This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft File: fA03qVD2-mazVJllAshMr6_nOXE.mft (raw, json) Hash identifier: sAN6ihcwHFwt8UtxqKldVNfTgih8SFjARz87jCZu2Lo= Subject key identifier: C0:09:3B:90:36:38:87:6F:78:2E:F7:00:3A:C6:65:A8:8B:C4:C8:BD Authority key identifier: 7C:0D:37:A9:50:F6:FA:66:B3:54:99:65:02:C8:4C:AF:AF:E7:39:71 Certificate issuer: /CN=A918D6AD/serialNumber=7C0D37A950F6FA66B354996502C84CAFAFE73971 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fA03qVD2-mazVJllAshMr6_nOXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft Manifest number: 1E Signing time: Tue 23 Dec 2025 06:37:43 +0000 Manifest this update: Tue 23 Dec 2025 06:37:42 +0000 Manifest next update: Tue 30 Dec 2025 06:37:42 +0000 Files and hashes: 1: fA03qVD2-mazVJllAshMr6_nOXE.crl (hash: oy3O9IvIh/4ZsMiNSZHIX18N6nIu/QE8512Qo+v5ZNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.crl rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fA03qVD2-mazVJllAshMr6_nOXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6AD, serialNumber=7C0D37A950F6FA66B354996502C84CAFAFE73971 Validity Not Before: Dec 23 06:37:42 2025 GMT Not After : Dec 30 06:37:42 2025 GMT Subject: CN=694a38b6-8c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1c:36:5f:41:d6:36:67:c5:a9:08:fc:01:69: 4e:81:64:71:69:87:4c:45:6b:53:d4:78:e6:ed:40: ee:b9:b6:fe:4d:a8:84:e0:86:2a:fd:6b:d8:13:0f: fd:08:de:fd:5c:7d:14:1f:5d:c3:34:1d:93:a7:39: 98:e5:7f:02:18:1e:11:20:ad:4c:68:68:7a:18:0c: 0d:41:74:c6:a2:bb:94:8e:a3:cb:b2:73:be:da:ed: a7:35:be:78:ce:4a:7b:b9:3e:62:9f:9d:cb:98:e6: ff:7f:f4:9f:43:8a:d7:d5:69:2d:eb:45:e0:90:94: b4:3b:11:ba:84:59:f6:0b:be:23:21:b5:68:f4:30: dc:54:b9:fe:fa:6b:5e:50:dd:df:67:db:97:f9:8e: a9:43:c4:6a:55:a0:b2:5e:af:8c:a5:45:b8:85:44: 66:23:8e:0a:b7:3c:33:96:c3:95:d4:93:31:68:0a: 2b:1b:38:8b:61:30:2e:48:0a:e0:a7:cd:00:8b:c9: ae:f2:c6:28:b3:83:6b:38:2c:54:5f:3d:11:7d:dd: de:54:2c:95:a2:be:c4:e2:38:8c:06:ff:57:30:d4: 0d:f3:b8:d4:4a:2e:f1:4a:51:33:b8:c6:5e:35:04: 2a:24:72:a3:7d:54:bc:dd:05:f0:a4:d1:b6:47:76: bc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:09:3B:90:36:38:87:6F:78:2E:F7:00:3A:C6:65:A8:8B:C4:C8:BD X509v3 Authority Key Identifier: keyid:7C:0D:37:A9:50:F6:FA:66:B3:54:99:65:02:C8:4C:AF:AF:E7:39:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fA03qVD2-mazVJllAshMr6_nOXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:04:f8:27:44:62:c8:7c:2a:15:0b:9a:df:49:ba:e4:d5:b7: 