This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: dUz13k8cm4U5WkAcZ/g540dIRE6QpaTNGMmKB+oszMw= Subject key identifier: C7:89:FD:54:76:DC:67:1A:6D:F7:6A:96:70:C8:52:B5:09:55:19:5C Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 03CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 03BC Signing time: Fri 26 Dec 2025 23:43:19 +0000 Manifest this update: Fri 26 Dec 2025 23:43:19 +0000 Manifest next update: Fri 02 Jan 2026 23:43:19 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: 5AUCjkzbp+YdlOWGYDnuLXsd6OfUfYNyHTv1BJ+M0zQ=) 2: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: JCVj+AscF7hWsvaIqNJTPDabzygkqnGZEfVjCkrIsro=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: PCa5nWLR+HuKgmwdVX9BOmG2ZZvLJrtIyJd8CbPbXng=) 4: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: OB3c0FOnO7U7Cy2O3WKkzCkZvRGF4Swy8zD33qNbalg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 23:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 972 (0x3cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Dec 26 23:43:19 2025 GMT Not After : Jan 2 23:43:19 2026 GMT Subject: CN=694f1d97-2a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:04:a3:f5:d5:34:ab:df:95:31:1e:62:42: a0:8f:28:8c:87:31:29:1a:a1:e6:86:13:e9:27:e8: f3:e0:08:4a:07:8b:ff:1c:66:54:1e:6d:49:47:15: d3:c4:b1:e4:0c:c1:72:98:67:aa:77:2f:93:06:75: 33:b6:95:11:2f:c8:3f:03:53:cb:e2:9c:cb:8b:35: 5a:03:8a:8a:6d:87:0f:13:d3:b8:da:02:1e:0a:7a: eb:9d:fc:51:88:d2:94:d8:24:7e:df:75:ea:39:fa: 8a:9a:e9:2b:d4:9a:4e:3d:6a:09:05:da:61:83:d4: e2:1c:6e:f3:5c:d1:49:bb:04:5f:24:37:e7:d5:93: 61:b4:ea:dd:9a:33:87:54:34:2d:73:aa:0a:7f:72: 85:e6:cc:9b:03:eb:bd:be:9d:39:00:76:54:be:7f: 3a:9a:f4:21:c4:d8:8a:96:ad:ed:de:36:73:6a:19: f6:49:27:81:82:e9:93:a2:8e:bd:5c:ae:a1:59:37: 87:dd:6c:50:d0:56:ab:45:e7:d6:32:bb:44:5e:61: 76:91:c6:fe:e3:54:e0:c1:6d:5d:1c:b1:79:ce:42: e9:54:53:1a:aa:e4:6e:44:f1:a2:39:db:f6:9e:dd: 73:8c:f3:a1:14:5b:29:bd:d5:58:31:e7:78:74:4d: 3a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:89:FD:54:76:DC:67:1A:6D:F7:6A:96:70:C8:52:B5:09:55:19:5C X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c3:e5:34:84:cd:36:68:33:e3:2b:65:ec:0c:75:d4:6f:9a: 87:76:61:57:17:1c:a0:4e:c7:51:4e:5b:15:8f:f4:ac:1a:a0: 39:67:0f:da:0b:87:e1:87:b2:a7:1e:48:c0:2c:40:7a:b3:03: 0d:9f:47:05:0f:91:f7:b7:fb:20:c6:b6:07:be:4b:0d:5b:db: 9d:d8:94:13:b6:70:de:2f:03:46:e8:aa:50:ba:d4:07:b4:db: ed:95:f1:ae:11:d2:83:19:a9:65:4b:61:42:be:86:ae:3e:7c: 83:88:2f:6f:e0:f1:8a:42:2b:f3:49:d6:6b:07:ff:e5:64:b8: 90:fd:d3:7e:1d:8c:2c:40:d1:e7:90:a6:9c:05:4a:98:40:41: dd:c3:5f:46:0d:bc:7f:c1:8a:ec:0a:06:41:41:0c:3f:aa:2f: 14:e0:2b:ba:b0:27:fe:a7:ed:8c:a7:2b:df:be:71:40:c1:c5: 7f:7b:25:fe:05:56:00:b5:57:71:3c:c8:00:f2:aa:57:cb:db: 53:22:9d:62:eb:6d:c0:1e:ad:e4:18:91:b0:bc:cc:fa:57:4b: c6:37:c3:1f:4a:32:bd:00:c4:4c:5c:62:f1:8b:5b:0d:8c:52: 99:15:0a:35:ed:b6:2c:44:1d:d8:6b:9a:cd:7a:68:03:c0:2b: 04:30:de:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjUxMjI2MjM0MzE5WhcNMjYwMTAyMjM0MzE5WjAYMRYwFAYD VQQDDA02OTRmMWQ5Ny0yYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAUEo/XVNKvflTEeYkKgjyiMhzEpGqHmhhPpJ+jz4AhKB4v/HGZUHm1JRxXT xLHkDMFymGeqdy+TBnUztpURL8g/A1PL4pzLizVaA4qKbYcPE9O42gIeCnrrnfxR iNKU2CR+33XqOfqKmukr1JpOPWoJBdphg9TiHG7zXNFJuwRfJDfn1ZNhtOrdmjOH VDQtc6oKf3KF5sybA+u9vp05AHZUvn86mvQhxNiKlq3t3jZzahn2SSeBgumToo69 XK6hWTeH3WxQ0FarRefWMrtEXmF2kcb+41TgwW1dHLF5zkLpVFMaquRuRPGiOdv2 nt1zjPOhFFspvdVYMed4dE06vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeJ/VR2 3GcabfdqlnDIUrUJVRlcMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASw+U0hM02aDPjK2XsDHXUb5qHdmFXFxygTsdRTlsVj/SsGqA5Zw/a C4fhh7KnHkjALEB6swMNn0cFD5H3t/sgxrYHvksNW9ud2JQTtnDeLwNG6KpQutQH tNvtlfGuEdKDGallS2FCvoauPnyDiC9v4PGKQivzSdZrB//lZLiQ/dN+HYwsQNHn kKacBUqYQEHdw19GDbx/wYrsCgZBQQw/qi8U4Cu6sCf+p+2MpyvfvnFAwcV/eyX+ BVYAtVdxPMgA8qpXy9tTIp1i623AHq3kGJGwvMz6V0vGN8MfSjK9AMRMXGLxi1sN jFKZFQo17bYsRB3Ya5rNemgDwCsEMN6k -----END CERTIFICATE-----Generated at Sat Dec 27 04:46:34 2025 by rpki-client