This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft File: -7pKlgm0F05stHuVg04qnD2WhmM.mft (raw, json) Hash identifier: wj3uQpFBvY8mchRlCdQ/fmwj+LKJgSGOJZjm6N0NeiQ= Subject key identifier: 9F:0B:C9:AC:1D:4A:96:E4:8D:CB:FC:56:40:DE:A0:B7:18:54:8D:3B Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Certificate serial: 0CCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft Manifest number: 0CA4 Signing time: Wed 31 Dec 2025 18:16:14 +0000 Manifest this update: Wed 31 Dec 2025 18:16:14 +0000 Manifest next update: Wed 07 Jan 2026 18:16:14 +0000 Files and hashes: 1: -7pKlgm0F05stHuVg04qnD2WhmM.crl (hash: 9c1k9tE3vlrYochz9CBH33OBbO/g4bGNZkfKxlccKNE=) 2: 392036B4808B11EFAB024F45C4F9AE02.roa (hash: jLmFIeuFfW/kA9gB2qa9B520Ov6OJzEYyswQvxuxZy4=) 3: 92F7BE58815511EF94F0101AC4F9AE02.roa (hash: Jod4UyMRx/RISNG7y9zB/lgaFI3cJMU1Lc5wZ68aw+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 18:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3274 (0xcca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1D5, serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Validity Not Before: Dec 31 18:16:14 2025 GMT Not After : Jan 7 18:16:14 2026 GMT Subject: CN=6955686e-d9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:c0:7c:46:c7:54:0b:7b:a0:d9:95:a5:d8: 07:47:32:a9:5d:09:ce:bf:df:8f:79:d1:27:4d:10: c0:19:c8:5f:1a:71:8b:8a:8a:a3:62:f3:01:36:de: 57:00:2b:71:07:3a:a8:cf:77:f7:d3:f7:a0:2c:ab: 80:17:d9:1b:bd:7c:f1:be:4d:01:0e:84:89:7b:ee: 31:5a:cc:77:ff:1c:50:6a:67:33:62:2b:0f:bc:a2: b0:81:79:e1:4b:90:25:f7:da:33:ae:84:43:79:11: e1:cb:85:85:91:ba:42:48:8b:5a:f2:d6:90:4b:4d: 9c:3e:73:98:80:69:f5:41:96:93:93:99:99:c7:59: 0a:9c:65:bf:66:a4:39:4a:52:14:23:1e:8c:24:9d: 64:52:85:0c:d5:c9:8a:02:c1:c9:d4:bc:09:29:04: cc:4e:39:4f:3e:32:fa:4a:7a:78:8d:93:cc:56:1e: 05:ce:2d:f1:67:16:ec:9d:49:fe:b5:43:5f:1a:9e: 35:1f:0d:df:c0:87:87:0b:98:4a:be:d9:fe:ec:e2: 19:5f:46:86:89:5d:dc:b2:69:35:8f:9d:e0:32:3f: 19:70:24:0e:63:72:27:e8:2b:ae:e6:9f:19:4e:19: c6:32:da:6e:e9:00:cb:59:e5:9e:89:ad:e7:ae:07: af:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0B:C9:AC:1D:4A:96:E4:8D:CB:FC:56:40:DE:A0:B7:18:54:8D:3B X509v3 Authority Key Identifier: keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ce:39:b0:ce:34:77:6d:28:96:a7:8e:f7:9b:20:27:29:e7: 37:d0:8e:89:01:e6:53:28:10:c6:81:58:68:54:45:5c:ba:3b: a5:bb:94:63:d4:8b:1c:e5:80:34:4a:6d:5f:67:b9:df:13:e7: fc:0b:9c:dd:fa:60:fb:e5:d1:3f:3c:39:c7:47:a5:3a:02:69: f5:c0:24:42:2f:75:00:0b:16:ed:f2:dc:ce:81:b3:02:32:bc: fa:b5:7b:c5:f9:12:f5:57:d5:46:50:b4:8e:7f:43:db:cb:5e: d1:7f:81:1a:b1:45:3d:2c:c1:bc:63:43:4e:91:cd:f2:69:77: 81:d2:fa:7e:8d:7d:7c:10:b6:25:ec:f8:70:de:f1:53:c1:67: 9c:ad:5f:57:89:06:f1:a3:23:f4:3f:31:1f:f4:83:ec:e1:94: 9d:77:df:e3:ae:29:c2:c1:2a:29:39:34:c4:f0:a1:96:1f:1f: 65:25:5c:df:cd:7c:d0:b5:e1:96:2c:ab:90:db:64:ae:6b:b3: b1:60:be:b8:26:a1:96:98:46:5a:f4:5d:ee:bb:dd:5d:e5:a6: cb:7d:3e:9d:bd:15:24:6d:63:63:31:0b:30:78:8e:39:86:0c: 88:3c:26:80:e0:69:28:d3:0b:85:39:66:83:89:46:89:99:d7: d0:3e:5f:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxRDUxMTAvBgNVBAUTKEZCQkE0QTk2MDlCNDE3NEU2Q0I0N0I5NTgzNEUyQTlD M0Q5Njg2NjMwHhcNMjUxMjMxMTgxNjE0WhcNMjYwMTA3MTgxNjE0WjAYMRYwFAYD VQQDDA02OTU1Njg2ZS1kOWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAui3AfEbHVAt7oNmVpdgHRzKpXQnOv9+PedEnTRDAGchfGnGLioqjYvMBNt5X ACtxBzqoz3f30/egLKuAF9kbvXzxvk0BDoSJe+4xWsx3/xxQamczYisPvKKwgXnh S5Al99ozroRDeRHhy4WFkbpCSIta8taQS02cPnOYgGn1QZaTk5mZx1kKnGW/ZqQ5 SlIUIx6MJJ1kUoUM1cmKAsHJ1LwJKQTMTjlPPjL6Snp4jZPMVh4Fzi3xZxbsnUn+ tUNfGp41Hw3fwIeHC5hKvtn+7OIZX0aGiV3csmk1j53gMj8ZcCQOY3In6Cuu5p8Z ThnGMtpu6QDLWeWeia3nrgevoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8Lyawd Spbkjcv8VkDeoLcYVI07MB8GA1UdIwQYMBaAFPu6SpYJtBdObLR7lYNOKpw9loZj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFENS9FRTAxODA3ODBG NjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYwNXN0SHVWZzA0cW5EMldo bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cEtsZ20wRjA1c3RIdVZnMDRxbkQyV2htTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjFENS9FRTAxODA3ODBGNjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYw NXN0SHVWZzA0cW5EMldobU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2zjmwzjR3bSiWp473myAnKec30I6JAeZTKBDGgVhoVEVcujulu5Rj 1Isc5YA0Sm1fZ7nfE+f8C5zd+mD75dE/PDnHR6U6Amn1wCRCL3UACxbt8tzOgbMC Mrz6tXvF+RL1V9VGULSOf0Pby17Rf4EasUU9LMG8Y0NOkc3yaXeB0vp+jX18ELYl 7Phw3vFTwWecrV9XiQbxoyP0PzEf9IPs4ZSdd9/jrinCwSopOTTE8KGWHx9lJVzf zXzQteGWLKuQ22Sua7OxYL64JqGWmEZa9F3uu91d5abLfT6dvRUkbWNjMQsweI45 hgyIPCaA4Gko0wuFOWaDiUaJmdfQPl/x -----END CERTIFICATE-----Generated at Thu Jan 1 15:38:47 2026 by rpki-client