This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json) Hash identifier: Nk/4H+nYZd9/55SHQCr/4pIOy11xuwLY1zR5oEGl75E= Subject key identifier: AE:0C:AC:A0:90:C4:EA:6F:BD:E2:AE:C5:EB:39:33:2F:6B:A3:26:7E Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft Manifest number: 01CC Signing time: Sun 21 Dec 2025 02:13:45 +0000 Manifest this update: Sun 21 Dec 2025 02:13:45 +0000 Manifest next update: Sun 28 Dec 2025 02:13:45 +0000 Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: wAXnF+6wTFHjK5rohr9la1izvBLgxWms3r68e+MyjyE=) 2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: Q0kMZvSMppTmP/L1MFuKtKcyvw4++N9BtkqfdKNNGdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Validity Not Before: Dec 21 02:13:45 2025 GMT Not After : Dec 28 02:13:45 2025 GMT Subject: CN=694757d9-1dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fe:30:5f:38:de:93:0a:5a:c9:c4:d6:90:bd: e8:34:b1:56:8f:1d:80:11:0d:9b:74:5c:72:19:a9: e8:1f:d5:23:94:14:07:f9:a6:35:7a:c6:fb:5a:53: 81:38:91:66:9c:9e:3b:e1:dc:8d:48:47:ef:60:c2: 66:33:ea:4e:b1:37:3b:f7:0a:d1:60:bc:ab:94:21: bc:4c:86:3a:00:af:33:b9:39:b0:2b:f8:6f:0e:4e: 6d:b3:a2:b3:33:f1:3c:af:16:c4:c4:7c:58:c2:68: 71:8a:2e:4c:f9:f2:f6:81:43:19:d7:37:d7:71:3d: 24:19:8c:94:b5:9d:c2:49:85:82:ce:d1:1d:98:6f: 0e:73:4e:b9:86:08:85:40:ad:46:c3:55:4a:4a:da: 40:e6:fa:7e:60:7a:59:3e:7c:a7:57:84:16:61:a1: 08:e1:59:44:85:49:d1:4d:70:30:bd:7c:f7:f5:6a: 97:75:c2:29:19:73:19:f5:cc:a8:6f:6f:50:fa:72: 65:9e:8b:47:81:c0:33:d3:88:a7:a5:fe:16:71:4b: 97:cc:b0:d9:13:60:56:fb:60:fc:72:ad:54:ad:ca: 47:22:4a:dd:e7:04:70:32:c9:98:e8:77:18:83:b1: 5a:6d:37:b0:94:47:90:4a:1f:7b:0e:03:63:1f:08: fc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0C:AC:A0:90:C4:EA:6F:BD:E2:AE:C5:EB:39:33:2F:6B:A3:26:7E X509v3 Authority Key Identifier: keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:df:bc:4e:88:4c:d0:65:1b:14:7c:b0:ef:dc:56:2c:11:be: 13:5f:f6:28:1b:1c:36:1b:b6:d3:ac:f7:76:63:9f:6f:23:4c: 53:58:bf:4f:01:ea:33:1b:dc:90:74:96:1a:88:96:bb:6f:90: e6:06:d1:28:50:a8:d7:3a:61:95:2e:8d:52:c3:f9:ba:de:6e: 7e:07:1a:1d:92:93:93:5a:2c:20:9d:f8:06:01:ed:92:b1:78: 22:cb:7e:0c:63:4f:8c:ae:b0:c8:0b:bb:95:5f:74:ac:7f:b5: f4:9a:8d:35:8b:d8:32:db:86:b0:71:7f:aa:e9:6e:0e:6b:03: ae:32:33:3d:71:89:16:32:1d:b0:f4:0d:98:06:ed:6b:2a:e7: 91:ec:e3:e6:f4:06:5e:8b:29:de:19:1a:27:d5:b6:e3:8b:43: 12:0f:c4:97:c6:c1:f5:db:6b:b6:3a:3a:42:d7:5e:63:46:93: b4:4b:9a:10:62:20:bd:54:e1:8d:43:11:b0:de:8c:ab:79:41: 3f:40:53:e4:85:37:d8:99:85:5f:5a:bf:23:eb:43:a9:fb:7c: df:cf:e7:6e:ed:2a:c5:d7:b6:fc:fe:db:96:b7:50:78:d8:db: d4:01:54:56:51:1f:80:e5:0c:7b:37:61:22:c8:c7:6b:7c:6f: 74:28:71:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG MDMzRDQ1QzQwHhcNMjUxMjIxMDIxMzQ1WhcNMjUxMjI4MDIxMzQ1WjAYMRYwFAYD VQQDDA02OTQ3NTdkOS0xZGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0f4wXzjekwpaycTWkL3oNLFWjx2AEQ2bdFxyGanoH9UjlBQH+aY1esb7WlOB OJFmnJ474dyNSEfvYMJmM+pOsTc79wrRYLyrlCG8TIY6AK8zuTmwK/hvDk5ts6Kz M/E8rxbExHxYwmhxii5M+fL2gUMZ1zfXcT0kGYyUtZ3CSYWCztEdmG8Oc065hgiF QK1Gw1VKStpA5vp+YHpZPnynV4QWYaEI4VlEhUnRTXAwvXz39WqXdcIpGXMZ9cyo b29Q+nJlnotHgcAz04inpf4WcUuXzLDZE2BW+2D8cq1UrcpHIkrd5wRwMsmY6HcY g7FabTewlEeQSh97DgNjHwj8XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4MrKCQ xOpvveKuxes5My9royZ+MB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw MGxnaTJaRW82N3p3TTlSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC337xOiEzQZRsUfLDv3FYsEb4TX/YoGxw2G7bTrPd2Y59vI0xTWL9P AeozG9yQdJYaiJa7b5DmBtEoUKjXOmGVLo1Sw/m63m5+BxodkpOTWiwgnfgGAe2S sXgiy34MY0+MrrDIC7uVX3Ssf7X0mo01i9gy24awcX+q6W4OawOuMjM9cYkWMh2w 9A2YBu1rKueR7OPm9AZeiyneGRon1bbji0MSD8SXxsH122u2OjpC115jRpO0S5oQ YiC9VOGNQxGw3oyreUE/QFPkhTfYmYVfWr8j60Op+3zfz+du7SrF17b8/tuWt1B4 2NvUAVRWUR+A5Qx7N2EiyMdrfG90KHFb -----END CERTIFICATE-----Generated at Sun Dec 21 09:48:04 2025 by rpki-client