This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json) Hash identifier: eyiY98RaceUzFnzmU9zj5LPpe8qU0bOXAew4HDriwH0= Subject key identifier: 28:F4:91:2A:56:B7:B4:EB:9C:88:98:77:8C:68:31:5B:A4:BA:04:8F Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Certificate serial: 07BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft Manifest number: 0750 Signing time: Sat 20 Dec 2025 21:09:22 +0000 Manifest this update: Sat 20 Dec 2025 21:09:21 +0000 Manifest next update: Sat 27 Dec 2025 21:09:21 +0000 Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: WiHM07sBLRJec5RvShhphh2lYjfcug0JeqWMt02sDU8=) 2: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: uYKsV4sv50u9alr+4EgeUv5NJJKiEhEbHCBbGXsadQo=) 3: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: nwY3XOAdSWHWQClj8gA6vZzRQBvYNcJIrQ5O7yr8CLI=) 4: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: 8R/rZ/mbFR6fAD2MephrS/g3rxSP0cp2rY+Gklzx/Zc=) 5: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: 16YSTY2fnFs4eLLfhffiWxoVMVf5CI9XbA8xhp2Kh5I=) 6: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: QXMJ/jQUAiv47lj1Bpig1n8sU68IQku+vQs4DkbFezU=) 7: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: UrcHb9Zyjjqupasl1c8DJT8gL2zSGyTRtXJj/YwkNr0=) 8: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: GcUaymkPtkuB9knKnQU1h04sFVKLXXAddmnuYc97Q5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Validity Not Before: Dec 20 21:09:21 2025 GMT Not After : Dec 27 21:09:21 2025 GMT Subject: CN=69471081-12ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:ca:3a:7e:79:ac:ca:27:c8:10:ce:82:dd: 23:56:74:a3:4a:b4:06:5a:c7:ca:12:f6:87:ce:01: 0d:fe:88:9e:d8:a3:e5:aa:7e:2b:be:6a:8b:46:cd: a5:2b:65:63:52:a9:ae:db:3f:92:4c:28:a6:d7:f2: 2f:2b:e7:ee:20:b7:64:85:f2:61:bd:35:01:d4:a6: f9:b4:49:40:95:13:98:58:99:e1:11:c6:2b:b5:bc: ae:df:11:22:5b:d9:7a:e7:f2:b6:35:fa:7d:c9:ce: 9f:2a:5c:20:13:3a:54:b4:cc:52:0d:b3:ad:f7:80: 1a:d2:9e:bc:30:5f:58:fa:34:34:ec:1d:a1:cf:a4: 01:b9:64:e4:1a:d0:01:78:0b:7f:eb:d2:7f:eb:26: 12:cf:6c:1d:a5:17:fb:3d:b4:fe:c0:c3:75:11:c2: a0:3f:de:f8:22:ef:e5:63:13:c0:50:ea:78:d6:02: 42:93:c6:61:c4:a2:ff:9b:48:43:be:29:54:eb:34: fc:e1:0f:79:45:86:4b:bd:88:11:7f:8a:a3:f2:0d: e2:a3:db:18:df:fd:fe:c4:15:73:e4:0d:f6:33:6c: 0b:da:fc:4f:cb:4d:6f:de:03:6e:f9:f3:e3:9a:07: 55:64:dd:48:71:ad:28:e6:2d:b6:9d:d8:85:15:47: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F4:91:2A:56:B7:B4:EB:9C:88:98:77:8C:68:31:5B:A4:BA:04:8F X509v3 Authority Key Identifier: keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:33:22:02:a5:30:92:51:d7:ec:76:c0:6d:09:e5:5b:df:4e: 8c:07:08:83:7a:9e:b7:32:0e:eb:a5:c8:57:7b:01:fb:fd:40: 60:85:8e:c2:91:e3:80:6e:22:2a:16:15:e8:56:d1:39:38:5a: 69:96:72:f2:fd:ea:fc:3b:31:7c:c3:4d:4f:71:33:94:d1:8e: 47:67:0f:b9:d4:cf:27:07:9d:fe:8b:bf:25:37:6f:44:5a:46: 1f:db:9b:ee:2d:78:2e:2c:52:c3:34:0d:fd:a7:fc:b2:73:59: 16:d8:92:87:66:fe:c7:2e:33:5f:67:6c:b0:f7:7b:3d:65:da: 59:82:6f:71:49:4e:cc:ed:f5:c7:40:3b:5d:5b:ca:9f:68:1f: bd:b3:44:66:0c:a8:c7:9a:b6:2a:30:6c:72:4c:48:4a:8d:7d: 3f:78:5f:d2:90:8d:cf:d7:2f:bf:49:b4:c3:f7:a1:ea:50:5c: 0e:0e:7f:9f:a4:27:3a:bf:c9:b6:89:c1:00:9b:24:5a:1b:13: 2b:21:80:8f:5e:ab:cb:5f:52:cc:8e:8a:55:9b:76:46:5f:56: c6:fa:96:22:15:d3:e4:41:61:6f:07:39:f3:7e:1c:27:ff:78: 1d:8c:e1:26:b3:d3:dc:fa:78:f7:7a:08:94:b2:f2:a3:a4:b0: 84:1e:03:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4 QjZFMzYzRjUwHhcNMjUxMjIwMjEwOTIxWhcNMjUxMjI3MjEwOTIxWjAYMRYwFAYD VQQDDA02OTQ3MTA4MS0xMmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlHKOn55rMonyBDOgt0jVnSjSrQGWsfKEvaHzgEN/oie2KPlqn4rvmqLRs2l K2VjUqmu2z+STCim1/IvK+fuILdkhfJhvTUB1Kb5tElAlROYWJnhEcYrtbyu3xEi W9l65/K2Nfp9yc6fKlwgEzpUtMxSDbOt94Aa0p68MF9Y+jQ07B2hz6QBuWTkGtAB eAt/69J/6yYSz2wdpRf7PbT+wMN1EcKgP974Iu/lYxPAUOp41gJCk8ZhxKL/m0hD vilU6zT84Q95RYZLvYgRf4qj8g3io9sY3/3+xBVz5A32M2wL2vxPy01v3gNu+fPj mgdVZN1Ica0o5i22ndiFFUfT8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCj0kSpW t7TrnIiYd4xoMVukugSPMB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REYxRi9GNUNCNkU2QTVDNTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFB NXFnTndTN2tJdjZMYmpZX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQMyICpTCSUdfsdsBtCeVb306MBwiDep63Mg7rpchXewH7/UBghY7C keOAbiIqFhXoVtE5OFpplnLy/er8OzF8w01PcTOU0Y5HZw+51M8nB53+i78lN29E WkYf25vuLXguLFLDNA39p/yyc1kW2JKHZv7HLjNfZ2yw93s9ZdpZgm9xSU7M7fXH QDtdW8qfaB+9s0RmDKjHmrYqMGxyTEhKjX0/eF/SkI3P1y+/SbTD96HqUFwODn+f pCc6v8m2icEAmyRaGxMrIYCPXqvLX1LMjopVm3ZGX1bG+pYiFdPkQWFvBznzfhwn /3gdjOEms9Pc+nj3egiUsvKjpLCEHgMq -----END CERTIFICATE-----Generated at Sun Dec 21 02:14:29 2025 by rpki-client