This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft File: v1g_8H2jVv3igoGfR7zuJHUTEZo.mft (raw, json) Hash identifier: QfaRp4dVHYUjiHQwTMUJVmvVkqRGD2csmvh/eVJGDJs= Subject key identifier: 55:3A:95:C4:0A:B1:40:86:37:17:B6:FA:96:41:7A:D3:B9:8E:CD:25 Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A Certificate issuer: /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Certificate serial: 3526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft Manifest number: 350D Signing time: Sun 28 Dec 2025 14:27:09 +0000 Manifest this update: Sun 28 Dec 2025 14:27:08 +0000 Manifest next update: Sun 04 Jan 2026 14:27:08 +0000 Files and hashes: 1: v1g_8H2jVv3igoGfR7zuJHUTEZo.crl (hash: uuufoaVKvOe4qdRMTCfAhjIDitNupp3U27H5SpPLdfc=) 2: 6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (hash: st0pVxpUqrAEUwj53Z+GQXs6wx4AnLeV6lm/Wqla7jI=) 3: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (hash: 8VK+APK/5itIVHmFKGjT+lEuTWBUnDuSseayGMqo1ag=) 4: F73D1642F30B11EFA86D9348C4F9AE02.roa (hash: NAzmMf7NVE534MnJBMzFOT2rLSzUZpBo5WpxUwTckK0=) 5: B3C4F6FCC8E811EFA15E172AC4F9AE02.roa (hash: 7X3op8FxLKCInR/9TSODy+LRMH6+i0DMcG4PbSJZGR0=) 6: 60629332FE4611EFB15A9D48C4F9AE02.roa (hash: /zfwzDG7n6E2JjaivpDdu+dOVBIaawCIeVKdcfBcPXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 14:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13606 (0x3526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Validity Not Before: Dec 28 14:27:08 2025 GMT Not After : Jan 4 14:27:08 2026 GMT Subject: CN=69513e3c-e9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d9:c8:b0:59:ff:15:7d:f3:d2:76:3a:4a:57: 76:4b:e2:e6:5d:ed:ed:37:a7:74:86:41:f4:e9:be: 68:52:7c:a2:5a:25:b5:f9:36:21:58:44:d0:35:7a: 7a:a0:98:45:bf:82:38:2e:66:76:1e:58:a4:1a:09: 21:46:b6:79:c2:49:5d:12:e2:72:33:f9:ba:7f:9c: 3d:11:c9:22:0c:0d:c5:53:bb:02:8c:45:4d:f1:03: 19:77:55:0b:e8:9b:12:e8:e0:cb:dc:3a:2f:0d:77: 56:f0:52:51:6b:ca:77:c2:b7:8a:3a:15:39:e7:82: d2:13:f2:61:14:76:9d:e2:ec:a7:a6:9e:65:1a:d7: d0:13:a3:74:c9:fa:b3:fa:99:1d:0c:2c:23:a6:65: 49:79:b1:3e:76:8c:c2:94:b5:e4:c1:f8:21:c4:a1: a8:be:c7:26:e9:86:22:59:43:77:78:d8:cb:90:68: 7d:8d:c4:f6:8e:13:06:11:70:3f:50:c3:89:b2:26: cf:49:ba:0e:d4:75:7c:94:da:3f:b9:99:44:26:f6: 31:ad:4d:f9:82:65:94:4d:99:45:f1:db:0b:dc:2d: 27:ef:c5:6b:c8:3f:45:1f:c1:93:73:d7:03:dd:99: b2:a2:9b:dd:40:46:a0:6e:18:3f:00:53:7b:36:a6: e1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3A:95:C4:0A:B1:40:86:37:17:B6:FA:96:41:7A:D3:B9:8E:CD:25 