This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft File: gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft (raw, json) Hash identifier: uFv7MLj4b7nGtGIgnDu7fS2VOKQKhaouu1fTVDr9KR8= Subject key identifier: 18:33:97:0D:B7:A1:A1:0C:62:44:D8:B6:9E:5E:A8:B7:50:B2:D6:84 Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F Certificate issuer: /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft Manifest number: 85 Signing time: Fri 19 Dec 2025 05:45:38 +0000 Manifest this update: Fri 19 Dec 2025 05:45:38 +0000 Manifest next update: Fri 26 Dec 2025 05:45:38 +0000 Files and hashes: 1: gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl (hash: Oaz4aaGTMYiG6IPtvwSh2CjGQZWlwJSLVb3E1wvxXbk=) 2: 15039C1E202F11F0AFD72717C4F9AE02.roa (hash: RNEYHFbl/lHVURQeSl/swC0oZ7j6giFqMqHaOjHDKKE=) 3: 2A2F9262201811F09DB3CC16C4F9AE02.roa (hash: /APLoPia3hJaAawAfJ/kXfLzR5xKKXFF9u0rCxKw4H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F Validity Not Before: Dec 19 05:45:38 2025 GMT Not After : Dec 26 05:45:38 2025 GMT Subject: CN=6944e682-4a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5b:df:31:47:99:dd:db:39:17:ec:8f:4e:82: 34:18:b0:c0:46:f6:e9:93:aa:bd:03:dc:10:b2:f7: 92:61:05:f7:7a:16:94:27:00:ea:98:f5:be:49:f7: 51:b9:ef:22:a0:7d:fd:44:25:c7:8d:f3:ad:4a:3b: 36:89:30:6b:19:dc:14:d7:36:2b:95:90:23:d2:1a: 7a:1d:a8:b4:e4:08:78:4e:d0:ce:22:ea:d1:bd:ea: 7e:e2:fb:85:4d:fb:73:45:e9:25:68:d6:8f:91:81: 90:8c:ed:8d:80:87:6f:94:15:95:47:cc:74:fe:ad: 61:44:c3:ca:5f:cc:25:5a:91:bf:82:21:7a:b1:2c: 22:57:64:26:d5:33:aa:ee:93:78:53:ba:08:73:cc: fc:6f:34:7a:1d:38:5b:5b:8c:45:86:a2:05:06:a9: 82:2e:aa:c2:6e:19:db:6b:fb:71:36:53:c3:98:40: 8e:95:6e:28:14:6d:2b:bf:f4:2d:8a:6c:d0:70:b9: 21:2c:ba:56:25:82:c7:70:88:2a:7c:73:82:84:26: 69:48:18:07:2a:0e:0f:d6:ba:62:03:04:2b:03:1b: 15:4a:45:f1:ed:ab:7b:1d:76:83:c7:f9:35:ed:6c: a8:a7:5c:6f:61:04:a8:ca:6b:e6:72:59:63:ce:c3: 16:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:33:97:0D:B7:A1:A1:0C:62:44:D8:B6:9E:5E:A8:B7:50:B2:D6:84 X509v3 Authority Key Identifier: keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:19:6a:81:43:2b:9f:02:89:93:9c:49:d8:c7:16:5c:00:85: d4:2c:77:ed:7e:b5:d2:8f:06:26:a7:42:eb:21:e6:76:a9:7a: 79:d9:bd:7c:d2:1e:10:c5:be:40:aa:06:48:fa:45:d5:5d:e6: 3a:d7:64:83:7b:63:1d:49:24:05:b2:6d:43:d7:d9:3e:cd:27: b9:85:27:fa:cc:09:8f:31:b7:eb:b8:82:75:61:fb:f7:c2:cc: e8:c2:78:39:8f:1c:5a:84:83:06:db:f5:ff:c7:7a:b2:ba:6f: 17:69:2d:66:18:7d:22:fb:c7:54:06:b7:72:03:5e:e0:79:f2: 6d:72:ef:62:ad:f7:0d:7f:26:8e:f3:5e:5b:90:c9:03:56:60: 31:53:e1:ef:40:83:a8:e1:33:a6:e5:be:02:62:ff:bf:ba:28: 44:aa:cb:b5:cf:63:ca:fc:29:58:fa:92:8f:dc:90:53:cb:0c: ee:93:79:9c:ae:a3:f2:6b:4f:ad:fd:9d:41:2b:c4:82:0d:01: 29:c8:eb:e0:e5:45:e8:79:04:d8:bf:c3:89:db:da:d9:22:a0: e0:7a:a0:bb:c1:ea:c9:fe:07:b2:b4:6f:cc:b5:b0:cb:3e:e8: 56:58:12:5f:20:86:84:9e:66:74:2e:7c:20:cf:22:0b:3b:ec: 60:9b:e5:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEMjExMTAvBgNVBAUTKDgxOEJCOTAzMzI3MTdGOTM1NzMwREFGMTQ3MDhGRkMy RjYwNUYwNUYwHhcNMjUxMjE5MDU0NTM4WhcNMjUxMjI2MDU0NTM4WjAYMRYwFAYD VQQDDA02OTQ0ZTY4Mi00YTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VvfMUeZ3ds5F+yPToI0GLDARvbpk6q9A9wQsveSYQX3ehaUJwDqmPW+SfdR ue8ioH39RCXHjfOtSjs2iTBrGdwU1zYrlZAj0hp6Hai05Ah4TtDOIurRvep+4vuF TftzReklaNaPkYGQjO2NgIdvlBWVR8x0/q1hRMPKX8wlWpG/giF6sSwiV2Qm1TOq 7pN4U7oIc8z8bzR6HThbW4xFhqIFBqmCLqrCbhnba/txNlPDmECOlW4oFG0rv/Qt imzQcLkhLLpWJYLHcIgqfHOChCZpSBgHKg4P1rpiAwQrAxsVSkXx7at7HXaDx/k1 7Wyop1xvYQSoymvmclljzsMWMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgzlw23 oaEMYkTYtp5eqLdQstaEMB8GA1UdIwQYMBaAFIGLuQMycX+TVzDa8UcI/8L2BfBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0QyMS8zOEMyNjFFNDFD MzgxMUYwQUE4NTdEMjdDNEY5QUUwMi9nWXU1QXpKeGY1TlhNTnJ4UndqX3d2WUY4 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZdTVBekp4ZjVOWE1OcnhSd2pfd3ZZRjhGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0QyMS8zOEMyNjFFNDFDMzgxMUYwQUE4NTdEMjdDNEY5QUUwMi9nWXU1QXpKeGY1 TlhNTnJ4UndqX3d2WUY4RjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZGWqBQyufAomTnEnYxxZcAIXULHftfrXSjwYmp0LrIeZ2qXp52b18 0h4Qxb5AqgZI+kXVXeY612SDe2MdSSQFsm1D19k+zSe5hSf6zAmPMbfruIJ1Yfv3 wszowng5jxxahIMG2/X/x3qyum8XaS1mGH0i+8dUBrdyA17gefJtcu9irfcNfyaO 815bkMkDVmAxU+HvQIOo4TOm5b4CYv+/uihEqsu1z2PK/ClY+pKP3JBTywzuk3mc rqPya0+t/Z1BK8SCDQEpyOvg5UXoeQTYv8OJ29rZIqDgeqC7werJ/geytG/MtbDL PuhWWBJfIIaEnmZ0LnwgzyILO+xgm+U6 -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:05 2025 by rpki-client