This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json) Hash identifier: yll7wp79b3PioubiFegP/YDVmNdMxO3hY+wGlY78TzM= Subject key identifier: 45:B8:A0:6A:BF:CF:74:03:21:40:CD:39:B8:10:FE:5C:F2:87:3F:3B Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 04B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft Manifest number: 04AE Signing time: Thu 18 Dec 2025 23:19:36 +0000 Manifest this update: Thu 18 Dec 2025 23:19:36 +0000 Manifest next update: Thu 25 Dec 2025 23:19:36 +0000 Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: BxehzCUcD1yGVcvdIP505ukb31mHtV3cixNx6FPMLQw=) 2: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (hash: r19jWUfm6ne9mMhoLOU3FQVzD9TqdTUiA0fmQoFhQKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Validity Not Before: Dec 18 23:19:36 2025 GMT Not After : Dec 25 23:19:36 2025 GMT Subject: CN=69448c08-5ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:f6:26:50:c8:1e:b6:22:93:eb:7b:fa:d5: d2:65:8e:1a:50:9d:32:c4:ba:da:49:75:a6:4f:61: 4e:57:92:c0:1c:51:20:23:14:2f:6e:2b:df:16:fe: d3:82:0e:cb:f6:17:48:9b:5d:03:0c:56:6b:38:5e: eb:fe:96:0e:56:80:75:88:c9:77:4c:2b:17:be:35: 4e:25:c9:1a:e8:af:10:fc:bd:8b:c2:b1:ec:5f:15: 3e:7b:34:a5:60:2c:1c:3f:43:08:47:b3:c2:4a:f6: 0a:b9:69:06:66:e5:7f:de:a5:5f:c8:b0:89:2b:0f: bc:4e:c2:53:72:d6:cd:fe:34:ee:d1:34:50:4e:33: aa:f6:94:0a:b8:ea:41:76:75:23:eb:aa:09:6f:0a: db:f6:60:2f:4d:50:f5:31:7a:15:e0:bc:9b:bf:50: 4e:d4:66:90:33:53:19:4e:5a:2e:2a:e8:9e:bf:76: c7:b5:89:4c:67:e1:c4:61:3a:5e:d4:b1:a5:9d:08: 1c:1d:d5:b0:28:54:7c:18:0a:34:5f:76:a3:57:89: dd:61:9a:e6:7c:f0:be:b9:65:b3:6c:1b:69:70:1d: ba:ea:fe:b3:28:e2:d2:68:91:fe:9e:ed:94:e0:46: 50:f0:22:55:1a:b3:dd:05:47:95:b7:66:66:79:f7: 84:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B8:A0:6A:BF:CF:74:03:21:40:CD:39:B8:10:FE:5C:F2:87:3F:3B X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3a:6b:88:85:98:87:0b:3c:6b:a7:95:83:a2:60:69:bd:54: e7:b5:06:3e:67:d1:43:5a:76:92:a6:b2:49:1b:c1:23:59:25: 70:de:51:6d:a2:b9:80:14:e3:c6:20:0e:bd:50:8c:10:09:93: f1:ca:e0:9e:54:5e:83:83:0a:72:41:a3:ec:49:15:6e:62:0f: 3e:57:ec:3f:54:02:bf:a1:e8:75:26:e6:27:d6:4e:f9:a4:09: d0:e7:8e:44:df:64:c6:6a:59:75:d0:71:9d:cd:b7:20:eb:31: d3:61:ba:ec:60:ba:70:99:6d:05:e1:75:bb:5b:2f:de:aa:b1: de:2f:38:2f:a7:b9:1e:88:65:2c:17:13:ac:3c:2e:1f:45:44: 35:14:06:be:cc:26:c0:0c:92:1b:64:24:7b:c6:11:b5:b6:4d: 83:a8:29:65:ec:c9:1a:67:dd:11:bd:4b:f0:30:11:be:91:52: 6b:6c:0c:ab:52:ac:64:10:12:01:25:e2:eb:98:75:4f:34:6e: 94:44:8b:7f:ac:41:d4:37:91:67:8c:a8:55:cd:d0:59:a0:55: 28:23:e6:3b:1e:34:b6:33:ff:e0:8e:e2:5a:ce:06:7d:2b:1b: 6c:ad:2a:90:c4:9a:3d:b3:ea:cf:dd:15:bc:b2:86:25:2f:6a: 2d:1a:85:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjUxMjE4MjMxOTM2WhcNMjUxMjI1MjMxOTM2WjAYMRYwFAYD VQQDDA02OTQ0OGMwOC01Y2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfr2JlDIHrYik+t7+tXSZY4aUJ0yxLraSXWmT2FOV5LAHFEgIxQvbivfFv7T gg7L9hdIm10DDFZrOF7r/pYOVoB1iMl3TCsXvjVOJcka6K8Q/L2LwrHsXxU+ezSl YCwcP0MIR7PCSvYKuWkGZuV/3qVfyLCJKw+8TsJTctbN/jTu0TRQTjOq9pQKuOpB dnUj66oJbwrb9mAvTVD1MXoV4Lybv1BO1GaQM1MZTlouKuiev3bHtYlMZ+HEYTpe 1LGlnQgcHdWwKFR8GAo0X3ajV4ndYZrmfPC+uWWzbBtpcB266v6zKOLSaJH+nu2U 4EZQ8CJVGrPdBUeVt2ZmefeE2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEW4oGq/ z3QDIUDNObgQ/lzyhz87MB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243 ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaOmuIhZiHCzxrp5WDomBpvVTntQY+Z9FDWnaSprJJG8EjWSVw3lFt ormAFOPGIA69UIwQCZPxyuCeVF6DgwpyQaPsSRVuYg8+V+w/VAK/oeh1JuYn1k75 pAnQ545E32TGall10HGdzbcg6zHTYbrsYLpwmW0F4XW7Wy/eqrHeLzgvp7keiGUs FxOsPC4fRUQ1FAa+zCbADJIbZCR7xhG1tk2DqCll7MkaZ90RvUvwMBG+kVJrbAyr UqxkEBIBJeLrmHVPNG6URIt/rEHUN5FnjKhVzdBZoFUoI+Y7HjS2M//gjuJazgZ9 KxtsrSqQxJo9s+rP3RW8soYlL2otGoVr -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:17 2025 by rpki-client