This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft File: pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft (raw, json) Hash identifier: 8lW3eQL6UU2CywXaQ2zXlRAS2xqyBbR9X2AoB8phdxI= Subject key identifier: 4E:CF:D6:8C:B3:89:78:1E:BA:D7:50:DD:95:E6:AC:AF:3E:AC:E2:E6 Authority key identifier: A4:74:F0:8C:7F:3F:48:8D:5B:90:E1:29:9A:34:9F:F2:51:DD:E1:1F Certificate issuer: /CN=A913D0CA/serialNumber=A474F08C7F3F488D5B90E1299A349FF251DDE11F Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pHTwjH8_SI1bkOEpmjSf8lHd4R8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft Manifest number: 64 Signing time: Fri 19 Dec 2025 06:01:28 +0000 Manifest this update: Fri 19 Dec 2025 06:01:27 +0000 Manifest next update: Fri 26 Dec 2025 06:01:27 +0000 Files and hashes: 1: pHTwjH8_SI1bkOEpmjSf8lHd4R8.crl (hash: rjfpf6kk/rmnFxaiwVt4DNfm/LgwTVqvZIaez2VJl8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.crl rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pHTwjH8_SI1bkOEpmjSf8lHd4R8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D0CA, serialNumber=A474F08C7F3F488D5B90E1299A349FF251DDE11F Validity Not Before: Dec 19 06:01:27 2025 GMT Not After : Dec 26 06:01:27 2025 GMT Subject: CN=6944ea38-8da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e5:70:e0:b4:08:40:1e:39:23:bd:52:95:60: 55:0e:c0:eb:9f:23:71:91:ce:35:fe:ae:c4:2a:ec: 73:34:ff:85:85:01:d0:9f:f1:4d:4c:2b:b4:4f:67: a5:7a:ef:46:c1:e3:97:d7:40:1c:6d:d3:d7:ac:5d: 64:9e:a0:37:5a:f9:28:53:1b:e3:55:40:f9:3d:20: 07:91:04:92:c9:04:77:df:c7:c5:b9:86:d1:ad:ca: ec:dd:0f:f0:0a:d3:a7:3e:31:66:54:45:f3:47:f9: cd:45:83:d3:ac:82:78:a5:b4:a9:b0:18:51:fa:3c: fa:86:ce:bd:02:2a:14:f9:ca:db:c8:ce:1e:55:52: 9f:ec:7b:45:0a:cb:57:8e:55:fb:5a:ac:bc:05:4d: 0d:09:2d:0a:55:b4:aa:a4:eb:19:76:57:6e:0b:b3: 4d:5c:16:5b:fb:68:c6:a9:0e:e9:75:7b:93:91:ad: f3:98:e2:6c:d7:40:f9:8c:08:34:73:47:48:cc:72: 0d:32:2c:88:10:12:04:a3:0d:86:97:b3:fc:01:f5: 84:83:f9:2f:45:61:02:64:f2:4c:66:36:3f:03:44: fa:79:88:a5:94:0a:85:8e:39:a0:2e:de:03:4f:bc: 1e:e0:1d:f7:b1:69:b3:c6:4d:e0:cc:c5:56:c7:ad: 1e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CF:D6:8C:B3:89:78:1E:BA:D7:50:DD:95:E6:AC:AF:3E:AC:E2:E6 X509v3 Authority Key Identifier: keyid:A4:74:F0:8C:7F:3F:48:8D:5B:90:E1:29:9A:34:9F:F2:51:DD:E1:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pHTwjH8_SI1bkOEpmjSf8lHd4R8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c7:e7:80:02:62:de:a7:b6:72:ce:8d:36:44:e3:0f:ea:5a: 