25:73:aa:61:62:35:91:5a:a2:1e:36:82:58:09:0a:52:74:f2: 44:af:3a:b2:3e:05:9f:cb:8e:e8:87:bb:02:7f:90:da:d4:d9: dd:ec:51:fe:64:50:89:a2:82:d5:47:19:eb:95:7a:ed:b3:dc: 10:f4:e3:89:ea:b8:35:89:ae:d4:f5:24:34:ed:46:d3:36:18: 28:ec:ac:36:4d:33:1c:a4:05:1e:cf:25:b2:3e:5c:ba:41:41: ea:b0:61:9d:6c:25:9c:a0:e8:f9:a3:66:59:2f:9d:b9:6a:ac: d6:00:f5:e6:97:67:27:88:03:f3:26:b4:d9:c7:91:79:a8:9d: 76:d0:78:ab:52:a6:03:7f:4c:4b:be:ab:6e:5a:76:24:09:eb: f8:3f:a7:c8:6d:7e:82:96:e2:2f:3f:4c:ce:96:f4:71:1d:aa: 5b:dc:79:c4:f3:8f:60:25:fa:e9:80:26:39:22:58:7f:72:78: d4:d1:c6:9d:61:9b:93:9e:96:02:82:cb:24:bd:42:fb:32:08: bd:a3:21:28:05:3b:04:e0:d6:17:c4:f5:73:cb:ec:c1:f8:dc: 10:1b:cd:50:1d:93:17:8d:5b:ca:52:24:24:ea:69:f0:d1:40: a1:84:f8:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDZBRDExMC8GA1UEBRMoN0MwRDM3QTk1MEY2RkE2NkIzNTQ5OTY1MDJDODRDQUZB RkU3Mzk3MTAeFw0yNTEyMjMwNjM3NDJaFw0yNTEyMzAwNjM3NDJaMBgxFjAUBgNV BAMMDTY5NGEzOGI2LThjMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUHDZfQdY2Z8WpCPwBaU6BZHFph0xFa1PUeObtQO65tv5NqITghir9a9gTD/0I 3v1cfRQfXcM0HZOnOZjlfwIYHhEgrUxoaHoYDA1BdMaiu5SOo8uyc77a7ac1vnjO Snu5PmKfncuY5v9/9J9DitfVaS3rReCQlLQ7EbqEWfYLviMhtWj0MNxUuf76a15Q 3d9n25f5jqlDxGpVoLJer4ylRbiFRGYjjgq3PDOWw5XUkzFoCisbOIthMC5ICuCn zQCLya7yxiizg2s4LFRfPRF93d5ULJWivsTiOIwG/1cw1A3zuNRKLvFKUTO4xl41 BCokcqN9VLzdBfCk0bZHdrwnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwAk7kDY4 h294LvcAOsZlqIvEyL0wHwYDVR0jBBgwFoAUfA03qVD2+mazVJllAshMr6/nOXEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENkFELzZDNTgzOTBDQjQ1 RTExRjBCRDY4QTkzRUM0RjlBRTAyL2ZBMDNxVkQyLW1helZKbGxBc2hNcjZfbk9Y RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZkEwM3FWRDItbWF6VkpsbEFzaE1yNl9uT1hFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NkFELzZDNTgzOTBDQjQ1RTExRjBCRDY4QTkzRUM0RjlBRTAyL2ZBMDNxVkQyLW1h elZKbGxBc2hNcjZfbk9YRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFwE+CdEYsh8KhULmt9JuuTVtyVzqmFiNZFaoh42glgJClJ08kSvOrI+ BZ/LjuiHuwJ/kNrU2d3sUf5kUImigtVHGeuVeu2z3BD044nquDWJrtT1JDTtRtM2 GCjsrDZNMxykBR7PJbI+XLpBQeqwYZ1sJZyg6PmjZlkvnblqrNYA9eaXZyeIA/Mm tNnHkXmonXbQeKtSpgN/TEu+q25adiQJ6/g/p8htfoKW4i8/TM6W9HEdqlvcecTz j2Al+umAJjkiWH9yeNTRxp1hm5OelgKCyyS9QvsyCL2jISgFOwTg1hfE9XPL7MH4 3BAbzVAdkxeNW8pSJCTqafDRQKGE+Eg= -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:30 2025 by rpki-client