_HPvwqvpWOX65tMq3c.mft (raw, json) Hash identifier: 7gBBwIh7nWkH37JKyYvZP9je7uRWsUncvibd/RDPKgc= Subject key identifier: A5:49:40:CF:EC:68:2C:F9:7A:B4:5D:08:01:24:04:19:48:59:64:FC Authority key identifier: FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77 Certificate issuer: /CN=A916269D/serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77 Certificate serial: 0BC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft Manifest number: 0BC0 Signing time: Mon 22 Dec 2025 18:27:40 +0000 Manifest this update: Mon 22 Dec 2025 18:27:40 +0000 Manifest next update: Mon 29 Dec 2025 18:27:40 +0000 Files and hashes: 1: _D34EL_Cm_HPvwqvpWOX65tMq3c.crl (hash: /wDT9+RXYZyKeBf+jW5v3azL1mfBlWH1b9jiPjCD7Es=) 2: EDA2987A32A211EA87A1561DC4F9AE02.roa (hash: v4jt1ZjQNLJGtpWh7ObVJNt/5KBfDnWWuYACdukBsQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3015 (0xbc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916269D, serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77 Validity Not Before: Dec 22 18:27:40 2025 GMT Not After : Dec 29 18:27:40 2025 GMT Subject: CN=69498d9c-73d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a3:84:ec:17:fb:82:e2:4d:a5:48:4b:04:c5: 5a:eb:a7:0c:0f:e8:55:4d:f8:21:3e:ff:8c:7a:db: f9:4c:4f:a5:69:5a:0c:43:81:12:0e:dc:d2:f3:97: 45:dd:05:da:30:97:c0:e3:cc:a9:2b:03:ea:20:3b: 31:14:15:26:77:b3:7c:19:38:46:89:12:e1:e9:64: 68:7d:95:6f:21:37:7d:ed:87:c6:5a:9e:09:b3:9d: bb:bc:bb:1a:0c:4f:dd:23:af:5b:86:39:7c:8b:93: d4:cb:36:cd:ef:af:3a:b2:3c:b1:25:6a:5f:29:b1: e4:0b:93:e4:e3:bf:7d:ee:1f:5d:10:e0:01:7e:ec: 69:7e:62:bf:90:ae:c1:91:f0:a7:ca:b9:ac:cf:93: 08:1e:b2:7e:53:74:c1:61:2e:83:9f:f5:88:6b:09: 2e:d0:b8:38:82:97:3d:e5:9a:e7:bb:13:42:47:01: 04:ae:59:41:de:8b:91:98:8d:4e:f0:8e:64:a7:af: 49:dd:cf:de:7d:b0:8a:98:6e:42:27:ea:02:7f:82: 44:90:a1:30:4f:f2:f4:2d:64:0d:f1:39:ee:91:9f: b3:c3:33:24:7e:de:b1:bb:cb:d9:8b:ed:e7:65:7d: 42:55:3c:fe:8b:80:c9:37:63:d6:a4:59:d9:86:60: d0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:49:40:CF:EC:68:2C:F9:7A:B4:5D:08:01:24:04:19:48:59:64:FC X509v3 Authority Key Identifier: keyid:FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:7d:46:87:f1:be:ad:20:8d:7a:71:a3:27:b5:b3:f7:ec:c2: 8c:a0:09:74:3b:5a:17:4d:69:2f:53:ca:b7:02:97:3d:9d:b4: f9:e5:01:0e:64:e4:06:aa:d1:d0:7d:15:32:a6:80:e3:66:7e: cf:6b:c1:e7:94:e4:77:b6:d5:4c:d5:9e:2e:d8:d7:8a:07:90: 3c:22:33:8b:bc:4e:87:0d:63:49:81:3f:cb:d1:a6:50:be:ab: e7:3c:e6:3e:b0:07:e8:b8:e8:74:a8:92:1d:1b:e3:2b:4e:17: 24:be:3b:6a:19:b3:a2:67:7a:e9:3c:16:e2:ec:42:7c:dc:9e: c5:f9:8e:c3:8d:13:4e:61:8a:63:10:4a:61:f2:ac:4a:87:bf: e6:bf:4e:2f:f7:a3:a8:0f:c0:e0:ac:40:ce:ca:26:fe:08:32: 08:6e:68:ec:f6:57:1b:ca:d1:a0:18:f6:70:a7:87:8d:8f:d6: 5e:7d:ae:5f:4d:12:d4:16:f5:7f:f0:f4:95:6d:7d:a4:0e:e2: 26:63:ea:15:1d:6a:61:31:1d:14:17:91:6b:ab:41:b1:f9:36: a4:0f:fc:14:00:d3:33:bc:09:7d:83:66:2b:70:04:11:56:84: 7f:15:16:48:22:73:ce:43:fe:e6:28:4b:5c:0f:49:9c:e0:4b: 8c:e8:84:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI2OUQxMTAvBgNVBAUTKEZDM0RGODEwQkZDMjlCRjFDRkJGMEFBRkE1NjM5N0VC OUI0Q0FCNzcwHhcNMjUxMjIyMTgyNzQwWhcNMjUxMjI5MTgyNzQwWjAYMRYwFAYD VQQDDA02OTQ5OGQ5Yy03M2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiKOE7Bf7guJNpUhLBMVa66cMD+hVTfghPv+Metv5TE+laVoMQ4ESDtzS85dF 3QXaMJfA48ypKwPqIDsxFBUmd7N8GThGiRLh6WRofZVvITd97YfGWp4Js527vLsa DE/dI69bhjl8i5PUyzbN7686sjyxJWpfKbHkC5Pk47997h9dEOABfuxpfmK/kK7B kfCnyrmsz5MIHrJ+U3TBYS6Dn/WIawku0Lg4gpc95ZrnuxNCRwEErllB3ouRmI1O 8I5kp69J3c/efbCKmG5CJ+oCf4JEkKEwT/L0LWQN8TnukZ+zwzMkft6xu8vZi+3n ZX1CVTz+i4DJN2PWpFnZhmDQPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVJQM/s aCz5erRdCAEkBBlIWWT8MB8GA1UdIwQYMBaAFPw9+BC/wpvxz78Kr6Vjl+ubTKt3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjY5RC83OEJGOTQ1MDMy QTExMUVBODYyQkQ1MTdDNEY5QUUwMi9fRDM0RUxfQ21fSFB2d3F2cFdPWDY1dE1x M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19EMzRFTF9DbV9IUHZ3cXZwV09YNjV0TXEzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjY5RC83OEJGOTQ1MDMyQTExMUVBODYyQkQ1MTdDNEY5QUUwMi9fRDM0RUxfQ21f SFB2d3F2cFdPWDY1dE1xM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSfUaH8b6tII16caMntbP37MKMoAl0O1oXTWkvU8q3Apc9nbT55QEO ZOQGqtHQfRUypoDjZn7Pa8HnlOR3ttVM1Z4u2NeKB5A8IjOLvE6HDWNJgT/L0aZQ vqvnPOY+sAfouOh0qJIdG+MrThckvjtqGbOiZ3rpPBbi7EJ83J7F+Y7DjRNOYYpj EEph8qxKh7/mv04v96OoD8DgrEDOyib+CDIIbmjs9lcbytGgGPZwp4eNj9Zefa5f TRLUFvV/8PSVbX2kDuImY+oVHWphMR0UF5Frq0Gx+TakD/wUANMzvAl9g2YrcAQR VoR/FRZIInPOQ/7mKEtcD0mc4EuM6IR5 -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:57 2025 by rpki-client