This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json) Hash identifier: Ar/vIxAChW1/nplKZgQbqFwHrs/GMZBhTtPWbwasBSw= Subject key identifier: C7:4F:34:BE:E7:8B:64:6B:94:A7:3D:C9:F1:8D:3E:C9:08:DF:49:CA Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft Manifest number: 0253 Signing time: Sun 21 Dec 2025 01:02:42 +0000 Manifest this update: Sun 21 Dec 2025 01:02:42 +0000 Manifest next update: Sun 28 Dec 2025 01:02:42 +0000 Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: L/u1pCKE0MCe9odduuqf/ytoYwktEYfomBmEDjJSOfQ=) 2: 455D199EE38B11EE84566164C4F9AE02.roa (hash: QIfFh4ayHyE+fbiYpOjvVIDqpWczkf3Nd//Ot2hnu8A=) 3: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: tLqebEf3q2YpfUgMNK/KEWR6AH6sMM3xnkpAYgAF8CI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Validity Not Before: Dec 21 01:02:42 2025 GMT Not After : Dec 28 01:02:42 2025 GMT Subject: CN=69474732-4aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:e7:00:c8:50:9c:bf:8c:1c:13:78:33:73: da:1d:85:47:45:ad:20:eb:bf:f7:07:57:7a:3f:19: 4e:df:c5:70:bd:25:4a:18:c2:f0:c5:99:fb:4c:54: 07:17:89:1c:7a:4e:5b:c3:6e:74:14:d8:a0:fd:94: 42:af:dc:88:e2:f6:e8:9c:e6:c1:a6:01:c0:7f:bb: 44:fb:ba:31:48:f8:ca:77:5d:a8:90:23:c1:69:eb: e8:8c:91:90:6b:9f:ac:c1:06:ea:50:d7:9b:c1:f7: 30:59:33:31:6c:d4:05:a1:66:a0:b3:d3:23:7b:b3: 32:d3:c8:65:fd:ab:e7:ed:02:4a:32:89:7b:9b:88: fd:58:d0:a0:ed:5b:11:cb:21:cf:4f:a8:b8:e6:0e: 46:3d:fa:c7:9b:2a:2c:c3:e6:07:a8:78:1d:9e:67: 16:31:07:3b:b7:bd:f0:cf:3c:eb:cc:f9:20:f1:4c: a3:c3:09:e2:50:1d:79:f2:53:03:d7:6b:3b:1f:00: a8:b6:f0:25:ea:4d:00:49:75:f4:8a:85:fb:49:ed: 8b:16:de:60:19:d2:bf:38:cf:a0:23:28:a7:33:70: b0:82:5b:6a:ce:0c:e9:7e:0e:f4:15:b4:37:b2:64: 6f:ea:52:2d:bd:d7:9f:5f:fb:c8:a4:56:49:da:9c: e9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4F:34:BE:E7:8B:64:6B:94:A7:3D:C9:F1:8D:3E:C9:08:DF:49:CA X509v3 Authority Key Identifier: keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5b:f4:e4:54:08:b0:f4:76:6c:f7:5d:ef:e1:34:b9:9d:f1: bf:4c:8d:a8:54:8c:45:8d:3e:ed:c9:ad:c1:e4:2e:e4:48:25: 18:d6:56:ab:70:24:65:96:09:09:95:0c:33:ae:c0:3c:64:43: f0:fc:7e:f3:88:43:c5:00:83:d8:bf:ce:5f:fe:c6:3b:5e:cf: 9e:9f:6f:27:8d:76:18:80:24:4c:05:53:ba:c6:35:97:9a:bf: 59:ef:d9:75:b3:28:5e:e9:4f:ac:bc:80:49:20:33:b9:c3:d3: 70:05:dc:20:54:83:62:64:4b:0c:f9:53:f5:e0:4b:1a:4b:5b: 84:3b:77:57:75:3c:0b:22:83:2d:e7:de:42:5f:5f:36:c8:20: 35:38:3a:2e:b1:99:f0:9f:6e:51:26:6f:44:9a:59:a5:bd:4f: 26:d6:4f:a1:b0:3a:ac:67:b3:5b:3f:f8:e8:89:c4:7e:01:66: 18:72:45:49:ba:6f:c5:e0:19:25:30:4e:ce:d5:5f:be:af:df: 05:6a:aa:c4:54:a0:a1:c7:04:55:8f:c1:fd:e2:3b:93:74:70: 15:d1:01:97:fe:0e:ad:fa:da:ee:af:c0:e8:28:18:66:75:d7: 70:1e:94:fa:33:f0:28:37:5e:27:59:be:f1:32:b0:af:af:ee: a6:27:91:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzcxMTAvBgNVBAUTKEU3Q0UxOUExNzg1NTIyODE1REFCNjNGRjY2REI2Rjg5 MDNGQ0Y5RkEwHhcNMjUxMjIxMDEwMjQyWhcNMjUxMjI4MDEwMjQyWjAYMRYwFAYD VQQDDA02OTQ3NDczMi00YWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOXnAMhQnL+MHBN4M3PaHYVHRa0g67/3B1d6PxlO38VwvSVKGMLwxZn7TFQH F4kcek5bw250FNig/ZRCr9yI4vbonObBpgHAf7tE+7oxSPjKd12okCPBaevojJGQ a5+swQbqUNebwfcwWTMxbNQFoWags9Mje7My08hl/avn7QJKMol7m4j9WNCg7VsR yyHPT6i45g5GPfrHmyosw+YHqHgdnmcWMQc7t73wzzzrzPkg8UyjwwniUB158lMD 12s7HwCotvAl6k0ASXX0ioX7Se2LFt5gGdK/OM+gIyinM3Cwgltqzgzpfg70FbQ3 smRv6lItvdefX/vIpFZJ2pzppQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdPNL7n i2RrlKc9yfGNPskI30nKMB8GA1UdIwQYMBaAFOfOGaF4VSKBXatj/2bbb4kD/Pn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDNy8wMzRGQzYxQTY0 MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklvRmRxMlBfWnR0dmlRUDgt Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU4NFpvWGhWSW9GZHEyUF9adHR2aVFQOC1mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDNy8wMzRGQzYxQTY0MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklv RmRxMlBfWnR0dmlRUDgtZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKW/TkVAiw9HZs913v4TS5nfG/TI2oVIxFjT7tya3B5C7kSCUY1lar cCRllgkJlQwzrsA8ZEPw/H7ziEPFAIPYv85f/sY7Xs+en28njXYYgCRMBVO6xjWX mr9Z79l1syhe6U+svIBJIDO5w9NwBdwgVINiZEsM+VP14EsaS1uEO3dXdTwLIoMt 595CX182yCA1ODousZnwn25RJm9EmlmlvU8m1k+hsDqsZ7NbP/joicR+AWYYckVJ um/F4BklME7O1V++r98FaqrEVKChxwRVj8H94juTdHAV0QGX/g6t+trur8DoKBhm dddwHpT6M/AoN14nWb7xMrCvr+6mJ5G1 -----END CERTIFICATE-----Generated at Mon Dec 22 17:42:58 2025 by rpki-client