This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft File: rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft (raw, json) Hash identifier: q9Ehs1u7pZ0hBlI8mufUY4V2S0F21CJ6g09kJFHfvlM= Subject key identifier: 2E:84:73:2B:98:36:A6:14:08:B4:E6:6B:F1:A2:4C:D5:C6:22:81:52 Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft Manifest number: 0841 Signing time: Sat 20 Dec 2025 20:12:56 +0000 Manifest this update: Sat 20 Dec 2025 20:12:56 +0000 Manifest next update: Sat 27 Dec 2025 20:12:56 +0000 Files and hashes: 1: rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl (hash: l7Cwt5tz1cqbMamJXlSlZKpzuFDEfoQJmfkRKfHpuYE=) 2: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (hash: mDiyXguFaGa3vR8D07iQ+K1O3uq6pL2JeIG9VyLGezQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917138D, serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Validity Not Before: Dec 20 20:12:56 2025 GMT Not After : Dec 27 20:12:56 2025 GMT Subject: CN=69470348-e390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:87:d5:fa:af:9b:5b:29:41:f4:db:23:f0: 89:ac:8e:87:70:bb:0c:8c:5c:9c:f1:8a:c8:81:29: 99:e6:b8:7b:a5:f3:43:97:c5:ae:2c:d2:47:e0:db: 7c:2e:04:30:4f:89:93:cc:5a:17:8b:e9:7a:ac:f8: 6c:86:01:e6:cd:bc:f5:70:f8:a6:ce:89:d1:b1:37: 2b:2d:5f:8a:ef:38:d3:9e:c0:59:2a:ac:95:82:3a: 8c:59:23:91:ef:4a:c3:f1:45:76:35:ef:4b:62:ed: d4:1e:88:92:55:b4:99:59:19:2d:ca:f8:47:a8:14: c7:12:33:c8:3d:9f:64:24:94:b2:aa:41:e8:56:d6: ba:4e:e1:ca:c8:1d:02:19:d2:5d:1b:bf:31:9d:57: f7:59:ca:9d:a9:97:4f:10:19:bf:d2:83:e7:52:4d: 0e:e2:78:1a:f5:5e:20:52:6a:c8:70:0d:33:69:a8: 0c:f2:c8:91:3b:3b:18:16:33:0f:1f:70:e1:33:0a: 8f:3b:7f:00:f4:9b:49:0e:ac:f9:fb:39:1b:9a:b9: 0b:a6:14:99:cb:19:55:5c:66:35:43:f6:53:c9:5a: d6:3c:47:c5:5e:96:7f:fa:a2:a4:fe:f4:f0:3b:18: 2f:bc:dc:b2:8d:d2:e0:ef:3d:c3:d7:27:07:d1:9c: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:84:73:2B:98:36:A6:14:08:B4:E6:6B:F1:A2:4C:D5:C6:22:81:52 X509v3 Authority Key Identifier: keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1d:2f:e4:65:0d:14:f1:91:e7:59:13:b2:89:71:43:4c:ad: 9d:51:64:b4:14:81:90:7e:94:a6:76:4f:99:93:33:9b:88:22: 95:3b:97:49:8d:e5:61:2b:94:6f:bd:34:8b:ee:cb:2b:09:a5: 0e:be:6d:82:c4:da:ce:09:d1:1f:a8:f3:c4:bb:e1:ba:2a:33: ad:34:71:96:8d:38:05:41:b6:1c:d6:7d:ee:18:3a:1d:bd:ef: dd:7a:c6:a9:51:5f:ea:73:16:e9:51:83:ef:ec:0f:41:3e:8f: 96:a8:18:7b:ec:91:02:5d:e6:ee:ad:f7:4e:06:66:22:00:fb: 16:57:d4:d9:c4:b1:4f:7f:e1:18:2f:90:af:27:fa:94:8f:d9: 0f:1f:b6:23:de:18:14:dd:e4:a4:ec:5c:11:2e:29:ef:7f:97: a1:df:2d:2b:17:8e:0d:1c:02:1d:b3:ff:17:49:66:bb:77:5a: b4:54:9b:23:46:97:ec:fd:07:9f:eb:a0:ab:6b:af:31:e6:65: de:37:bf:e0:3b:8b:95:cc:6a:b3:d9:a0:44:00:ef:a5:85:bc: 00:0e:f2:99:29:28:25:63:f9:7e:50:66:f0:16:50:f4:24:9b: 5b:b2:82:c5:9f:b0:ff:99:a6:2e:43:86:80:dd:af:45:e5:b1: a7:e5:5c:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEzOEQxMTAvBgNVBAUTKEFFMEYwRTlFRDRBNjcwNkU5MkUxMEI3ODlCQUMyQzYy NUE1NjUxNTYwHhcNMjUxMjIwMjAxMjU2WhcNMjUxMjI3MjAxMjU2WjAYMRYwFAYD VQQDDA02OTQ3MDM0OC1lMzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHKH1fqvm1spQfTbI/CJrI6HcLsMjFyc8YrIgSmZ5rh7pfNDl8WuLNJH4Nt8 LgQwT4mTzFoXi+l6rPhshgHmzbz1cPimzonRsTcrLV+K7zjTnsBZKqyVgjqMWSOR 70rD8UV2Ne9LYu3UHoiSVbSZWRktyvhHqBTHEjPIPZ9kJJSyqkHoVta6TuHKyB0C GdJdG78xnVf3WcqdqZdPEBm/0oPnUk0O4nga9V4gUmrIcA0zaagM8siROzsYFjMP H3DhMwqPO38A9JtJDqz5+zkbmrkLphSZyxlVXGY1Q/ZTyVrWPEfFXpZ/+qKk/vTw OxgvvNyyjdLg7z3D1ycH0ZynSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6EcyuY NqYUCLTma/GiTNXGIoFSMB8GA1UdIwQYMBaAFK4PDp7UpnBukuELeJusLGJaVlFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTM4RC80RjZFOTMxOEYz RUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNHNlM0UXQ0bTZ3c1lscFdV VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnOE9udFNtY0c2UzRRdDRtNndzWWxwV1VWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTM4RC80RjZFOTMxOEYzRUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNH NlM0UXQ0bTZ3c1lscFdVVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvHS/kZQ0U8ZHnWROyiXFDTK2dUWS0FIGQfpSmdk+ZkzObiCKVO5dJ jeVhK5RvvTSL7ssrCaUOvm2CxNrOCdEfqPPEu+G6KjOtNHGWjTgFQbYc1n3uGDod ve/desapUV/qcxbpUYPv7A9BPo+WqBh77JECXeburfdOBmYiAPsWV9TZxLFPf+EY L5CvJ/qUj9kPH7Yj3hgU3eSk7FwRLinvf5eh3y0rF44NHAIds/8XSWa7d1q0VJsj Rpfs/Qef66Cra68x5mXeN7/gO4uVzGqz2aBEAO+lhbwADvKZKSglY/l+UGbwFlD0 JJtbsoLFn7D/maYuQ4aA3a9F5bGn5Vz5 -----END CERTIFICATE-----Generated at Mon Dec 22 04:02:08 2025 by rpki-client