This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json) Hash identifier: gyKb4jz2jyYdLufXahnPXBRuRf/QC+AhLh8ZwFAC+/g= Subject key identifier: 44:85:43:CF:64:81:65:B2:CF:8E:7C:5F:9B:0F:80:C6:CF:F2:47:C9 Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft Manifest number: 01A7 Signing time: Sun 21 Dec 2025 03:35:26 +0000 Manifest this update: Sun 21 Dec 2025 03:35:26 +0000 Manifest next update: Sun 28 Dec 2025 03:35:26 +0000 Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: QQFrdzgjLE2zC1ZKiUxKVu1YnK4bqFv4bJnu4IyxYVw=) 2: 8F4855FA719D11EF89D9262FC4F9AE02.roa (hash: PwrdrhDZAUvpoeswVRlW4enrKnpklIZJadw0mW5Czq0=) 3: 68BCC70EBD2D11F086C1B125C4F9AE02.roa (hash: qFy+PfRK0ljik7CZvuqMAh56bKlP5ErsYf4UfvP1xJQ=) 4: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: nBxiatkIvna62kGHJDpRTxWGzVu/8J7M6fdEO+/Y3Ws=) 5: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: 7e1bIIpY60NREKCU3ueEl2g/koitX0hrLn6cquJbTFo=) 6: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: 4jQKo5E0XfC+Bh102tpwq0SPDRbmpx2RDfSXwme/Vtk=) 7: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: M7jRTXUUxsXllPmDL18I1jFn9NqYlH0GKE7w5Dxvhe0=) 8: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: XpEdNMaKGtUEN6hIgRHzqxQfHq0kQwSpdYHVdb7TK5A=) 9: D1825C02598911F0848EA472C4F9AE02.roa (hash: 6FiZKuLIgUtIYIA1D6XNL/A4ah2P8QXaPUVRBeti7CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Dec 21 03:35:26 2025 GMT Not After : Dec 28 03:35:26 2025 GMT Subject: CN=69476afe-e130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:97:44:40:07:28:1d:61:20:c7:50:d6:64:44: 48:b0:74:fe:28:23:69:1b:79:8b:8d:e7:0f:d0:9c: 84:d8:e3:4d:84:98:b1:63:34:41:3c:ea:ee:b2:eb: ad:39:0c:37:99:a5:0a:1b:0b:d2:e3:c0:24:d7:6f: 50:8c:b5:71:5e:10:42:8c:0e:16:59:2c:5f:cd:96: a0:a4:88:06:03:7d:93:99:c1:90:04:83:be:29:95: 2f:4a:b7:65:83:7d:ec:dd:22:02:c2:ac:ce:bb:b2: 86:7f:b2:53:b9:51:b0:cf:40:06:b8:d7:7b:89:85: 8c:b7:aa:de:17:01:ae:61:59:af:aa:42:5b:66:e7: a1:20:6d:a4:26:c2:fb:19:04:72:e9:d4:cd:06:67: 43:bb:1f:73:d3:be:c2:82:24:81:91:02:72:ad:79: 7d:ae:9b:dd:54:ec:ef:af:36:29:ae:5e:c3:6e:f2: e2:45:c2:0e:b3:c0:18:be:bb:83:8b:b8:51:e4:bf: 0b:53:31:51:25:c5:08:d6:25:54:f2:69:c1:fb:3f: a4:50:99:1f:c6:44:06:a9:df:46:e7:f2:f2:4a:7d: bc:8f:01:f3:8a:4e:39:39:b8:70:a2:55:a5:ef:f3: 3e:c7:cc:17:25:46:f9:60:72:a5:1b:12:a1:15:8b: 65:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:85:43:CF:64:81:65:B2:CF:8E:7C:5F:9B:0F:80:C6:CF:F2:47:C9 X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:56:a8:ca:04:82:05:1f:05:4f:26:5f:4f:79:00:f6:f8:64: cc:63:8e:8e:b6:c0:e2:46:80:e0:54:0c:a2:8d:21:68:d7:a3: f4:5e:b2:73:8a:96:62:e5:5c:43:9c:ae:f3:38:90:83:82:a4: 2c:e4:5a:29:25:3d:ee:8c:da:08:45:7f:f4:33:ef:10:ed:48: 5e:de:cd:b6:81:82:b3:39:24:2f:22:d7:a1:35:21:2e:d3:2d: 97:aa:ce:79:64:34:09:bd:b0:b3:e8:f9:e9:1b:77:89:80:e1: 0b:e0:ce:4c:33:c0:b9:6a:6b:1c:98:21:64:4d:3a:b6:0c:5e: 9e:70:8f:ee:42:47:3f:30:ee:8d:32:b6:fc:71:73:87:f6:6d: 9a:47:c1:7f:bd:a1:85:fd:68:6c:dc:bc:de:ff:e4:15:43:81: 6d:1d:b6:1e:88:2e:83:7f:0f:18:4e:12:6d:ec:98:79:cb:cd: 95:aa:2d:d8:e1:e9:30:ad:da:85:1a:de:d9:9c:80:1e:d1:4b: e3:fa:48:7b:b4:9e:27:7e:05:c9:7f:e9:a0:2d:6d:e6:b4:a5: 4f:14:34:eb:94:8a:90:ce:2d:a3:a5:42:c7:69:f9:6a:95:db: 9a:2d:98:e2:4e:ba:fe:82:43:cd:b9:e2:c0:d3:68:c1:24:fb: 76:7f:22:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjUxMjIxMDMzNTI2WhcNMjUxMjI4MDMzNTI2WjAYMRYwFAYD VQQDDA02OTQ3NmFmZS1lMTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZdEQAcoHWEgx1DWZERIsHT+KCNpG3mLjecP0JyE2ONNhJixYzRBPOrusuut OQw3maUKGwvS48Ak129QjLVxXhBCjA4WWSxfzZagpIgGA32TmcGQBIO+KZUvSrdl g33s3SICwqzOu7KGf7JTuVGwz0AGuNd7iYWMt6reFwGuYVmvqkJbZuehIG2kJsL7 GQRy6dTNBmdDux9z077CgiSBkQJyrXl9rpvdVOzvrzYprl7DbvLiRcIOs8AYvruD i7hR5L8LUzFRJcUI1iVU8mnB+z+kUJkfxkQGqd9G5/LySn28jwHzik45ObhwolWl 7/M+x8wXJUb5YHKlGxKhFYtlkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESFQ89k gWWyz458X5sPgMbP8kfJMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4 SVZwSjVDZnhyblFBMTRpX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAVqjKBIIFHwVPJl9PeQD2+GTMY46OtsDiRoDgVAyijSFo16P0XrJz ipZi5VxDnK7zOJCDgqQs5FopJT3ujNoIRX/0M+8Q7Uhe3s22gYKzOSQvItehNSEu 0y2Xqs55ZDQJvbCz6PnpG3eJgOEL4M5MM8C5amscmCFkTTq2DF6ecI/uQkc/MO6N Mrb8cXOH9m2aR8F/vaGF/Whs3Lze/+QVQ4FtHbYeiC6Dfw8YThJt7Jh5y82Vqi3Y 4ekwrdqFGt7ZnIAe0Uvj+kh7tJ4nfgXJf+mgLW3mtKVPFDTrlIqQzi2jpULHaflq lduaLZjiTrr+gkPNueLA02jBJPt2fyIa -----END CERTIFICATE-----Generated at Sun Dec 21 07:45:52 2025 by rpki-client