This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft File: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft (raw, json) Hash identifier: J3LoHOYxojM/Q8iLoVfOQFJU4eU5J5QmZFJVJ3E5Q/M= Subject key identifier: D0:0B:F2:D7:44:C4:6E:4D:CC:F5:5F:B6:06:96:CB:00:DE:2F:DA:9E Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 Certificate issuer: /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft Manifest number: 27 Signing time: Fri 19 Dec 2025 06:39:20 +0000 Manifest this update: Fri 19 Dec 2025 06:39:20 +0000 Manifest next update: Fri 26 Dec 2025 06:39:20 +0000 Files and hashes: 1: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl (hash: MDw/3GmyF3RA3dY5+x+oFIgxd1Dsdk33hjc0D1EiQoI=) 2: 2DC89280AB5E11F087B3A63DC4F9AE02.roa (hash: qw+b9++3jbgvyWDf4TRTK+L4oMfB+u2I6pJFYXdg4kg=) 3: 2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (hash: 3NnIsPy3TJxVPi78UblbPiBZvd4erKTpjfLkh2fTRX0=) 4: 3DA866FACE8E11F0B0195B54C4F9AE02.roa (hash: xbTDiVIyKDzMW7zYjhqubgm4Cfj7K4g8sYm9DWTJzDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Validity Not Before: Dec 19 06:39:20 2025 GMT Not After : Dec 26 06:39:20 2025 GMT Subject: CN=6944f318-a859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:58:7c:b6:0b:52:96:b1:6e:7c:77:63:d8:e1: 83:45:d1:41:23:f7:c8:7c:45:47:d9:5a:67:fd:a6: 88:48:14:ea:d6:30:bc:f3:1c:79:ee:03:87:48:b2: 48:86:d1:79:55:7c:12:bb:ac:2f:96:41:c1:ae:a5: 3a:f8:b3:85:8d:99:7b:a9:15:05:9a:11:7a:a1:99: 97:81:ac:68:4f:f2:d4:fe:02:77:45:87:2a:ad:cb: f3:0b:05:fa:59:ed:d8:d2:3e:c6:e5:82:87:36:d7: c7:f4:ba:27:37:db:8e:91:d7:ef:1b:1e:55:6e:b5: 7a:27:8d:50:85:80:01:f0:d2:cc:e7:6c:31:d2:4e: cd:39:0d:32:68:c1:9b:dd:d3:9f:37:24:4a:3f:fb: e0:c9:a4:c5:f2:8e:5e:aa:29:fe:81:02:eb:4b:67: 6b:80:a2:a3:23:40:f8:d7:ff:2d:ae:26:74:80:49: 0d:3e:bc:29:39:eb:eb:63:5a:17:e4:b3:85:27:5c: 22:7c:54:e8:40:75:d2:7b:5e:76:5d:61:72:51:47: 4e:d0:4f:ae:f0:a5:14:b1:5f:f3:69:8a:09:e3:b0: a4:47:61:87:bd:3c:a3:c4:22:77:7f:58:36:08:fd: e8:3d:4d:92:ae:27:4d:14:db:38:7c:8a:dd:17:6d: 77:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0B:F2:D7:44:C4:6E:4D:CC:F5:5F:B6:06:96:CB:00:DE:2F:DA:9E X509v3 Authority Key Identifier: keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:4d:eb:6a:f2:82:3a:2b:bb:58:6a:45:2b:6c:ca:9a:4f:c3: 