This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft File: RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json) Hash identifier: a/rvGKfAiXoTnD0XmpaJocOVon1VN1NG6G/z8sYvbLU= Subject key identifier: 4C:D3:97:AA:DB:68:E1:B7:0D:6E:25:4F:45:BE:AD:C1:D7:36:F9:B5 Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 Certificate issuer: /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft Manifest number: 0207 Signing time: Fri 19 Dec 2025 01:38:33 +0000 Manifest this update: Fri 19 Dec 2025 01:38:32 +0000 Manifest next update: Fri 26 Dec 2025 01:38:32 +0000 Files and hashes: 1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: qHZ3RZw+KaMI4TgSWfnMTLFJZfegIRQIpUqb8J4Le14=) 2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: Xj60cy/+MCefwRh5zgDSO/B9QlgMD6CuyCY3oxVXaNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Validity Not Before: Dec 19 01:38:32 2025 GMT Not After : Dec 26 01:38:32 2025 GMT Subject: CN=6944ac99-807f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:76:ab:d8:ce:a0:24:24:64:b9:20:b8:ad:ac: 45:50:5a:69:dc:fb:a0:b0:34:97:9d:a9:18:ed:d6: a5:59:c4:9f:ff:04:bf:55:40:a3:ad:4d:77:43:08: c7:5c:a7:ba:7e:e1:f8:d6:2a:00:1d:7e:82:06:ef: e3:be:67:f1:33:61:7d:6c:f3:98:cc:0e:40:8d:37: 8e:85:66:0b:f1:78:5d:54:43:81:1d:b2:e3:67:fb: fb:90:8e:e9:6e:5c:27:55:ea:db:fb:e2:9f:14:c1: 09:0e:fb:8b:24:f0:00:c2:83:6c:01:6b:c6:60:c5: c2:58:10:c5:22:2e:78:45:ae:52:5b:ba:47:24:94: 38:2e:2e:9c:36:00:92:6e:4d:6f:5b:0f:89:79:4f: 1a:fe:5a:c4:95:bb:38:24:15:54:3c:94:0f:e8:24: c3:1d:9c:0d:92:ff:10:2b:71:84:0a:7b:e3:73:32: 13:7d:58:e7:59:f5:1f:76:fe:3f:aa:fd:cd:43:3f: ab:cc:0d:49:9d:0d:47:3a:d7:6f:9c:ce:2b:68:bc: 5c:0a:8c:c5:4f:3c:1a:9f:bf:7d:8e:03:d9:d2:aa: f8:f2:12:06:bc:b7:35:6c:01:f0:1e:f9:a0:93:5a: 08:6e:d3:e8:a9:5c:89:66:a8:9b:99:3e:e7:92:e8: 6e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D3:97:AA:DB:68:E1:B7:0D:6E:25:4F:45:BE:AD:C1:D7:36:F9:B5 X509v3 Authority Key Identifier: keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b4:6b:cd:5c:e0:8b:db:b6:30:3b:70:33:58:3b:cb:13:c8: 9d:37:fb:83:31:7f:92:0a:d9:81:c7:2d:e7:f7:76:48:52:c9: 7d:fe:c4:f0:db:84:89:1d:2b:5b:c5:03:db:59:72:a9:77:c4: 03:ce:2d:97:d5:c7:cd:c4:c8:dd:1e:b7:fd:6d:9c:43:f3:52: dd:de:70:de:3b:60:4d:17:59:23:1e:82:0b:f9:81:44:f3:cf: 51:a9:19:67:83:a9:f1:2e:43:50:32:98:cb:ab:38:bb:c8:0f: 92:8d:1f:35:36:5c:1f:66:ff:71:36:22:f0:23:e7:bb:98:97: a1:d1:d0:c9:48:62:d8:28:24:92:8d:28:6c:ca:f4:0d:dd:c4: 70:85:b2:8a:b6:d7:60:db:1c:5b:89:de:97:1c:4a:2a:58:b1: 64:a1:aa:06:76:cf:06:7e:6c:96:88:fe:05:3f:ee:f0:38:73: 21:28:10:ec:3c:7f:59:24:78:2a:dc:3f:21:84:9f:d7:bc:26: 43:8a:1d:ff:0a:49:21:0b:97:e4:29:e5:d6:45:e6:75:7c:7d: 63:84:54:d3:c3:ce:31:05:c6:ab:d5:5b:f7:ba:d6:17:eb:3c: 2f:2a:98:24:85:7d:ca:8c:8b:d3:02:fb:e9:83:35:5e:72:c5: 77:8d:f3:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKDQ2OEM2QTc5MkFCQjNFNDVGRUVFMjIyOEQyOEU3ODAz MTM3MkI0NTUwHhcNMjUxMjE5MDEzODMyWhcNMjUxMjI2MDEzODMyWjAYMRYwFAYD VQQDDA02OTQ0YWM5OS04MDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33ar2M6gJCRkuSC4raxFUFpp3PugsDSXnakY7dalWcSf/wS/VUCjrU13QwjH XKe6fuH41ioAHX6CBu/jvmfxM2F9bPOYzA5AjTeOhWYL8XhdVEOBHbLjZ/v7kI7p blwnVerb++KfFMEJDvuLJPAAwoNsAWvGYMXCWBDFIi54Ra5SW7pHJJQ4Li6cNgCS bk1vWw+JeU8a/lrElbs4JBVUPJQP6CTDHZwNkv8QK3GECnvjczITfVjnWfUfdv4/ qv3NQz+rzA1JnQ1HOtdvnM4raLxcCozFTzwan799jgPZ0qr48hIGvLc1bAHwHvmg k1oIbtPoqVyJZqibmT7nkuhupwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzTl6rb aOG3DW4lT0W+rcHXNvm1MB8GA1UdIwQYMBaAFEaMankquz5F/u4iKNKOeAMTcrRV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9CREFEQTg2MEND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1BrWC03aUlvMG81NEF4Tnl0 RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JveHFlU3E3UGtYLTdpSW8wbzU0QXhOeXRGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9CREFEQTg2MENDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1Br WC03aUlvMG81NEF4Tnl0RlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMtGvNXOCL27YwO3AzWDvLE8idN/uDMX+SCtmBxy3n93ZIUsl9/sTw 24SJHStbxQPbWXKpd8QDzi2X1cfNxMjdHrf9bZxD81Ld3nDeO2BNF1kjHoIL+YFE 889RqRlng6nxLkNQMpjLqzi7yA+SjR81NlwfZv9xNiLwI+e7mJeh0dDJSGLYKCSS jShsyvQN3cRwhbKKttdg2xxbid6XHEoqWLFkoaoGds8GfmyWiP4FP+7wOHMhKBDs PH9ZJHgq3D8hhJ/XvCZDih3/CkkhC5fkKeXWReZ1fH1jhFTTw84xBcar1Vv3utYX 6zwvKpgkhX3KjIvTAvvpgzVecsV3jfP+ -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:02 2025 by rpki-client