This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: 6w0DRCESJe+PSSejVJEzquy59Df/KEtrlIxzANT/53w= Subject key identifier: E4:A9:6C:9C:20:35:44:0E:27:22:6C:4E:81:71:6D:F2:85:F9:44:2C Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0E83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0E7A Signing time: Thu 18 Dec 2025 17:32:02 +0000 Manifest this update: Thu 18 Dec 2025 17:32:01 +0000 Manifest next update: Thu 25 Dec 2025 17:32:01 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: 0Fd/sv5Rel5HhnlHIW6xy8U9N4IOqIGfq8tvHqXNflA=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: NeUqjo2VYHUQAlZoEGW65z9tYOjTgZvuRZo90c+p6gU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3715 (0xe83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: Dec 18 17:32:01 2025 GMT Not After : Dec 25 17:32:01 2025 GMT Subject: CN=69443a92-0365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a4:5c:78:cc:ad:ba:2f:39:d4:aa:3d:5c:ce: 9a:94:c4:60:fc:ba:57:06:9f:5e:97:e2:5d:96:f8: 84:78:2b:3f:05:65:28:61:e1:e5:20:ed:cc:30:1a: b8:1d:da:47:0e:8a:ea:88:61:db:6a:ed:49:19:ad: ef:bf:4a:82:0a:02:3f:0b:a7:82:4c:75:5b:23:6a: ea:9c:57:ec:60:e4:da:88:83:42:46:ae:91:8c:ff: 6e:9a:de:4c:8c:9d:7c:94:0a:19:a2:7f:52:be:0f: 48:db:c5:49:43:b0:89:ea:4f:de:d0:a7:06:7b:e8: 88:7a:86:c0:e3:70:3d:d0:40:90:18:b2:b1:bf:83: ff:3c:ca:8e:7d:61:4f:1e:90:3a:74:84:f8:58:c3: 74:bc:ea:f2:9e:f4:47:f7:e4:6b:68:0e:68:c4:bb: 9e:e9:07:62:7c:50:f9:11:53:3f:6b:64:b8:32:5f: 8b:21:1a:2b:27:9d:41:a5:69:f7:f6:6f:28:9d:75: 2c:e3:e2:b5:fe:ab:83:52:9e:d0:ec:0e:54:da:5e: f2:df:93:62:f6:32:c8:2f:6f:ad:d5:82:51:56:2a: e8:cb:1e:0b:ed:ec:10:2e:50:18:cd:be:1c:05:e8: 87:8c:6c:d0:69:15:e9:bb:31:c0:48:b9:5e:37:e8: 10:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A9:6C:9C:20:35:44:0E:27:22:6C:4E:81:71:6D:F2:85:F9:44:2C X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:0f:f1:6e:8c:dc:c3:d8:9b:e6:13:8f:24:a0:6f:c2:75:6a: bb:0a:10:ca:a0:fc:c1:a0:07:d7:8a:64:7d:95:89:9d:76:e7: ab:42:a2:fa:f6:dd:e8:65:9f:73:7a:f3:11:c1:a9:a5:5f:4d: cd:af:6b:c8:ef:9c:73:66:f4:df:1c:a0:97:90:00:f5:92:8d: e2:8b:91:ea:4e:4e:d9:bf:2a:23:cf:98:7a:0f:65:8f:c8:13: 8e:91:a6:0a:1b:fd:d9:5c:ab:1d:a3:94:aa:07:46:82:bc:e9: 37:d5:9b:77:8e:cb:d1:d9:f7:d4:48:e9:3e:5c:a1:79:e2:f7: e8:0a:9f:c3:b3:87:0c:6d:4f:5a:29:3f:cf:52:b4:5c:c7:e2: cc:ab:71:1c:4a:f1:d3:fb:59:c3:1c:ee:d7:84:aa:69:c3:66: 00:6f:b8:a5:ca:2c:71:1f:98:a2:86:ff:e6:35:47:32:d8:17: b4:03:51:6d:8e:b7:46:90:05:94:7d:bf:fa:1d:f6:ab:c4:ee: 29:48:cd:d0:ce:3c:05:bc:73:f3:99:05:94:69:c9:f5:1d:6c: df:48:89:ba:21:94:81:7b:29:1e:60:cd:48:7a:80:db:0c:eb: 3c:18:c5:63:0c:57:aa:18:d6:1a:ff:44:25:50:83:d2:1f:80: 9d:1d:2a:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjUxMjE4MTczMjAxWhcNMjUxMjI1MTczMjAxWjAYMRYwFAYD VQQDDA02OTQ0M2E5Mi0wMzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6RceMytui851Ko9XM6alMRg/LpXBp9el+JdlviEeCs/BWUoYeHlIO3MMBq4 HdpHDorqiGHbau1JGa3vv0qCCgI/C6eCTHVbI2rqnFfsYOTaiINCRq6RjP9umt5M jJ18lAoZon9Svg9I28VJQ7CJ6k/e0KcGe+iIeobA43A90ECQGLKxv4P/PMqOfWFP HpA6dIT4WMN0vOrynvRH9+RraA5oxLue6QdifFD5EVM/a2S4Ml+LIRorJ51BpWn3 9m8onXUs4+K1/quDUp7Q7A5U2l7y35Ni9jLIL2+t1YJRViroyx4L7ewQLlAYzb4c BeiHjGzQaRXpuzHASLleN+gQxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSpbJwg NUQOJyJsToFxbfKF+UQsMB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGD/FujNzD2JvmE48koG/CdWq7ChDKoPzBoAfXimR9lYmdduerQqL6 9t3oZZ9zevMRwamlX03Nr2vI75xzZvTfHKCXkAD1ko3ii5HqTk7Zvyojz5h6D2WP yBOOkaYKG/3ZXKsdo5SqB0aCvOk31Zt3jsvR2ffUSOk+XKF54vfoCp/Ds4cMbU9a KT/PUrRcx+LMq3EcSvHT+1nDHO7XhKppw2YAb7ilyixxH5iihv/mNUcy2Be0A1Ft jrdGkAWUfb/6HfarxO4pSM3QzjwFvHPzmQWUacn1HWzfSIm6IZSBeykeYM1IeoDb DOs8GMVjDFeqGNYa/0QlUIPSH4CdHSpi -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:26 2025 by rpki-client