This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json) Hash identifier: 8hasUKjjRuNZntCqlxOg++B1Rfbp+t/pZhs+9XBcfis= Subject key identifier: 80:0C:FC:D1:D4:B1:DF:F2:8D:62:F7:10:D2:94:FA:E0:1A:05:E4:15 Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft Manifest number: 01F0 Signing time: Sun 21 Dec 2025 02:01:14 +0000 Manifest this update: Sun 21 Dec 2025 02:01:13 +0000 Manifest next update: Sun 28 Dec 2025 02:01:13 +0000 Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: o4GGAqDL/AXoke/JZQH6fn4z2CbQH3SEqTFKDY0b8ko=) 2: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: YHLvsfLb9vn+sTC103ywcZHpPAhWQQaEGzE/L4SadW0=) 3: 2D450BA8B58211F094C92178C4F9AE02.roa (hash: iIj9yJVCt0RNLEHDnqyR+A4ssEqyV6ayKCnQGatPpAI=) 4: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: GzY2mja93XMB8v0gofsGbfBeQdmx/oTQdYYP656riXY=) 5: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: sKzlG98yhfvA0cZ5DMZFsMl5sTXVOn8rst+hGNnB2OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: Dec 21 02:01:13 2025 GMT Not After : Dec 28 02:01:13 2025 GMT Subject: CN=694754ea-5be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:c3:96:54:0c:a3:21:19:4c:ec:ce:1a:22: 3e:b9:1d:eb:2d:63:82:d4:01:a6:b7:1e:fe:de:80: e5:68:cd:63:47:0b:cd:f5:10:fd:7f:73:83:1e:ec: c8:ef:c6:34:46:54:1d:1e:b7:b9:72:f0:18:4a:27: 01:21:7c:fc:a6:c7:b1:40:3a:28:4b:63:41:7b:5f: ba:e9:e7:36:ee:ac:2b:9e:3b:bf:90:c5:8e:83:96: ab:df:8d:f9:c3:3d:c4:59:54:02:7d:9e:35:36:75: 9e:b9:a9:cc:11:e6:f9:e9:be:da:c3:85:66:bf:27: b4:75:91:64:d0:28:ca:30:6a:2c:60:df:c8:57:1d: fd:85:50:3e:2a:ac:c7:c3:0e:07:8e:90:0d:3d:96: c1:bd:c2:27:03:48:45:f6:ae:33:8a:03:2b:d4:69: 04:5e:e4:03:12:6e:81:9b:9f:6f:df:d6:14:d9:80: 06:57:1e:e4:12:6b:4d:05:bb:fb:0b:04:b7:d0:0b: af:32:7e:8d:10:5f:d0:b7:c4:f1:64:4e:95:b4:03: 66:e2:03:10:9d:54:e0:1d:5a:a5:bd:95:26:85:98: de:5c:bf:ad:8a:80:6d:85:dd:23:15:a4:40:8e:f3: c2:ed:36:3e:aa:d2:50:f1:c0:b5:cf:c6:93:85:e4: 18:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0C:FC:D1:D4:B1:DF:F2:8D:62:F7:10:D2:94:FA:E0:1A:05:E4:15 X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ad:1e:3c:30:4e:20:da:9d:d4:1d:cf:f8:1c:9b:82:38:dd: 51:b9:38:fd:71:07:11:53:b8:5b:d1:aa:35:89:df:35:7c:3a: 15:cb:38:17:a9:bd:62:77:43:58:f8:b7:76:f9:44:29:8a:5d: 44:88:d7:a7:44:5c:2e:a1:af:31:df:1b:22:11:46:a8:6a:67: b8:f5:b8:2d:90:a4:5f:be:b7:db:99:2a:b4:11:f8:b4:7e:89: 43:c5:a3:7a:cb:9b:e7:26:68:73:c6:3e:87:d1:42:b6:ef:73: e2:bf:31:9b:9a:c3:86:56:b7:68:80:3b:5b:16:34:5d:79:46: 19:8d:f6:a3:aa:87:d6:85:73:73:0f:45:01:19:2f:35:8d:a5: aa:da:39:52:b1:0b:f0:2c:3f:30:67:fe:19:03:53:9c:6e:23: 75:a2:a3:c0:20:e1:9a:f3:85:43:f0:63:f8:a4:58:fd:40:e6: e0:90:d8:ab:b5:07:ea:72:7d:ee:23:27:73:e4:fa:51:92:85: 2f:2b:e5:db:b9:4c:18:74:a6:ca:96:ae:e0:d4:d0:aa:a4:fb: 2c:44:09:1b:4c:73:fa:53:c4:e5:50:80:7f:a6:13:03:8d:56: 66:dc:6d:e6:04:a7:41:12:8a:f1:51:2a:13:7a:8e:61:86:95: 6e:dc:98:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjUxMjIxMDIwMTEzWhcNMjUxMjI4MDIwMTEzWjAYMRYwFAYD VQQDDA02OTQ3NTRlYS01YmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIXDllQMoyEZTOzOGiI+uR3rLWOC1AGmtx7+3oDlaM1jRwvN9RD9f3ODHuzI 78Y0RlQdHre5cvAYSicBIXz8psexQDooS2NBe1+66ec27qwrnju/kMWOg5ar3435 wz3EWVQCfZ41NnWeuanMEeb56b7aw4Vmvye0dZFk0CjKMGosYN/IVx39hVA+KqzH ww4HjpANPZbBvcInA0hF9q4zigMr1GkEXuQDEm6Bm59v39YU2YAGVx7kEmtNBbv7 CwS30AuvMn6NEF/Qt8TxZE6VtANm4gMQnVTgHVqlvZUmhZjeXL+tioBthd0jFaRA jvPC7TY+qtJQ8cC1z8aTheQY2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAM/NHU sd/yjWL3ENKU+uAaBeQVMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0 Z3pVNFFnTGItN09WWmNsTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxrR48ME4g2p3UHc/4HJuCON1RuTj9cQcRU7hb0ao1id81fDoVyzgX qb1id0NY+Ld2+UQpil1EiNenRFwuoa8x3xsiEUaoame49bgtkKRfvrfbmSq0Efi0 folDxaN6y5vnJmhzxj6H0UK273PivzGbmsOGVrdogDtbFjRdeUYZjfajqofWhXNz D0UBGS81jaWq2jlSsQvwLD8wZ/4ZA1OcbiN1oqPAIOGa84VD8GP4pFj9QObgkNir tQfqcn3uIydz5PpRkoUvK+XbuUwYdKbKlq7g1NCqpPssRAkbTHP6U8TlUIB/phMD jVZm3G3mBKdBEorxUSoTeo5hhpVu3Jix -----END CERTIFICATE-----Generated at Mon Dec 22 17:31:48 2025 by rpki-client