This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft File: aFEZgfy52vrY49MDBLtBqW-5p28.mft (raw, json) Hash identifier: ZIuxbfewKG0GDE2Kjt9PO+liS3ueXlb5BoY7eTcLJy4= Subject key identifier: E0:78:9B:85:57:AD:E8:C4:6F:02:D1:7A:E4:79:5B:53:FB:85:F5:F5 Authority key identifier: 68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F Certificate issuer: /CN=A918196D/serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F Certificate serial: 0500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft Manifest number: 04F1 Signing time: Thu 18 Dec 2025 23:03:45 +0000 Manifest this update: Thu 18 Dec 2025 23:03:45 +0000 Manifest next update: Thu 25 Dec 2025 23:03:45 +0000 Files and hashes: 1: aFEZgfy52vrY49MDBLtBqW-5p28.crl (hash: nqndGyvNRgh68mIZkpwSES1Hr1baKOTAASUKYt3wOmA=) 2: 3E60217E42D211EC956C7F65C4F9AE02.roa (hash: uugn7/J2yz2AlJqn3GxqBNZUwmGZ4weF3jg7XtTcTNs=) 3: 5C2186C444B011F0B9799F48C4F9AE02.roa (hash: JJ/1SR0EZ5l7PECR67PAK+euRry+RLFa/pJug2YY29I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1280 (0x500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918196D, serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F Validity Not Before: Dec 18 23:03:45 2025 GMT Not After : Dec 25 23:03:45 2025 GMT Subject: CN=69448851-dbf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:bd:67:d8:80:df:6a:c2:85:1b:ae:c7:91: ed:77:7b:80:e4:43:f8:18:8a:2b:4c:40:6e:40:fa: 7c:2c:6d:d6:d1:e9:48:3a:3e:2e:82:be:f1:61:3a: 91:53:98:22:90:be:6b:9c:03:2b:b6:44:c9:b8:10: d5:fc:2e:50:e7:e8:41:7d:8b:95:54:73:7f:7e:c3: b5:78:d4:4e:8f:a2:88:12:0a:43:42:e7:ed:18:2e: e7:5c:d9:c8:1c:af:ca:4d:69:53:17:3b:f1:ee:70: 1e:6a:15:82:df:be:e4:e4:b1:08:99:dd:b7:5f:90: 5d:78:09:bd:a6:cb:cb:be:e3:0a:bc:da:bb:c5:44: c7:59:5c:04:64:8a:6a:17:f3:1c:c0:19:b7:95:22: a7:5b:cb:e4:97:29:fb:b4:bc:8e:78:4c:3c:0a:9d: 15:3d:b0:d6:14:fe:cb:11:81:d8:bb:ab:d6:a2:a3: f3:4c:d3:94:4f:f1:3a:15:fc:6e:58:c1:f0:e6:47: cf:78:6d:87:34:dd:51:78:2f:45:2d:e0:ad:8d:ec: 5f:39:6f:86:bb:04:25:9a:99:17:0e:b9:13:c4:3d: 5d:db:3a:4d:bc:43:1c:3e:4e:e7:b7:5b:bc:11:fe: b1:1b:94:b8:83:bd:cf:51:df:01:a2:06:4c:5d:72: 69:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:78:9B:85:57:AD:E8:C4:6F:02:D1:7A:E4:79:5B:53:FB:85:F5:F5 X509v3 Authority Key Identifier: keyid:68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:0f:21:19:d1:22:3b:00:98:69:a6:35:4d:13:98:68:31:e3: 