This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft File: P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft (raw, json) Hash identifier: ee35sDxiSkgP1YNAiqLGhmg8QC1YcRRUPLT0AWV7bFk= Subject key identifier: 2F:CA:FE:4B:1E:AE:C2:34:AA:B8:C0:79:86:5E:F5:F8:FB:DB:52:A2 Authority key identifier: 3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80 Certificate issuer: /CN=A916A2FB/serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft Manifest number: 64 Signing time: Tue 23 Dec 2025 05:54:40 +0000 Manifest this update: Tue 23 Dec 2025 05:54:40 +0000 Manifest next update: Tue 30 Dec 2025 05:54:40 +0000 Files and hashes: 1: P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl (hash: c2VuAPJD76gEgYtko9xmj6lO+Eyegm2DevZL9sI0Uhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A2FB, serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80 Validity Not Before: Dec 23 05:54:40 2025 GMT Not After : Dec 30 05:54:40 2025 GMT Subject: CN=694a2ea0-8d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f0:3f:3c:35:98:e9:eb:2a:76:84:5b:02:8a: 70:68:f4:37:c9:2e:d7:e8:09:1b:1c:fb:1f:a9:be: d4:d9:7c:41:bc:cc:c4:63:ee:3b:e3:e9:1e:bd:75: b0:7e:2e:94:1d:88:fc:f0:2c:7d:d1:c4:3f:38:5c: b6:b8:52:3f:99:16:25:89:d1:bc:40:94:3a:8a:ff: 2e:ea:2e:14:06:d8:d5:44:79:e2:da:8e:10:bc:1b: e2:10:de:4a:e1:45:1c:57:3b:81:57:83:0e:fe:f8: 79:df:df:19:8a:0b:f6:ce:02:ac:38:b9:83:29:7a: a7:37:9d:99:65:22:16:15:45:7b:cc:28:9e:31:10: 99:1b:8b:d2:c1:e9:39:8c:8d:97:52:2b:1e:b5:f0: 2a:36:c3:16:d1:4b:0b:ec:ef:53:13:82:df:e9:84: 40:9d:93:3c:05:07:1f:74:e5:b1:9e:c5:20:b0:78: b3:72:48:dd:cc:ee:0e:c6:9a:fa:f1:8d:ad:b9:06: 0b:e3:4c:5a:56:ad:e5:1e:09:f0:39:1a:94:d3:e4: ad:d6:53:83:8b:c1:62:86:b5:95:69:ea:f2:99:d6: 7d:3e:88:ce:90:bf:1a:79:c9:2b:69:06:6e:d6:0e: 79:65:d3:e5:3b:38:9c:5d:76:9e:ad:d9:a8:a3:42: c0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CA:FE:4B:1E:AE:C2:34:AA:B8:C0:79:86:5E:F5:F8:FB:DB:52:A2 X509v3 Authority Key Identifier: keyid:3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:1a:3b:ec:e2:48:7e:6a:4c:1a:a9:42:73:eb:c3:50:22:8f: 13:5c:bd:8d:1d:e6:11:b7:a5:a7:70:71:62:b0:ae:c2:d4:80: 12:2c:c5:e7:8a:4a:9a:8a:a3:84:c1:57:99:38:46:23:30:18: b5:f3:b1:c1:bc:4f:b9:2e:53:c7:2b:39:e2:4b:cc:82:19:a8: af:fc:4c:e7:70:29:2f:5e:ac:e6:0c:c7:7d:3f:a0:ab:0e:93: d8:68:ab:20:c2:f5:37:97:e3:3b:d0:57:45:92:26:66:62:6f: c7:c2:ac:3f:9c:6f:4f:e5:49:47:2f:ac:0c:18:a6:fc:3c:89: cc:6a:cd:e8:91:66:8d:21:8b:0b:ad:dc:14:ea:06:a3:7a:5d: 51:b7:72:a2:93:39:f8:0d:92:1d:28:b3:22:5e:b9:d0:9f:3d: b6:08:0a:4c:fe:96:0d:97:ab:87:de:b3:8a:ac:d6:84:da:1e: 4d:28:e5:59:c7:6a:0a:50:50:c2:7e:bb:49:c6:b3:0c:24:16: 28:28:06:3c:98:6c:82:f6:cd:c8:f4:27:ee:5c:f3:81:f4:09: d2:26:94:a6:47:bf:e9:1d:43:66:44:8b:c1:76:88:72:bc:7f: 58:bc:aa:d8:c9:8f:e6:33:85:98:28:84:20:9f:80:64:21:fd: d4:e3:58:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QTJGQjExMC8GA1UEBRMoM0Y0OEFDQTEyQTU5MjdBNzAyRUNFRTI0NDE1MTg5MTk0 RUQ0QUE4MDAeFw0yNTEyMjMwNTU0NDBaFw0yNTEyMzAwNTU0NDBaMBgxFjAUBgNV BAMMDTY5NGEyZWEwLThkMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCV8D88NZjp6yp2hFsCinBo9DfJLtfoCRsc+x+pvtTZfEG8zMRj7jvj6R69dbB+ LpQdiPzwLH3RxD84XLa4Uj+ZFiWJ0bxAlDqK/y7qLhQG2NVEeeLajhC8G+IQ3krh RRxXO4FXgw7++Hnf3xmKC/bOAqw4uYMpeqc3nZllIhYVRXvMKJ4xEJkbi9LB6TmM jZdSKx618Co2wxbRSwvs71MTgt/phECdkzwFBx905bGexSCweLNySN3M7g7Gmvrx ja25BgvjTFpWreUeCfA5GpTT5K3WU4OLwWKGtZVp6vKZ1n0+iM6Qvxp5yStpBm7W Dnll0+U7OJxddp6t2aijQsB9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL8r+Sx6u wjSquMB5hl71+PvbUqIwHwYDVR0jBBgwFoAUP0isoSpZJ6cC7O4kQVGJGU7UqoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBMkZCLzlGOEY5RDAwNDY4 NzExRjBBRjY0Mjc0NEM0RjlBRTAyL1AwaXNvU3BaSjZjQzdPNGtRVkdKR1U3VXFv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDBpc29TcFpKNmNDN080a1FWR0pHVTdVcW9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB MkZCLzlGOEY5RDAwNDY4NzExRjBBRjY0Mjc0NEM0RjlBRTAyL1AwaXNvU3BaSjZj QzdPNGtRVkdKR1U3VXFvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEgaO+ziSH5qTBqpQnPrw1AijxNcvY0d5hG3padwcWKwrsLUgBIsxeeK SpqKo4TBV5k4RiMwGLXzscG8T7kuU8crOeJLzIIZqK/8TOdwKS9erOYMx30/oKsO k9hoqyDC9TeX4zvQV0WSJmZib8fCrD+cb0/lSUcvrAwYpvw8icxqzeiRZo0hiwut 3BTqBqN6XVG3cqKTOfgNkh0osyJeudCfPbYICkz+lg2Xq4fes4qs1oTaHk0o5VnH agpQUMJ+u0nGswwkFigoBjyYbIL2zcj0J+5c84H0CdImlKZHv+kdQ2ZEi8F2iHK8 f1i8qtjJj+YzhZgohCCfgGQh/dTjWPg= -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:11 2025 by rpki-client