This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft File: R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json) Hash identifier: sjcgcACFxYwzdRLYN8hVR1BIjh5r1PuwaFUV0+WWzTg= Subject key identifier: 7D:14:1A:FA:BD:A9:7E:D8:49:86:B7:2B:7A:EE:79:BD:D5:F6:2B:13 Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Certificate serial: 1300 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft Manifest number: 12DE Signing time: Thu 18 Dec 2025 16:54:39 +0000 Manifest this update: Thu 18 Dec 2025 16:54:38 +0000 Manifest next update: Thu 25 Dec 2025 16:54:38 +0000 Files and hashes: 1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: s9NFjZDLBchi3tf1J6kRR7x2Xs7qR0xjVLZDCJT+J+E=) 2: 4978C5B2089911F0B2664480C4F9AE02.roa (hash: 00dFUbxtRi+P5zmsb5ryh9HhmqE32J+HOZ/FYXFpiHQ=) 3: 48B8F476089911F0B2664480C4F9AE02.roa (hash: JWTxPbAMnC0V4yG1gFdPedapzuHJ8Aw4XsiM14hADdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4864 (0x1300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Validity Not Before: Dec 18 16:54:38 2025 GMT Not After : Dec 25 16:54:38 2025 GMT Subject: CN=694431ce-a420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:c3:e2:7a:9d:7c:29:6e:1a:bb:58:d4:37: 84:93:21:bc:cb:59:d4:f1:ba:51:d5:33:11:f4:45: 70:59:42:f8:8f:9a:18:a8:21:3c:66:08:2b:4d:7d: 74:58:6c:72:bd:71:bd:1a:99:67:e3:41:f6:bd:3d: a9:d2:05:85:46:bb:60:59:da:4a:1b:42:1d:26:ed: 32:b1:6b:f6:3a:db:3a:6f:9c:dd:55:f6:2a:d0:eb: aa:8a:45:6f:34:85:51:0c:80:f1:e7:77:9c:91:f6: f1:18:cd:4c:9e:6d:b2:21:d2:39:6e:1e:08:da:dd: bc:03:3a:85:38:1e:91:14:01:ec:8f:27:9b:1d:39: f4:2c:d4:fd:9f:ea:d6:5e:24:e8:6f:7d:3b:44:a0: 06:27:b9:3b:24:53:6f:23:f3:6b:7c:95:b0:71:8d: 6a:c8:88:09:ba:64:3d:1e:aa:50:57:3b:ff:ce:5c: 00:9a:7d:32:41:1a:0e:b9:0d:22:80:41:0c:8e:9f: 4d:a6:5d:0d:4f:b9:c1:3c:1a:6b:9d:67:c3:91:31: b3:14:4a:54:70:85:b2:fb:0f:d9:7c:9d:6b:c8:c2: 68:28:7b:82:74:fb:ec:10:01:e3:7b:e2:a2:8e:3c: d3:4e:0e:85:ef:2e:f3:25:52:54:37:88:f4:15:0b: 45:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:14:1A:FA:BD:A9:7E:D8:49:86:B7:2B:7A:EE:79:BD:D5:F6:2B:13 X509v3 Authority Key Identifier: keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:49:6a:a2:cf:6d:a6:e7:1d:59:43:e4:86:65:ca:15:4d:26: 8c:c4:86:b1:34:12:4e:bc:14:1b:ed:7f:fc:44:73:6a:7b:50: af:e0:12:fb:32:a2:cb:c4:b5:6b:60:04:10:86:1a:98:82:f9: d0:21:cc:8b:cf:59:a4:68:7f:8f:b9:4a:6a:2c:74:8f:8f:ac: c8:2d:4d:8e:de:f6:18:f9:c9:91:c9:21:44:c5:0f:bd:31:fb: 87:63:9a:8e:75:4d:30:68:5d:3d:1a:9b:8f:a9:b7:87:da:05: cd:42:6e:a6:36:e6:2c:e2:1f:4a:6e:8e:99:0a:d1:7f:32:d2: e2:22:16:94:93:fb:db:3e:3d:17:22:08:af:cd:13:1d:c6:b9: 44:0f:61:4b:92:47:7b:21:5f:5e:7c:4a:3c:2a:54:89:30:6a: f1:ff:de:d0:68:d6:13:58:4a:8d:f6:cb:a1:28:50:78:5e:fe: 09:10:60:24:95:25:9b:0d:e4:38:3c:7c:18:80:5e:d4:cc:7d: 2c:4b:01:33:c3:82:7e:27:16:9d:cb:08:5f:05:75:f5:58:fa: b3:d7:f0:17:de:cb:88:29:f9:87:35:d9:bf:58:28:f6:30:b4: c0:c7:f6:2d:1f:b7:e3:45:e4:f7:5a:59:77:89:09:b6:30:01: 59:42:2b:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1RDUxMTAvBgNVBAUTKDQ3NkY1NzJBMzgwMjM2QUYzM0Y2MkQ4MkE1QkEyNjRE MkZCQkFEN0MwHhcNMjUxMjE4MTY1NDM4WhcNMjUxMjI1MTY1NDM4WjAYMRYwFAYD VQQDDA02OTQ0MzFjZS1hNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt97D4nqdfCluGrtY1DeEkyG8y1nU8bpR1TMR9EVwWUL4j5oYqCE8ZggrTX10 WGxyvXG9Gpln40H2vT2p0gWFRrtgWdpKG0IdJu0ysWv2Ots6b5zdVfYq0OuqikVv NIVRDIDx53eckfbxGM1Mnm2yIdI5bh4I2t28AzqFOB6RFAHsjyebHTn0LNT9n+rW XiTob307RKAGJ7k7JFNvI/NrfJWwcY1qyIgJumQ9HqpQVzv/zlwAmn0yQRoOuQ0i gEEMjp9Npl0NT7nBPBprnWfDkTGzFEpUcIWy+w/ZfJ1ryMJoKHuCdPvsEAHje+Ki jjzTTg6F7y7zJVJUN4j0FQtF6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0UGvq9 qX7YSYa3K3rueb3V9isTMB8GA1UdIwQYMBaAFEdvVyo4AjavM/YtgqW6Jk0vu618 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTVENS80RUJDQUYyNkQw QUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05xOHo5aTJDcGJvbVRTLTdy WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IyOVhLamdDTnE4ejlpMkNwYm9tVFMtN3JYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTVENS80RUJDQUYyNkQwQUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05x OHo5aTJDcGJvbVRTLTdyWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZSWqiz22m5x1ZQ+SGZcoVTSaMxIaxNBJOvBQb7X/8RHNqe1Cv4BL7 MqLLxLVrYAQQhhqYgvnQIcyLz1mkaH+PuUpqLHSPj6zILU2O3vYY+cmRySFExQ+9 MfuHY5qOdU0waF09GpuPqbeH2gXNQm6mNuYs4h9Kbo6ZCtF/MtLiIhaUk/vbPj0X IgivzRMdxrlED2FLkkd7IV9efEo8KlSJMGrx/97QaNYTWEqN9suhKFB4Xv4JEGAk lSWbDeQ4PHwYgF7UzH0sSwEzw4J+JxadywhfBXX1WPqz1/AX3suIKfmHNdm/WCj2 MLTAx/YtH7fjReT3Wll3iQm2MAFZQitx -----END CERTIFICATE-----Generated at Fri Dec 19 23:50:35 2025 by rpki-client