This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft File: M50SzjfjomH20PRT5ZlQqEvI_qI.mft (raw, json) Hash identifier: xjqfvxKOaVZ86eHX+K9aFEmI3NLt3QDs334RgRltzxk= Subject key identifier: 76:EE:B2:89:E5:F7:58:E2:9A:DE:66:42:20:D7:44:E3:CB:2A:67:11 Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 Certificate issuer: /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft Manifest number: 0219 Signing time: Mon 29 Dec 2025 01:17:38 +0000 Manifest this update: Mon 29 Dec 2025 01:17:37 +0000 Manifest next update: Mon 05 Jan 2026 01:17:37 +0000 Files and hashes: 1: M50SzjfjomH20PRT5ZlQqEvI_qI.crl (hash: ZCjN2Pkqx6X0hF6BUaymkhkCW4cLbwZTLDlMFtWJSYE=) 2: ABCAF01CA86211ED9ED67945C4F9AE02.roa (hash: pCFkiRXMRg9FOPKtz2Gf1bOU3S2ZHbxwwV0mMwR4Ado=) 3: AC623530A86211ED9ED67945C4F9AE02.roa (hash: MyxZujcbakOxBmEwfvS0Za/TiquqSe0s4Vw8//EffqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 01:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D20C, serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2 Validity Not Before: Dec 29 01:17:37 2025 GMT Not After : Jan 5 01:17:37 2026 GMT Subject: CN=6951d6b1-d3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:14:03:98:6b:9d:76:60:13:7e:0d:9d:dc:9b: 66:69:e6:25:b1:7b:ca:c3:39:22:21:e4:0f:ec:e3: 05:7b:49:a0:bb:a4:b3:0f:36:c3:26:8f:e6:a8:f7: 22:74:c4:9c:1f:79:3e:a7:8c:a7:61:b6:14:35:2d: 0d:79:e6:95:b4:7e:12:e1:45:e0:1c:45:59:e3:a0: 16:f5:a1:f9:0b:73:5e:a6:c7:2a:68:82:74:12:42: 05:08:22:a6:59:0b:a7:e5:b6:e2:49:99:80:a8:af: ec:2f:93:8f:dd:92:0a:9b:2e:58:cf:23:24:31:2b: 1e:83:16:ab:75:77:b3:4e:31:11:8a:e2:5f:61:da: f6:15:84:39:e4:f6:4d:7b:0b:fe:b3:ce:14:30:bf: 4d:ed:a4:95:35:32:46:2e:06:92:1a:7d:77:91:a5: 6f:b3:8e:bd:64:b8:1b:4a:4f:71:53:6f:4b:20:6d: 7b:93:bd:26:4c:64:1d:56:b1:d5:df:14:a3:e3:ea: 87:a2:4c:0c:e8:7e:1a:14:d9:4b:72:53:fe:0b:39: cb:92:7d:ce:c1:6a:4b:e8:fd:95:3b:bc:ee:9b:cd: fa:10:c3:05:87:4f:c1:07:9d:bc:19:fa:f1:12:6d: b4:60:10:a4:f3:10:4e:93:85:61:62:e4:21:0b:8e: 86:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EE:B2:89:E5:F7:58:E2:9A:DE:66:42:20:D7:44:E3:CB:2A:67:11 X509v3 Authority Key Identifier: keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:3a:86:9c:4a:8c:a2:f5:d1:47:dc:40:8f:5b:0c:11:36:04: de:ba:69:3c:03:b5:c6:c9:0b:87:ea:cb:90:46:a9:9e:89:16: 64:43:44:a8:97:c2:46:19:9b:d2:27:a7:39:c9:68:61:8b:8d: 54:e0:1b:76:98:96:a2:b4:32:23:20:02:bb:45:e2:35:18:aa: bb:ad:9a:43:a5:2d:51:1c:de:55:b2:32:a5:36:9d:5c:99:d2: e8:e1:90:4c:25:db:c1:b5:e0:40:91:25:3f:f3:7d:0e:f4:9a: b4:64:8a:af:bb:bd:3d:d4:35:ff:db:f1:f9:f9:a2:3e:d1:5f: ae:59:3f:77:45:82:15:fb:cd:59:71:78:d3:04:6d:ca:8f:be: f5:a5:fd:b5:86:c7:31:fa:c6:9e:6f:8b:ba:fe:e1:8e:5d:22: dd:03:19:87:b0:5a:b3:f4:d0:3a:37:83:bb:8b:32:8a:c8:42: 0e:c2:68:09:79:15:06:76:9e:44:cd:7b:22:41:9a:94:72:74: e9:0e:b8:05:17:31:3e:47:5d:cf:5f:52:99:f8:ac:c3:03:88: 2c:3b:6d:8a:4c:57:56:18:28:9f:d6:7b:54:43:c5:b4:38:38: b1:44:67:84:46:64:ca:6e:7a:4b:bd:a8:66:ed:b4:e0:15:f0: 90:bf:a5:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyMEMxMTAvBgNVBAUTKDMzOUQxMkNFMzdFM0EyNjFGNkQwRjQ1M0U1OTk1MEE4 NEJDOEZFQTIwHhcNMjUxMjI5MDExNzM3WhcNMjYwMTA1MDExNzM3WjAYMRYwFAYD VQQDDA02OTUxZDZiMS1kM2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiBQDmGuddmATfg2d3JtmaeYlsXvKwzkiIeQP7OMFe0mgu6SzDzbDJo/mqPci dMScH3k+p4ynYbYUNS0NeeaVtH4S4UXgHEVZ46AW9aH5C3NepscqaIJ0EkIFCCKm WQun5bbiSZmAqK/sL5OP3ZIKmy5YzyMkMSsegxardXezTjERiuJfYdr2FYQ55PZN ewv+s84UML9N7aSVNTJGLgaSGn13kaVvs469ZLgbSk9xU29LIG17k70mTGQdVrHV 3xSj4+qHokwM6H4aFNlLclP+CznLkn3OwWpL6P2VO7zum836EMMFh0/BB528Gfrx Em20YBCk8xBOk4VhYuQhC46GOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbusonl 91jimt5mQiDXROPLKmcRMB8GA1UdIwQYMBaAFDOdEs4346Jh9tD0U+WZUKhLyP6i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDIwQy9ENDBFRkY4RUE4 NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9tSDIwUFJUNVpsUXFFdklf cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001MFN6amZqb21IMjBQUlQ1WmxRcUV2SV9xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDIwQy9ENDBFRkY4RUE4NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9t SDIwUFJUNVpsUXFFdklfcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUOoacSoyi9dFH3ECPWwwRNgTeumk8A7XGyQuH6suQRqmeiRZkQ0So l8JGGZvSJ6c5yWhhi41U4Bt2mJaitDIjIAK7ReI1GKq7rZpDpS1RHN5VsjKlNp1c mdLo4ZBMJdvBteBAkSU/830O9Jq0ZIqvu7091DX/2/H5+aI+0V+uWT93RYIV+81Z cXjTBG3Kj771pf21hscx+saeb4u6/uGOXSLdAxmHsFqz9NA6N4O7izKKyEIOwmgJ eRUGdp5EzXsiQZqUcnTpDrgFFzE+R13PX1KZ+KzDA4gsO22KTFdWGCif1ntUQ8W0 ODixRGeERmTKbnpLvahm7bTgFfCQv6VN -----END CERTIFICATE-----Generated at Tue Dec 30 08:01:20 2025 by rpki-client