This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json) Hash identifier: pzDAmZwM26+4/Dp87CocldA8xDugiGC9VyqDgBf7i2I= Subject key identifier: B8:FE:3A:6D:8B:BD:E3:5C:E5:16:39:17:71:15:7A:B9:56:8E:26:50 Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Certificate serial: 069C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft Manifest number: 0685 Signing time: Thu 18 Dec 2025 21:54:01 +0000 Manifest this update: Thu 18 Dec 2025 21:54:00 +0000 Manifest next update: Thu 25 Dec 2025 21:54:00 +0000 Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: sY9zLj9I0SQvJQ8D3ZAsSw/0/eM2o3tO59NyayiebAc=) 2: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: Gp+VrNNQKJoE7nZhj+fgxNCDM9H0dRu0kS108OiQiRY=) 3: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: k5QsNW2UHXx3nyL0zXl6ErEpAH+UnqW9IYvw+MU5620=) 4: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: m0D2GQEuEloT+9a5hd4XJIXteBt7D/lUYhm6KRzzdn0=) 5: 68219776A41311EBBF911855C4F9AE02.roa (hash: d0b5vUBWzMm2pz0E2OMmgEy+tuggoWEtsruTL8xevaE=) 6: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: IsFTUXxsw7oP6sOsJZN0fFgsJ2mQPRr349bOV7EbeEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Validity Not Before: Dec 18 21:54:00 2025 GMT Not After : Dec 25 21:54:00 2025 GMT Subject: CN=694477f9-f350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:78:88:9a:bd:1a:b7:7c:97:3e:5f:e5:6f: 34:5b:41:10:02:84:b9:79:3b:92:7d:7f:61:ad:e3: 05:e9:88:30:41:ba:ae:10:d9:fb:6b:ff:6a:3e:fe: 09:8e:f9:37:38:c5:00:b7:d2:c4:04:77:93:20:de: 3f:49:0d:c2:ba:9c:56:60:ab:e8:4e:66:63:f2:93: a1:ed:45:02:b7:77:29:9a:7b:da:8f:ca:9f:e8:86: 76:32:c6:09:b8:23:b4:e3:c8:bb:f1:f9:b8:4e:5c: 96:9e:c8:15:ed:4c:33:28:89:f0:8a:85:74:8d:e3: 1f:8a:2b:62:62:e2:bd:55:e8:36:a4:f4:06:f2:d5: 04:7b:5f:e5:91:f5:12:3c:91:a5:66:95:14:f2:b1: 4b:cc:d0:bc:b2:5e:94:d9:54:96:28:43:e0:7b:f3: 3e:33:0d:f2:0b:dd:7a:e4:16:ea:ee:0d:14:a7:d5: 2e:19:b2:37:35:ed:3b:a5:56:f6:04:e3:6b:03:01: 5c:e8:d6:60:a5:d1:fb:16:77:b5:8f:d1:f0:d9:78: 27:41:f6:00:f5:08:ed:c4:3c:ef:b0:5c:a9:36:aa: 92:2f:87:07:50:93:23:4d:db:d4:89:d1:ad:29:9a: fd:15:21:fa:4e:32:3b:20:56:a3:98:04:81:2b:96: 1a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FE:3A:6D:8B:BD:E3:5C:E5:16:39:17:71:15:7A:B9:56:8E:26:50 X509v3 Authority Key Identifier: keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:39:8a:7f:e6:d0:8e:ff:bf:4c:d4:e8:78:11:e1:b3:44:c4: 69:2b:82:4a:29:54:ed:65:08:77:68:32:48:bf:b1:2e:62:ab: c1:a5:c0:1d:ac:4b:c0:c7:0b:47:19:e3:c0:71:f1:02:4f:47: 26:f7:90:d1:24:02:93:7c:d6:7e:97:75:ce:6a:3f:d0:5c:40: b0:e4:dd:48:93:c1:65:a0:1f:3f:75:2f:70:3a:c2:fc:95:e4: 45:c4:35:69:4d:92:18:17:36:a4:60:04:08:3e:88:e9:d8:c9: 4f:0a:1e:ff:83:8e:6e:9c:09:a9:c7:a4:35:07:83:65:70:c1: a9:55:83:5a:9b:24:85:29:75:d6:4c:79:5b:14:18:40:7b:bb: 65:c4:29:03:fc:bd:de:38:14:2e:29:0c:6f:b9:49:89:7f:67: 51:c9:3a:80:9a:03:8f:0f:87:3a:a3:b6:0d:f8:7a:1f:86:42: c6:d6:b2:a2:ab:fb:9b:6c:f9:49:4f:95:79:99:0c:17:35:6f: 01:5d:96:38:18:ba:ad:28:6c:b1:52:71:7a:90:d0:fc:82:71: d0:dc:12:e8:6c:ce:ad:85:66:8a:5e:0d:80:4d:0e:8e:1e:4f: a6:2f:6f:cd:51:9d:44:82:fd:ed:6e:4a:54:b8:10:f8:3b:09: 15:7c:ea:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz MzIwODJDNTkwHhcNMjUxMjE4MjE1NDAwWhcNMjUxMjI1MjE1NDAwWjAYMRYwFAYD VQQDDA02OTQ0NzdmOS1mMzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoR4iJq9Grd8lz5f5W80W0EQAoS5eTuSfX9hreMF6YgwQbquENn7a/9qPv4J jvk3OMUAt9LEBHeTIN4/SQ3CupxWYKvoTmZj8pOh7UUCt3cpmnvaj8qf6IZ2MsYJ uCO048i78fm4TlyWnsgV7UwzKInwioV0jeMfiitiYuK9Veg2pPQG8tUEe1/lkfUS PJGlZpUU8rFLzNC8sl6U2VSWKEPge/M+Mw3yC9165Bbq7g0Up9UuGbI3Ne07pVb2 BONrAwFc6NZgpdH7Fne1j9Hw2XgnQfYA9QjtxDzvsFypNqqSL4cHUJMjTdvUidGt KZr9FSH6TjI7IFajmASBK5YaGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLj+Om2L veNc5RY5F3EVerlWjiZQMB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRBMy82RDYyQzhDNEEwNDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQ dEVRa1dEMzBTa2N6SUlMRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVOYp/5tCO/79M1Oh4EeGzRMRpK4JKKVTtZQh3aDJIv7EuYqvBpcAd rEvAxwtHGePAcfECT0cm95DRJAKTfNZ+l3XOaj/QXECw5N1Ik8FloB8/dS9wOsL8 leRFxDVpTZIYFzakYAQIPojp2MlPCh7/g45unAmpx6Q1B4NlcMGpVYNamySFKXXW THlbFBhAe7tlxCkD/L3eOBQuKQxvuUmJf2dRyTqAmgOPD4c6o7YN+HofhkLG1rKi q/ubbPlJT5V5mQwXNW8BXZY4GLqtKGyxUnF6kND8gnHQ3BLobM6thWaKXg2ATQ6O Hk+mL2/NUZ1Egv3tbkpUuBD4OwkVfOon -----END CERTIFICATE-----Generated at Sat Dec 20 21:51:33 2025 by rpki-client