This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json) Hash identifier: 02azT+1WAR34b/9MU9MjGVDlobgxMCbBoAIjFgFtSjE= Subject key identifier: AF:FD:23:FB:C8:3D:30:5C:55:A9:01:09:B5:06:F7:63:C4:DB:F1:ED Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0DC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft Manifest number: 0D8B Signing time: Sat 20 Dec 2025 17:40:26 +0000 Manifest this update: Sat 20 Dec 2025 17:40:26 +0000 Manifest next update: Sat 27 Dec 2025 17:40:26 +0000 Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: kqjgfcjVhwTAbBa8ZdL76maMhynfVtONeMPXoDp9ZAs=) 2: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 78fn2memSm7vBnLFbyR7taN3PwAlhw+S3wateBPSFCg=) 3: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: P6JTGz167Z9TdfCL7daabxEJTzpdJTGmRrb0uaHZZCk=) 4: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: F6pHZaK0p+hfG2R8U42UIH6mVTyAquKiquy2pjJGlpw=) 5: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo=) 6: 938E408897E011EB8870DB29C4F9AE02.roa (hash: AvnHda6N9uSW4caKdT/1qliaFxGzoCjsBnC7c0M2BTI=) 7: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3527 (0xdc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Dec 20 17:40:26 2025 GMT Not After : Dec 27 17:40:26 2025 GMT Subject: CN=6946df8a-54b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:14:5b:93:7f:bd:a5:ca:fd:df:e4:63:62:fd: 3a:b3:e5:45:6d:39:a8:7f:a8:6a:24:95:e8:47:3b: 04:b7:f3:64:43:18:74:44:87:9b:82:82:d4:9b:b9: 25:ae:e6:39:5c:26:cd:70:12:8f:45:10:96:66:9c: 51:ac:ff:3a:fd:93:dc:94:6f:7b:f5:54:44:7c:62: ad:3e:2d:49:7e:40:65:39:8c:c9:82:2c:c3:0d:05: 53:b9:dc:5e:43:3f:69:0f:68:9a:75:8d:b5:b7:94: 66:af:31:df:b7:de:97:48:79:85:e8:8a:8b:ff:66: c8:7d:8c:9e:5b:99:51:e5:cd:15:06:72:74:6e:45: 41:d9:30:3e:b4:49:fd:35:e1:18:df:e3:d0:40:6d: a3:9c:37:21:61:1b:99:29:9a:16:2c:d0:d8:60:d8: 57:5d:bf:6e:72:6e:8b:a9:66:cb:5b:17:b4:30:f3: b9:e7:da:61:d5:5b:87:f8:b1:d0:25:39:4d:9f:93: 22:4f:b8:85:f7:b6:d0:1b:6f:a9:fd:8e:02:d4:79: 65:a7:fb:e6:47:79:fe:c7:76:bc:26:2a:dd:da:28: 6a:28:2f:5a:c0:06:a6:88:dc:13:1e:fb:fe:67:26: 21:84:bf:0a:f0:9e:27:9e:32:53:c1:5f:8e:9a:cc: 78:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FD:23:FB:C8:3D:30:5C:55:A9:01:09:B5:06:F7:63:C4:DB:F1:ED X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:c7:fa:20:8a:01:c7:0b:a4:ca:35:30:25:3c:b7:9c:45:14: 40:19:bc:ee:ce:19:f4:1e:06:02:f6:11:81:f9:7e:2d:e0:72: 1a:28:f2:c3:69:86:db:bf:13:5c:7c:2f:b6:a2:d3:d0:3e:cd: 9d:b7:52:29:ac:85:1d:01:93:ab:c9:b3:2e:2b:7d:be:15:0e: 91:8a:a9:a2:fd:5c:86:d9:c3:df:d6:b1:b5:3e:9e:80:cf:4e: fc:ba:10:df:92:de:c6:63:a1:a2:51:2e:69:50:e9:74:47:af: 1d:7d:72:97:d0:f0:c6:cd:ab:4b:87:03:85:0a:34:0b:5a:96: 36:e9:43:a7:2c:37:5f:c6:ad:99:c2:33:ef:63:09:aa:1d:6f: e6:5d:67:34:f0:19:9c:47:01:a8:38:69:3d:30:ec:c5:0a:69: 86:95:8d:a9:24:68:aa:11:35:71:7f:34:b3:f1:6a:df:7e:34: e3:02:78:51:b4:3f:6a:65:34:c7:07:29:cf:73:65:c3:bd:4c: 6e:42:c8:f7:ea:77:77:1a:da:02:d8:3e:5a:cf:b6:15:e9:69: 27:81:b1:8f:20:3f:9f:25:2d:86:8f:7b:f1:78:bc:23:b4:5e: 06:cb:8d:e3:a8:2c:dd:2b:6a:1d:80:1a:91:22:eb:34:11:0f: 1a:14:22:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjUxMjIwMTc0MDI2WhcNMjUxMjI3MTc0MDI2WjAYMRYwFAYD VQQDDA02OTQ2ZGY4YS01NGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6xRbk3+9pcr93+RjYv06s+VFbTmof6hqJJXoRzsEt/NkQxh0RIebgoLUm7kl ruY5XCbNcBKPRRCWZpxRrP86/ZPclG979VREfGKtPi1JfkBlOYzJgizDDQVTudxe Qz9pD2iadY21t5RmrzHft96XSHmF6IqL/2bIfYyeW5lR5c0VBnJ0bkVB2TA+tEn9 NeEY3+PQQG2jnDchYRuZKZoWLNDYYNhXXb9ucm6LqWbLWxe0MPO559ph1VuH+LHQ JTlNn5MiT7iF97bQG2+p/Y4C1Hllp/vmR3n+x3a8Jird2ihqKC9awAamiNwTHvv+ ZyYhhL8K8J4nnjJTwV+Omsx4pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/9I/vI PTBcVakBCbUG92PE2/HtMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REM0NC8yOUI2QkVEQUU0RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2 ZTkzX2kxTnhtMWdJZEkwTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFx/ogigHHC6TKNTAlPLecRRRAGbzuzhn0HgYC9hGB+X4t4HIaKPLD aYbbvxNcfC+2otPQPs2dt1IprIUdAZOrybMuK32+FQ6Riqmi/VyG2cPf1rG1Pp6A z078uhDfkt7GY6GiUS5pUOl0R68dfXKX0PDGzatLhwOFCjQLWpY26UOnLDdfxq2Z wjPvYwmqHW/mXWc08BmcRwGoOGk9MOzFCmmGlY2pJGiqETVxfzSz8WrffjTjAnhR tD9qZTTHBynPc2XDvUxuQsj36nd3GtoC2D5az7YV6WkngbGPID+fJS2Gj3vxeLwj tF4Gy43jqCzdK2odgBqRIus0EQ8aFCI0 -----END CERTIFICATE-----Generated at Mon Dec 22 07:59:09 2025 by rpki-client