This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft File: rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json) Hash identifier: iCrt1r/TkBmG4JJodrbk8NU7q5ceZUCUaYCq9YLs6ts= Subject key identifier: FE:21:A0:81:28:23:FB:F8:47:35:F5:94:7B:57:89:59:8C:FD:73:D9 Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 Certificate issuer: /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft Manifest number: D2 Signing time: Fri 19 Dec 2025 04:48:27 +0000 Manifest this update: Fri 19 Dec 2025 04:48:27 +0000 Manifest next update: Fri 26 Dec 2025 04:48:27 +0000 Files and hashes: 1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: NtDKC9j8geEb0bsa31pUCq1brfRQffEqA7tLAaFHGH4=) 2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: R/R3bvAWrcSSG+m64YLueklpEnFBLTnh4IWHEsstmx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Validity Not Before: Dec 19 04:48:27 2025 GMT Not After : Dec 26 04:48:27 2025 GMT Subject: CN=6944d91b-c08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f1:a6:1f:e7:e1:63:58:53:a1:2e:99:52:86: d4:40:b6:e6:d8:95:22:0f:30:1f:10:8d:7c:26:02: 16:45:a8:63:74:19:19:8d:e7:5d:2c:8a:cb:a1:44: 9b:17:5a:5f:90:05:c1:cc:d2:c8:aa:03:3c:97:19: 88:e6:c8:43:e6:32:a9:b0:6f:db:ca:da:b6:96:9c: e6:44:f2:0e:84:1b:51:ce:9b:98:f5:0e:93:33:a6: 4b:53:eb:8c:d9:4f:8d:2a:90:c0:0b:74:7c:42:6d: 94:31:f5:e2:dd:0f:ec:53:99:dd:39:ca:31:ef:a6: 9c:b3:ac:cc:df:27:f2:4d:b1:75:c9:ac:6d:98:dc: 62:35:58:ac:65:8e:c3:d8:73:8c:3d:0b:7c:b0:ed: 60:2d:2a:9c:bd:bf:92:8e:bb:8a:2a:61:10:d6:ea: 63:8d:76:33:41:4b:67:2c:cf:a2:bb:f2:29:01:07: 17:4c:e3:09:fa:e5:91:45:be:c8:6f:a9:16:83:b1: 1d:eb:5e:83:e1:51:da:a9:45:9d:22:f4:d3:31:e1: 6a:8d:3c:bd:73:a3:23:d3:4e:43:e0:d1:2a:03:b0: 55:3e:58:f6:89:62:08:16:dc:15:a5:1a:fc:64:e3: 55:c5:16:87:b4:47:9d:e4:08:11:5e:07:35:14:bf: 10:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:21:A0:81:28:23:FB:F8:47:35:F5:94:7B:57:89:59:8C:FD:73:D9 X509v3 Authority Key Identifier: keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:bb:f3:22:70:4f:2d:d0:8d:9e:04:51:3b:64:d5:a1:b2:49: cb:ef:b1:d4:2d:e3:20:6f:b8:28:79:d2:6c:32:78:1f:17:bc: f0:de:e5:63:3f:ce:d4:9d:6b:3e:b3:02:a3:c7:01:60:0d:42: 75:ca:5b:28:38:8b:40:91:75:69:21:48:1e:59:fd:0d:8e:9f: b1:5c:d9:f4:1e:22:d2:6a:1a:84:01:77:1b:0e:87:7b:6d:a7: d2:fd:0f:2a:e7:ce:b4:b1:31:8b:d7:96:3e:31:cd:33:6f:bd: ec:26:00:29:d4:a5:69:1e:23:73:10:71:54:b8:72:63:8a:e1: e6:3c:63:c6:be:e9:bb:51:8a:e5:55:e5:c7:cd:da:da:72:ca: 15:9b:74:b4:d9:5c:e8:1c:23:57:b6:57:83:f3:ea:03:c0:8c: 80:9f:eb:fb:8a:87:35:21:c6:d2:8a:2d:49:5b:fb:2e:ba:9a: 8b:df:a2:89:f6:ed:b1:57:4f:c5:cf:6b:f7:ad:08:a3:51:1b: d9:76:2b:0e:fb:c4:51:f2:03:ff:80:66:c9:c2:96:ee:d4:51: e6:89:48:c6:b5:cc:50:ff:87:7b:fa:20:83:aa:7f:09:55:bd: b8:47:14:f2:57:27:5b:3d:05:51:b4:b9:1b:da:77:83:db:20: d6:03:fa:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBNDYxMTAvBgNVBAUTKEFDMjhEQzJBNTU0QjRFMzM5QTM5OUM5NjQyQjRDRTAy NjhBOERGQjAwHhcNMjUxMjE5MDQ0ODI3WhcNMjUxMjI2MDQ0ODI3WjAYMRYwFAYD VQQDDA02OTQ0ZDkxYi1jMDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PGmH+fhY1hToS6ZUobUQLbm2JUiDzAfEI18JgIWRahjdBkZjeddLIrLoUSb F1pfkAXBzNLIqgM8lxmI5shD5jKpsG/bytq2lpzmRPIOhBtRzpuY9Q6TM6ZLU+uM 2U+NKpDAC3R8Qm2UMfXi3Q/sU5ndOcox76acs6zM3yfyTbF1yaxtmNxiNVisZY7D 2HOMPQt8sO1gLSqcvb+SjruKKmEQ1upjjXYzQUtnLM+iu/IpAQcXTOMJ+uWRRb7I b6kWg7Ed616D4VHaqUWdIvTTMeFqjTy9c6Mj005D4NEqA7BVPlj2iWIIFtwVpRr8 ZONVxRaHtEed5AgRXgc1FL8QSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4hoIEo I/v4RzX1lHtXiVmM/XPZMB8GA1UdIwQYMBaAFKwo3CpVS04zmjmclkK0zgJoqN+w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE0Ni9EQkRBMkNDNDlD MTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRqT2FPWnlXUXJUT0FtaW8z N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDamNLbFZMVGpPYU9aeVdRclRPQW1pbzM3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE0Ni9EQkRBMkNDNDlDMTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRq T2FPWnlXUXJUT0FtaW8zN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAou/MicE8t0I2eBFE7ZNWhsknL77HULeMgb7goedJsMngfF7zw3uVj P87UnWs+swKjxwFgDUJ1ylsoOItAkXVpIUgeWf0Njp+xXNn0HiLSahqEAXcbDod7 bafS/Q8q5860sTGL15Y+Mc0zb73sJgAp1KVpHiNzEHFUuHJjiuHmPGPGvum7UYrl VeXHzdracsoVm3S02VzoHCNXtleD8+oDwIyAn+v7ioc1IcbSii1JW/suupqL36KJ 9u2xV0/Fz2v3rQijURvZdisO+8RR8gP/gGbJwpbu1FHmiUjGtcxQ/4d7+iCDqn8J Vb24RxTyVydbPQVRtLkb2neD2yDWA/r5 -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:01 2025 by rpki-client