This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json) Hash identifier: BhZrA5cBC9ayoMzdb6/wF8YpFyxrAAolcV5izUPTTLA= Subject key identifier: 10:3C:7A:B3:BC:06:4D:A4:12:BB:61:33:9F:3F:3C:B0:C1:DA:3D:2A Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 0840 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft Manifest number: 081F Signing time: Thu 18 Dec 2025 20:23:19 +0000 Manifest this update: Thu 18 Dec 2025 20:23:18 +0000 Manifest next update: Thu 25 Dec 2025 20:23:18 +0000 Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: b09k5xHtK/amHlZovHv9tndExzfysHJeL4uQbtuUMtA=) 2: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: 3AbfHAacjnEAWoo2sa+rjsKYetf4drBAdDYIzgNRGw0=) 3: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: EDuSd7q+Wy9A9v2ymA1vM1CdQcsnayUqkzAJ0vginys=) 4: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: 0MurJBTWr3VBt4BzPGN6YSpJS0KuheQ6jbFiFb2lsDo=) 5: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: KAqNHdwX5NNEjIYv/SrmUHgArBmx24W5Jn9cFOvsuKs=) 6: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: uh6Udu7tl5B51JnewZD4hvjUOCA+o54nu1BVBecsrkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2112 (0x840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Dec 18 20:23:18 2025 GMT Not After : Dec 25 20:23:18 2025 GMT Subject: CN=694462b7-1aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ad:5a:eb:e0:e5:c4:c7:2f:52:4c:25:66:7a: 08:fc:e4:6b:e7:5b:f8:6f:3b:4e:16:21:a9:f4:f0: 77:da:3b:55:5c:91:d4:50:5b:a7:fb:0c:0a:df:8a: b6:87:d5:84:1b:c6:dd:14:2c:e5:cf:76:9e:8d:a1: 21:bd:ea:45:80:14:5b:d3:fb:b4:af:99:d9:cf:10: 02:ad:b2:96:79:f2:13:61:13:82:0a:60:90:bd:67: 9b:0c:ab:6f:28:2a:ba:0f:fc:a9:72:59:16:ea:dc: 79:8a:f5:04:33:ce:4f:1a:d4:cd:31:51:cb:61:88: f0:04:0b:f3:e4:7e:22:13:99:61:3e:14:e1:17:d0: 98:2c:c8:b9:64:e7:84:85:be:8a:6c:d3:ba:90:7d: 5d:be:af:f2:27:76:43:bc:18:81:04:71:b1:d3:80: 93:fe:88:e0:19:fc:63:45:37:e0:03:d4:31:a1:b6: 10:f4:35:3e:58:7f:a5:7e:76:68:68:c4:4b:c9:05: 89:bd:6f:84:6f:7f:62:f5:38:74:ca:78:23:3b:c3: 48:44:55:9f:65:57:43:aa:3e:ff:88:8b:75:b8:c0: d3:71:67:5c:00:95:6c:6d:96:31:73:24:49:80:27: 16:f7:b3:5a:fc:9b:8e:62:07:95:fa:6a:18:34:7f: 1a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3C:7A:B3:BC:06:4D:A4:12:BB:61:33:9F:3F:3C:B0:C1:DA:3D:2A X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:09:b6:18:b5:47:1c:79:07:8a:a4:cd:b3:dd:95:39:93:8c: 60:39:da:72:6b:68:27:8f:94:bb:a3:8f:97:fb:43:b2:0e:cd: aa:6c:05:c0:8b:0d:be:27:4b:0c:c7:80:46:ad:55:ec:8b:0b: d6:18:b0:ae:fb:d8:18:30:ec:2a:ca:35:7a:07:b4:4e:2b:82: 95:12:26:01:63:97:c6:65:de:5f:e6:e5:bc:eb:3b:9a:e6:01: cb:e7:7a:b7:05:52:a7:9d:f8:3f:3f:ff:a7:3a:84:f3:d7:21: 60:2c:26:90:0d:9e:73:a7:8c:55:5d:dd:5e:de:d9:44:fc:55: df:4f:8c:cf:89:61:f5:05:4c:65:bd:10:5b:cc:02:4c:a8:1a: 7f:f2:f1:2e:72:88:d0:16:ce:92:fa:b7:e6:23:02:20:e2:15: cc:ce:39:9f:ba:0f:02:55:d4:47:ff:23:5f:1a:d7:83:ac:9f: 13:f1:64:05:78:53:33:e1:f9:ad:6a:78:31:46:fd:0c:f1:0c: 4c:07:0f:a1:dc:cf:72:08:5a:e8:2f:d0:1b:1a:6c:54:d3:63: 57:e6:6b:7e:9f:b2:17:d1:57:74:d4:30:d0:42:b1:c5:1e:4a: e1:80:e2:26:80:a7:e5:8d:47:a2:b6:1f:50:81:67:7b:71:96: ef:40:39:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjUxMjE4MjAyMzE4WhcNMjUxMjI1MjAyMzE4WjAYMRYwFAYD VQQDDA02OTQ0NjJiNy0xYWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp61a6+DlxMcvUkwlZnoI/ORr51v4bztOFiGp9PB32jtVXJHUUFun+wwK34q2 h9WEG8bdFCzlz3aejaEhvepFgBRb0/u0r5nZzxACrbKWefITYROCCmCQvWebDKtv KCq6D/ypclkW6tx5ivUEM85PGtTNMVHLYYjwBAvz5H4iE5lhPhThF9CYLMi5ZOeE hb6KbNO6kH1dvq/yJ3ZDvBiBBHGx04CT/ojgGfxjRTfgA9QxobYQ9DU+WH+lfnZo aMRLyQWJvW+Eb39i9Th0yngjO8NIRFWfZVdDqj7/iIt1uMDTcWdcAJVsbZYxcyRJ gCcW97Na/JuOYgeV+moYNH8a7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBA8erO8 Bk2kErthM58/PLDB2j0qMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr bHdXOEphcVBESjd4QU1tUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANCbYYtUcceQeKpM2z3ZU5k4xgOdpya2gnj5S7o4+X+0OyDs2qbAXA iw2+J0sMx4BGrVXsiwvWGLCu+9gYMOwqyjV6B7ROK4KVEiYBY5fGZd5f5uW86zua 5gHL53q3BVKnnfg/P/+nOoTz1yFgLCaQDZ5zp4xVXd1e3tlE/FXfT4zPiWH1BUxl vRBbzAJMqBp/8vEucojQFs6S+rfmIwIg4hXMzjmfug8CVdRH/yNfGteDrJ8T8WQF eFMz4fmtangxRv0M8QxMBw+h3M9yCFroL9AbGmxU02NX5mt+n7IX0Vd01DDQQrHF HkrhgOImgKfljUeith9QgWd7cZbvQDkC -----END CERTIFICATE-----Generated at Sat Dec 20 19:05:48 2025 by rpki-client