This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft File: M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft (raw, json) Hash identifier: F8BG3b8dfn1riSLNHIM1w9vY7ZG8ok6/54U2VbLH4HM= Subject key identifier: 39:FB:9F:7D:A1:6C:07:46:22:D2:91:86:DD:51:09:EC:CA:4E:3F:2D Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5 Certificate issuer: /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft Manifest number: 82 Signing time: Tue 23 Dec 2025 05:36:08 +0000 Manifest this update: Tue 23 Dec 2025 05:36:07 +0000 Manifest next update: Tue 30 Dec 2025 05:36:07 +0000 Files and hashes: 1: M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl (hash: XJBElwyKoWudYhcmxSClb6ENzur+qPSqoQhNtB03B+A=) 2: 35C008E818C811F0BF9E881FC4F9AE02.roa (hash: bwDdjXPrVZtmIClbo9xqwN/iM/s96nIFHCKB+Vl9Hlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5 Validity Not Before: Dec 23 05:36:07 2025 GMT Not After : Dec 30 05:36:07 2025 GMT Subject: CN=694a2a48-4e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8b:7d:76:4b:e9:f3:09:0f:f3:b8:ba:da:03: de:68:6a:89:e1:fd:9b:e0:e9:dc:99:70:be:d1:76: 5f:e9:52:28:47:05:7e:c2:30:f0:12:52:59:fe:01: fc:ba:09:05:6e:34:5c:ac:96:25:06:3b:03:8a:f5: 8b:5e:b5:25:9b:32:62:2a:63:aa:bd:91:54:d7:d9: c4:9d:04:90:4f:ad:1f:c7:47:74:c6:2c:d9:f7:4c: c0:cc:6c:bd:6a:80:20:b6:90:bb:4f:0e:7f:5f:99: d0:82:9c:5a:9c:1a:a7:ab:7a:a7:c3:1d:a1:eb:7d: 60:6e:c6:a3:a0:2a:6c:23:89:37:14:a5:f7:7a:e2: 81:2d:b4:e4:fe:e4:6e:f4:36:d0:fc:b2:cf:85:aa: 78:ab:d0:b5:58:e4:55:eb:4f:4d:f6:26:f5:e7:e7: 80:ac:9d:22:c9:4a:2b:a6:f4:e1:c2:0a:8d:84:3d: 3c:08:da:7f:76:1f:ee:e0:7f:ec:f4:2e:8b:fb:1a: d5:c1:31:54:f9:e9:71:c7:78:83:b5:e2:b2:04:a6: d5:d3:3e:71:a1:c1:fa:33:1f:65:fb:f3:46:67:eb: b7:9f:8f:35:e5:71:b5:47:6c:b4:9b:65:c8:c4:b3: 63:09:1d:ae:7b:ae:d2:04:02:1c:7a:5b:f8:02:7a: 93:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FB:9F:7D:A1:6C:07:46:22:D2:91:86:DD:51:09:EC:CA:4E:3F:2D X509v3 Authority Key Identifier: keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e1:06:d3:a2:2b:52:df:1d:c4:58:d6:d2:4b:c8:b5:44:9e: 34:00:0d:55:1a:3b:63:0c:74:63:fb:5d:d7:ad:2e:bf:8d:dd: 34:ec:69:22:de:ef:b1:87:e8:af:30:77:ec:2e:ee:17:5c:5e: 36:ab:15:ee:0d:b2:31:f7:f3:16:5f:cf:ac:a0:a2:a7:50:bd: 36:27:3a:af:78:87:2d:b9:d9:a1:61:5b:c6:1a:38:1c:1f:65: 9f:e7:10:fa:e6:a2:fa:b5:12:78:c5:45:5a:f6:9c:18:9a:67: f7:c4:b0:7d:a3:cd:f1:99:2d:8f:29:1d:0c:84:94:0d:f6:9d: 9e:af:64:2f:14:e6:ea:67:07:4a:f1:cc:b2:c7:d2:59:66:87: 68:aa:d9:a5:e8:99:ff:cb:c9:51:60:9a:68:c7:44:59:0e:da: 89:b7:9e:92:25:f5:3b:6b:0d:30:d6:98:a9:1d:a2:6d:0f:ea: c2:da:e4:40:b4:80:87:eb:72:e5:2e:f1:51:b9:50:9f:d1:35: 52:1e:3f:0b:8f:dc:1c:24:b2:e1:b4:9d:3a:0c:71:ad:74:35: 2e:e0:c5:2d:38:da:d5:81:7f:d5:55:cc:cb:50:fb:9f:e3:d1: 6f:41:65:86:cc:ca:9f:d5:e6:42:19:57:d3:55:f7:a6:f4:08: e8:37:eb:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzRjkxMTAvBgNVBAUTKDMzNjJBQzU4RURCMTg5Q0YyNTc4M0MyN0Q5MEE3RDJG QTMyOTc3QzUwHhcNMjUxMjIzMDUzNjA3WhcNMjUxMjMwMDUzNjA3WjAYMRYwFAYD VQQDDA02OTRhMmE0OC00ZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4t9dkvp8wkP87i62gPeaGqJ4f2b4OncmXC+0XZf6VIoRwV+wjDwElJZ/gH8 ugkFbjRcrJYlBjsDivWLXrUlmzJiKmOqvZFU19nEnQSQT60fx0d0xizZ90zAzGy9 aoAgtpC7Tw5/X5nQgpxanBqnq3qnwx2h631gbsajoCpsI4k3FKX3euKBLbTk/uRu 9DbQ/LLPhap4q9C1WORV609N9ib15+eArJ0iyUorpvThwgqNhD08CNp/dh/u4H/s 9C6L+xrVwTFU+elxx3iDteKyBKbV0z5xocH6Mx9l+/NGZ+u3n4815XG1R2y0m2XI xLNjCR2ue67SBAIcelv4AnqTywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDn7n32h bAdGItKRht1RCezKTj8tMB8GA1UdIwQYMBaAFDNirFjtsYnPJXg8J9kKfS+jKXfF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDNGOS8xMjIyMzZFNjE4 QzcxMUYwODA1NDE3N0VDNEY5QUUwMi9NMktzV08yeGljOGxlRHduMlFwOUw2TXBk OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yS3NXTzJ4aWM4bGVEd24yUXA5TDZNcGQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDNGOS8xMjIyMzZFNjE4QzcxMUYwODA1NDE3N0VDNEY5QUUwMi9NMktzV08yeGlj OGxlRHduMlFwOUw2TXBkOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu4QbToitS3x3EWNbSS8i1RJ40AA1VGjtjDHRj+13XrS6/jd007Gki 3u+xh+ivMHfsLu4XXF42qxXuDbIx9/MWX8+soKKnUL02JzqveIctudmhYVvGGjgc H2Wf5xD65qL6tRJ4xUVa9pwYmmf3xLB9o83xmS2PKR0MhJQN9p2er2QvFObqZwdK 8cyyx9JZZodoqtml6Jn/y8lRYJpox0RZDtqJt56SJfU7aw0w1pipHaJtD+rC2uRA tICH63LlLvFRuVCf0TVSHj8Lj9wcJLLhtJ06DHGtdDUu4MUtONrVgX/VVczLUPuf 49FvQWWGzMqf1eZCGVfTVfem9AjoN+vX -----END CERTIFICATE-----Generated at Wed Dec 24 14:06:41 2025 by rpki-client