This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: TxzdDDI8Wo63ibHc858qsxO4lSPAnmaaLzV+RBYGXg0= Subject key identifier: 8C:A0:44:5C:02:52:C4:90:A7:53:DF:E8:23:37:47:4C:4D:4B:0D:2E Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 03C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 03B8 Signing time: Thu 18 Dec 2025 23:57:10 +0000 Manifest this update: Thu 18 Dec 2025 23:57:10 +0000 Manifest next update: Thu 25 Dec 2025 23:57:10 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: YiL/B/vacEPvINGbVgyVKipz3UvdGTynW44R+khnBY8=) 2: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: JCVj+AscF7hWsvaIqNJTPDabzygkqnGZEfVjCkrIsro=) 3: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: OB3c0FOnO7U7Cy2O3WKkzCkZvRGF4Swy8zD33qNbalg=) 4: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: PCa5nWLR+HuKgmwdVX9BOmG2ZZvLJrtIyJd8CbPbXng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Dec 18 23:57:10 2025 GMT Not After : Dec 25 23:57:10 2025 GMT Subject: CN=694494d6-c74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bc:3f:f7:d6:13:2b:32:a8:82:32:f1:86:70: 95:0d:20:26:37:c5:c5:4c:31:5b:e2:3b:b2:85:86: 59:ad:cd:21:d9:f4:50:47:b7:7c:43:b9:ea:d2:7c: 56:e2:00:21:f5:60:3e:a3:5e:ec:ff:1c:2b:11:34: a0:6d:fa:b4:61:12:e7:10:8f:c5:2d:88:87:8a:40: 5a:c5:9a:7d:7c:e1:fb:13:20:f7:50:df:64:0e:15: db:a8:d0:fa:3b:d6:f9:1d:39:25:21:be:10:18:b1: d6:50:5c:02:85:58:a9:9c:af:85:a5:d6:2f:8f:a8: 5b:14:22:c6:dd:93:35:14:24:e4:88:6e:79:b4:20: 41:cf:0c:9d:f5:b0:dc:6a:c3:0f:b3:6a:83:b6:0d: d0:07:96:84:60:f3:06:ca:bd:62:54:5a:8a:39:ba: fd:fb:7d:6b:3d:b7:4e:cd:5a:61:da:5b:02:19:56: 48:54:0d:19:e9:89:d6:e0:5b:82:87:e7:e5:59:92: b4:0b:de:7c:45:63:85:80:3c:d3:9e:59:f0:68:75: 83:f6:b4:69:76:29:71:f9:fa:c9:b2:67:dc:fc:6d: 91:b6:7a:d7:68:c0:3e:80:f8:07:f7:5e:85:81:ae: 96:7e:53:4a:1d:1d:89:59:6c:ad:44:95:a7:a2:87: 60:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A0:44:5C:02:52:C4:90:A7:53:DF:E8:23:37:47:4C:4D:4B:0D:2E X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e5:ff:b3:9e:4f:0e:fe:37:30:35:67:86:f0:48:3f:34:85: 33:ec:af:bd:48:2a:af:c7:e5:77:76:53:0d:66:75:e3:65:fe: 37:27:45:e3:14:00:53:23:74:1e:66:cc:7e:e0:e0:e3:f4:0d: 7b:32:78:30:98:d7:51:6f:90:f0:53:84:e8:93:bb:be:f2:44: a6:a4:9b:68:12:e2:5d:8a:95:23:56:cd:a5:a4:24:7e:de:93: 63:84:d7:f0:10:0f:4c:aa:3e:fc:82:7a:90:5c:55:65:f8:2f: 25:80:7d:2f:f0:e1:45:21:e6:f2:b2:18:21:c5:25:da:7c:ae: a3:1e:a7:56:3d:65:b7:a4:69:d2:47:d5:a8:55:01:af:9b:5f: 1c:b5:ee:93:ed:91:94:5b:23:e3:d0:e5:0f:15:1d:d8:61:5d: 8b:ef:2e:12:fb:f8:12:ae:ae:f4:70:ce:d5:1f:64:9e:73:79: 33:da:2b:a6:ea:b3:6b:d3:55:5a:27:c7:7d:d6:84:8e:1f:c7: 9d:bb:dd:37:b3:8c:27:66:fe:3c:06:71:b0:08:a4:1c:a4:1d: cb:15:28:ab:ad:91:6f:c5:d7:f4:85:50:6b:82:26:08:e4:51: e6:c7:fd:fc:36:67:95:5c:d5:8a:a5:38:a1:a4:0d:cc:08:64: 66:31:8d:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjUxMjE4MjM1NzEwWhcNMjUxMjI1MjM1NzEwWjAYMRYwFAYD VQQDDA02OTQ0OTRkNi1jNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rw/99YTKzKogjLxhnCVDSAmN8XFTDFb4juyhYZZrc0h2fRQR7d8Q7nq0nxW 4gAh9WA+o17s/xwrETSgbfq0YRLnEI/FLYiHikBaxZp9fOH7EyD3UN9kDhXbqND6 O9b5HTklIb4QGLHWUFwChVipnK+FpdYvj6hbFCLG3ZM1FCTkiG55tCBBzwyd9bDc asMPs2qDtg3QB5aEYPMGyr1iVFqKObr9+31rPbdOzVph2lsCGVZIVA0Z6YnW4FuC h+flWZK0C958RWOFgDzTnlnwaHWD9rRpdilx+frJsmfc/G2RtnrXaMA+gPgH916F ga6WflNKHR2JWWytRJWnoodgDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIygRFwC UsSQp1Pf6CM3R0xNSw0uMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn5f+znk8O/jcwNWeG8Eg/NIUz7K+9SCqvx+V3dlMNZnXjZf43J0Xj FABTI3QeZsx+4ODj9A17MngwmNdRb5DwU4Tok7u+8kSmpJtoEuJdipUjVs2lpCR+ 3pNjhNfwEA9Mqj78gnqQXFVl+C8lgH0v8OFFIebyshghxSXafK6jHqdWPWW3pGnS R9WoVQGvm18cte6T7ZGUWyPj0OUPFR3YYV2L7y4S+/gSrq70cM7VH2Sec3kz2ium 6rNr01VaJ8d91oSOH8edu903s4wnZv48BnGwCKQcpB3LFSirrZFvxdf0hVBrgiYI 5FHmx/38NmeVXNWKpTihpA3MCGRmMY1t -----END CERTIFICATE-----Generated at Sat Dec 20 01:39:28 2025 by rpki-client