This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft File: DeK2pi5UoKYbzzFLbi77jzoeOno.mft (raw, json) Hash identifier: eO+bCu3nWhLgMdDX7zs0E+m0cASNBOyVFusean86jZ0= Subject key identifier: 50:83:8E:21:29:94:64:15:DE:8F:08:92:9D:7D:44:C8:6D:4B:D6:2A Authority key identifier: 0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A Certificate issuer: /CN=A916F8DB/serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft Manifest number: 01AB Signing time: Sat 27 Dec 2025 02:14:59 +0000 Manifest this update: Sat 27 Dec 2025 02:14:59 +0000 Manifest next update: Sat 03 Jan 2026 02:14:59 +0000 Files and hashes: 1: DeK2pi5UoKYbzzFLbi77jzoeOno.crl (hash: RNGzPt3OWorpxki9W1oV0Ls4YV8PdDoY28NdtpiMuUk=) 2: 65A459FE54BD11EE8C958973C4F9AE02.roa (hash: Kd/nXe8mq0wmUKWwg1yucncDr8Tch9j71lYTXhPxM0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 02:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F8DB, serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Validity Not Before: Dec 27 02:14:59 2025 GMT Not After : Jan 3 02:14:59 2026 GMT Subject: CN=694f4123-a96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:f7:14:c6:e0:f5:da:48:57:36:ff:82:0d:c7: 93:7e:9a:2a:d2:ef:fb:ca:06:d4:06:68:64:40:d2: 03:3b:9c:27:20:d2:b5:e6:2c:38:db:10:e9:8d:41: 1f:d5:43:bb:dc:18:c8:a7:bb:ce:29:71:ff:f6:c2: 23:54:1a:8e:a0:36:8a:57:b9:5b:e9:43:dd:94:76: e9:76:0d:e6:ac:80:26:73:15:3f:c3:11:2f:13:8d: 0d:60:9b:93:f6:62:38:64:b9:32:56:bf:70:09:60: d2:3c:c7:69:c7:ae:c8:fb:72:8b:2c:0e:a3:c2:66: c8:ed:70:08:44:71:ed:51:7d:3e:3d:78:16:97:33: 34:5d:2c:a0:47:f9:de:5d:8e:6b:4d:60:c9:87:d5: 8f:ce:85:f2:ce:a7:fb:3a:99:7f:5e:eb:be:2d:1d: 26:91:e6:ca:bf:00:6e:50:ef:0e:b9:c0:da:39:11: df:8c:36:c4:32:c1:cd:8c:6c:91:88:3b:8b:ce:45: aa:2c:e4:12:9f:25:6c:62:2d:e7:78:e1:e2:6e:81: 76:d4:1c:c2:d3:17:b7:f4:14:b4:37:f7:65:95:5d: 0d:79:61:ea:c0:81:4c:11:d4:5a:39:1a:e4:5e:9d: 8f:ce:5e:6d:eb:0c:57:7d:11:44:6b:fe:3d:24:e0: 07:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:83:8E:21:29:94:64:15:DE:8F:08:92:9D:7D:44:C8:6D:4B:D6:2A X509v3 Authority Key Identifier: keyid:0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:72:8b:1d:54:7f:47:3a:f5:e5:e6:6c:f1:1a:ef:a6:9c:0a: 6c:ab:a1:48:4f:33:23:10:1a:5d:26:5f:88:9e:9e:68:c1:34: c8:92:ee:d8:20:d2:63:7a:b5:97:ec:f3:3c:a0:13:82:fb:2b: 77:dc:1a:75:53:b7:d1:9b:9f:be:78:1d:ac:ce:55:8f:a3:a2: a2:16:68:38:52:36:f9:5e:47:0f:a9:e0:89:25:50:08:be:52: f5:eb:24:c9:eb:49:9f:08:d7:d7:e2:f9:1a:78:50:21:4b:7b: 05:6b:c4:26:3d:85:b8:bd:c4:bc:a8:64:fb:10:f1:78:03:1e: 5b:76:ce:9a:d4:ff:5a:40:d1:81:c1:b0:58:85:b3:72:0b:bf: 9f:dd:f0:24:f7:03:70:87:1a:bb:fa:6f:28:bf:ea:49:48:bb: 56:e3:f0:3a:8c:89:3f:f5:0d:a0:36:94:51:d5:d7:1c:1f:94: f9:0b:a2:3c:57:89:c6:bc:21:df:eb:4c:2e:b2:f6:6c:22:78: b2:8c:7b:93:e1:6b:d8:23:18:01:31:4b:60:1a:0d:7e:1f:c1: 47:00:fc:61:21:bb:32:7b:e1:f4:24:55:ce:a2:39:1f:df:98: 13:6f:9d:1d:44:71:a2:7c:61:5a:8f:32:e1:0f:b8:2a:f7:11: 60:a8:2d:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY4REIxMTAvBgNVBAUTKDBERTJCNkE2MkU1NEEwQTYxQkNGMzE0QjZFMkVGQjhG M0ExRTNBN0EwHhcNMjUxMjI3MDIxNDU5WhcNMjYwMTAzMDIxNDU5WjAYMRYwFAYD VQQDDA02OTRmNDEyMy1hOTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+fcUxuD12khXNv+CDceTfpoq0u/7ygbUBmhkQNIDO5wnINK15iw42xDpjUEf 1UO73BjIp7vOKXH/9sIjVBqOoDaKV7lb6UPdlHbpdg3mrIAmcxU/wxEvE40NYJuT 9mI4ZLkyVr9wCWDSPMdpx67I+3KLLA6jwmbI7XAIRHHtUX0+PXgWlzM0XSygR/ne XY5rTWDJh9WPzoXyzqf7Opl/Xuu+LR0mkebKvwBuUO8OucDaORHfjDbEMsHNjGyR iDuLzkWqLOQSnyVsYi3neOHiboF21BzC0xe39BS0N/dllV0NeWHqwIFMEdRaORrk Xp2Pzl5t6wxXfRFEa/49JOAHkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCDjiEp lGQV3o8Ikp19RMhtS9YqMB8GA1UdIwQYMBaAFA3itqYuVKCmG88xS24u+486Hjp6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjhEQi82QzhCQjg2MjU0 QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9LWWJ6ekZMYmk3N2p6b2VP bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlSzJwaTVVb0tZYnp6RkxiaTc3anpvZU9uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjhEQi82QzhCQjg2MjU0QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9L WWJ6ekZMYmk3N2p6b2VPbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzcosdVH9HOvXl5mzxGu+mnApsq6FITzMjEBpdJl+Inp5owTTIku7Y INJjerWX7PM8oBOC+yt33Bp1U7fRm5++eB2szlWPo6KiFmg4Ujb5XkcPqeCJJVAI vlL16yTJ60mfCNfX4vkaeFAhS3sFa8QmPYW4vcS8qGT7EPF4Ax5bds6a1P9aQNGB wbBYhbNyC7+f3fAk9wNwhxq7+m8ov+pJSLtW4/A6jIk/9Q2gNpRR1dccH5T5C6I8 V4nGvCHf60wusvZsIniyjHuT4WvYIxgBMUtgGg1+H8FHAPxhIbsye+H0JFXOojkf 35gTb50dRHGifGFajzLhD7gq9xFgqC3O -----END CERTIFICATE-----Generated at Sun Dec 28 09:43:22 2025 by rpki-client