This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json) Hash identifier: NQGtnMx+7K/d/f/vtVc/hNqA6v/8qXk2APDYABAUh5g= Subject key identifier: C3:46:05:60:41:48:97:F0:D8:F6:33:2E:FE:78:E7:A8:9E:17:6A:43 Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Certificate serial: 04EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft Manifest number: 04E6 Signing time: Thu 18 Dec 2025 23:04:59 +0000 Manifest this update: Thu 18 Dec 2025 23:04:59 +0000 Manifest next update: Thu 25 Dec 2025 23:04:59 +0000 Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: p6kMPCzMQvFJ+ksB3WBLQfKSKh4zR7BYKT2pMahub38=) 2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: QrLrf2+brQr8pET8HlSnm9rXz817aY8992jkS8DLh64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1259 (0x4eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Validity Not Before: Dec 18 23:04:59 2025 GMT Not After : Dec 25 23:04:59 2025 GMT Subject: CN=6944889b-9145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:8d:1f:6b:96:4b:72:31:d4:c9:33:f3:af: 28:41:59:31:3a:38:1f:ec:5c:ad:0d:d1:4e:d1:44: b0:38:a7:be:99:6e:fa:e4:dd:f8:ba:95:14:da:7a: 52:5c:0e:9e:ac:93:77:00:4a:79:75:1c:57:9c:98: 5e:06:fd:4d:e9:78:aa:5d:8f:ab:52:53:93:84:df: b1:34:4c:3a:8b:d5:81:5e:66:29:cc:f5:f6:eb:64: cd:7d:01:3c:14:35:3b:c8:4b:98:64:6a:e5:bc:6c: b5:41:3c:83:11:36:11:1b:12:3e:d8:be:c4:2f:a8: df:54:34:63:94:9a:53:10:93:0c:72:5c:61:31:da: 8a:8f:fb:bb:7c:9c:75:6c:76:0f:99:f8:13:fc:18: 7b:57:39:5f:23:4e:61:fb:90:4f:bb:ca:aa:45:8e: 46:7a:e2:dd:20:5f:75:50:0b:50:2b:89:5e:41:f4: 44:f6:dd:44:7f:d5:61:b6:b9:ce:41:e0:63:76:aa: 31:5f:b7:99:3d:6a:09:82:78:b6:3a:6f:ae:ee:95: 00:27:4f:33:a2:03:b6:cd:8f:08:32:f8:04:ab:1a: 49:1d:40:6f:23:bc:61:fc:21:25:02:91:df:8d:c3: 7f:6b:79:1c:7f:dd:2e:37:d9:39:bc:9f:46:64:7e: bc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:46:05:60:41:48:97:F0:D8:F6:33:2E:FE:78:E7:A8:9E:17:6A:43 X509v3 Authority Key Identifier: keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3e:ac:ea:70:7c:e5:6f:1f:a8:dc:26:e5:6c:d4:7b:38:61: e1:00:0b:53:d9:dd:c0:02:96:2b:4e:25:b8:ea:aa:37:12:8b: 01:be:79:3c:a4:7b:1a:63:e2:0a:23:21:53:a8:16:cf:5c:dc: 7b:40:3b:34:57:4e:c3:9c:fb:7a:f7:26:67:91:ce:01:04:d8: 13:9f:10:c8:c7:40:b6:03:34:4c:30:f6:43:65:5e:45:d5:af: a4:65:d7:e6:62:9d:8b:9b:81:3f:b1:2a:96:25:75:b4:99:24: 9d:f8:e2:b5:24:12:19:7d:9b:79:44:bf:1a:a0:21:c1:cd:01: 53:46:af:48:c3:85:41:bd:9e:a4:13:57:9f:c9:11:e8:31:5f: 97:65:ae:6c:c9:7c:45:9a:bf:e4:ac:89:57:ad:80:34:77:bc: 9d:d3:4f:2f:09:e7:e1:12:71:c2:1d:f3:ff:90:3d:db:91:b4: 00:21:f4:b3:7f:d2:2b:b9:f7:0c:29:b6:44:56:02:1e:d5:89: 1b:f4:c4:05:fd:78:27:2a:fd:bd:62:01:5b:83:55:0a:da:1c: 37:d8:50:62:a4:67:26:1c:9d:39:b8:9e:71:7c:bc:2d:77:4b: 74:d1:1a:6f:50:81:b6:d5:22:24:9d:91:0c:0b:0f:47:a8:29: a1:fb:db:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4 MjE4NTI1MTkwHhcNMjUxMjE4MjMwNDU5WhcNMjUxMjI1MjMwNDU5WjAYMRYwFAYD VQQDDA02OTQ0ODg5Yi05MTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlGNH2uWS3Ix1Mkz868oQVkxOjgf7FytDdFO0USwOKe+mW765N34upUU2npS XA6erJN3AEp5dRxXnJheBv1N6XiqXY+rUlOThN+xNEw6i9WBXmYpzPX262TNfQE8 FDU7yEuYZGrlvGy1QTyDETYRGxI+2L7EL6jfVDRjlJpTEJMMclxhMdqKj/u7fJx1 bHYPmfgT/Bh7VzlfI05h+5BPu8qqRY5GeuLdIF91UAtQK4leQfRE9t1Ef9VhtrnO QeBjdqoxX7eZPWoJgni2Om+u7pUAJ08zogO2zY8IMvgEqxpJHUBvI7xh/CElApHf jcN/a3kcf90uN9k5vJ9GZH68ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNGBWBB SJfw2PYzLv5456ieF2pDMB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuPqzqcHzlbx+o3CblbNR7OGHhAAtT2d3AApYrTiW46qo3EosBvnk8 pHsaY+IKIyFTqBbPXNx7QDs0V07DnPt69yZnkc4BBNgTnxDIx0C2AzRMMPZDZV5F 1a+kZdfmYp2Lm4E/sSqWJXW0mSSd+OK1JBIZfZt5RL8aoCHBzQFTRq9Iw4VBvZ6k E1efyRHoMV+XZa5syXxFmr/krIlXrYA0d7yd008vCefhEnHCHfP/kD3bkbQAIfSz f9IrufcMKbZEVgIe1Ykb9MQF/XgnKv29YgFbg1UK2hw32FBipGcmHJ05uJ5xfLwt d0t00RpvUIG21SIknZEMCw9HqCmh+9vd -----END CERTIFICATE-----Generated at Fri Dec 19 18:57:40 2025 by rpki-client