This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json) Hash identifier: 7RCeqde6CA6kTNfgNafDQBf/64HrEpIx44MRHrrbNds= Subject key identifier: F7:7C:8C:48:2C:FC:28:D8:94:22:85:08:E8:E2:7F:1D:6D:93:F9:77 Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft Manifest number: 9F Signing time: Tue 23 Dec 2025 05:16:16 +0000 Manifest this update: Tue 23 Dec 2025 05:16:16 +0000 Manifest next update: Tue 30 Dec 2025 05:16:16 +0000 Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: tQohMTc/2pfuGSFsXTr31m3WdgUgnTAyomz0GZ6O+hA=) 2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: 0+vRm59ex9NMyreeXhWeUcmkTmPtMjioToFn5xjtXJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Validity Not Before: Dec 23 05:16:16 2025 GMT Not After : Dec 30 05:16:16 2025 GMT Subject: CN=694a25a0-3263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:20:af:9a:27:73:c6:9a:d5:97:12:14:ef:bf: 3a:34:65:ed:aa:fe:6d:2a:de:5b:22:4d:11:e8:8e: e9:22:da:cb:ce:96:b7:f2:37:97:ee:d3:4f:c1:3d: d5:d1:b5:ff:4c:98:ae:13:0c:85:10:35:fd:99:59: cf:2c:b2:20:a6:16:b7:1d:1c:5d:c8:0a:74:85:df: 0c:aa:ea:b6:11:01:4c:fb:65:e5:b1:1a:62:e4:e0: ec:54:45:e1:08:75:d3:81:72:8e:63:13:a8:54:86: cc:fa:e1:3d:b5:58:bb:99:84:6f:10:08:17:2c:a1: 94:7d:ec:90:ef:d6:58:5d:10:27:c9:11:dc:26:12: b3:02:a1:c0:84:65:83:e5:bf:4a:2b:26:bf:61:da: f7:db:90:61:57:02:f2:3d:f8:7a:81:39:ec:77:17: eb:16:17:9b:5e:14:6e:d9:12:b6:66:32:9e:6b:d2: ee:07:9b:51:73:39:3d:b5:13:e9:34:3d:e6:72:54: e1:0d:38:9d:63:59:e1:9f:84:fb:0b:66:4e:d3:07: 45:72:bb:21:6b:9e:42:55:3e:0e:71:5e:e9:1d:05: df:89:98:4e:85:02:0c:79:88:cb:03:76:c9:9e:14: 73:57:66:ae:86:dd:6e:b8:85:fe:3f:4e:0e:c0:1d: 5f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7C:8C:48:2C:FC:28:D8:94:22:85:08:E8:E2:7F:1D:6D:93:F9:77 X509v3 Authority Key Identifier: keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:41:f7:0a:97:ab:2f:d5:6d:34:03:58:c8:84:1a:30:d3:64: 83:6b:32:98:75:bd:12:8b:b8:b6:18:e6:41:59:05:50:e5:0d: 88:09:07:a3:ea:c3:6d:b5:49:d3:dd:ed:ef:97:ac:9f:46:7d: 02:bc:32:1b:82:e0:c1:31:96:8b:48:1f:b2:f1:3c:6e:81:49: 22:81:44:5c:81:00:90:d9:9d:f0:60:d7:07:c7:b4:13:1a:3c: e4:dd:4a:69:9e:0f:7c:7d:14:83:92:59:d1:fd:fa:cc:31:4d: e4:f1:a3:38:40:6f:a9:be:1f:7a:23:80:c5:10:9d:7c:0c:d2: 2e:56:d8:80:f3:b4:fb:b1:22:7c:85:c0:3b:69:35:77:b6:e3: c2:96:7b:82:de:eb:ed:4e:13:3a:b1:7d:73:17:b1:e1:4b:8a: 74:c6:5c:9c:8d:e1:4d:cd:d0:f9:a4:90:54:13:3a:a4:12:46: 4d:8b:d7:c3:a3:20:bf:71:a4:0e:4d:10:19:72:fa:61:49:bd: ec:a9:65:32:dd:ed:36:4d:1f:db:11:2c:fe:9a:95:1c:dd:53: 81:44:21:54:5c:dd:21:e5:4f:66:2f:a3:eb:2f:d7:bd:62:12: 40:ba:a5:6a:5a:e6:b8:e7:72:e1:e2:b9:35:cd:0b:fa:da:6a: df:91:01:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI3NTkxMTAvBgNVBAUTKEZCNEI2ODNGQkE0REI2QUMxQTVBQzUwODgwN0ZDN0VB NDk2QzVFQzUwHhcNMjUxMjIzMDUxNjE2WhcNMjUxMjMwMDUxNjE2WjAYMRYwFAYD VQQDDA02OTRhMjVhMC0zMjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iCvmidzxprVlxIU7786NGXtqv5tKt5bIk0R6I7pItrLzpa38jeX7tNPwT3V 0bX/TJiuEwyFEDX9mVnPLLIgpha3HRxdyAp0hd8Mquq2EQFM+2XlsRpi5ODsVEXh CHXTgXKOYxOoVIbM+uE9tVi7mYRvEAgXLKGUfeyQ79ZYXRAnyRHcJhKzAqHAhGWD 5b9KKya/Ydr325BhVwLyPfh6gTnsdxfrFhebXhRu2RK2ZjKea9LuB5tRczk9tRPp ND3mclThDTidY1nhn4T7C2ZO0wdFcrsha55CVT4OcV7pHQXfiZhOhQIMeYjLA3bJ nhRzV2auht1uuIX+P04OwB1f4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPd8jEgs /CjYlCKFCOjifx1tk/l3MB8GA1UdIwQYMBaAFPtLaD+6TbasGlrFCIB/x+pJbF7F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qjc1OS82OUMzQkVFNkVC NjQxMUVGQTlBMkMyNjFDNEY5QUUwMi8tMHRvUDdwTnRxd2FXc1VJZ0hfSDZrbHNY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wdG9QN3BOdHF3YVdzVUlnSF9INmtsc1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qjc1OS82OUMzQkVFNkVCNjQxMUVGQTlBMkMyNjFDNEY5QUUwMi8tMHRvUDdwTnRx d2FXc1VJZ0hfSDZrbHNYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNQfcKl6sv1W00A1jIhBow02SDazKYdb0Si7i2GOZBWQVQ5Q2ICQej 6sNttUnT3e3vl6yfRn0CvDIbguDBMZaLSB+y8TxugUkigURcgQCQ2Z3wYNcHx7QT Gjzk3Uppng98fRSDklnR/frMMU3k8aM4QG+pvh96I4DFEJ18DNIuVtiA87T7sSJ8 hcA7aTV3tuPClnuC3uvtThM6sX1zF7HhS4p0xlycjeFNzdD5pJBUEzqkEkZNi9fD oyC/caQOTRAZcvphSb3sqWUy3e02TR/bESz+mpUc3VOBRCFUXN0h5U9mL6PrL9e9 YhJAuqVqWua453Lh4rk1zQv62mrfkQFw -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:36 2025 by rpki-client