This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft File: U78N14DbA47OFNQEWbq5xo9phTs.mft (raw, json) Hash identifier: Ca2etcmiaHnOl+ypDeLHpOmPzsB8q2BF1IPEh42qSgs= Subject key identifier: 39:AE:A4:03:17:CF:AA:BD:06:2C:67:22:2C:C7:1D:C9:4B:25:97:12 Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 22FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft Manifest number: 2294 Signing time: Mon 22 Dec 2025 15:41:49 +0000 Manifest this update: Mon 22 Dec 2025 15:41:49 +0000 Manifest next update: Mon 29 Dec 2025 15:41:49 +0000 Files and hashes: 1: U78N14DbA47OFNQEWbq5xo9phTs.crl (hash: QyU78KJ4xFlarzKWSqQh9WQH+EZ1qKbIgyq3jaOSZSY=) 2: 848CD92660A611F0806EB31DC4F9AE02.roa (hash: E2krETd7neWC8d4xIatDnIbAfqIHXkBF6iProCmPjFo=) 3: ED7263CCD8D111F08684B9D069D3641D.roa (hash: cAoiMN6LFkILIhPRG9c3NXeqabnDMkQGNJZthXTJ5xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8955 (0x22fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Validity Not Before: Dec 22 15:41:49 2025 GMT Not After : Dec 29 15:41:49 2025 GMT Subject: CN=694966bd-2418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1b:c2:fe:22:1f:0e:82:05:7a:77:cd:70:2d: cc:71:d5:af:09:7a:81:81:85:e8:dc:64:98:fa:ed: 4e:20:5b:53:db:21:cb:a1:0e:b6:21:1e:8c:bc:5c: 63:53:cf:33:a1:62:d8:08:db:70:c3:3d:51:f4:ed: 29:a3:fd:b0:e0:9f:ac:62:6f:45:a2:4a:21:09:64: c1:b8:fb:00:a1:64:03:5f:00:a9:ac:c6:91:00:7f: 2f:3c:94:c7:9b:c5:52:d6:f6:7c:06:01:7c:a9:d4: 0d:a7:bb:83:11:ba:da:f7:5d:e0:fa:7d:06:e8:48: f1:be:70:30:f6:a8:3d:b4:b9:d6:0e:07:76:0a:1b: 17:ef:d4:0d:33:1a:b7:3b:94:32:27:cc:4e:80:c0: cd:a5:7e:ff:f7:c9:f5:f0:43:05:d1:45:78:10:8b: ed:64:07:f2:d8:8f:96:e9:af:a1:b5:01:94:1a:76: 58:c2:27:25:16:44:80:e8:bd:85:94:1a:69:1e:a4: 84:cf:8a:50:aa:b0:63:39:57:bf:77:9f:0a:09:3e: 0f:7a:60:f9:14:f5:34:72:ec:81:30:19:d7:f1:b9: eb:31:87:c0:e1:e7:28:24:c8:a2:e7:1e:d0:f6:c6: 8e:f5:c9:08:76:b7:1d:b1:31:80:5f:1b:9c:e0:85: 9e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AE:A4:03:17:CF:AA:BD:06:2C:67:22:2C:C7:1D:C9:4B:25:97:12 X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:b9:5b:94:b9:5f:1c:88:d5:b2:25:ba:0a:53:c7:f9:9f:72: 51:62:99:52:d1:3b:21:69:e8:96:bb:e8:f8:81:5f:6c:7f:0b: 78:23:33:1a:56:f1:16:34:92:81:ac:04:ba:4c:9d:31:0c:a6: 2b:35:ef:fe:8d:28:92:2d:0c:0d:6e:4c:a1:9c:ff:6c:ce:06: ad:db:88:2d:4f:6c:b4:ac:0d:b1:d3:ef:47:84:3c:dd:26:ff: ec:4f:cb:1c:2c:02:24:3f:be:08:e9:84:2e:fe:12:d4:40:82: 58:4b:c8:2c:84:5c:74:da:f0:35:54:99:bf:1b:e6:d4:38:68: cc:73:60:70:94:28:f1:36:ce:02:9f:96:55:14:74:9f:8f:ff: c5:78:71:2b:fa:2c:75:46:50:84:64:54:30:14:fb:cd:91:cf: fb:a0:fc:b7:f4:8b:8c:27:39:cf:7d:5a:ec:3e:6b:4e:ec:46: ca:25:43:75:dd:c3:a0:ee:2b:4e:3c:7b:09:28:af:6d:48:e2: d5:b1:fa:4a:88:1d:73:df:22:af:7d:84:6a:38:57:c6:d8:63: bd:49:31:36:1d:a1:af:6d:1e:a2:9d:ef:4e:e4:6f:46:66:5f: 25:e5:cf:c5:44:39:2f:55:db:ec:3f:b6:a9:04:12:aa:2c:95: 66:08:ff:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjUxMjIyMTU0MTQ5WhcNMjUxMjI5MTU0MTQ5WjAYMRYwFAYD VQQDDA02OTQ5NjZiZC0yNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xvC/iIfDoIFenfNcC3McdWvCXqBgYXo3GSY+u1OIFtT2yHLoQ62IR6MvFxj U88zoWLYCNtwwz1R9O0po/2w4J+sYm9FokohCWTBuPsAoWQDXwCprMaRAH8vPJTH m8VS1vZ8BgF8qdQNp7uDEbra913g+n0G6EjxvnAw9qg9tLnWDgd2ChsX79QNMxq3 O5QyJ8xOgMDNpX7/98n18EMF0UV4EIvtZAfy2I+W6a+htQGUGnZYwiclFkSA6L2F lBppHqSEz4pQqrBjOVe/d58KCT4PemD5FPU0cuyBMBnX8bnrMYfA4ecoJMii5x7Q 9saO9ckIdrcdsTGAXxuc4IWeKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmupAMX z6q9BixnIizHHclLJZcSMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNENi8xRTlFMUFBQ0QyRUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0 N09GTlFFV2JxNXhvOXBoVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1uVuUuV8ciNWyJboKU8f5n3JRYplS0TshaeiWu+j4gV9sfwt4IzMa VvEWNJKBrAS6TJ0xDKYrNe/+jSiSLQwNbkyhnP9szgat24gtT2y0rA2x0+9HhDzd Jv/sT8scLAIkP74I6YQu/hLUQIJYS8gshFx02vA1VJm/G+bUOGjMc2BwlCjxNs4C n5ZVFHSfj//FeHEr+ix1RlCEZFQwFPvNkc/7oPy39IuMJznPfVrsPmtO7EbKJUN1 3cOg7itOPHsJKK9tSOLVsfpKiB1z3yKvfYRqOFfG2GO9STE2HaGvbR6ine9O5G9G Zl8l5c/FRDkvVdvsP7apBBKqLJVmCP/L -----END CERTIFICATE-----Generated at Tue Dec 23 12:04:18 2025 by rpki-client