X509v3 Authority Key Identifier: keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:66:56:78:29:e8:0f:16:0e:94:a2:78:bd:bc:83:15:23:56: 86:ea:d8:92:11:75:51:10:95:bd:bc:62:4d:5b:36:7d:4d:15: e2:21:a6:10:42:67:d7:79:fd:4c:e5:6f:75:58:f9:8d:d2:0d: fa:30:3d:d2:d0:a2:73:f9:db:bd:9f:34:2c:a4:25:4e:1b:f0: 3e:34:a0:40:d5:2b:5f:f0:c0:69:d3:45:40:3e:b4:6a:8d:39: f2:4e:2d:aa:07:a7:fb:74:f1:b2:31:ea:11:fa:ee:75:b7:da: eb:72:4b:3c:9a:4b:6e:2f:94:61:ca:35:fa:fb:fc:3d:81:92: 2e:71:25:4c:f8:8e:d2:4a:02:4d:3d:88:d6:9e:b2:25:99:64: 40:ec:52:d1:0e:0c:60:5b:0e:f5:1c:86:19:d0:64:e2:88:68: ac:7d:f8:85:92:eb:f2:f2:2a:9d:04:af:01:6b:8c:72:a9:9d: 5b:ac:2b:a7:45:cf:cd:39:4c:35:73:37:61:4d:39:7e:2c:96: 3d:7a:6c:e3:82:26:bd:08:53:8b:89:9e:04:b4:18:ab:cd:d5: dd:95:d6:6b:31:84:18:6f:4c:81:ec:8f:22:23:b5:ca:bf:72: 8a:6f:61:8b:bc:91:59:23:c9:7e:7e:0b:37:fe:6b:84:06:84: 68:d3:08:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEJGNTgzRkYwN0RBMzU2RkRFMjgyODE5RjQ3QkNFRTI0 NzUxMzExOUEwHhcNMjUxMjI4MTQyNzA4WhcNMjYwMTA0MTQyNzA4WjAYMRYwFAYD VQQDDA02OTUxM2UzYy1lOWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNnIsFn/FX3z0nY6Sld2S+LmXe3tN6d0hkH06b5oUnyiWiW1+TYhWETQNXp6 oJhFv4I4LmZ2HlikGgkhRrZ5wkldEuJyM/m6f5w9EckiDA3FU7sCjEVN8QMZd1UL 6JsS6ODL3DovDXdW8FJRa8p3wreKOhU554LSE/JhFHad4uynpp5lGtfQE6N0yfqz +pkdDCwjpmVJebE+dozClLXkwfghxKGovscm6YYiWUN3eNjLkGh9jcT2jhMGEXA/ UMOJsibPSboO1HV8lNo/uZlEJvYxrU35gmWUTZlF8dsL3C0n78VryD9FH8GTc9cD 3ZmyopvdQEagbhg/AFN7NqbhdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFU6lcQK sUCGNxe2+pZBetO5js0lMB8GA1UdIwQYMBaAFL9YP/B9o1b94oKBn0e87iR1ExGa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yMEIzN0NGRTFE ODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2M2lnb0dmUjd6dUpIVVRF Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxZ184SDJqVnYzaWdvR2ZSN3p1SkhVVEVaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yMEIzN0NGRTFEODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2 M2lnb0dmUjd6dUpIVVRFWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGZlZ4KegPFg6Uoni9vIMVI1aG6tiSEXVREJW9vGJNWzZ9TRXiIaYQ QmfXef1M5W91WPmN0g36MD3S0KJz+du9nzQspCVOG/A+NKBA1Stf8MBp00VAPrRq jTnyTi2qB6f7dPGyMeoR+u51t9rrcks8mktuL5RhyjX6+/w9gZIucSVM+I7SSgJN PYjWnrIlmWRA7FLRDgxgWw71HIYZ0GTiiGisffiFkuvy8iqdBK8Ba4xyqZ1brCun Rc/NOUw1czdhTTl+LJY9emzjgia9CFOLiZ4EtBirzdXdldZrMYQYb0yB7I8iI7XK v3KKb2GLvJFZI8l+fgs3/muEBoRo0wiy -----END CERTIFICATE-----Generated at Mon Dec 29 17:02:49 2025 by rpki-client