This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft File: mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft (raw, json) Hash identifier: RZHHlFWJ+1oDFKnKetDMgv5FZitfdg8L57HYpw1KEQU= Subject key identifier: F3:7B:BA:E9:E0:BD:F7:D9:A1:F0:E8:D5:F4:2D:58:5B:73:68:65:38 Authority key identifier: 9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 Certificate issuer: /CN=A919E68B/serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft Manifest number: 7D Signing time: Tue 23 Dec 2025 05:37:46 +0000 Manifest this update: Tue 23 Dec 2025 05:37:45 +0000 Manifest next update: Tue 30 Dec 2025 05:37:45 +0000 Files and hashes: 1: mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl (hash: TDfmi5IUHrn5uG1S11JCYF/TAG0rVGP7+NRji+xHR0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E68B, serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Validity Not Before: Dec 23 05:37:45 2025 GMT Not After : Dec 30 05:37:45 2025 GMT Subject: CN=694a2aaa-38e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:b9:b0:e9:9a:d0:6b:2d:a8:9a:65:7c:33: 53:2f:c8:99:d6:08:75:c7:ec:0c:1f:9c:1b:6f:d5: eb:53:57:cf:2c:1e:78:a9:cb:ae:df:57:f7:97:38: 6d:ce:a7:44:d8:a6:38:e1:c4:a1:51:a1:7f:6c:26: 49:7a:98:e3:54:35:b5:e1:41:9a:58:54:4f:fb:53: ef:b1:58:e7:18:92:f8:c7:dc:65:6e:13:b4:b5:69: eb:51:a0:3e:0c:ee:aa:44:5b:33:3f:79:49:c1:5b: e1:fa:3f:cf:4a:65:3a:c8:e4:16:a4:cc:5e:c1:66: dd:17:b0:38:7f:85:c1:d5:ad:8d:99:ab:6b:df:62: 1d:ae:1d:e4:4d:0f:1c:0a:d3:2c:53:d4:84:3d:50: 07:71:fb:a2:57:e6:ad:b3:d9:60:f5:be:8d:d8:9d: a3:61:3b:f2:d5:cf:77:c4:de:d6:01:87:d2:b8:3d: 45:a6:f8:a6:41:19:4c:fd:45:1a:50:f9:91:63:88: 3a:69:35:79:8c:15:a7:c5:37:75:ab:4f:8c:5b:00: 23:2d:4d:3f:10:eb:8f:08:7f:15:71:96:24:ba:aa: 4c:46:b8:35:cf:b4:d7:5b:72:fe:6e:99:c6:2f:90: 91:60:7f:90:9f:dc:a6:4d:3b:32:a6:55:3b:9b:b0: e6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7B:BA:E9:E0:BD:F7:D9:A1:F0:E8:D5:F4:2D:58:5B:73:68:65:38 X509v3 Authority Key Identifier: keyid:9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a2:3f:f3:30:9a:66:98:ae:92:fe:59:9b:2b:1d:23:52:33: 1f:ed:35:49:45:67:72:50:89:08:9d:48:d4:9a:f5:01:58:00: 53:9b:4e:0e:2d:25:78:45:4e:09:5c:fa:5b:3f:d5:8f:ce:cf: d9:d6:ea:97:b0:98:59:6b:94:3f:22:c2:31:cb:43:67:a5:ee: 13:94:ea:23:30:93:85:6f:60:b7:39:fa:ba:e7:01:86:87:7e: 8a:b8:4a:07:25:98:5e:92:67:31:b8:01:71:4a:5e:fc:1b:10: d7:d2:03:8d:45:76:3f:51:a8:3b:01:01:bf:8d:e4:f6:e9:f1: 44:3d:59:d5:d4:5b:ab:f6:08:fe:df:e5:72:66:09:80:4b:65: 6a:e0:7f:4d:c9:f0:60:d5:76:26:ab:df:74:4e:7a:bc:8d:46: 5e:48:5b:40:37:07:18:3e:de:ea:28:1c:9d:f0:b5:9c:bb:58: 1a:71:8d:61:d9:42:12:92:85:d5:40:cb:c8:dc:61:4e:ce:ed: 64:16:57:31:88:a8:b6:88:09:4b:60:95:30:dc:6a:9c:a5:40: 52:ab:fc:af:60:f5:15:86:6b:b8:a4:88:c6:a1:b0:cb:68:cb: dd:2e:e3:2e:8e:e1:8a:07:12:49:bf:da:38:51:cc:91:91:13: 56:04:7c:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTY4QjExMC8GA1UEBRMoOUFENEM4MDUzMjhDRURDRjUxOTAzNDA0ODk2NDc0RDZE RTQ4Njc0ODAeFw0yNTEyMjMwNTM3NDVaFw0yNTEyMzAwNTM3NDVaMBgxFjAUBgNV BAMMDTY5NGEyYWFhLTM4ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/W7mw6ZrQay2ommV8M1MvyJnWCHXH7AwfnBtv1etTV88sHnipy67fV/eXOG3O p0TYpjjhxKFRoX9sJkl6mONUNbXhQZpYVE/7U++xWOcYkvjH3GVuE7S1aetRoD4M 7qpEWzM/eUnBW+H6P89KZTrI5BakzF7BZt0XsDh/hcHVrY2Zq2vfYh2uHeRNDxwK 0yxT1IQ9UAdx+6JX5q2z2WD1vo3YnaNhO/LVz3fE3tYBh9K4PUWm+KZBGUz9RRpQ +ZFjiDppNXmMFafFN3WrT4xbACMtTT8Q648IfxVxliS6qkxGuDXPtNdbcv5umcYv kJFgf5Cf3KZNOzKmVTubsOZdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU83u66eC9 99mh8OjV9C1YW3NoZTgwHwYDVR0jBBgwFoAUmtTIBTKM7c9RkDQEiWR01t5IZ0gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFNjhCLzE2QTkwQzQ0MUNG MDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5UmtEUUVpV1IwMXQ1SVow Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXRUSUJUS003YzlSa0RRRWlXUjAxdDVJWjBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF NjhCLzE2QTkwQzQ0MUNGMDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5 UmtEUUVpV1IwMXQ1SVowZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH2iP/MwmmaYrpL+WZsrHSNSMx/tNUlFZ3JQiQidSNSa9QFYAFObTg4t JXhFTglc+ls/1Y/Oz9nW6pewmFlrlD8iwjHLQ2el7hOU6iMwk4VvYLc5+rrnAYaH foq4SgclmF6SZzG4AXFKXvwbENfSA41Fdj9RqDsBAb+N5Pbp8UQ9WdXUW6v2CP7f 5XJmCYBLZWrgf03J8GDVdiar33ROeryNRl5IW0A3Bxg+3uooHJ3wtZy7WBpxjWHZ QhKShdVAy8jcYU7O7WQWVzGIqLaICUtglTDcapylQFKr/K9g9RWGa7ikiMahsMto y90u4y6O4YoHEkm/2jhRzJGRE1YEfLk= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:43 2025 by rpki-client