This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft File: if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json) Hash identifier: XSev25G4Dvq8g+ArIQHj7az3FlIK0EqkK91v9AZwk1s= Subject key identifier: 99:90:E4:C4:6B:4E:C2:26:F5:3D:94:70:4A:AB:DD:24:30:9A:17:30 Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B Certificate issuer: /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B Certificate serial: 3512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft Manifest number: 34FD Signing time: Wed 24 Dec 2025 14:59:42 +0000 Manifest this update: Wed 24 Dec 2025 14:59:42 +0000 Manifest next update: Wed 31 Dec 2025 14:59:42 +0000 Files and hashes: 1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: Gru3DZTEFlmmbBdtmiXsUt1aP9GmKf0tLn/uG9acskk=) 2: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 7kBxjCAjLqc2z/ikXd0m4qFuLdkWBpVLj18nN1YZMWg=) 3: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: fvjNR7aEXviMeBGpx7kzk2S8B+LOJKavqoJJ41ujD8w=) 4: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: L9v33ErHRKA++x/T+d5W1nanQSyaxGDGiTysI79f4Mw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 14:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13586 (0x3512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B Validity Not Before: Dec 24 14:59:42 2025 GMT Not After : Dec 31 14:59:42 2025 GMT Subject: CN=694bffde-eff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:f8:f5:c3:19:11:35:3d:06:58:ac:e2:c7: 5c:0b:aa:38:56:e5:61:70:a6:71:fa:89:ac:53:9d: e0:3a:29:34:39:94:c7:49:f3:b1:49:49:5c:73:ce: 9c:c4:20:6c:b8:19:a4:66:84:ec:4b:96:49:d0:4b: 51:4e:64:8e:47:0f:84:26:2b:ae:fc:2a:3d:26:b3: 8c:89:30:c0:32:80:9b:f7:40:06:95:8c:6c:2c:20: 17:02:b6:e9:5c:1e:72:0a:18:06:9b:4e:14:7c:11: 55:20:b5:7c:21:20:63:88:f3:71:96:2e:58:ff:1e: 18:25:2d:8b:9f:60:45:5d:db:6f:f4:e9:48:37:09: 17:67:56:81:73:ba:e1:24:59:e3:df:cd:eb:61:89: 90:c0:a8:03:0a:65:38:35:8e:1c:eb:28:97:f3:75: e6:ff:e5:49:3e:ba:35:b0:08:0d:fe:14:85:d4:10: e1:0d:b1:ef:97:ad:b2:c9:f9:5c:29:dd:c7:a1:09: 0d:67:24:a1:2c:e4:1a:ce:ec:f6:cd:90:1b:5a:f3: 01:8d:28:73:09:74:0e:7e:f0:a9:c1:2f:3f:29:6f: 32:5d:01:c9:3c:5a:42:3c:6b:4a:0c:db:37:5c:1c: 7f:e7:0e:b7:10:b3:ff:1e:4a:53:5f:6e:c1:db:2d: 2e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:90:E4:C4:6B:4E:C2:26:F5:3D:94:70:4A:AB:DD:24:30:9A:17:30 X509v3 Authority Key Identifier: keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:1c:3b:4a:1f:12:24:40:24:d4:18:1e:e5:65:59:3d:d4:8b: b7:2a:c0:d3:ed:52:3b:fe:5e:36:2f:84:3e:9f:8e:dc:c8:be: fa:fa:07:4a:b1:4f:a8:96:46:8d:13:18:6d:71:47:3e:bc:99: 4f:44:f8:d0:45:82:ec:bb:10:a5:2d:c3:72:8e:2f:1b:c5:d3: 74:ca:a9:bd:80:9d:19:65:3c:e0:34:fa:6e:76:b5:bd:d8:98: 87:7b:9e:d5:ae:cb:0a:9c:aa:58:80:c9:bf:08:9d:d6:43:cf: 8a:47:6a:67:ea:d4:46:50:b4:cf:64:3b:07:d0:35:92:82:7e: ff:57:8e:44:9d:d0:e4:44:f8:58:9d:ab:26:7d:84:64:7e:1a: a5:d2:9d:a6:c3:4e:ae:bb:b0:6f:f0:0f:22:e0:24:9a:55:30: 77:34:ef:91:40:01:dd:78:79:29:d7:64:49:ee:0e:0b:3f:06: ad:b5:77:df:b5:1e:01:77:e4:2d:7e:c1:23:29:ae:5a:68:e0: 63:6c:92:c3:94:a7:d4:45:cd:b6:40:66:d5:0e:bb:8a:36:8d: 0a:42:6a:71:e8:02:37:12:07:2a:54:ca:90:90:44:49:3e:2f: d2:1b:6a:5e:15:84:52:54:70:34:5c:9d:28:bb:52:27:48:72: 29:8a:05:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzNDQxMTAvBgNVBAUTKDg5RkQyN0M1MDY3QjRDRjQxMjI5NkZFQkE2Q0U2RDgz MTE4NTgwMEIwHhcNMjUxMjI0MTQ1OTQyWhcNMjUxMjMxMTQ1OTQyWjAYMRYwFAYD VQQDDA02OTRiZmZkZS1lZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCH49cMZETU9Blis4sdcC6o4VuVhcKZx+omsU53gOik0OZTHSfOxSUlcc86c xCBsuBmkZoTsS5ZJ0EtRTmSORw+EJiuu/Co9JrOMiTDAMoCb90AGlYxsLCAXArbp XB5yChgGm04UfBFVILV8ISBjiPNxli5Y/x4YJS2Ln2BFXdtv9OlINwkXZ1aBc7rh JFnj383rYYmQwKgDCmU4NY4c6yiX83Xm/+VJPro1sAgN/hSF1BDhDbHvl62yyflc Kd3HoQkNZyShLOQazuz2zZAbWvMBjShzCXQOfvCpwS8/KW8yXQHJPFpCPGtKDNs3 XBx/5w63ELP/HkpTX27B2y0u2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmQ5MRr TsIm9T2UcEqr3SQwmhcwMB8GA1UdIwQYMBaAFIn9J8UGe0z0Eilv66bObYMRhYAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTM0NC81MTVDQUJFMDFE QTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQUVNLV19ycHM1dGd4R0Zn QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lmMG54UVo3VFBRU0tXX3JwczV0Z3hHRmdBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTM0NC81MTVDQUJFMDFEQTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQ UVNLV19ycHM1dGd4R0ZnQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCHDtKHxIkQCTUGB7lZVk91Iu3KsDT7VI7/l42L4Q+n47cyL76+gdK sU+olkaNExhtcUc+vJlPRPjQRYLsuxClLcNyji8bxdN0yqm9gJ0ZZTzgNPpudrW9 2JiHe57VrssKnKpYgMm/CJ3WQ8+KR2pn6tRGULTPZDsH0DWSgn7/V45EndDkRPhY nasmfYRkfhql0p2mw06uu7Bv8A8i4CSaVTB3NO+RQAHdeHkp12RJ7g4LPwattXff tR4Bd+QtfsEjKa5aaOBjbJLDlKfURc22QGbVDruKNo0KQmpx6AI3EgcqVMqQkERJ Pi/SG2peFYRSVHA0XJ0ou1InSHIpigUd -----END CERTIFICATE-----Generated at Thu Dec 25 03:15:12 2025 by rpki-client