This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft File: rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft (raw, json) Hash identifier: MQ6kaB/wMfumoo+p3hAGrgFxXs41Pj9E8UTbXm8zKg4= Subject key identifier: CD:98:8E:38:CE:EA:A6:10:22:D5:D6:3C:39:40:C8:3D:2A:E1:A8:6C Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F Certificate issuer: /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Certificate serial: 08CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft Manifest number: 08C6 Signing time: Mon 22 Dec 2025 19:49:15 +0000 Manifest this update: Mon 22 Dec 2025 19:49:15 +0000 Manifest next update: Mon 29 Dec 2025 19:49:15 +0000 Files and hashes: 1: rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl (hash: XyAuZyXc0ygnaQtBODyP7oqEDro7vUhLLPhT/2Q+YaU=) 2: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (hash: 9tE+uOVp6Bj6WcCgxk9lYTPX66R81lJEVNKhiaCUTsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2254 (0x8ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EBC3, serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Validity Not Before: Dec 22 19:49:15 2025 GMT Not After : Dec 29 19:49:15 2025 GMT Subject: CN=6949a0bb-29d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:6c:19:7c:23:b0:64:59:07:19:be:ba:87: 23:b8:c7:de:bd:7f:a9:4a:c3:fa:5a:5d:33:c0:48: de:57:63:62:3c:5b:11:64:6e:28:13:2a:f5:b8:55: 9f:f8:6c:02:21:1a:49:32:f9:3d:1a:13:b8:89:08: 72:99:02:cb:80:f6:8a:de:6c:ea:1d:49:4a:b8:bb: 88:e2:4c:5e:c0:eb:a8:25:a3:e6:a8:f3:21:39:82: 65:9f:cf:74:4a:dc:e1:49:43:82:48:77:70:24:07: 45:4d:97:89:4c:4b:7c:3a:f1:59:5d:90:19:13:8e: 30:d9:01:99:a1:d9:ba:c7:3c:0d:96:88:57:2e:45: be:27:22:76:32:e9:23:61:5f:7e:ba:eb:c2:d5:e6: ce:27:af:28:ec:ed:ba:84:18:9f:ec:cb:5a:3f:2a: d0:7a:42:2e:62:2c:3b:4b:34:69:2a:6c:75:c3:cc: ce:25:0c:64:17:94:10:d0:b1:17:5f:e8:41:20:42: 58:08:a1:fb:a5:56:fb:20:b7:ec:36:5b:ba:15:6f: 8f:36:cf:8f:c2:c2:63:f2:ff:d0:e8:61:5f:50:5b: 9d:29:25:a1:59:6f:4d:21:f0:1c:10:f6:f3:c3:23: 34:5d:be:d5:42:c5:ef:11:c5:57:e6:39:5e:1e:f0: b9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:98:8E:38:CE:EA:A6:10:22:D5:D6:3C:39:40:C8:3D:2A:E1:A8:6C X509v3 Authority Key Identifier: keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:cf:a2:d3:10:d0:fc:9a:82:50:2b:d5:ea:75:84:c6:35:33: 43:5b:20:e6:33:b6:8e:de:82:6b:81:93:b5:b1:21:cb:f8:b5: 55:39:b2:98:8f:21:10:ad:63:83:fd:40:da:16:c0:6a:df:6c: 84:8b:80:f6:c9:22:6f:57:0c:f7:da:06:b1:9a:87:47:bd:60: 23:33:22:7a:49:59:ba:3b:09:91:6f:95:45:ce:da:cb:48:c7: 9a:f7:12:c8:72:7b:aa:c4:07:45:8f:11:b8:87:85:c7:ff:34: 1c:76:09:5a:35:d6:4d:21:84:ce:ad:4b:c8:a6:61:d7:9c:f3: dc:6e:e0:6e:42:de:94:60:87:87:73:00:61:de:11:0f:00:37: 7c:33:ea:cc:7c:f8:4a:f5:53:4a:ff:72:58:c8:41:86:e4:ea: 64:3e:44:6b:4f:c0:11:2c:13:94:7a:1a:84:d3:b7:7e:70:4c: 39:6c:dc:ea:8e:c8:6a:eb:d0:25:cf:67:ba:f7:b7:c7:2e:4f: be:35:00:13:f8:8f:49:d4:d8:42:68:3f:10:b4:e4:6a:d1:c2: 0f:39:e0:9b:fc:90:1a:19:4f:84:f7:81:bb:83:67:8e:9a:29: dc:65:ae:43:33:cc:73:cf:56:1f:4d:31:06:69:98:1b:77:33: 74:5a:24:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCQzMxMTAvBgNVBAUTKEFDNTYwNzBEQkU1RUU2REJCRjY3MTE5NzM4NDcyMzMx Mjc5MTdBMkYwHhcNMjUxMjIyMTk0OTE1WhcNMjUxMjI5MTk0OTE1WjAYMRYwFAYD VQQDDA02OTQ5YTBiYi0yOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukJsGXwjsGRZBxm+uocjuMfevX+pSsP6Wl0zwEjeV2NiPFsRZG4oEyr1uFWf +GwCIRpJMvk9GhO4iQhymQLLgPaK3mzqHUlKuLuI4kxewOuoJaPmqPMhOYJln890 StzhSUOCSHdwJAdFTZeJTEt8OvFZXZAZE44w2QGZodm6xzwNlohXLkW+JyJ2Mukj YV9+uuvC1ebOJ68o7O26hBif7MtaPyrQekIuYiw7SzRpKmx1w8zOJQxkF5QQ0LEX X+hBIEJYCKH7pVb7ILfsNlu6FW+PNs+PwsJj8v/Q6GFfUFudKSWhWW9NIfAcEPbz wyM0Xb7VQsXvEcVX5jleHvC5bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2YjjjO 6qYQItXWPDlAyD0q4ahsMB8GA1UdIwQYMBaAFKxWBw2+Xubbv2cRlzhHIzEnkXov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUJDMy8wRDQxRkU1Q0M3 RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0dV9aeEdYT0Vjak1TZVJl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGWUhEYjVlNXR1X1p4R1hPRWNqTVNlUmVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUJDMy8wRDQxRkU1Q0M3RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0 dV9aeEdYT0Vjak1TZVJlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCz6LTEND8moJQK9XqdYTGNTNDWyDmM7aO3oJrgZO1sSHL+LVVObKY jyEQrWOD/UDaFsBq32yEi4D2ySJvVwz32gaxmodHvWAjMyJ6SVm6OwmRb5VFztrL SMea9xLIcnuqxAdFjxG4h4XH/zQcdglaNdZNIYTOrUvIpmHXnPPcbuBuQt6UYIeH cwBh3hEPADd8M+rMfPhK9VNK/3JYyEGG5OpkPkRrT8ARLBOUehqE07d+cEw5bNzq jshq69Alz2e697fHLk++NQAT+I9J1NhCaD8QtORq0cIPOeCb/JAaGU+E94G7g2eO mincZa5DM8xzz1YfTTEGaZgbdzN0WiQ0 -----END CERTIFICATE-----Generated at Tue Dec 23 14:33:49 2025 by rpki-client