This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json) Hash identifier: 0yULRhEvxBJfdOMHhHSpJ+P0NdDU7Ay9Dir6RtjwMLY= Subject key identifier: 61:67:34:A3:2C:13:A3:95:98:4B:F0:8A:40:D7:D2:6D:10:F7:5F:EE Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Certificate serial: 064B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft Manifest number: 063D Signing time: Thu 18 Dec 2025 22:05:04 +0000 Manifest this update: Thu 18 Dec 2025 22:05:04 +0000 Manifest next update: Thu 25 Dec 2025 22:05:04 +0000 Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: CoNgwAtaKhJEy5vY02e5IxClX4DJNjGxkXiESFB42zY=) 2: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: 0B8CEdwj7To0b9OkFucnpnuOoYqshX93UqB7JYje0u8=) 3: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: sP79wAGbbrsAMI5IpKgqsFFoZmUGm0NqHRGgmh1aLzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1611 (0x64b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Validity Not Before: Dec 18 22:05:04 2025 GMT Not After : Dec 25 22:05:04 2025 GMT Subject: CN=69447a90-f3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2c:ab:13:5e:6c:14:1d:1d:a3:27:23:ba:cd: bc:88:59:3a:9c:e1:fd:59:38:86:e8:35:65:82:4a: 37:4f:0e:61:70:77:0e:f0:66:db:fc:9c:e2:11:85: a3:93:dc:dc:4c:17:b1:bc:bc:7b:09:2c:14:bb:99: 0a:07:5f:d9:bc:6f:d0:04:2a:15:5e:24:4c:47:88: 11:1a:f2:a3:a8:77:50:a7:88:7b:59:fc:19:8e:d8: dc:e2:a9:27:38:fb:5c:42:6c:08:6b:92:b7:84:b1: 13:dc:88:9a:02:6a:14:7c:b2:3a:ef:6f:b9:f6:68: ec:3f:5a:61:ef:4b:b1:91:6d:73:af:ed:1d:48:a1: e4:92:ab:7a:f1:ec:40:f8:58:c1:1b:19:47:03:4a: de:04:ee:88:73:08:69:93:6e:5a:8a:22:9e:db:cb: f8:56:64:cf:94:ad:f2:a9:38:65:10:de:8b:a7:d5: 9f:1e:c2:b9:0d:1e:a9:37:95:e0:7a:98:d7:af:ef: 38:67:30:6e:65:5a:f6:4a:42:f6:a9:11:bd:5d:47: a9:83:d7:96:89:b0:33:b5:27:17:71:0c:ae:78:d8: 3e:f7:07:d3:0d:02:ef:3f:83:c7:33:ae:aa:2c:72: 85:e4:2a:41:0c:cc:61:4f:74:cb:c2:30:0b:95:7c: d9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:67:34:A3:2C:13:A3:95:98:4B:F0:8A:40:D7:D2:6D:10:F7:5F:EE X509v3 Authority Key Identifier: keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:43:17:89:32:f3:de:84:29:72:69:1f:ac:b4:db:48:61:22: 7b:c8:b2:e2:ce:fe:d2:85:20:0e:ad:d2:39:6d:86:c3:dc:54: 42:ae:9f:04:06:62:36:06:ac:6e:1d:3a:74:6f:de:29:aa:c1: fa:06:69:dc:2e:bc:34:5d:3d:64:14:a4:0e:1e:12:49:af:c7: b7:02:cd:82:ee:a6:8a:7e:af:94:46:fd:86:5c:aa:15:ba:01: 4d:f3:33:52:f1:36:78:8f:70:44:23:4f:1d:ee:5e:da:6c:2d: f6:ff:74:97:be:02:98:3c:90:f9:aa:02:f0:d6:4d:d2:4d:eb: 1b:7e:58:7b:c4:a0:38:98:6f:f6:1b:db:82:1a:50:94:75:e5: 37:f3:e3:5f:c1:4c:2c:ff:bb:eb:64:77:c7:87:a4:97:e5:6b: 06:cf:ee:fd:b9:fe:38:c0:c9:69:aa:36:8b:a7:46:46:4a:7e: 46:97:6c:24:94:2a:70:fe:a2:1c:1c:a3:1a:4b:f0:d5:5e:df: 5e:8b:f4:63:78:91:da:e6:53:0f:b2:16:5e:5b:d5:00:8e:b2: 18:d2:35:3c:d8:44:40:1b:66:43:ab:cf:70:b4:aa:76:9e:64: a7:e0:cc:f7:68:b3:4b:2d:0e:20:b7:31:8f:6a:19:4f:88:36: f2:ae:f7:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU2NEExMTAvBgNVBAUTKDA3QkJFQ0QwRUEwODlGQzY0RUUxNDBEREM4RERCQTUy RTdEOTEwRDAwHhcNMjUxMjE4MjIwNTA0WhcNMjUxMjI1MjIwNTA0WjAYMRYwFAYD VQQDDA02OTQ0N2E5MC1mM2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6CyrE15sFB0doycjus28iFk6nOH9WTiG6DVlgko3Tw5hcHcO8Gbb/JziEYWj k9zcTBexvLx7CSwUu5kKB1/ZvG/QBCoVXiRMR4gRGvKjqHdQp4h7WfwZjtjc4qkn OPtcQmwIa5K3hLET3IiaAmoUfLI672+59mjsP1ph70uxkW1zr+0dSKHkkqt68exA +FjBGxlHA0reBO6Icwhpk25aiiKe28v4VmTPlK3yqThlEN6Lp9WfHsK5DR6pN5Xg epjXr+84ZzBuZVr2SkL2qRG9XUepg9eWibAztScXcQyueNg+9wfTDQLvP4PHM66q LHKF5CpBDMxhT3TLwjALlXzZQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFnNKMs E6OVmEvwikDX0m0Q91/uMB8GA1UdIwQYMBaAFAe77NDqCJ/GTuFA3cjdulLn2RDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTY0QS9DQ0NBNUY1RUJB QjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44Wk80VURkeU4yNlV1ZlpF TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3dnMwT29JbjhaTzRVRGR5TjI2VXVmWkVOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTY0QS9DQ0NBNUY1RUJBQjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44 Wk80VURkeU4yNlV1ZlpFTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfQxeJMvPehClyaR+stNtIYSJ7yLLizv7ShSAOrdI5bYbD3FRCrp8E BmI2BqxuHTp0b94pqsH6BmncLrw0XT1kFKQOHhJJr8e3As2C7qaKfq+URv2GXKoV ugFN8zNS8TZ4j3BEI08d7l7abC32/3SXvgKYPJD5qgLw1k3STesbflh7xKA4mG/2 G9uCGlCUdeU38+NfwUws/7vrZHfHh6SX5WsGz+79uf44wMlpqjaLp0ZGSn5Gl2wk lCpw/qIcHKMaS/DVXt9ei/RjeJHa5lMPshZeW9UAjrIY0jU82ERAG2ZDq89wtKp2 nmSn4Mz3aLNLLQ4gtzGPahlPiDbyrvd0 -----END CERTIFICATE-----Generated at Fri Dec 19 23:54:40 2025 by rpki-client