61:6a:de:55:56:ed:25:15:9b:67:08:94:f2:5f:4d:d6:da:23: 08:8f:70:7d:be:86:eb:f1:15:6b:6e:ed:eb:0b:05:60:7a:2f: c9:cf:f1:65:a3:ed:f5:30:be:ae:c0:84:fa:2a:99:10:b9:0f: e7:f5:05:cf:8f:c2:9a:99:2e:6c:19:9d:70:dc:84:df:23:c1: 03:ad:3b:0a:8b:88:48:7d:70:51:98:ef:d6:dd:03:bb:ca:d1: 1c:b2:9a:0c:6b:dd:bc:35:58:34:fe:56:46:86:23:1b:79:da: a5:60:cb:48:3a:ce:61:69:e6:7c:02:13:03:90:c3:46:cf:d5: 7a:78:62:0a:c0:64:6c:1b:06:44:8d:68:02:38:46:e9:7f:4d: e4:6b:2a:17:ae:53:c5:aa:83:cd:0b:4a:c0:d7:a0:02:39:e0: c6:e3:a0:45:a1:f2:80:58:df:23:f0:b4:a4:2c:fd:a7:23:64: a9:d4:2f:f1:c0:1e:27:0a:8b:0f:20:c6:8f:b4:3b:0b:25:3f: b6:9b:f7:91:81:06:87:88:cb:d0:e0:e2:af:2c:81:c7:a8:bd: 6b:db:5f:4f:02:48:18:ad:bb:ba:17:7b:5f:e2:64:32:03:88: 43:a1:8f:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDBDQTExMC8GA1UEBRMoQTQ3NEYwOEM3RjNGNDg4RDVCOTBFMTI5OUEzNDlGRjI1 MURERTExRjAeFw0yNTEyMTkwNjAxMjdaFw0yNTEyMjYwNjAxMjdaMBgxFjAUBgNV BAMMDTY5NDRlYTM4LThkYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd5XDgtAhAHjkjvVKVYFUOwOufI3GRzjX+rsQq7HM0/4WFAdCf8U1MK7RPZ6V6 70bB45fXQBxt09esXWSeoDda+ShTG+NVQPk9IAeRBJLJBHffx8W5htGtyuzdD/AK 06c+MWZURfNH+c1Fg9OsgniltKmwGFH6PPqGzr0CKhT5ytvIzh5VUp/se0UKy1eO VftarLwFTQ0JLQpVtKqk6xl2V24Ls01cFlv7aMapDul1e5ORrfOY4mzXQPmMCDRz R0jMcg0yLIgQEgSjDYaXs/wB9YSD+S9FYQJk8kxmNj8DRPp5iKWUCoWOOaAu3gNP vB7gHfexabPGTeDMxVbHrR4JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTs/WjLOJ eB6611Ddleasrz6s4uYwHwYDVR0jBBgwFoAUpHTwjH8/SI1bkOEpmjSf8lHd4R8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMENBL0I3ODg3M0EyNDVC ODExRjA4NEYzNkM1RkM0RjlBRTAyL3BIVHdqSDhfU0kxYmtPRXBtalNmOGxIZDRS OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEhUd2pIOF9TSTFia09FcG1qU2Y4bEhkNFI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MENBL0I3ODg3M0EyNDVCODExRjA4NEYzNkM1RkM0RjlBRTAyL3BIVHdqSDhfU0kx YmtPRXBtalNmOGxIZDRSOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHDH54ACYt6ntnLOjTZE4w/qWmFq3lVW7SUVm2cIlPJfTdbaIwiPcH2+ huvxFWtu7esLBWB6L8nP8WWj7fUwvq7AhPoqmRC5D+f1Bc+PwpqZLmwZnXDchN8j wQOtOwqLiEh9cFGY79bdA7vK0Ryymgxr3bw1WDT+VkaGIxt52qVgy0g6zmFp5nwC EwOQw0bP1Xp4YgrAZGwbBkSNaAI4Rul/TeRrKheuU8Wqg80LSsDXoAI54MbjoEWh 8oBY3yPwtKQs/acjZKnUL/HAHicKiw8gxo+0OwslP7ab95GBBoeIy9Dg4q8sgceo vWvbX08CSBitu7oXe1/iZDIDiEOhj6c= -----END CERTIFICATE-----Generated at Fri Dec 19 23:56:30 2025 by rpki-client