This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: ce1QwlNM3BKUL+qWLDxDxTWZDoAfo+U8XQii6mWkE9o= Subject key identifier: EC:AA:CA:31:6D:64:FB:2F:51:E2:D4:AC:57:B5:D4:67:4E:A5:CB:A9 Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0CB5 Signing time: Thu 18 Dec 2025 18:00:32 +0000 Manifest this update: Thu 18 Dec 2025 18:00:32 +0000 Manifest next update: Thu 25 Dec 2025 18:00:32 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: /rcaHxflTj67Ue00YxH/FBF0wotRWKsPCo6nEkAZQ60=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: 9YzaKoB55vA+zQdVAh6WHpgfW7yVGA2AYZZFRxBBOuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: Dec 18 18:00:32 2025 GMT Not After : Dec 25 18:00:32 2025 GMT Subject: CN=69444140-5c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b2:57:64:83:52:d8:e2:6c:e9:54:d7:90:7c: 2b:e5:a0:64:a4:45:7c:8f:53:4e:54:5e:3c:b3:08: 9e:9d:32:00:31:58:26:96:10:17:4f:c9:18:f4:f9: 0a:fd:15:f1:2b:e3:1f:98:1a:1e:90:a6:16:a5:54: fb:35:1c:e9:44:5b:fb:b5:57:b3:a2:16:d0:ff:e9: 7b:16:05:7d:d5:1e:3b:a8:a9:58:7d:c2:d4:6c:e9: 25:23:1f:4d:22:50:f6:6b:71:44:63:02:76:22:54: 13:c2:e1:41:2e:1a:1b:4c:98:a2:ef:10:ae:bc:03: dd:1c:4c:99:a7:01:2f:96:a9:56:49:78:08:dc:68: 1b:f3:c6:52:05:b8:09:4e:74:56:a0:d6:a7:07:85: 92:3c:ea:6a:a5:e3:e3:54:79:34:6f:6f:25:52:ff: 13:ec:48:ec:7c:38:ec:a1:0f:a4:f8:c6:48:9b:37: 18:10:11:47:cb:51:78:87:c2:09:db:09:e7:ba:de: aa:6e:fd:9b:60:d5:bf:9c:79:87:70:8f:c2:bf:89: b2:be:28:e7:7d:8f:ab:05:f2:62:7b:8f:d0:ad:14: 5e:d8:2f:5b:bb:35:2c:5a:58:f9:88:8f:c7:66:55: 98:b2:45:7f:fc:11:fb:5c:77:75:22:61:e2:2c:bb: f6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AA:CA:31:6D:64:FB:2F:51:E2:D4:AC:57:B5:D4:67:4E:A5:CB:A9 X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4a:b7:73:10:40:7b:39:1e:65:5e:f3:1e:0f:d5:02:c6:cd: 42:26:d4:14:6e:94:be:0e:cb:ee:4a:26:e7:ad:1f:5d:ff:9f: 46:0d:77:e2:48:35:39:a3:7f:94:25:e0:59:64:a4:91:60:3c: a9:2d:3f:2e:f3:2b:1f:4d:cc:00:70:47:9c:d3:d3:da:61:79: 82:6f:8f:0c:ba:0b:e1:5d:9f:2c:2d:d0:53:6e:52:10:26:00: 48:30:5b:37:1d:3e:78:23:79:72:5d:85:a4:67:0f:95:57:1b: 38:3c:02:07:c5:ff:30:f3:09:9b:c7:c3:0d:91:99:98:be:06: 38:90:c4:d0:7a:4c:e7:4c:31:4c:d8:eb:16:21:cc:33:39:d5: d2:73:42:9c:d3:db:77:42:fa:6f:2e:3a:54:fa:a0:e8:ef:1d: 3c:6d:30:c7:f3:5a:fe:74:2b:9f:ee:4d:7a:2a:f5:a1:6e:99: bb:4b:4c:44:5e:9a:ab:9f:08:6f:37:dc:55:6f:84:ae:d3:98: 38:d2:68:dd:b4:35:09:67:90:c8:1c:79:f9:62:8b:27:e2:72: 92:82:0f:f2:f4:18:b4:c6:88:1e:59:af:80:60:e5:36:c2:72: 5d:94:7f:a4:6c:77:e7:1d:60:02:40:5c:ea:5e:d5:e5:1e:3c: eb:67:6f:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjUxMjE4MTgwMDMyWhcNMjUxMjI1MTgwMDMyWjAYMRYwFAYD VQQDDA02OTQ0NDE0MC01Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA87JXZINS2OJs6VTXkHwr5aBkpEV8j1NOVF48swienTIAMVgmlhAXT8kY9PkK /RXxK+MfmBoekKYWpVT7NRzpRFv7tVezohbQ/+l7FgV91R47qKlYfcLUbOklIx9N IlD2a3FEYwJ2IlQTwuFBLhobTJii7xCuvAPdHEyZpwEvlqlWSXgI3Ggb88ZSBbgJ TnRWoNanB4WSPOpqpePjVHk0b28lUv8T7EjsfDjsoQ+k+MZImzcYEBFHy1F4h8IJ 2wnnut6qbv2bYNW/nHmHcI/Cv4myvijnfY+rBfJie4/QrRRe2C9buzUsWlj5iI/H ZlWYskV//BH7XHd1ImHiLLv2aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyqyjFt ZPsvUeLUrFe11GdOpcupMB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeSrdzEEB7OR5lXvMeD9UCxs1CJtQUbpS+DsvuSibnrR9d/59GDXfi SDU5o3+UJeBZZKSRYDypLT8u8ysfTcwAcEec09PaYXmCb48MugvhXZ8sLdBTblIQ JgBIMFs3HT54I3lyXYWkZw+VVxs4PAIHxf8w8wmbx8MNkZmYvgY4kMTQekznTDFM 2OsWIcwzOdXSc0Kc09t3QvpvLjpU+qDo7x08bTDH81r+dCuf7k16KvWhbpm7S0xE XpqrnwhvN9xVb4Su05g40mjdtDUJZ5DIHHn5Yosn4nKSgg/y9Bi0xogeWa+AYOU2 wnJdlH+kbHfnHWACQFzqXtXlHjzrZ28U -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:23 2025 by rpki-client