This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json) Hash identifier: 0X6LXjQVhpPFwR1aNH4SAUGS2UeR3YoFme5AA4aMynM= Subject key identifier: 3D:54:4F:EA:FD:C9:BC:91:F8:3E:3E:D2:0B:89:D7:A7:0B:26:E4:B2 Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 139A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft Manifest number: 1339 Signing time: Fri 19 Dec 2025 04:14:21 +0000 Manifest this update: Fri 19 Dec 2025 04:14:20 +0000 Manifest next update: Fri 26 Dec 2025 04:14:20 +0000 Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: YhwQDV4H6U6xxqRpAxFO5poCcOcNEcjYr/Ahtsq1erU=) 2: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: JtAyYvcjsSIbHjMavRbf74w0IIhNg4IBABZJn0wcwzQ=) 3: 0F1831F8D64011F0B09E955FA6248E41.roa (hash: hYtEXW/iaGWJ5CAMMt+GChIgNUjP9csJ80/vIv3EQTU=) 4: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: DOUd4Ct4uA10KaiPoOZjeWOyNrfXwTZYgvv/v0X/i0Y=) 5: A65587CEDC8E11F084B8ABC03D6F56BC.roa (hash: JT6R5UcPylnieSp1rzG2Ha5fD/GJZdOtx+Vs3dIZPEY=) 6: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: tcTX6kZmqsdJd+B/8db69mDZUmsHPhGW4JI/hjxoyFM=) 7: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: pmGjv9e4kJuui8gahJeniJTVkFZxLqAkqBkutIyaUmM=) 8: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: 3fdnPO7nIXug6dYvzk2siFXVuDYGDIdJas3DCvUTWPA=) 9: DEF977A6E53611EB81682769C4F9AE02.roa (hash: SO0gHlbHvBD1Qdf3mOeX+9pYdaFRkZquUMH00OZSNZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5018 (0x139a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: Dec 19 04:14:20 2025 GMT Not After : Dec 26 04:14:20 2025 GMT Subject: CN=6944d11d-dc3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:82:78:51:4f:40:99:22:f2:14:ab:62:12:3e: 99:23:a2:81:f7:0c:ac:28:a0:58:b6:b3:83:79:4c: 94:46:2b:5b:ef:5d:a0:ad:1b:5c:70:fb:7c:09:59: 8e:1c:7f:61:51:a9:4d:d1:f0:8d:e4:16:ae:59:f5: 21:23:b9:b6:aa:05:fe:d7:2a:ea:37:ef:18:73:cf: 58:1f:87:44:be:c4:68:c0:24:02:c4:d0:45:ee:7a: 89:df:33:46:18:75:44:07:58:9d:7d:40:be:33:7b: 25:89:6f:c3:b9:39:75:e5:af:ed:b8:fa:5a:8d:3d: c8:de:95:c3:99:e7:56:1c:65:f0:ce:92:45:3d:1b: 38:98:b9:9a:af:79:ab:3e:42:fb:5e:e6:ea:b5:fa: 52:bf:54:d6:38:76:31:68:36:73:57:10:a0:4d:e1: 3b:b0:86:11:9b:81:b9:bd:50:37:2a:27:75:8b:00: 19:f2:ab:7f:98:1d:d4:9b:6e:59:44:dc:9a:35:00: cc:0a:76:b9:f8:73:7d:bc:ef:1b:00:4e:85:21:f6: 6a:2a:de:2b:aa:0d:10:c0:75:e5:f6:a8:62:7e:51: 25:80:23:85:d7:a3:dc:94:33:76:5a:c8:34:00:d1: 54:53:96:f2:4f:6b:6b:21:87:c5:df:11:09:13:4f: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:54:4F:EA:FD:C9:BC:91:F8:3E:3E:D2:0B:89:D7:A7:0B:26:E4:B2 X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:43:02:32:91:68:44:91:1a:5d:bb:9c:c3:3b:c9:57:a2:c8: 61:4d:85:33:a3:62:fc:57:4f:cd:5b:96:e5:89:49:43:aa:3d: ba:f4:63:15:8a:79:ff:b6:77:8c:75:a2:92:ca:d1:d2:6f:a5: aa:89:e8:1f:ed:b9:be:3b:f6:8c:67:fb:7b:87:06:77:ca:e1: 52:06:f5:a9:59:2b:ea:ff:87:46:72:c7:ad:2f:81:19:7c:bc: 62:1b:00:25:5e:3a:67:9c:7d:67:57:1e:00:c1:41:d5:8b:ca: 59:17:69:99:a7:b0:96:66:46:51:5a:54:2a:d0:00:5a:c5:a1: 7c:92:ba:9f:b3:d0:e2:56:87:05:5e:fa:08:6d:6a:01:75:40: 97:53:54:c5:25:c7:98:17:19:6d:77:9c:c1:ef:f5:6d:70:8f: 04:3d:e2:3d:a9:f1:e7:4b:dc:49:03:ae:85:91:91:c9:32:10: b9:56:47:55:19:2c:27:e7:85:6c:41:4c:ef:1f:55:c2:92:1f: b5:bf:1f:87:d3:3b:9c:bd:39:54:77:66:e7:bc:72:09:b1:8f: 02:ed:aa:c3:28:83:c0:70:fb:54:79:11:ba:f9:f2:f6:82:6e: 30:8a:ef:e5:4f:29:15:cd:3a:32:b5:dd:39:21:b3:08:12:96: 0d:dc:c7:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjUxMjE5MDQxNDIwWhcNMjUxMjI2MDQxNDIwWjAYMRYwFAYD VQQDDA02OTQ0ZDExZC1kYzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAioJ4UU9AmSLyFKtiEj6ZI6KB9wysKKBYtrODeUyURitb712grRtccPt8CVmO HH9hUalN0fCN5BauWfUhI7m2qgX+1yrqN+8Yc89YH4dEvsRowCQCxNBF7nqJ3zNG GHVEB1idfUC+M3sliW/DuTl15a/tuPpajT3I3pXDmedWHGXwzpJFPRs4mLmar3mr PkL7XubqtfpSv1TWOHYxaDZzVxCgTeE7sIYRm4G5vVA3Kid1iwAZ8qt/mB3Um25Z RNyaNQDMCna5+HN9vO8bAE6FIfZqKt4rqg0QwHXl9qhiflElgCOF16PclDN2Wsg0 ANFUU5byT2trIYfF3xEJE08sVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1UT+r9 ybyR+D4+0guJ16cLJuSyMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqQwIykWhEkRpdu5zDO8lXoshhTYUzo2L8V0/NW5bliUlDqj269GMV inn/tneMdaKSytHSb6Wqiegf7bm+O/aMZ/t7hwZ3yuFSBvWpWSvq/4dGcsetL4EZ fLxiGwAlXjpnnH1nVx4AwUHVi8pZF2mZp7CWZkZRWlQq0ABaxaF8krqfs9DiVocF XvoIbWoBdUCXU1TFJceYFxltd5zB7/VtcI8EPeI9qfHnS9xJA66FkZHJMhC5VkdV GSwn54VsQUzvH1XCkh+1vx+H0zucvTlUd2bnvHIJsY8C7arDKIPAcPtUeRG6+fL2 gm4wiu/lTykVzToytd05IbMIEpYN3Mf1 -----END CERTIFICATE-----Generated at Sat Dec 20 03:23:26 2025 by rpki-client