This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft File: A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json) Hash identifier: S2LtlpnnInjZ5Lsema+tL5JSuU2It4Yd42GOTSCUfw4= Subject key identifier: FE:71:C1:2E:61:A5:AA:1F:AA:A1:C9:5C:F2:5F:B3:52:5C:3F:3D:90 Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Certificate serial: 3501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft Manifest number: 34F6 Signing time: Sun 28 Dec 2025 15:03:07 +0000 Manifest this update: Sun 28 Dec 2025 15:03:07 +0000 Manifest next update: Sun 04 Jan 2026 15:03:07 +0000 Files and hashes: 1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: n6GSl0zKqpz61OSzlNLFHRY7W8bcbIvNXBFuwvdVvGI=) 2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: kZdCLZLr7MrW3XdEboMd7BRjcidMEtmhtIWvhKUYQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 15:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13569 (0x3501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Validity Not Before: Dec 28 15:03:07 2025 GMT Not After : Jan 4 15:03:07 2026 GMT Subject: CN=695146ab-f36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2a:d8:29:e1:3b:3a:8e:85:fa:4d:69:3f:76: fa:a5:e6:cb:c9:9c:01:a1:a4:67:c4:b1:ed:18:0a: 1c:bc:d0:33:ae:bf:6f:05:10:56:25:be:92:91:0b: 21:a7:14:81:d5:a7:0a:c0:46:d8:b1:ba:09:40:69: dc:f6:d5:53:8b:28:53:88:78:2f:09:ff:8e:bf:bd: c2:86:55:f1:5e:60:f9:6e:ae:3c:cd:77:99:1e:80: 38:4b:d0:92:7e:a6:c8:c0:2b:7e:c4:39:fc:27:aa: 4c:62:39:48:33:58:6a:4e:c5:d5:0d:26:d1:ce:31: 4f:82:a8:c6:dc:b4:fc:74:bd:48:19:a8:ae:df:bc: af:5f:21:ea:f9:8d:f2:95:43:12:a9:1a:8d:44:0d: f1:ca:e6:4e:ad:6c:df:a6:a0:f5:e7:53:52:a2:e2: 97:07:c5:6d:eb:75:36:5f:03:a6:49:2c:fa:45:dc: c0:86:26:7a:e9:fe:93:19:bf:27:42:31:90:64:93: 07:f6:b5:f0:f7:9e:02:55:93:02:79:6c:46:cd:31: a5:99:a5:fd:36:aa:c4:71:b9:c0:03:47:3f:9a:7e: fc:10:0e:7d:7b:f4:c2:19:68:cd:9d:36:df:ec:f4: 2b:f5:ce:6a:38:52:b6:c4:d0:57:a6:08:6c:3f:ea: 43:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:71:C1:2E:61:A5:AA:1F:AA:A1:C9:5C:F2:5F:B3:52:5C:3F:3D:90 X509v3 Authority Key Identifier: keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:e5:4d:6e:f4:7d:73:90:87:eb:bd:98:a8:45:09:0e:e8:82: 4f:70:ba:af:c0:0b:79:58:f6:53:b9:a3:66:e8:c3:4b:80:d6: 29:b3:1f:2d:ba:a3:74:15:c4:8b:d9:69:34:53:7d:eb:ae:6f: 3f:76:ff:ce:bc:65:70:af:e4:87:51:c0:57:38:56:7e:56:50: 5b:ab:85:22:78:2c:ed:5c:cd:46:fb:57:d1:45:77:71:75:31: 78:2f:db:27:7b:8b:7c:4f:94:76:e7:f6:7f:4e:b4:9f:b4:1c: d3:7a:d0:a2:a7:92:8c:b1:49:99:77:c0:f4:a5:c5:63:1e:aa: 83:d2:e3:e8:c4:46:48:9e:40:79:16:95:f9:da:ee:5b:26:86: 2d:14:e0:31:81:7c:35:da:3f:57:6d:48:ca:cc:49:80:c5:bc: 16:53:ad:8e:3a:0c:1f:40:2a:c5:51:c2:71:40:2e:61:0c:b6: 99:d2:d9:f6:cf:70:a8:85:68:c1:85:78:23:96:c8:45:a8:7c: e2:1b:6a:8c:57:2a:91:82:5b:eb:47:25:bc:ca:75:14:39:f0: 39:e0:50:3d:f9:36:da:34:f0:cc:ca:5e:ff:63:d8:ec:e8:b7: ee:f7:7c:24:5c:7f:a6:c9:5a:84:d5:13:b3:a6:a4:67:e6:4d: b5:35:bd:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJDRUMxMTAvBgNVBAUTKDAzOENGMkUyODA3N0RGMkNBREE0NTc1NkZCNUQ5OUE2 RTI0MEZEMDkwHhcNMjUxMjI4MTUwMzA3WhcNMjYwMTA0MTUwMzA3WjAYMRYwFAYD VQQDDA02OTUxNDZhYi1mMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6irYKeE7Oo6F+k1pP3b6pebLyZwBoaRnxLHtGAocvNAzrr9vBRBWJb6SkQsh pxSB1acKwEbYsboJQGnc9tVTiyhTiHgvCf+Ov73ChlXxXmD5bq48zXeZHoA4S9CS fqbIwCt+xDn8J6pMYjlIM1hqTsXVDSbRzjFPgqjG3LT8dL1IGaiu37yvXyHq+Y3y lUMSqRqNRA3xyuZOrWzfpqD151NSouKXB8Vt63U2XwOmSSz6RdzAhiZ66f6TGb8n QjGQZJMH9rXw954CVZMCeWxGzTGlmaX9NqrEcbnAA0c/mn78EA59e/TCGWjNnTbf 7PQr9c5qOFK2xNBXpghsP+pDKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5xwS5h paofqqHJXPJfs1JcPz2QMB8GA1UdIwQYMBaAFAOM8uKAd98sraRXVvtdmabiQP0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkNFQy9COEIwQzc4ODFE QTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5eXRwRmRXLTEyWnB1SkFf UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0enk0b0IzM3l5dHBGZFctMTJacHVKQV9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkNFQy9COEIwQzc4ODFEQTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5 eXRwRmRXLTEyWnB1SkFfUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC25U1u9H1zkIfrvZioRQkO6IJPcLqvwAt5WPZTuaNm6MNLgNYpsx8t uqN0FcSL2Wk0U33rrm8/dv/OvGVwr+SHUcBXOFZ+VlBbq4UieCztXM1G+1fRRXdx dTF4L9sne4t8T5R25/Z/TrSftBzTetCip5KMsUmZd8D0pcVjHqqD0uPoxEZInkB5 FpX52u5bJoYtFOAxgXw12j9XbUjKzEmAxbwWU62OOgwfQCrFUcJxQC5hDLaZ0tn2 z3CohWjBhXgjlshFqHziG2qMVyqRglvrRyW8ynUUOfA54FA9+TbaNPDMyl7/Y9js 6Lfu93wkXH+myVqE1ROzpqRn5k21Nb2s -----END CERTIFICATE-----Generated at Mon Dec 29 23:47:47 2025 by rpki-client