This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json) Hash identifier: ea+Zbgj+78x4pRx1RdNSDTu2ZAkR4eFaKyumfC4XBoA= Subject key identifier: EE:34:ED:19:17:1C:78:7E:C1:3A:1B:2A:7A:56:94:7D:B6:C4:D9:4D Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 0845 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft Manifest number: 149B Signing time: Sat 20 Dec 2025 18:09:38 +0000 Manifest this update: Sat 20 Dec 2025 18:09:38 +0000 Manifest next update: Sat 27 Dec 2025 18:09:38 +0000 Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: sTddjxuvuKXTd8IQ6MER6mDZT+FaYoh0ZTgrZHzwQN8=) 2: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: LHvxfj3VCNmuKnrLv2NsZrToWYHoHHWWd+F8Qkfp44A=) 3: 3C73210E29E711F0AB5EBA80C4F9AE02.roa (hash: Y/kIeencj/taxOJRNaw/dIwoKt74Xz/Efsc6Lm3bUIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2117 (0x845) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Dec 20 18:09:38 2025 GMT Not After : Dec 27 18:09:38 2025 GMT Subject: CN=6946e662-c656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:c8:28:0b:dd:d9:78:e4:90:df:13:bc:19: 93:93:cf:15:ef:b1:65:0a:0a:d6:59:54:d7:ae:10: fc:28:33:f8:b3:75:b4:d8:aa:5b:74:bd:b6:5a:2d: 43:c8:4f:65:32:00:de:6c:50:4d:3c:5c:40:16:05: 6a:ec:ee:c8:78:90:74:ec:bb:eb:d2:f7:8e:94:e8: 2d:c2:9a:e0:1d:0a:9d:e4:4a:fd:12:15:33:fa:8e: d1:cf:ea:e3:dd:bf:ea:46:92:c9:cf:f1:40:b9:f2: 4b:7b:67:1b:ba:b7:01:85:c9:86:fd:25:f4:0c:29: f8:cf:3f:93:8b:3f:de:ea:84:2a:3d:3f:16:08:ef: 71:7e:e8:4d:59:fb:40:3b:64:92:b4:be:8e:0e:9e: 0e:7b:9b:51:b7:1d:24:3d:e1:81:30:08:4f:92:5c: 49:51:34:97:56:d9:41:30:34:e2:19:45:0c:53:87: 29:0b:c9:f4:3b:6f:eb:0b:d1:f3:18:fa:49:53:4f: c1:95:7f:42:15:82:72:47:22:d1:e1:fd:ef:28:dc: 4c:f6:e5:e4:89:bc:af:b1:6b:44:5a:89:1d:32:f4: 14:bd:44:28:df:18:6b:5b:53:0a:5d:95:62:47:ce: e4:0a:7c:8f:9c:96:eb:f4:7e:c3:69:89:a7:e0:45: 7f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:34:ED:19:17:1C:78:7E:C1:3A:1B:2A:7A:56:94:7D:B6:C4:D9:4D X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:92:d9:ed:06:9e:6d:5d:e5:bd:d0:f2:c7:58:f8:3d:9e:6c: 84:13:89:33:ec:ac:65:86:58:d9:d6:88:5e:ee:1e:69:d2:24: f4:96:5e:f4:c3:42:db:75:84:1f:dc:e3:94:92:80:9f:28:12: 81:16:78:42:c1:68:b6:6d:d7:c4:1c:12:0b:29:af:9e:d7:a0: 24:fc:d6:d5:26:58:7f:1a:7b:75:84:62:f8:dc:1c:ab:e9:45: 2b:c0:a0:ed:fb:ee:a4:96:ef:8b:ed:ab:68:b1:c9:80:54:8d: 10:43:dd:af:af:d4:fa:18:3a:78:f6:1c:07:3c:3e:2c:76:35: 78:56:22:da:90:30:72:05:16:53:e6:a2:c6:b4:2d:58:cb:2d: 0d:62:89:ff:80:ac:56:e7:ce:f2:a4:d8:86:b9:2b:84:04:9a: 0b:0b:ad:b0:96:da:c6:75:54:50:2b:72:6a:c0:51:1e:bb:5c: 05:9a:46:e5:e4:48:57:50:d9:f8:19:e6:09:33:d5:5b:40:bf: 43:71:bf:b0:3d:96:fd:c7:f7:50:66:02:44:e7:8e:75:de:ff: f0:4b:84:08:25:e0:97:2e:f1:f0:76:ef:5c:fd:52:85:a4:ca: ff:3d:73:4e:83:fb:90:c5:be:93:70:c7:0e:bf:f4:4d:c4:c1: bc:dd:af:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjUxMjIwMTgwOTM4WhcNMjUxMjI3MTgwOTM4WjAYMRYwFAYD VQQDDA02OTQ2ZTY2Mi1jNjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8HIKAvd2XjkkN8TvBmTk88V77FlCgrWWVTXrhD8KDP4s3W02KpbdL22Wi1D yE9lMgDebFBNPFxAFgVq7O7IeJB07Lvr0veOlOgtwprgHQqd5Er9EhUz+o7Rz+rj 3b/qRpLJz/FAufJLe2cburcBhcmG/SX0DCn4zz+Tiz/e6oQqPT8WCO9xfuhNWftA O2SStL6ODp4Oe5tRtx0kPeGBMAhPklxJUTSXVtlBMDTiGUUMU4cpC8n0O2/rC9Hz GPpJU0/BlX9CFYJyRyLR4f3vKNxM9uXkibyvsWtEWokdMvQUvUQo3xhrW1MKXZVi R87kCnyPnJbr9H7DaYmn4EV/owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO407RkX HHh+wTobKnpWlH22xNlNMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0 Ulk5VFg4WEczWjItME01emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWktntBp5tXeW90PLHWPg9nmyEE4kz7KxlhljZ1ohe7h5p0iT0ll70 w0LbdYQf3OOUkoCfKBKBFnhCwWi2bdfEHBILKa+e16Ak/NbVJlh/Gnt1hGL43Byr 6UUrwKDt++6klu+L7atoscmAVI0QQ92vr9T6GDp49hwHPD4sdjV4ViLakDByBRZT 5qLGtC1Yyy0NYon/gKxW587ypNiGuSuEBJoLC62wltrGdVRQK3JqwFEeu1wFmkbl 5EhXUNn4GeYJM9VbQL9Dcb+wPZb9x/dQZgJE54513v/wS4QIJeCXLvHwdu9c/VKF pMr/PXNOg/uQxb6TcMcOv/RNxMG83a+m -----END CERTIFICATE-----Generated at Sun Dec 21 16:15:04 2025 by rpki-client