This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft File: 28byJW3eXCxGqA6yQy8lcu3FN9Y.mft (raw, json) Hash identifier: lnzmZTeD2jmb5ros402Zh9EGhgZmC7PrCgDk/LfELQM= Subject key identifier: 66:02:86:FD:52:FB:76:32:47:AA:11:F1:87:83:85:87:FC:62:78:2E Authority key identifier: DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6 Certificate issuer: /CN=A914D0E3/serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft Manifest number: DC Signing time: Fri 19 Dec 2025 04:41:59 +0000 Manifest this update: Fri 19 Dec 2025 04:41:59 +0000 Manifest next update: Fri 26 Dec 2025 04:41:59 +0000 Files and hashes: 1: 28byJW3eXCxGqA6yQy8lcu3FN9Y.crl (hash: t9z0HECzGnt7+OaDFAnlZfpJjiYwypBMQ+2cOl/ZQEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0E3, serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6 Validity Not Before: Dec 19 04:41:59 2025 GMT Not After : Dec 26 04:41:59 2025 GMT Subject: CN=6944d797-ad44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:e3:0f:63:ee:1f:49:f0:19:32:0d:19:6d: c6:c1:2b:8d:a4:59:c9:ad:0e:ba:ac:3c:ff:a5:87: c4:03:08:86:c7:15:9a:35:11:0c:8c:7b:9d:6e:6f: 87:03:29:16:7f:14:99:23:45:46:42:c1:d5:c1:06: e0:cd:53:c5:22:c5:30:ee:a9:0a:14:11:44:a0:19: 23:a5:e3:5b:25:eb:a0:0c:6a:26:6c:21:65:3f:83: 8c:e4:1c:bb:8c:8a:73:6e:0e:fc:e6:5f:e6:ea:d4: 06:66:22:74:80:7d:22:3b:c1:0f:3e:4c:b7:87:40: 7b:59:04:00:dc:39:0b:79:a0:f2:6a:53:20:2f:29: 12:6e:37:85:82:b5:2d:f7:93:e9:d7:28:63:7b:36: 54:0f:ae:b5:39:e7:b5:ed:df:77:a7:77:aa:97:e2: d7:62:c7:4b:4d:ba:d5:8f:bd:cf:6a:90:de:b6:90: c2:8e:22:3e:7b:a1:a8:82:11:77:60:62:f8:b1:61: db:03:a3:47:14:d7:19:fc:38:bc:53:21:4f:0c:71: 2c:5f:73:c2:87:13:99:ad:bf:98:d8:86:55:0b:5a: ef:e4:51:d5:dd:d7:9d:5b:c5:30:e7:83:0e:58:ad: f0:05:76:27:b2:67:42:1d:4a:84:80:ff:88:13:36: 94:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:02:86:FD:52:FB:76:32:47:AA:11:F1:87:83:85:87:FC:62:78:2E X509v3 Authority Key Identifier: keyid:DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:0d:5a:e4:94:21:d7:76:38:23:31:e5:45:56:92:bd:3e:99: d6:ef:d8:5e:25:7e:b7:03:07:63:3c:fc:a6:12:17:d0:fd:84: b0:b3:0b:8f:fb:e4:66:99:5a:3f:ce:24:d3:87:5c:35:eb:7f: 0d:fe:34:06:46:b9:8d:ec:2d:81:f5:2d:56:0b:ee:de:4b:d0: d4:de:24:3e:be:57:12:70:38:d5:b1:ca:37:1b:c7:8c:98:67: 6f:04:01:44:cc:c2:83:7b:3f:0c:4f:50:5a:c7:3f:69:df:db: 95:47:9c:d9:5f:f2:bb:1a:55:b4:44:f5:25:38:c0:ab:7b:45: 8b:ef:08:0f:09:7c:50:fa:8c:65:95:83:4a:46:4c:62:e8:86: d1:4f:74:3f:24:ba:21:25:0a:33:67:3a:30:ab:da:7f:b8:82: e8:21:62:e3:71:4b:9b:9d:31:15:6f:52:19:aa:6b:8c:ee:19: 6c:f3:af:38:91:a5:ac:ef:ab:a5:29:91:88:38:4b:3e:ea:e4: 05:e2:35:bd:90:24:ea:9c:6a:4e:45:68:72:59:2c:0b:d1:87: 76:ae:f0:3a:16:bc:72:29:27:d0:2b:ea:10:98:35:1a:a1:0e: b4:1f:c6:dd:ae:af:e7:7c:a7:4b:3e:04:aa:4a:63:9e:f4:08: 26:49:5c:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwRTMxMTAvBgNVBAUTKERCQzZGMjI1NkRERTVDMkM0NkE4MEVCMjQzMkYyNTcy RURDNTM3RDYwHhcNMjUxMjE5MDQ0MTU5WhcNMjUxMjI2MDQ0MTU5WjAYMRYwFAYD VQQDDA02OTQ0ZDc5Ny1hZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmjjD2PuH0nwGTINGW3GwSuNpFnJrQ66rDz/pYfEAwiGxxWaNREMjHudbm+H AykWfxSZI0VGQsHVwQbgzVPFIsUw7qkKFBFEoBkjpeNbJeugDGombCFlP4OM5By7 jIpzbg785l/m6tQGZiJ0gH0iO8EPPky3h0B7WQQA3DkLeaDyalMgLykSbjeFgrUt 95Pp1yhjezZUD661Oee17d93p3eql+LXYsdLTbrVj73PapDetpDCjiI+e6GoghF3 YGL4sWHbA6NHFNcZ/Di8UyFPDHEsX3PChxOZrb+Y2IZVC1rv5FHV3dedW8Uw54MO WK3wBXYnsmdCHUqEgP+IEzaUWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYChv1S +3YyR6oR8YeDhYf8YnguMB8GA1UdIwQYMBaAFNvG8iVt3lwsRqgOskMvJXLtxTfW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBFMy9CMzVBQjlGQThD N0UxMUVGOEU5MkU3MUJDNEY5QUUwMi8yOGJ5SlczZVhDeEdxQTZ5UXk4bGN1M0ZO OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4YnlKVzNlWEN4R3FBNnlReThsY3UzRk45WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDBFMy9CMzVBQjlGQThDN0UxMUVGOEU5MkU3MUJDNEY5QUUwMi8yOGJ5SlczZVhD eEdxQTZ5UXk4bGN1M0ZOOVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6DVrklCHXdjgjMeVFVpK9PpnW79heJX63AwdjPPymEhfQ/YSwswuP ++RmmVo/ziTTh1w1638N/jQGRrmN7C2B9S1WC+7eS9DU3iQ+vlcScDjVsco3G8eM mGdvBAFEzMKDez8MT1Baxz9p39uVR5zZX/K7GlW0RPUlOMCre0WL7wgPCXxQ+oxl lYNKRkxi6IbRT3Q/JLohJQozZzowq9p/uILoIWLjcUubnTEVb1IZqmuM7hls8684 kaWs76ulKZGIOEs+6uQF4jW9kCTqnGpORWhyWSwL0Yd2rvA6FrxyKSfQK+oQmDUa oQ60H8bdrq/nfKdLPgSqSmOe9AgmSVyE -----END CERTIFICATE-----Generated at Fri Dec 19 20:16:01 2025 by rpki-client