This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft File: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft (raw, json) Hash identifier: LfG7+FDOOTm8TcLF95udabTXwmfcSyFZHMp4Hre6IHk= Subject key identifier: 4F:CC:FE:29:E7:03:3E:AD:40:76:50:F1:CB:0F:E8:96:5B:C0:98:09 Authority key identifier: 72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A Certificate issuer: /CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Certificate serial: 0E0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft Manifest number: 0E04 Signing time: Thu 18 Dec 2025 17:38:08 +0000 Manifest this update: Thu 18 Dec 2025 17:38:08 +0000 Manifest next update: Thu 25 Dec 2025 17:38:08 +0000 Files and hashes: 1: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl (hash: GC+Af1SDP7WBOehaw9LYDaEdhTsSrQEQS5mubzIus50=) 2: BB691FBE889111F09BDDFE1FC4F9AE02.roa (hash: aKZ0y3YUDBGFQDJs+f2mX7us+zy68CusueX6j6aIKeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3598 (0xe0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D010, serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Validity Not Before: Dec 18 17:38:08 2025 GMT Not After : Dec 25 17:38:08 2025 GMT Subject: CN=69443c00-fb88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8c:8f:83:58:9b:3e:2a:77:c3:fc:37:ec:e6: 0f:02:11:a6:1e:35:2f:68:65:cc:b8:97:56:9e:6c: 46:f7:ef:5e:98:63:8b:67:ab:26:d1:87:d9:d7:d0: e1:e4:97:28:d1:7a:75:b6:f6:df:0a:60:62:dc:76: 1a:e1:7c:40:d9:b6:39:8a:49:9e:0c:ab:d7:06:72: 9a:6a:11:3c:a7:1d:f1:01:c6:46:0e:77:fc:22:1c: cc:4b:75:be:d0:04:62:9f:a2:97:58:59:2e:ce:80: 29:d0:4b:49:ce:64:eb:8e:ff:e4:7c:6e:da:09:52: 2e:f4:15:0d:01:bb:23:30:6d:7e:e2:dc:f4:61:e2: 8d:cf:6f:a7:24:0e:b9:79:00:d0:49:af:32:7f:c3: 95:21:7c:cb:75:53:18:c3:50:e5:21:23:f1:a0:f9: ad:44:1f:df:ae:a8:9a:12:f2:75:f4:eb:4f:a3:8b: f9:20:f2:16:ff:f4:38:5f:7b:db:0d:63:86:50:08: d9:04:c8:6c:53:12:10:dd:69:01:54:c4:e7:2e:52: e2:af:57:d9:b4:12:58:05:4e:8b:a3:37:78:cf:ec: 5b:fc:45:6c:60:29:16:e0:90:e0:5b:b7:29:73:b3: b2:24:aa:ac:68:83:bf:89:c3:32:0c:74:1f:e5:ee: b1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CC:FE:29:E7:03:3E:AD:40:76:50:F1:CB:0F:E8:96:5B:C0:98:09 X509v3 Authority Key Identifier: keyid:72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d9:1a:94:a4:45:3e:b4:f9:fc:71:11:fd:1a:fd:53:67:6e: 3a:25:6e:2e:4a:c8:7d:bc:a6:fa:6c:ce:a2:fd:2d:68:27:6d: 9d:3e:97:61:db:96:d8:6e:ea:68:4a:cf:36:ed:8b:72:1e:2b: 0e:c8:64:ef:22:9e:11:f6:67:57:c9:2a:ad:bd:8f:b0:e1:8f: bc:34:a5:5d:62:4d:37:e5:40:9d:b2:08:fa:8a:7e:39:da:9e: 49:46:42:c9:59:f7:87:dd:af:6b:8b:ae:cc:fe:3c:6e:f6:5f: 40:51:10:1f:2c:7c:b0:91:50:2c:ca:d7:c8:65:18:cc:d7:8c: 1c:16:fe:e1:23:0b:31:c0:f6:07:83:0f:12:79:4d:dc:14:8f: 7a:c0:d9:c3:9f:72:16:4b:49:6f:49:ad:a8:69:e4:ed:6b:4a: 61:d2:b5:ae:1e:85:72:d2:7c:bd:ec:c7:75:c4:59:15:6d:8b: 02:bc:17:67:f0:a8:01:d0:b6:72:93:b2:95:4a:2a:c1:27:a1: 47:97:5e:0d:ac:4a:74:b1:c8:73:96:b5:db:42:71:7e:74:33: 06:5f:f6:87:71:9c:73:9b:d8:f1:38:63:bb:f1:e9:d1:54:70: e1:b2:25:ab:5e:ef:27:be:fe:30:f1:33:a4:8f:ae:b4:24:39: 6a:3b:ee:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwMTAxMTAvBgNVBAUTKDcyMjE3OEQ1OTFEOTg1OTY4OUU0QjkyRjJEMEM4N0ZB NDdFMzVFMEEwHhcNMjUxMjE4MTczODA4WhcNMjUxMjI1MTczODA4WjAYMRYwFAYD VQQDDA02OTQ0M2MwMC1mYjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4yPg1ibPip3w/w37OYPAhGmHjUvaGXMuJdWnmxG9+9emGOLZ6sm0YfZ19Dh 5Jco0Xp1tvbfCmBi3HYa4XxA2bY5ikmeDKvXBnKaahE8px3xAcZGDnf8IhzMS3W+ 0ARin6KXWFkuzoAp0EtJzmTrjv/kfG7aCVIu9BUNAbsjMG1+4tz0YeKNz2+nJA65 eQDQSa8yf8OVIXzLdVMYw1DlISPxoPmtRB/frqiaEvJ19OtPo4v5IPIW//Q4X3vb DWOGUAjZBMhsUxIQ3WkBVMTnLlLir1fZtBJYBU6Lozd4z+xb/EVsYCkW4JDgW7cp c7OyJKqsaIO/icMyDHQf5e6xMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/M/inn Az6tQHZQ8csP6JZbwJgJMB8GA1UdIwQYMBaAFHIheNWR2YWWieS5Ly0Mh/pH414K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAxMC81N0I3NjcxQUMy MUMxMUU5ODRBMTVEMTJDNEY5QUUwMi9jaUY0MVpIWmhaYUo1TGt2TFF5SC1rZmpY Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NpRjQxWkhaaFphSjVMa3ZMUXlILWtmalhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDAxMC81N0I3NjcxQUMyMUMxMUU5ODRBMTVEMTJDNEY5QUUwMi9jaUY0MVpIWmha YUo1TGt2TFF5SC1rZmpYZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL2RqUpEU+tPn8cRH9Gv1TZ246JW4uSsh9vKb6bM6i/S1oJ22dPpdh 25bYbupoSs827YtyHisOyGTvIp4R9mdXySqtvY+w4Y+8NKVdYk035UCdsgj6in45 2p5JRkLJWfeH3a9ri67M/jxu9l9AURAfLHywkVAsytfIZRjM14wcFv7hIwsxwPYH gw8SeU3cFI96wNnDn3IWS0lvSa2oaeTta0ph0rWuHoVy0ny97Md1xFkVbYsCvBdn 8KgB0LZyk7KVSirBJ6FHl14NrEp0schzlrXbQnF+dDMGX/aHcZxzm9jxOGO78enR VHDhsiWrXu8nvv4w8TOkj660JDlqO+6l -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:38 2025 by rpki-client