This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft File: T_Dy-NvzsUpesSO0H-neZzsSUX8.mft (raw, json) Hash identifier: n7HpQZnFo7KyqsscaWRwiYs3A+oTdm2te2115cyjDW4= Subject key identifier: E4:59:9A:D6:10:29:95:5C:79:CF:3D:84:03:1F:58:82:4B:A4:FA:E2 Authority key identifier: 4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F Certificate issuer: /CN=A913F3A2/serialNumber=4FF0F2F8DBF3B14A5EB123B41FE9DE673B12517F Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft Manifest number: C4 Signing time: Fri 19 Dec 2025 04:58:28 +0000 Manifest this update: Fri 19 Dec 2025 04:58:27 +0000 Manifest next update: Fri 26 Dec 2025 04:58:27 +0000 Files and hashes: 1: T_Dy-NvzsUpesSO0H-neZzsSUX8.crl (hash: OL6hNMd1J5u3PxM+5T6rkQad/3q2vIS3DAgF71qu8NU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.crl rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F3A2, serialNumber=4FF0F2F8DBF3B14A5EB123B41FE9DE673B12517F Validity Not Before: Dec 19 04:58:27 2025 GMT Not After : Dec 26 04:58:27 2025 GMT Subject: CN=6944db74-308e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c3:d6:8e:b6:43:5a:cc:9c:7d:2e:df:14:74: 4e:70:8b:c9:06:6c:8f:0c:f7:6a:9c:7e:45:83:b3: cc:17:aa:d1:bc:fb:65:d6:6b:fe:39:75:72:d7:c7: 2d:44:4e:43:fd:04:4f:0b:fe:f2:2e:16:9a:5c:b5: 72:76:f3:69:58:9d:da:c2:12:fd:cf:0f:28:68:99: 45:f9:08:4a:1d:e4:a6:3e:15:05:16:3b:cc:8d:ed: d2:92:68:d3:b6:37:ae:00:a6:46:fe:70:1b:1c:e4: 72:63:64:47:2e:48:25:d2:e3:e9:05:b6:78:a7:87: 47:7a:fa:05:0f:f2:76:9e:d1:f1:21:83:3a:ea:1e: cd:65:c3:d1:3e:50:30:7d:d9:cf:83:9a:2c:f1:81: 24:a9:47:dd:ff:d3:3b:c2:fd:98:75:40:32:54:d6: 15:a3:c7:1a:57:87:fd:9c:ae:32:f5:ff:78:c0:a8: 99:01:ae:91:1f:f1:43:c1:bd:37:dd:48:3e:70:87: e0:b2:ad:a5:fa:54:19:25:c2:59:3b:e5:a7:88:4e: e5:6a:e6:18:f9:d3:f5:bc:a0:ff:6b:ed:e6:41:5b: 29:5c:08:ab:b8:90:03:ae:03:46:7b:89:81:70:c9: 5c:ed:7b:62:29:c6:62:de:fa:5d:33:f0:73:3c:05: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:59:9A:D6:10:29:95:5C:79:CF:3D:84:03:1F:58:82:4B:A4:FA:E2 X509v3 Authority Key Identifier: keyid:4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:f1:df:b9:da:7b:9f:9c:ef:25:b8:f1:b8:8c:c5:42:fe:2d: b1:56:68:67:f7:ab:8f:13:73:d4:f9:df:21:02:1f:db:e3:8e: 3f:7d:40:e2:3d:c9:6d:08:65:74:92:28:49:ad:78:99:02:23: ec:6c:6c:17:1e:33:26:ff:5d:49:03:fc:80:f8:01:55:90:f7: db:4c:66:74:ba:63:be:65:23:b9:4f:1e:6b:a6:1d:ae:e6:21: ff:82:42:8b:f2:de:b9:81:37:c8:b7:e0:ce:7d:63:c4:03:ea: b0:8f:54:4d:02:55:3b:e5:dc:89:a6:7c:c8:1f:1b:94:17:52: 9d:27:13:a2:ad:30:39:d4:37:e4:45:a9:3d:8f:31:13:27:7b: 96:99:b0:37:ed:85:2e:91:52:31:ed:3d:da:3e:d0:83:57:0c: d6:ff:5e:44:c4:cb:1f:78:18:03:fd:c2:d8:3c:06:e8:87:fc: 05:5a:af:e9:39:ee:7f:5a:c2:f7:a7:1d:6e:4f:40:fa:40:4b: 31:47:70:fc:c5:34:39:6a:da:80:06:fe:35:44:75:30:b2:2e: 18:ae:ba:26:4e:8b:c9:82:6a:59:15:a4:b0:ec:29:25:53:82: f4:e6:e0:2c:0e:6d:d5:02:85:e1:76:73:1c:0d:5b:95:93:e7: 38:d8:80:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzQTIxMTAvBgNVBAUTKDRGRjBGMkY4REJGM0IxNEE1RUIxMjNCNDFGRTlERTY3 M0IxMjUxN0YwHhcNMjUxMjE5MDQ1ODI3WhcNMjUxMjI2MDQ1ODI3WjAYMRYwFAYD VQQDDA02OTQ0ZGI3NC0zMDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmcPWjrZDWsycfS7fFHROcIvJBmyPDPdqnH5Fg7PMF6rRvPtl1mv+OXVy18ct RE5D/QRPC/7yLhaaXLVydvNpWJ3awhL9zw8oaJlF+QhKHeSmPhUFFjvMje3SkmjT tjeuAKZG/nAbHORyY2RHLkgl0uPpBbZ4p4dHevoFD/J2ntHxIYM66h7NZcPRPlAw fdnPg5os8YEkqUfd/9M7wv2YdUAyVNYVo8caV4f9nK4y9f94wKiZAa6RH/FDwb03 3Ug+cIfgsq2l+lQZJcJZO+WniE7lauYY+dP1vKD/a+3mQVspXAiruJADrgNGe4mB cMlc7XtiKcZi3vpdM/BzPAUknwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORZmtYQ KZVcec89hAMfWIJLpPriMB8GA1UdIwQYMBaAFE/w8vjb87FKXrEjtB/p3mc7ElF/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjNBMi82NzhBQ0ExNEFF NDkxMUVGOUIyOTUyMzlDNEY5QUUwMi9UX0R5LU52enNVcGVzU08wSC1uZVp6c1NV WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfRHktTnZ6c1VwZXNTTzBILW5lWnpzU1VYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjNBMi82NzhBQ0ExNEFFNDkxMUVGOUIyOTUyMzlDNEY5QUUwMi9UX0R5LU52enNV cGVzU08wSC1uZVp6c1NVWDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ8d+52nufnO8luPG4jMVC/i2xVmhn96uPE3PU+d8hAh/b444/fUDi PcltCGV0kihJrXiZAiPsbGwXHjMm/11JA/yA+AFVkPfbTGZ0umO+ZSO5Tx5rph2u 5iH/gkKL8t65gTfIt+DOfWPEA+qwj1RNAlU75dyJpnzIHxuUF1KdJxOirTA51Dfk Rak9jzETJ3uWmbA37YUukVIx7T3aPtCDVwzW/15ExMsfeBgD/cLYPAboh/wFWq/p Oe5/WsL3px1uT0D6QEsxR3D8xTQ5atqABv41RHUwsi4YrromTovJgmpZFaSw7Ckl U4L05uAsDm3VAoXhdnMcDVuVk+c42IDn -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:41 2025 by rpki-client