This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json) Hash identifier: Evd+8aUkIk/IgcDMB+nkfCUMyJdZpI+u4bnXLqm3mZM= Subject key identifier: 00:70:7E:8E:4F:FA:E1:49:94:49:FB:2A:89:07:16:52:9D:01:13:D8 Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Certificate serial: 0AEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft Manifest number: 0ADA Signing time: Mon 22 Dec 2025 18:54:03 +0000 Manifest this update: Mon 22 Dec 2025 18:54:03 +0000 Manifest next update: Mon 29 Dec 2025 18:54:03 +0000 Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: RxFgpuSrkN8QWQ7/NIaxNtagFMlLbOspLQynwODfm0U=) 2: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: +qdSnSMI4Cq6GPacx1y6troGvfBHeu8mDwsrgTG91us=) 3: 676A2DE2564911F08353B443C4F9AE02.roa (hash: YM/jqlM3yjwQowPEPNTW8kWHF+17BJwpa8g+tmnEC0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2798 (0xaee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Validity Not Before: Dec 22 18:54:03 2025 GMT Not After : Dec 29 18:54:03 2025 GMT Subject: CN=694993cb-9ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:c3:a5:02:b2:6f:a3:ec:c9:d5:b0:87:66: 4d:fe:80:4e:78:c0:d3:8f:2b:12:5f:9a:a3:53:45: 69:92:c6:66:82:28:a2:5c:ac:aa:d6:03:65:6a:a3: 1f:9f:01:47:b6:2e:f1:ce:c3:0e:95:b1:64:82:6d: 5c:1c:59:29:ed:88:bb:2a:c1:18:e2:e2:9b:bd:74: 67:d7:bd:3d:5e:92:75:cc:2d:ed:75:69:de:4a:a3: eb:ce:5e:bf:e9:08:0e:ac:4d:52:7d:1f:70:6f:f3: b4:e5:b0:03:51:aa:38:ba:56:4f:84:eb:06:10:6b: 7e:03:02:21:32:0d:e2:cb:a5:20:97:34:51:f1:51: 53:d3:23:a6:4f:18:5e:0a:ff:7f:18:a4:42:f1:4a: 8c:fa:c6:04:e6:af:cf:d5:cd:3f:59:bb:6e:15:9c: 28:48:28:eb:86:63:77:c6:7d:b7:fb:75:c2:36:70: 63:7c:e6:b0:8d:4f:db:d1:78:66:9a:26:b1:80:b9: 1a:fc:e1:8a:cd:a4:43:8b:f2:07:03:eb:89:47:ae: 0f:92:19:ef:2f:b5:58:6f:51:fa:2f:54:56:4f:41: 26:c7:d5:f2:ad:58:ac:18:fd:4b:3f:3b:6d:e5:f9: 9b:52:10:e7:6d:65:fb:a7:7f:33:0f:41:c0:aa:8a: 8e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:70:7E:8E:4F:FA:E1:49:94:49:FB:2A:89:07:16:52:9D:01:13:D8 X509v3 Authority Key Identifier: keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:27:de:74:77:43:b2:5c:bc:91:9c:60:d0:84:74:72:67:5b: 1e:4f:69:10:e9:1e:ab:46:b0:93:c4:2a:7b:cf:a5:87:d8:15: 33:ed:62:4d:5e:f0:54:de:fa:e0:29:be:45:60:f9:8d:43:b5: 3d:ea:be:2a:fb:11:01:da:a9:0a:91:f6:8f:1f:2d:d6:b9:3e: 59:4a:22:31:a8:74:b6:45:e0:ab:2b:70:7d:ff:bf:c3:9a:6c: 40:7e:3a:83:3b:5a:7d:13:ad:af:21:30:cd:da:d3:58:5c:59: 23:ac:5b:eb:93:83:b3:70:31:a2:bf:8f:91:4a:8e:a1:3e:56: 89:f5:dc:0d:bb:06:eb:b9:c3:21:8b:fe:10:76:51:67:3e:da: 65:19:26:0f:33:d5:1b:3b:4a:e8:1d:2e:e1:48:54:48:5b:1e: 8f:6e:dd:54:ec:73:08:a4:9b:72:15:1d:51:5a:a8:09:ac:62: ae:de:12:9a:d7:66:b3:ed:7a:b9:5f:45:dc:f1:26:78:0e:c3: 57:72:ea:6e:d3:0a:52:84:80:2d:98:b0:09:42:e1:10:c4:96: 29:3e:16:c7:26:90:c0:84:e3:92:e9:eb:d8:db:48:fd:61:6f: d3:0a:3d:ae:15:3d:e5:ca:46:7b:1b:c0:85:48:7b:61:d9:3a: 21:3e:c0:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE QUREOTZDM0QwHhcNMjUxMjIyMTg1NDAzWhcNMjUxMjI5MTg1NDAzWjAYMRYwFAYD VQQDDA02OTQ5OTNjYi05ZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxfDpQKyb6PsydWwh2ZN/oBOeMDTjysSX5qjU0VpksZmgiiiXKyq1gNlaqMf nwFHti7xzsMOlbFkgm1cHFkp7Yi7KsEY4uKbvXRn1709XpJ1zC3tdWneSqPrzl6/ 6QgOrE1SfR9wb/O05bADUao4ulZPhOsGEGt+AwIhMg3iy6UglzRR8VFT0yOmTxhe Cv9/GKRC8UqM+sYE5q/P1c0/WbtuFZwoSCjrhmN3xn23+3XCNnBjfOawjU/b0Xhm miaxgLka/OGKzaRDi/IHA+uJR64PkhnvL7VYb1H6L1RWT0Emx9XyrVisGP1LPztt 5fmbUhDnbWX7p38zD0HAqoqOvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABwfo5P +uFJlEn7KokHFlKdARPYMB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDExOC9CQjgxQTUxNDYyQkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5 MDBza1M5T1NuT19hM1piRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeJ950d0OyXLyRnGDQhHRyZ1seT2kQ6R6rRrCTxCp7z6WH2BUz7WJN XvBU3vrgKb5FYPmNQ7U96r4q+xEB2qkKkfaPHy3WuT5ZSiIxqHS2ReCrK3B9/7/D mmxAfjqDO1p9E62vITDN2tNYXFkjrFvrk4OzcDGiv4+RSo6hPlaJ9dwNuwbrucMh i/4QdlFnPtplGSYPM9UbO0roHS7hSFRIWx6Pbt1U7HMIpJtyFR1RWqgJrGKu3hKa 12az7Xq5X0Xc8SZ4DsNXcupu0wpShIAtmLAJQuEQxJYpPhbHJpDAhOOS6evY20j9 YW/TCj2uFT3lykZ7G8CFSHth2TohPsDK -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:35 2025 by rpki-client