8c:e4:c3:32:b1:60:56:71:e0:3d:01:22:8b:ae:4c:a3:a1:e4: 1d:b3:8a:5e:55:eb:54:84:6e:b2:40:15:f1:75:46:4f:87:25: a8:fc:3a:6e:dc:d0:56:15:29:c3:c3:4a:7d:7d:e5:ed:ea:15: 6e:04:69:1e:99:b9:b5:ae:7f:7c:38:b6:d4:94:76:e8:84:35: c0:32:73:21:ac:1f:ea:04:c8:9b:cf:99:60:9f:1c:54:32:1f: 36:cf:b7:e9:44:e9:ce:de:3b:4b:1c:8f:81:65:fd:52:db:ab: d8:e5:d9:29:03:12:58:a0:63:7e:f5:a8:3d:a6:48:59:e6:3c: 11:a3:d6:35:d5:16:34:56:bf:5f:36:ce:d1:a1:12:93:e6:7f: 1a:a8:bf:e2:55:77:bd:db:25:e2:6d:32:7a:ad:3e:82:12:13: b4:e7:0b:7a:84:af:52:bb:20:9d:79:ac:7d:90:32:2a:25:bb: c5:1a:2a:71:1e:5e:f8:fb:48:f5:f2:44:bd:0d:b5:65:10:1e: 60:15:e6:b4:99:49:fb:89:88:cd:08:42:48:06:c7:37:ac:71: e4:74:d9:67:17:3e:12:3b:55:cf:5f:c4:c8:ab:fe:81:cd:91: f8:45:56:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE5NkQxMTAvBgNVBAUTKDY4NTExOTgxRkNCOURBRkFEOEUzRDMwMzA0QkI0MUE5 NkZCOUE3NkYwHhcNMjUxMjE4MjMwMzQ1WhcNMjUxMjI1MjMwMzQ1WjAYMRYwFAYD VQQDDA02OTQ0ODg1MS1kYmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8e9Z9iA32rChRuux5Htd3uA5EP4GIorTEBuQPp8LG3W0elIOj4ugr7xYTqR U5gikL5rnAMrtkTJuBDV/C5Q5+hBfYuVVHN/fsO1eNROj6KIEgpDQuftGC7nXNnI HK/KTWlTFzvx7nAeahWC377k5LEImd23X5BdeAm9psvLvuMKvNq7xUTHWVwEZIpq F/McwBm3lSKnW8vklyn7tLyOeEw8Cp0VPbDWFP7LEYHYu6vWoqPzTNOUT/E6Ffxu WMHw5kfPeG2HNN1ReC9FLeCtjexfOW+GuwQlmpkXDrkTxD1d2zpNvEMcPk7nt1u8 Ef6xG5S4g73PUd8BogZMXXJpYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOB4m4VX rejEbwLReuR5W1P7hfX1MB8GA1UdIwQYMBaAFGhRGYH8udr62OPTAwS7Qalvuadv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTk2RC82MjAyQUEzRTQx MTAxMUVDOTkzOUMwMEZDNEY5QUUwMi9hRkVaZ2Z5NTJ2clk0OU1EQkx0QnFXLTVw MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FGRVpnZnk1MnZyWTQ5TURCTHRCcVctNXAyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTk2RC82MjAyQUEzRTQxMTAxMUVDOTkzOUMwMEZDNEY5QUUwMi9hRkVaZ2Z5NTJ2 clk0OU1EQkx0QnFXLTVwMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCDyEZ0SI7AJhppjVNE5hoMeOM5MMysWBWceA9ASKLrkyjoeQds4pe VetUhG6yQBXxdUZPhyWo/Dpu3NBWFSnDw0p9feXt6hVuBGkembm1rn98OLbUlHbo hDXAMnMhrB/qBMibz5lgnxxUMh82z7fpROnO3jtLHI+BZf1S26vY5dkpAxJYoGN+ 9ag9pkhZ5jwRo9Y11RY0Vr9fNs7RoRKT5n8aqL/iVXe92yXibTJ6rT6CEhO05wt6 hK9SuyCdeax9kDIqJbvFGipxHl74+0j18kS9DbVlEB5gFea0mUn7iYjNCEJIBsc3 rHHkdNlnFz4SO1XPX8TIq/6BzZH4RVYw -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:49 2025 by rpki-client