This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft File: SkhXfqTVPPBfDXTKwBD2q8QVI48.mft (raw, json) Hash identifier: qUvQ4gE7dPKcRPOFQA47lgYDl9NLAw1ytmkOPCCJvDU= Subject key identifier: CF:72:04:8D:A6:59:E3:F5:E9:3D:5C:15:C4:5B:E8:44:23:74:A2:F2 Authority key identifier: 4A:48:57:7E:A4:D5:3C:F0:5F:0D:74:CA:C0:10:F6:AB:C4:15:23:8F Certificate issuer: /CN=A918C519/serialNumber=4A48577EA4D53CF05F0D74CAC010F6ABC415238F Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft Manifest number: 48 Signing time: Tue 23 Dec 2025 06:13:12 +0000 Manifest this update: Tue 23 Dec 2025 06:13:12 +0000 Manifest next update: Tue 30 Dec 2025 06:13:12 +0000 Files and hashes: 1: SkhXfqTVPPBfDXTKwBD2q8QVI48.crl (hash: W65gRrghpxRoWdALT3I5/bgs3mkW6fPrg627LWk9jyQ=) 2: 19BCD4A0728211F081B6E982C4F9AE02.roa (hash: J1KdVLZmGzND3g5GpPJl+STwOF3mvFB15MfnfwB4gJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.crl rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C519, serialNumber=4A48577EA4D53CF05F0D74CAC010F6ABC415238F Validity Not Before: Dec 23 06:13:12 2025 GMT Not After : Dec 30 06:13:12 2025 GMT Subject: CN=694a32f8-7a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:ca:78:11:88:d6:60:39:c3:61:7d:22:48: 6c:ef:4f:73:16:2a:b7:16:46:f1:da:90:fb:65:f4: 2e:74:14:a9:66:b9:f6:a7:df:ea:3c:85:5a:22:64: a7:f6:09:2c:8f:cf:06:82:a0:da:a4:bf:9d:29:b0: 2f:93:83:cc:6b:63:ce:7d:cb:4f:ad:fd:f3:e5:48: 47:b4:7a:29:17:07:68:07:f6:7f:2b:46:ab:0a:2e: d1:c2:23:c1:bc:f0:7e:84:13:f3:2e:0e:ed:18:8d: ed:0a:c5:ac:39:06:91:01:8a:fa:8e:7d:11:4c:31: 73:98:f3:49:65:1c:c7:0e:37:49:84:3b:e6:85:f9: b9:03:69:f3:8b:c1:28:05:fd:93:f9:a3:f4:dc:f0: ed:17:17:65:f4:7f:a5:37:ee:a5:5f:c2:4c:d4:d8: 3f:cd:e6:e8:22:78:7f:29:7a:17:d7:f9:1c:d2:21: 72:ce:81:37:1c:6e:13:21:fd:aa:93:6d:ad:4b:28: a2:22:0f:2f:1c:e7:37:52:36:ee:9e:6d:1c:86:e9: 15:20:03:86:ca:42:a5:99:74:9e:a2:69:e2:a4:0b: 69:08:0e:99:02:da:bc:5d:4d:49:5c:f3:f0:d6:a9: 8b:5c:e1:05:dd:89:e0:16:4e:e3:99:9a:e8:6f:01: c6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:72:04:8D:A6:59:E3:F5:E9:3D:5C:15:C4:5B:E8:44:23:74:A2:F2 X509v3 Authority Key Identifier: keyid:4A:48:57:7E:A4:D5:3C:F0:5F:0D:74:CA:C0:10:F6:AB:C4:15:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ad:ca:02:90:55:f5:f9:d2:58:59:69:f4:f4:e5:ee:1e:ea: 