7d:02:ea:04:1d:33:c7:0f:51:48:2a:1a:d2:85:27:c9:a3:d3: e0:44:d6:46:11:c1:52:70:de:39:10:3e:6f:ef:a9:76:16:9b: 9e:ff:a9:32:c2:b6:01:93:3c:13:f5:2d:f0:5a:d6:ba:ed:14: 25:8c:cc:f4:e5:13:19:e5:7d:79:ec:11:02:f6:c5:8c:77:27: 4f:37:03:70:f0:df:1e:d2:52:e6:01:d9:e4:46:22:3f:1f:ef: 77:70:69:c5:57:a0:cc:05:6a:c7:c6:e5:65:20:e7:f1:fe:37: d6:7d:75:84:d6:e1:a6:66:36:22:16:84:67:ff:a5:32:a9:01: 31:2a:52:d6:3c:2f:43:30:4a:14:c3:64:ee:6b:7c:da:b5:25: ea:6d:25:e4:d7:3a:f8:cf:a6:83:f9:b6:fa:7f:b0:fc:e3:64: 58:74:3f:04:d0:5a:9c:4e:85:1f:06:12:4c:0e:e1:59:1f:a1: 97:f0:c0:99:f9:78:3d:a0:3f:56:80:7b:dc:86:af:ef:9b:44: b7:64:fa:aa:65:be:11:e3:07:83:93:4b:0d:95:8a:80:d5:51: e1:d3:42:94:88:ef:33:4d:d9:7b:7b:54:c1:1e:84:53:a5:48: ea:e2:04:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjFDQTExMC8GA1UEBRMoQUY4Q0RDRTZFRDQyNzdFQ0ZCMEZEQTg4MkFENDc0OTJE RTg1OEZCNjAeFw0yNTEyMTkwNjM5MjBaFw0yNTEyMjYwNjM5MjBaMBgxFjAUBgNV BAMMDTY5NDRmMzE4LWE4NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWWHy2C1KWsW58d2PY4YNF0UEj98h8RUfZWmf9pohIFOrWMLzzHHnuA4dIskiG 0XlVfBK7rC+WQcGupTr4s4WNmXupFQWaEXqhmZeBrGhP8tT+AndFhyqty/MLBfpZ 7djSPsblgoc218f0uic3246R1+8bHlVutXonjVCFgAHw0sznbDHSTs05DTJowZvd 0583JEo/++DJpMXyjl6qKf6BAutLZ2uAoqMjQPjX/y2uJnSASQ0+vCk56+tjWhfk s4UnXCJ8VOhAddJ7XnZdYXJRR07QT67wpRSxX/NpignjsKRHYYe9PKPEInd/WDYI /eg9TZKuJ00U2zh8it0XbXeZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0Avy10TE bk3M9V+2BpbLAN4v2p4wHwYDVR0jBBgwFoAUr4zc5u1Cd+z7D9qIKtR0kt6Fj7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMUNBLzJERjVCQjgwQUIz MDExRjA4RkMwQzk0OEM0RjlBRTAyL3I0emM1dTFDZC16N0Q5cUlLdFIwa3Q2Rmo3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjR6YzV1MUNkLXo3RDlxSUt0UjBrdDZGajdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MUNBLzJERjVCQjgwQUIzMDExRjA4RkMwQzk0OEM0RjlBRTAyL3I0emM1dTFDZC16 N0Q5cUlLdFIwa3Q2Rmo3WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHVN62rygjoru1hqRStsyppPw30C6gQdM8cPUUgqGtKFJ8mj0+BE1kYR wVJw3jkQPm/vqXYWm57/qTLCtgGTPBP1LfBa1rrtFCWMzPTlExnlfXnsEQL2xYx3 J083A3Dw3x7SUuYB2eRGIj8f73dwacVXoMwFasfG5WUg5/H+N9Z9dYTW4aZmNiIW hGf/pTKpATEqUtY8L0MwShTDZO5rfNq1JeptJeTXOvjPpoP5tvp/sPzjZFh0PwTQ WpxOhR8GEkwO4VkfoZfwwJn5eD2gP1aAe9yGr++bRLdk+qplvhHjB4OTSw2VioDV UeHTQpSI7zNN2Xt7VMEehFOlSOriBKI= -----END CERTIFICATE-----Generated at Sat Dec 20 19:05:06 2025 by rpki-client