This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft File: DeK2pi5UoKYbzzFLbi77jzoeOno.mft (raw, json) Hash identifier: 4MVPA/IcZLR35NHpYaILHmjKhADLe5KuHhRmpKIz4pk= Subject key identifier: 81:9A:A0:57:46:EF:EA:52:CF:14:53:AF:0B:13:70:36:4F:2E:79:44 Authority key identifier: 0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A Certificate issuer: /CN=A916F8DB/serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft Manifest number: 01A8 Signing time: Sun 21 Dec 2025 02:29:42 +0000 Manifest this update: Sun 21 Dec 2025 02:29:41 +0000 Manifest next update: Sun 28 Dec 2025 02:29:41 +0000 Files and hashes: 1: DeK2pi5UoKYbzzFLbi77jzoeOno.crl (hash: s+gK6JkACyNJj6I1gluBADSYCIq7nTyrNg1gsWuv+bg=) 2: 65A459FE54BD11EE8C958973C4F9AE02.roa (hash: Kd/nXe8mq0wmUKWwg1yucncDr8Tch9j71lYTXhPxM0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F8DB, serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Validity Not Before: Dec 21 02:29:41 2025 GMT Not After : Dec 28 02:29:41 2025 GMT Subject: CN=69475b96-e346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:be:f9:6c:a1:3f:e2:ff:27:e8:e9:13:f0: 49:06:db:f7:4b:17:b1:df:9e:43:76:86:a7:8a:c9: 5d:56:da:8e:8a:d3:15:c9:4c:58:95:20:c4:73:b3: b7:75:59:df:a3:c3:5b:87:11:98:de:d5:76:09:e0: 04:79:18:05:a1:c6:6b:3e:2b:62:f0:25:93:28:74: c1:2a:e8:a1:76:88:46:f0:69:33:dd:01:9a:c3:31: 41:82:12:9d:89:7e:da:ae:8e:cb:27:f6:f8:87:ff: f0:58:b3:bb:85:e4:ee:eb:60:23:80:11:4c:62:fe: f8:3d:64:2f:17:e0:91:1e:96:e7:ef:dd:4e:2c:31: d7:c1:5c:dd:88:a0:17:07:5e:7d:d0:3d:a2:0b:7b: 8d:43:1e:b6:0c:83:2d:bb:19:90:ce:21:6c:1b:72: 6d:d7:ab:f5:53:90:c7:c0:db:73:ea:14:4c:1c:2d: 15:d1:d9:22:ec:ef:80:9e:b6:e4:db:42:40:8d:2b: 60:c5:d7:db:d0:bf:16:95:04:f7:17:e4:b6:5f:0c: 1b:3a:ae:1d:03:2c:42:54:51:07:1b:61:40:42:94: 3c:75:e7:dc:49:13:37:94:37:6a:63:39:8f:af:7d: 0c:3b:35:71:0f:83:fd:41:de:d4:c0:69:30:22:8b: ad:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9A:A0:57:46:EF:EA:52:CF:14:53:AF:0B:13:70:36:4F:2E:79:44 X509v3 Authority Key Identifier: keyid:0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:25:3c:72:45:e5:8b:dd:25:9f:46:cc:0c:a0:17:28:14:fd: 16:4d:e1:63:f4:96:9a:da:08:6e:ed:c1:61:41:76:73:b2:2e: 63:c0:c9:3f:f2:f0:8d:e6:44:86:f4:fc:2d:47:0d:de:4d:3d: c4:a5:9f:d4:ff:a3:fb:00:cc:2e:42:dd:af:ad:2b:fe:37:96: 39:f1:4f:a3:b6:6a:d6:5e:c5:13:44:04:23:78:12:e4:77:36: b7:c8:64:f3:07:0a:23:c9:00:df:c5:55:38:d1:fd:e8:da:e1: d5:86:6b:72:cb:ac:c9:ed:93:e7:d4:01:b5:2d:85:d5:5f:0b: f6:f5:4f:9d:67:68:e4:e5:e9:66:c2:58:84:cb:70:35:5c:fd: 46:a4:52:5f:50:54:59:62:52:82:6e:74:f7:8f:f6:07:8e:cc: 54:28:a8:4b:bf:79:3d:7e:a5:5b:2a:0e:d6:80:fe:9d:1b:7f: 3e:ca:2d:82:3e:bf:9c:40:e3:ab:9d:e0:f5:ab:60:e6:2b:e8: f6:63:31:f0:81:a8:bd:f2:df:09:ee:78:d0:44:14:c7:e1:72: 62:0a:fc:33:e0:b3:06:a7:d2:07:f5:08:97:7c:b5:9c:75:de: e1:fd:d7:ea:97:2f:5c:bf:92:97:8b:af:b4:23:78:1e:e8:25: db:b1:6c:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY4REIxMTAvBgNVBAUTKDBERTJCNkE2MkU1NEEwQTYxQkNGMzE0QjZFMkVGQjhG M0ExRTNBN0EwHhcNMjUxMjIxMDIyOTQxWhcNMjUxMjI4MDIyOTQxWjAYMRYwFAYD VQQDDA02OTQ3NWI5Ni1lMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOi++WyhP+L/J+jpE/BJBtv3Sxex355DdoanisldVtqOitMVyUxYlSDEc7O3 dVnfo8NbhxGY3tV2CeAEeRgFocZrPiti8CWTKHTBKuihdohG8Gkz3QGawzFBghKd iX7aro7LJ/b4h//wWLO7heTu62AjgBFMYv74PWQvF+CRHpbn791OLDHXwVzdiKAX B1590D2iC3uNQx62DIMtuxmQziFsG3Jt16v1U5DHwNtz6hRMHC0V0dki7O+Anrbk 20JAjStgxdfb0L8WlQT3F+S2XwwbOq4dAyxCVFEHG2FAQpQ8defcSRM3lDdqYzmP r30MOzVxD4P9Qd7UwGkwIout5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGaoFdG 7+pSzxRTrwsTcDZPLnlEMB8GA1UdIwQYMBaAFA3itqYuVKCmG88xS24u+486Hjp6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjhEQi82QzhCQjg2MjU0 QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9LWWJ6ekZMYmk3N2p6b2VP bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlSzJwaTVVb0tZYnp6RkxiaTc3anpvZU9uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjhEQi82QzhCQjg2MjU0QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9L WWJ6ekZMYmk3N2p6b2VPbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEJTxyReWL3SWfRswMoBcoFP0WTeFj9Jaa2ghu7cFhQXZzsi5jwMk/ 8vCN5kSG9PwtRw3eTT3EpZ/U/6P7AMwuQt2vrSv+N5Y58U+jtmrWXsUTRAQjeBLk dza3yGTzBwojyQDfxVU40f3o2uHVhmtyy6zJ7ZPn1AG1LYXVXwv29U+dZ2jk5elm wliEy3A1XP1GpFJfUFRZYlKCbnT3j/YHjsxUKKhLv3k9fqVbKg7WgP6dG38+yi2C Pr+cQOOrneD1q2DmK+j2YzHwgai98t8J7njQRBTH4XJiCvwz4LMGp9IH9QiXfLWc dd7h/dfqly9cv5KXi6+0I3ge6CXbsWyU -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:31 2025 by rpki-client