This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft File: poz6MR67HxAyDqIHdTAw5_Oij3I.mft (raw, json) Hash identifier: 9BQ2c0tOFK/skiZkgenn5yiBeZkg27vI/h20WyraV8c= Subject key identifier: F4:41:84:D8:AB:28:E3:06:B0:DF:DE:66:A6:F5:45:E0:37:5E:9F:71 Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72 Certificate issuer: /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72 Certificate serial: 0B33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft Manifest number: 0B19 Signing time: Thu 18 Dec 2025 18:58:27 +0000 Manifest this update: Thu 18 Dec 2025 18:58:27 +0000 Manifest next update: Thu 25 Dec 2025 18:58:27 +0000 Files and hashes: 1: poz6MR67HxAyDqIHdTAw5_Oij3I.crl (hash: vb5ZTuQg4gxA+3CAuIPpdH/amlUj07Cnr1dzkPD8vew=) 2: E3D288CA6BC311EDB9791958C4F9AE02.roa (hash: xfCVW/hkWWtb6veFD5avvPcY4Mz5aIouTpiWuzaIDT0=) 3: D353090841F711ECB1465157C4F9AE02.roa (hash: hyTgYf3yNb3P1osKlb2mkzCC43nsvagjPiYm8g/bHPk=) 4: 1E95063A21E611EEB4824339C4F9AE02.roa (hash: zTEEFeYyenG7e2iJRNTQNMi/VEI/2vKOaAjTvCstuBc=) 5: 110731BE329D11EFB45DDA57C4F9AE02.roa (hash: wHUnMKyUsP+z0ZGxOO5ssZzuISHdGqM1+8ZYBh44vj4=) 6: F4E06C32804911EDABB05C09C4F9AE02.roa (hash: ESJChcbSeTzsfPRjHjsX6geMHbvNO7hjmHXws1871ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2867 (0xb33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913258C, serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72 Validity Not Before: Dec 18 18:58:27 2025 GMT Not After : Dec 25 18:58:27 2025 GMT Subject: CN=69444ed3-7f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:6a:62:d0:8a:6a:2c:71:c7:b6:dd:52:e4: 47:2e:4e:ee:45:ea:5d:98:52:f7:81:39:53:f8:41: 25:10:b8:34:ba:e5:69:6c:3b:e1:41:72:62:d6:26: 6f:30:89:84:13:6a:b0:bc:3a:06:13:6f:97:b3:fa: 4d:4d:6d:f1:d6:c0:aa:bc:91:fd:d9:18:f6:c9:8e: 08:da:45:b1:ed:48:03:d6:06:7a:e5:71:c4:09:f5: 2f:db:3a:6a:a9:67:65:fa:51:a2:39:3f:74:de:ef: ff:79:20:1d:d2:42:67:35:e9:cc:c7:1d:71:73:46: ba:2f:ce:0c:d7:63:4f:b7:53:33:d6:4f:75:99:74: 9a:30:ba:74:ba:c0:33:d6:9c:14:12:c3:f3:6e:70: 57:b5:2f:96:6e:7e:da:1b:ed:eb:28:e4:b0:bd:6f: 59:e3:19:3c:22:69:ac:fb:5e:ea:02:ae:e4:a7:0d: a8:1c:60:98:e0:8d:e6:04:91:64:93:6f:72:17:f6: dd:8b:64:c0:d1:6c:78:7c:6a:2e:28:a4:c5:88:5f: 94:48:35:01:a7:8f:fe:83:4d:98:75:b4:f7:2d:bd: b1:2d:0e:41:4f:34:e9:7b:35:ed:d5:7b:d4:dc:42: 8b:74:cc:5a:7c:3b:df:df:c5:b9:a3:6e:64:e5:52: cc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:41:84:D8:AB:28:E3:06:B0:DF:DE:66:A6:F5:45:E0:37:5E:9F:71 