This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json) Hash identifier: RfW1TNNZQrd3jgWspisX2AhqA98ep5Bk0heBLF+YgbQ= Subject key identifier: 5F:AA:B7:9E:75:4D:7B:57:2F:44:2F:F3:79:2A:46:7A:3F:A2:79:63 Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 087E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft Manifest number: 0870 Signing time: Mon 22 Dec 2025 20:00:19 +0000 Manifest this update: Mon 22 Dec 2025 20:00:18 +0000 Manifest next update: Mon 29 Dec 2025 20:00:18 +0000 Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: YOvZJWlJkHHCPZuNxvcoYZvam4CmOF0hFEn9yYEqcmc=) 2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: 6NwFc4G6kbW7IIFb4mldHTmS90zuZDDfhVsh0xYOrRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2174 (0x87e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Validity Not Before: Dec 22 20:00:18 2025 GMT Not After : Dec 29 20:00:18 2025 GMT Subject: CN=6949a353-cc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:86:96:0b:77:1f:45:e2:8a:98:46:ac:44: 90:f5:3f:1d:7b:51:cc:58:8d:00:19:b8:ab:5f:86: 40:ee:47:0a:08:e1:b8:c3:64:70:ef:ca:4c:aa:ae: 33:d6:bb:c8:6d:26:ad:7c:b2:18:50:00:8e:58:e4: 80:4d:6d:69:6d:26:0c:a7:fd:75:cb:7c:60:57:ff: b4:40:fb:94:a4:42:15:a3:e3:44:18:b0:22:43:15: e9:dc:a0:f7:02:7a:f5:15:54:05:bf:57:d7:db:39: d5:ed:4b:ab:44:32:83:27:f5:01:d1:b0:83:10:fa: 3e:87:88:0f:ab:11:a8:95:a3:c1:0b:f8:6e:62:10: 1b:c4:09:bd:c9:81:09:8c:de:0c:32:1f:ab:6b:2a: b9:52:d6:e7:04:71:bb:d8:28:ee:c5:1c:d4:c0:82: 2a:9e:94:a2:1e:e7:05:b7:b2:ad:b2:9b:86:97:60: 1f:92:00:21:4f:7d:4b:f5:e5:2f:d3:74:5a:fb:69: 08:eb:44:fd:72:92:ca:88:43:f1:85:4e:01:27:cb: f3:a6:77:d4:48:54:0e:5f:26:31:86:5d:f3:7a:6b: 7d:2e:a1:d8:0e:9c:44:69:0b:49:f1:1f:fa:9c:7f: 88:88:1a:a4:af:a0:37:43:3f:16:7c:3d:f8:5a:a6: 67:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AA:B7:9E:75:4D:7B:57:2F:44:2F:F3:79:2A:46:7A:3F:A2:79:63 X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:11:47:65:a7:04:70:cd:e5:7f:30:8f:de:4d:02:a4:06:43: 2d:d9:ea:ac:9b:21:ce:1f:9a:a2:f3:2c:de:e0:58:fa:a1:4a: 8e:85:01:93:12:bc:c4:0e:42:f7:0d:8a:fa:5c:b4:54:19:4c: 58:fc:ab:6a:92:db:5a:05:52:e1:b0:2e:8e:45:45:15:69:49: 83:b3:3e:5b:e0:0f:90:f7:a9:d7:b1:20:b8:a1:0d:78:ad:ff: f1:21:eb:fe:2a:57:16:e8:82:44:1a:41:5d:ca:27:7e:b4:36: 8f:f0:03:43:7a:2e:44:43:9a:0f:0f:97:fd:3f:3c:84:6f:7b: 15:cc:90:12:7a:f5:04:e0:74:fe:ee:4c:1d:b8:55:91:56:c3: 01:ae:d4:7d:02:30:e7:73:39:19:bd:c0:f0:87:de:8b:e9:de: 43:dc:75:93:1f:04:6c:15:4a:d6:ea:5f:90:a7:d5:67:03:03: a5:8b:fa:11:74:4b:b7:67:51:33:e0:1b:34:3e:1a:fe:19:7f: 82:01:96:77:a7:ad:aa:cf:59:55:19:d7:ac:d4:87:4b:4d:6e: 81:a7:e6:c7:e8:cf:16:da:d8:03:ba:60:61:ee:9d:74:ab:4a: a5:28:d7:6a:17:93:05:03:e4:7d:38:d1:7f:c1:a0:b6:11:1a: d0:d5:24:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjUxMjIyMjAwMDE4WhcNMjUxMjI5MjAwMDE4WjAYMRYwFAYD VQQDDA02OTQ5YTM1My1jYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCSGlgt3H0XiiphGrESQ9T8de1HMWI0AGbirX4ZA7kcKCOG4w2Rw78pMqq4z 1rvIbSatfLIYUACOWOSATW1pbSYMp/11y3xgV/+0QPuUpEIVo+NEGLAiQxXp3KD3 Anr1FVQFv1fX2znV7UurRDKDJ/UB0bCDEPo+h4gPqxGolaPBC/huYhAbxAm9yYEJ jN4MMh+rayq5UtbnBHG72CjuxRzUwIIqnpSiHucFt7KtspuGl2AfkgAhT31L9eUv 03Ra+2kI60T9cpLKiEPxhU4BJ8vzpnfUSFQOXyYxhl3zemt9LqHYDpxEaQtJ8R/6 nH+IiBqkr6A3Qz8WfD34WqZn+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+qt551 TXtXL0Qv83kqRno/onljMB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM4Mi80MDI1ODA3Q0UxRTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2 a1V4c0Z1ZUl6U3dfZ0s5UUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIEUdlpwRwzeV/MI/eTQKkBkMt2eqsmyHOH5qi8yze4Fj6oUqOhQGT ErzEDkL3DYr6XLRUGUxY/KtqkttaBVLhsC6ORUUVaUmDsz5b4A+Q96nXsSC4oQ14 rf/xIev+KlcW6IJEGkFdyid+tDaP8ANDei5EQ5oPD5f9PzyEb3sVzJASevUE4HT+ 7kwduFWRVsMBrtR9AjDnczkZvcDwh96L6d5D3HWTHwRsFUrW6l+Qp9VnAwOli/oR dEu3Z1Ez4Bs0Phr+GX+CAZZ3p62qz1lVGdes1IdLTW6Bp+bH6M8W2tgDumBh7p10 q0qlKNdqF5MFA+R9ONF/waC2ERrQ1SSg -----END CERTIFICATE-----Generated at Wed Dec 24 04:49:04 2025 by rpki-client