This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json) Hash identifier: jsoziMsPavUri+fQMn7p8lvainHhh+g4tNwAqjcI4cg= Subject key identifier: E7:2E:2E:4F:B6:82:DE:60:3A:05:FC:E6:7E:64:11:49:4E:20:32:66 Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Certificate serial: 043F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft Manifest number: 043B Signing time: Sat 20 Dec 2025 23:31:21 +0000 Manifest this update: Sat 20 Dec 2025 23:31:20 +0000 Manifest next update: Sat 27 Dec 2025 23:31:20 +0000 Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: 3Nl1I8P9jEX4jMye/AwiJTnTPqP/CZ+1EPWAeRI8qYU=) 2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: gOa0TpZKNAKtEp1z7Y7hA0Mkc96+IudmzfWq1Ab24PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Validity Not Before: Dec 20 23:31:20 2025 GMT Not After : Dec 27 23:31:20 2025 GMT Subject: CN=694731c8-f22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:4a:75:b8:62:4c:6a:7c:ee:82:c7:af:f2: 84:9e:17:f5:a5:28:4e:87:43:f5:79:06:9b:5b:74: 7a:5c:84:1f:41:4d:fa:67:45:9e:4e:c2:1e:ed:19: 45:81:55:03:f4:52:5c:a6:fa:5e:72:ea:cb:be:f5: c7:4a:fe:06:56:21:e1:8a:ef:96:89:3a:71:48:01: 91:4d:af:b6:80:29:d9:b9:d9:bf:1e:e9:92:cd:0a: 77:8e:37:4a:a6:19:3d:40:7f:76:64:62:69:36:16: d9:65:55:b0:a0:a1:87:af:b6:54:a3:bb:a2:9e:ce: f6:86:ca:f4:5f:61:db:22:a0:c3:48:9b:bd:ba:f1: a0:f2:7a:75:57:8f:81:17:51:d2:52:b5:dd:90:70: 1c:d8:f6:fb:1c:fc:62:f7:79:9f:7e:49:fb:1f:8d: f1:92:12:47:0b:bd:4b:41:9c:00:11:b3:70:73:8e: ce:c0:c8:7b:f8:9c:4d:d9:9b:43:07:3a:52:fb:bc: 24:db:dd:d8:c6:a2:bd:42:5b:fd:03:2e:01:c1:17: 80:95:a5:f4:5b:bd:4f:a9:e2:1a:3c:44:25:db:2b: 07:27:8d:6b:4c:a5:84:d1:d3:cd:93:43:33:00:10: d0:1a:32:af:41:33:d3:6b:c8:42:ad:c9:99:31:bf: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2E:2E:4F:B6:82:DE:60:3A:05:FC:E6:7E:64:11:49:4E:20:32:66 X509v3 Authority Key Identifier: keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:12:09:9a:fb:b6:00:b1:a1:11:ea:6d:4b:8c:64:0d:82:36: a8:18:2c:a0:af:e5:0e:12:40:a0:fe:fc:0b:a2:81:10:b9:e6: 65:e7:e2:07:e6:8f:2e:4b:ee:f1:6b:aa:9b:b3:bf:cd:fe:2b: 26:7d:15:80:36:35:ad:38:9d:37:e9:ed:5c:fd:b0:2c:e4:92: 6d:66:06:02:f1:96:4a:cb:47:c6:7e:8d:84:04:65:6a:c0:5d: de:87:c3:b5:8d:48:f3:fb:bd:aa:4a:cc:f8:32:66:a8:38:e6: 72:3d:40:d6:8a:98:b5:25:94:8b:7c:2c:c5:69:48:11:cb:79: c5:d8:13:68:3f:08:cf:4f:a8:78:a0:46:51:81:74:9b:04:21: 91:73:2d:2f:8b:31:0a:22:20:87:31:65:fd:60:70:79:a6:d5: 04:a8:41:f9:17:bf:93:9d:a2:59:c6:ab:11:5d:07:7e:c0:7e: f4:d4:59:29:7d:bb:28:02:6e:ce:70:ad:9b:36:29:47:7a:eb: a5:2d:ac:46:3e:ea:e8:53:fa:06:8d:9c:a4:2e:10:df:f2:28: 49:28:cd:68:b9:44:f0:44:6a:7a:b5:ec:a2:cd:33:b3:ac:de: 04:72:1f:58:c8:ef:98:02:9b:7b:d6:11:c6:45:f4:b2:63:21: 13:35:37:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3NDIxMTAvBgNVBAUTKDBDRUUwRDk2NzczRDVEREFENDY3OUUwRTgzOUE4REMx MjY2OUUyMzIwHhcNMjUxMjIwMjMzMTIwWhcNMjUxMjI3MjMzMTIwWjAYMRYwFAYD VQQDDA02OTQ3MzFjOC1mMjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVBKdbhiTGp87oLHr/KEnhf1pShOh0P1eQabW3R6XIQfQU36Z0WeTsIe7RlF gVUD9FJcpvpecurLvvXHSv4GViHhiu+WiTpxSAGRTa+2gCnZudm/HumSzQp3jjdK phk9QH92ZGJpNhbZZVWwoKGHr7ZUo7uins72hsr0X2HbIqDDSJu9uvGg8np1V4+B F1HSUrXdkHAc2Pb7HPxi93mffkn7H43xkhJHC71LQZwAEbNwc47OwMh7+JxN2ZtD BzpS+7wk293YxqK9Qlv9Ay4BwReAlaX0W71PqeIaPEQl2ysHJ41rTKWE0dPNk0Mz ABDQGjKvQTPTa8hCrcmZMb+hSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcuLk+2 gt5gOgX85n5kEUlOIDJmMB8GA1UdIwQYMBaAFAzuDZZ3PV3a1GeeDoOajcEmaeIy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc0Mi8wNDE1RDZGRTg0 QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhkclVaNTRPZzVxTndTWnA0 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPNE5sbmM5WGRyVVo1NE9nNXFOd1NacDRqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc0Mi8wNDE1RDZGRTg0QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhk clVaNTRPZzVxTndTWnA0akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkEgma+7YAsaER6m1LjGQNgjaoGCygr+UOEkCg/vwLooEQueZl5+IH 5o8uS+7xa6qbs7/N/ismfRWANjWtOJ036e1c/bAs5JJtZgYC8ZZKy0fGfo2EBGVq wF3eh8O1jUjz+72qSsz4MmaoOOZyPUDWipi1JZSLfCzFaUgRy3nF2BNoPwjPT6h4 oEZRgXSbBCGRcy0vizEKIiCHMWX9YHB5ptUEqEH5F7+TnaJZxqsRXQd+wH701Fkp fbsoAm7OcK2bNilHeuulLaxGPuroU/oGjZykLhDf8ihJKM1ouUTwRGp6teyizTOz rN4Ech9YyO+YApt71hHGRfSyYyETNTdp -----END CERTIFICATE-----Generated at Sun Dec 21 08:20:00 2025 by rpki-client