X509v3 Authority Key Identifier: keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:be:50:70:b8:d1:9a:9b:7e:42:ff:3c:af:9c:ef:86:10:48: 61:73:1c:0c:f7:46:e7:1e:5e:01:15:7e:7c:4f:44:5c:6f:d5: 2d:04:af:2c:25:d0:65:1d:37:de:2a:9c:ae:5e:ff:5e:41:35: 22:ad:d4:09:83:38:98:83:d5:b3:61:8e:01:cf:00:4e:e9:b9: 43:0b:62:ca:a2:be:c2:09:22:00:68:e4:93:ee:3d:1c:45:0a: 22:24:37:54:db:da:dc:e3:4d:cc:43:fa:fd:04:a4:63:f7:31: 24:e7:54:55:90:db:c2:58:83:bf:f4:ba:c5:e3:b2:9b:7b:23: 21:56:a3:13:91:37:f4:55:48:d3:ab:44:9c:5c:34:e8:88:7e: 3f:56:fd:c2:e0:9a:25:34:e2:18:40:02:e7:67:db:24:64:76: 81:2f:f8:fc:fa:d6:0d:fd:24:ee:0c:a5:52:72:ff:2c:da:b0: 77:ff:59:43:5e:cd:02:d8:e6:be:cf:13:07:ed:e7:5e:dd:6c: a0:12:90:56:69:88:17:cc:df:7e:25:3a:f4:06:ea:8f:72:76: 53:f9:52:c7:ec:12:7c:4b:8c:52:51:2b:b4:78:80:bf:98:eb: 94:94:0f:56:d1:78:d5:ea:90:19:37:83:8b:7c:f9:19:20:0d: 74:f2:e4:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1OEMxMTAvBgNVBAUTKEE2OENGQTMxMUVCQjFGMTAzMjBFQTIwNzc1MzAzMEU3 RjNBMjhGNzIwHhcNMjUxMjE4MTg1ODI3WhcNMjUxMjI1MTg1ODI3WjAYMRYwFAYD VQQDDA02OTQ0NGVkMy03Zjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtl5qYtCKaixxx7bdUuRHLk7uRepdmFL3gTlT+EElELg0uuVpbDvhQXJi1iZv MImEE2qwvDoGE2+Xs/pNTW3x1sCqvJH92Rj2yY4I2kWx7UgD1gZ65XHECfUv2zpq qWdl+lGiOT903u//eSAd0kJnNenMxx1xc0a6L84M12NPt1Mz1k91mXSaMLp0usAz 1pwUEsPzbnBXtS+Wbn7aG+3rKOSwvW9Z4xk8Imms+17qAq7kpw2oHGCY4I3mBJFk k29yF/bdi2TA0Wx4fGouKKTFiF+USDUBp4/+g02YdbT3Lb2xLQ5BTzTpezXt1XvU 3EKLdMxafDvf38W5o25k5VLMiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRBhNir KOMGsN/eZqb1ReA3Xp9xMB8GA1UdIwQYMBaAFKaM+jEeux8QMg6iB3UwMOfzoo9y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjU4Qy9CNEM0NUZFMDU0 OEQxMUVBODZDOUREN0VDNEY5QUUwMi9wb3o2TVI2N0h4QXlEcUlIZFRBdzVfT2lq M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvejZNUjY3SHhBeURxSUhkVEF3NV9PaWozSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjU4Qy9CNEM0NUZFMDU0OEQxMUVBODZDOUREN0VDNEY5QUUwMi9wb3o2TVI2N0h4 QXlEcUlIZFRBdzVfT2lqM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXvlBwuNGam35C/zyvnO+GEEhhcxwM90bnHl4BFX58T0Rcb9UtBK8s JdBlHTfeKpyuXv9eQTUirdQJgziYg9WzYY4BzwBO6blDC2LKor7CCSIAaOST7j0c RQoiJDdU29rc403MQ/r9BKRj9zEk51RVkNvCWIO/9LrF47KbeyMhVqMTkTf0VUjT q0ScXDToiH4/Vv3C4JolNOIYQALnZ9skZHaBL/j8+tYN/STuDKVScv8s2rB3/1lD Xs0C2Oa+zxMH7ede3WygEpBWaYgXzN9+JTr0BuqPcnZT+VLH7BJ8S4xSUSu0eIC/ mOuUlA9W0XjV6pAZN4OLfPkZIA108uSk -----END CERTIFICATE-----Generated at Sat Dec 20 16:21:54 2025 by rpki-client