79:bc:30:4d:8a:f6:1b:8f:4b:13:a3:fd:97:85:42:a1:92:d5: 83:7d:b9:91:aa:b8:6e:12:3d:ba:b3:be:fa:a8:4c:52:18:08: 27:1b:24:2b:f2:46:4a:d6:b1:01:f9:d9:fb:61:8c:17:f9:7b: 12:14:a5:1d:dd:1f:52:ea:c1:c6:1f:86:b1:07:42:da:fb:f6: 81:db:a8:7c:4e:3d:92:33:d7:c0:11:b5:a6:0a:64:26:1a:22: fb:e4:52:fa:1b:0f:69:3e:97:14:52:4a:2f:53:ef:ae:62:cb: 12:f5:fa:cd:5f:16:4c:5a:25:92:79:65:6f:72:80:71:97:45: 2b:4a:e4:da:ed:7f:8d:76:c8:ed:61:7c:f2:df:f5:18:57:bc: 25:fe:68:0b:71:c4:b7:33:85:e1:48:df:0a:c2:1c:1f:68:6c: bd:ca:5a:1b:f4:33:cb:6c:c4:7e:3d:91:70:53:2b:e6:d9:22: d2:de:c8:92:31:cd:0f:56:45:87:6c:4d:a3:c5:4c:4e:de:0d: e3:3e:c4:11:8c:04:15:cd:64:a2:03:2d:a5:4f:ba:68:26:6e: 26:c3:c3:a8:56:5a:46:4f:70:1a:ac:0b:b4:90:96:99:f0:96: 48:bb:82:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzUxOTExMC8GA1UEBRMoNEE0ODU3N0VBNEQ1M0NGMDVGMEQ3NENBQzAxMEY2QUJD NDE1MjM4RjAeFw0yNTEyMjMwNjEzMTJaFw0yNTEyMzAwNjEzMTJaMBgxFjAUBgNV BAMMDTY5NGEzMmY4LTdhNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5Vsp4EYjWYDnDYX0iSGzvT3MWKrcWRvHakPtl9C50FKlmufan3+o8hVoiZKf2 CSyPzwaCoNqkv50psC+Tg8xrY859y0+t/fPlSEe0eikXB2gH9n8rRqsKLtHCI8G8 8H6EE/MuDu0Yje0Kxaw5BpEBivqOfRFMMXOY80llHMcON0mEO+aF+bkDafOLwSgF /ZP5o/Tc8O0XF2X0f6U37qVfwkzU2D/N5ugieH8pehfX+RzSIXLOgTccbhMh/aqT ba1LKKIiDy8c5zdSNu6ebRyG6RUgA4bKQqWZdJ6iaeKkC2kIDpkC2rxdTUlc8/DW qYtc4QXdieAWTuOZmuhvAcYlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz3IEjaZZ 4/XpPVwVxFvoRCN0ovIwHwYDVR0jBBgwFoAUSkhXfqTVPPBfDXTKwBD2q8QVI48w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDNTE5LzRGMDMwOEYyNzI4 MDExRjA5QUFERkE3Q0M0RjlBRTAyL1NraFhmcVRWUFBCZkRYVEt3QkQycThRVkk0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU2toWGZxVFZQUEJmRFhUS3dCRDJxOFFWSTQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD NTE5LzRGMDMwOEYyNzI4MDExRjA5QUFERkE3Q0M0RjlBRTAyL1NraFhmcVRWUFBC ZkRYVEt3QkQycThRVkk0OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAButygKQVfX50lhZafT05e4e6nm8ME2K9huPSxOj/ZeFQqGS1YN9uZGq uG4SPbqzvvqoTFIYCCcbJCvyRkrWsQH52fthjBf5exIUpR3dH1LqwcYfhrEHQtr7 9oHbqHxOPZIz18ARtaYKZCYaIvvkUvobD2k+lxRSSi9T765iyxL1+s1fFkxaJZJ5 ZW9ygHGXRStK5Nrtf412yO1hfPLf9RhXvCX+aAtxxLczheFI3wrCHB9obL3KWhv0 M8tsxH49kXBTK+bZItLeyJIxzQ9WRYdsTaPFTE7eDeM+xBGMBBXNZKIDLaVPumgm bibDw6hWWkZPcBqsC7SQlpnwlki7gk4= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:23 2025 by rpki-client