This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json) Hash identifier: LyHLMNB1ejsWgee03hqLmr/+OwdC1D5M0cStZ8fbXFg= Subject key identifier: F3:B8:C9:1E:DD:5E:29:C1:42:71:3C:EB:06:EB:63:95:92:79:95:DA Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft Manifest number: 0170 Signing time: Fri 19 Dec 2025 03:10:08 +0000 Manifest this update: Fri 19 Dec 2025 03:10:07 +0000 Manifest next update: Fri 26 Dec 2025 03:10:07 +0000 Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: pmStb4iG0aqlrsed29xqZ1+3Oou98yXRM58D4eCuQu0=) 2: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: xLYaayOa6ljsfyz0Fl5EAR812aBmAL1bIciZu3m45qA=) 3: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: 5dFzBEhRX2qpf3v3P5WZEcaB5fBRXl7gbbBm5x4xFTk=) 4: A17C3508168911EFBF38F580C4F9AE02.roa (hash: VX+Jv3bPS3HePtNKEWgfIHtlmIu9qG2L38hEMCHNp/A=) 5: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: VTp2ABLnUqS/Ob5XrNRvfYj53nTFMS/ZxCFHhPG4kpU=) 6: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: QWiwvzdCs9QlEtO4vjDbxuVVXBGO2+18x2vf8VSunOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: Dec 19 03:10:07 2025 GMT Not After : Dec 26 03:10:07 2025 GMT Subject: CN=6944c20f-de18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:04:4d:9b:cc:b6:cf:c3:9e:7c:2c:18:1e:eb: cc:1d:ef:d2:68:8b:de:18:d9:d6:1c:5f:0d:9a:27: df:e5:17:75:d4:c6:d4:55:33:b6:57:2f:43:50:94: d7:ae:59:0f:02:2b:ba:a9:46:4f:5b:7e:82:8c:96: f2:75:a0:ad:cc:ea:d3:72:bc:b8:a7:86:7e:29:db: b1:e8:e6:ac:16:cc:b5:d5:d9:13:2f:11:89:5d:64: 15:93:3b:3e:af:eb:dc:98:30:48:0b:1a:cc:0b:a4: 8e:84:69:d3:a4:98:9b:7a:7e:84:f9:7d:02:0c:55: f3:2b:bf:58:58:fe:39:68:d1:57:cf:93:e0:1b:6d: ee:50:67:a1:67:e3:63:08:d4:3e:65:cb:c8:e6:9f: 85:3b:ab:27:fa:ca:c3:21:02:03:49:c1:7f:fd:b0: 21:90:8b:1c:d8:2f:51:8c:8a:83:ff:e4:8a:3a:68: 72:83:41:62:e3:7b:ba:af:9b:b8:73:1b:04:0c:1d: da:33:55:b6:b7:e5:6e:01:4c:cb:27:b8:d9:f2:88: 38:07:f0:b0:4a:66:37:bd:3a:d7:0f:f0:93:4b:2f: 88:bf:30:1d:1f:72:b3:26:c2:af:19:5c:f3:14:45: 7c:69:50:ac:79:b5:b6:e3:40:d8:65:67:30:83:84: 8a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B8:C9:1E:DD:5E:29:C1:42:71:3C:EB:06:EB:63:95:92:79:95:DA X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:c4:79:23:af:02:b7:ef:b6:ef:b6:ec:82:02:fa:9b:93:d4: e1:39:0f:52:77:ad:05:dc:62:91:ae:63:7a:e7:33:fe:97:b2: 7e:1c:4a:5c:29:04:71:ed:37:c7:01:33:7b:28:4f:21:35:13: c9:70:ec:41:5f:f4:fe:f4:2b:48:e2:47:6f:92:d4:93:8a:21: 4f:4d:eb:25:29:4f:69:d3:f4:9b:17:d8:da:9a:4a:bf:78:d7: 93:54:8d:2d:9b:f8:1d:68:ce:54:18:42:28:ef:32:f6:95:18: a4:a9:95:e2:d9:b6:a9:87:ad:d2:6d:46:49:6f:ee:57:07:d7: a9:41:f6:3d:07:47:4d:a1:e4:54:e3:5d:b5:56:d1:4f:7a:83: b8:4b:4b:18:50:1d:31:bf:e5:f4:91:a6:e3:d6:8c:ec:6c:0a: 7e:d3:aa:e5:44:8e:1d:28:86:f6:94:26:91:cb:26:b5:88:25: 21:c1:08:96:25:1f:d7:69:59:20:16:5e:24:ba:8a:17:7b:bc: a6:67:69:d7:2e:e4:0b:99:f8:bf:95:78:bb:fb:d7:bd:d9:4d: 56:b1:de:3c:4f:c2:2d:89:95:7f:66:6e:9c:cb:64:ae:66:94: 6e:53:78:69:bb:0c:bb:e0:e7:67:a0:81:aa:24:0f:7b:9f:ee: b1:9b:78:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjUxMjE5MDMxMDA3WhcNMjUxMjI2MDMxMDA3WjAYMRYwFAYD VQQDDA02OTQ0YzIwZi1kZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgRNm8y2z8OefCwYHuvMHe/SaIveGNnWHF8Nmiff5Rd11MbUVTO2Vy9DUJTX rlkPAiu6qUZPW36CjJbydaCtzOrTcry4p4Z+Kdux6OasFsy11dkTLxGJXWQVkzs+ r+vcmDBICxrMC6SOhGnTpJiben6E+X0CDFXzK79YWP45aNFXz5PgG23uUGehZ+Nj CNQ+ZcvI5p+FO6sn+srDIQIDScF//bAhkIsc2C9RjIqD/+SKOmhyg0Fi43u6r5u4 cxsEDB3aM1W2t+VuAUzLJ7jZ8og4B/CwSmY3vTrXD/CTSy+IvzAdH3KzJsKvGVzz FEV8aVCsebW240DYZWcwg4SKCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPO4yR7d XinBQnE86wbrY5WSeZXaMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9p YVlQNS1abWhRR05pZGJhbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2xHkjrwK377bvtuyCAvqbk9ThOQ9Sd60F3GKRrmN65zP+l7J+HEpc KQRx7TfHATN7KE8hNRPJcOxBX/T+9CtI4kdvktSTiiFPTeslKU9p0/SbF9jamkq/ eNeTVI0tm/gdaM5UGEIo7zL2lRikqZXi2baph63SbUZJb+5XB9epQfY9B0dNoeRU 4121VtFPeoO4S0sYUB0xv+X0kabj1ozsbAp+06rlRI4dKIb2lCaRyya1iCUhwQiW JR/XaVkgFl4kuooXe7ymZ2nXLuQLmfi/lXi7+9e92U1Wsd48T8ItiZV/Zm6cy2Su ZpRuU3hpuwy74OdnoIGqJA97n+6xm3gT -----END CERTIFICATE-----Generated at Sat Dec 20 06:57:26 2025 by rpki-client