This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft File: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft (raw, json) Hash identifier: qDO3BwZTTXzjfABZWiZsxTIV+UDaNefUmX2M7RZfoRY= Subject key identifier: DD:0F:F9:27:9C:DF:EA:1D:A0:3E:2C:24:AE:BB:89:62:E7:22:20:99 Authority key identifier: 4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B Certificate issuer: /CN=A916C4BC/serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B Certificate serial: 04C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft Manifest number: 04C2 Signing time: Mon 22 Dec 2025 23:20:22 +0000 Manifest this update: Mon 22 Dec 2025 23:20:21 +0000 Manifest next update: Mon 29 Dec 2025 23:20:21 +0000 Files and hashes: 1: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl (hash: 8vz38xL3RG3Wmw5bqemrcA3VEynhg1bjdZm0v8VeTsY=) 2: F593443851B011ECB5188E24C4F9AE02.roa (hash: u6WvYhAV0I8MI//f7K66UR4RMWrbxxWj/3CiMmcMy7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1223 (0x4c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4BC, serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B Validity Not Before: Dec 22 23:20:21 2025 GMT Not After : Dec 29 23:20:21 2025 GMT Subject: CN=6949d235-9068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c7:90:c8:8f:59:ea:17:32:85:cb:18:8e:d2: 05:c4:a1:8e:40:35:42:a7:ea:e9:35:a0:45:8f:23: e4:34:1c:01:41:f0:a3:0b:d7:9c:13:02:a2:09:da: 00:16:e1:b4:ad:9e:a3:5f:86:82:d9:ce:1f:05:0e: 1d:4e:5b:e2:a2:0a:61:41:1d:d5:d6:69:e7:be:50: e0:97:31:5d:3e:b5:51:00:5f:9e:63:23:0f:dc:5f: 58:72:d3:65:3a:d1:f4:02:bf:92:cd:17:a2:44:e9: 5c:4a:12:ff:01:c4:d2:e1:24:99:1d:16:cd:39:21: 19:b4:a5:5c:9f:8d:ee:cc:13:3b:48:10:58:cb:46: e9:86:65:a5:d8:05:6c:32:7d:6e:2a:14:e4:8c:36: dc:fd:82:cf:6e:ed:cf:45:d0:f3:46:d7:42:c8:61: 05:36:8d:b3:fc:39:95:25:44:01:a0:6a:c6:b8:25: 52:49:41:8f:fe:4d:e6:57:7c:1f:52:f3:d4:15:07: 7e:d6:4f:d2:dc:cc:f3:d2:3e:bc:f7:63:66:44:2e: 9b:44:87:42:89:b8:28:9d:3e:e6:b5:ad:db:15:e8: 47:7b:2e:57:33:17:5f:e6:ac:d3:04:f8:ae:cf:31: 7a:20:7f:e0:0a:b7:28:b5:49:f2:7a:0d:2a:92:0d: 81:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0F:F9:27:9C:DF:EA:1D:A0:3E:2C:24:AE:BB:89:62:E7:22:20:99 X509v3 Authority Key Identifier: keyid:4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:18:3f:e0:6f:25:b9:38:9a:bf:de:e7:8b:9f:ef:80:47:9c: 60:ed:f4:28:64:ea:14:b0:97:aa:07:ef:5c:a6:79:e6:74:3c: ee:c1:f2:94:91:26:c4:f4:05:32:0d:a2:40:17:14:6e:71:5f: 35:d3:a1:ad:81:4b:ec:9d:bd:5b:e7:b8:83:1c:ec:8a:de:24: 22:a0:6e:5d:f7:a0:5c:7b:90:41:5d:90:3a:5e:9a:f8:0c:7d: 06:51:31:10:e7:6a:94:a3:46:38:90:89:cc:0f:06:dc:32:01: c2:bb:85:6f:30:29:5b:7b:50:a1:6e:80:17:ff:df:3e:41:c4: 3a:15:2b:aa:c4:d5:61:96:ca:43:ac:56:35:89:1f:ed:46:f4: 8d:eb:b2:be:21:83:65:29:c5:ff:7f:42:1d:a1:ac:ab:d2:14: 7a:21:f2:3e:74:e0:06:d7:01:b8:04:19:fd:29:c9:5c:64:6d: 26:ed:9c:00:dd:d5:03:9e:f0:5d:c0:0e:cb:4a:3a:56:eb:b8: 4d:ae:0b:4a:89:2e:db:62:0e:ec:b2:0e:d8:ad:2c:32:7c:eb: 76:6f:04:6d:65:2a:3a:11:55:fa:c9:7c:b0:c2:e8:ef:6c:63: 6f:cf:88:ca:51:f4:78:c8:2d:51:b2:80:00:a9:36:4e:70:51: 71:fd:52:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NkM0QkMxMTAvBgNVBAUTKDRERkVDMzQzN0M5MEJGNDE0RDA1MTg4QjQ4MkM3ODQ4 RTZGMzE2MUIwHhcNMjUxMjIyMjMyMDIxWhcNMjUxMjI5MjMyMDIxWjAYMRYwFAYD VQQDDA02OTQ5ZDIzNS05MDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8eQyI9Z6hcyhcsYjtIFxKGOQDVCp+rpNaBFjyPkNBwBQfCjC9ecEwKiCdoA FuG0rZ6jX4aC2c4fBQ4dTlviogphQR3V1mnnvlDglzFdPrVRAF+eYyMP3F9YctNl OtH0Ar+SzReiROlcShL/AcTS4SSZHRbNOSEZtKVcn43uzBM7SBBYy0bphmWl2AVs Mn1uKhTkjDbc/YLPbu3PRdDzRtdCyGEFNo2z/DmVJUQBoGrGuCVSSUGP/k3mV3wf UvPUFQd+1k/S3Mzz0j6892NmRC6bRIdCibgonT7mta3bFehHey5XMxdf5qzTBPiu zzF6IH/gCrcotUnyeg0qkg2BfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0P+Sec 3+odoD4sJK67iWLnIiCZMB8GA1UdIwQYMBaAFE3+w0N8kL9BTQUYi0gseEjm8xYb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRCQy9BOTcwQjJFQzUx QUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYwRk5CUmlMU0N4NFNPYnpG aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RmN0RRM3lRdjBGTkJSaUxTQ3g0U09iekZocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRCQy9BOTcwQjJFQzUxQUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYw Rk5CUmlMU0N4NFNPYnpGaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKGD/gbyW5OJq/3ueLn++AR5xg7fQoZOoUsJeqB+9cpnnmdDzuwfKU kSbE9AUyDaJAFxRucV8106GtgUvsnb1b57iDHOyK3iQioG5d96Bce5BBXZA6Xpr4 DH0GUTEQ52qUo0Y4kInMDwbcMgHCu4VvMClbe1ChboAX/98+QcQ6FSuqxNVhlspD rFY1iR/tRvSN67K+IYNlKcX/f0Idoayr0hR6IfI+dOAG1wG4BBn9KclcZG0m7ZwA 3dUDnvBdwA7LSjpW67hNrgtKiS7bYg7ssg7YrSwyfOt2bwRtZSo6EVX6yXywwujv bGNvz4jKUfR4yC1RsoAAqTZOcFFx/VJJ -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:50 2025 by rpki-client