This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft File: cPhdBJUBOFatAizAkilp4Mj8ReI.mft (raw, json) Hash identifier: 8CuxLAUKEr8kEURuLMigtSE381zfvbQIwv5xB7/huwU= Subject key identifier: 6E:0D:0B:A0:1D:51:79:3F:F1:93:00:2C:64:14:17:26:34:56:73:AB Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 Certificate issuer: /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Certificate serial: 0602 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft Manifest number: 05F4 Signing time: Wed 24 Dec 2025 22:11:24 +0000 Manifest this update: Wed 24 Dec 2025 22:11:24 +0000 Manifest next update: Wed 31 Dec 2025 22:11:24 +0000 Files and hashes: 1: cPhdBJUBOFatAizAkilp4Mj8ReI.crl (hash: TWH/+nuzgptzVHcjZHiJmamB8ChJMp7a5Q+m8hr5Zv4=) 2: 872A7C2A73A111F0A653E239C4F9AE02.roa (hash: eJZB22mbfBjXQGnbEMxJ+IY2H2YTZ4yy9O9aqK+bNis=) 3: C454E4B4D94F11EBAB5C652FC4F9AE02.roa (hash: 8GLZSq2u4K0rZRuLFUVu2DZuH9B8VodmiF5KxyYmSr4=) 4: 8FE569EC776B11F0B156EB5AC4F9AE02.roa (hash: 05ONJ6gn6THBNIdjw9547Y3Ra4e7ZSd6nxQro/5YWpc=) 5: E90DFC9CF00111EFB541185CC4F9AE02.roa (hash: TuWKlHncV9ol4wZzYVUEuu8aecG1wWBFbcB1ZNq2FKQ=) 6: A7F88866489611EFA3CACC09C4F9AE02.roa (hash: t7eknxpJ+dZ+sJQnSi245edufycu6QV4awrd/RTcAXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 22:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F2D, serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Validity Not Before: Dec 24 22:11:24 2025 GMT Not After : Dec 31 22:11:24 2025 GMT Subject: CN=694c650c-3c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:57:50:7a:78:44:2d:48:0f:c6:2d:c3:65:ad: e9:01:4b:74:b6:32:ce:2a:80:17:bd:c0:2e:0d:2f: 43:f5:55:ab:17:a8:3f:50:0f:27:d5:ec:ca:2b:53: a6:d0:bf:a6:73:9f:da:38:3b:32:52:24:40:ba:38: d3:ca:fa:36:b9:bb:79:a6:eb:10:82:0c:05:93:b5: 5f:01:b9:ce:5b:9d:66:d9:7e:26:ac:39:a1:0f:f2: 60:f5:9e:ca:20:5f:90:c1:08:ba:65:82:4f:d9:79: 74:0c:8d:81:21:56:a2:7b:ab:53:c3:da:f8:83:5f: 94:4b:48:43:dd:34:f9:93:7b:b2:95:64:0c:20:fe: 97:d5:b0:64:68:91:fe:44:c6:e1:5f:68:fc:51:a9: 40:c7:57:20:37:07:9a:6a:77:a5:ff:95:91:22:41: b9:fd:02:5c:43:b5:55:f4:63:0a:ef:22:1c:61:b1: 42:bf:a9:99:07:e2:44:8a:59:3d:de:28:0c:39:21: ef:75:3e:a7:a4:39:18:5d:53:fe:cd:56:e8:7d:cd: f1:b8:87:dd:8a:7e:28:6b:47:70:d9:0d:ad:a1:2b: d7:50:f2:e2:05:45:4f:dc:df:0f:10:56:43:9c:79: bb:e2:c1:88:29:b9:ac:46:ca:82:e9:6c:31:85:64: 65:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0D:0B:A0:1D:51:79:3F:F1:93:00:2C:64:14:17:26:34:56:73:AB X509v3 Authority Key Identifier: keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:32:8b:c5:96:85:c1:33:a7:fe:4e:1a:0d:c5:a7:6f:94:5c: 85:5d:93:9f:b9:c2:9a:8c:c5:2e:cc:0f:68:ca:ee:3f:f5:eb: ad:4b:a9:85:06:9b:28:c9:8f:86:d9:2f:cf:3f:d1:e0:52:4e: 81:8f:09:a9:bb:86:e8:3d:e3:b5:a6:20:4b:fe:14:97:67:05: 92:47:52:8e:0a:36:26:69:17:5e:52:a2:0f:9e:b6:e1:e8:94: 63:bc:37:63:80:bc:c0:6a:7a:7a:69:b5:9e:4d:ae:6e:1a:70: 51:53:fc:48:a4:ec:3b:bb:43:56:00:2c:37:7b:b7:90:be:40: db:23:ff:92:a1:b6:1c:6d:62:d5:d5:47:76:49:46:5a:99:16: 97:1d:91:0b:47:3f:5f:b2:21:b6:a3:e3:10:37:ac:30:a8:65: 07:8d:49:c0:36:fb:f0:14:cc:84:85:38:8a:65:82:ac:d7:24: 3f:4e:da:2b:c9:c3:75:ff:8b:73:1f:ad:37:9c:5d:c4:74:e4: 13:b9:e5:c4:ee:d8:28:49:e6:d2:09:c1:6f:1f:c5:27:a8:3a: 0e:67:60:0e:4f:44:d0:92:d4:6c:9c:6d:2e:7a:ba:e8:ad:cd: ec:55:e5:d3:36:77:de:e7:9b:ba:eb:22:56:db:27:7c:40:a6: 38:1b:e6:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGMkQxMTAvBgNVBAUTKDcwRjg1RDA0OTUwMTM4NTZBRDAyMkNDMDkyMjk2OUUw QzhGQzQ1RTIwHhcNMjUxMjI0MjIxMTI0WhcNMjUxMjMxMjIxMTI0WjAYMRYwFAYD VQQDDA02OTRjNjUwYy0zYzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFdQenhELUgPxi3DZa3pAUt0tjLOKoAXvcAuDS9D9VWrF6g/UA8n1ezKK1Om 0L+mc5/aODsyUiRAujjTyvo2ubt5pusQggwFk7VfAbnOW51m2X4mrDmhD/Jg9Z7K IF+QwQi6ZYJP2Xl0DI2BIVaie6tTw9r4g1+US0hD3TT5k3uylWQMIP6X1bBkaJH+ RMbhX2j8UalAx1cgNweaanel/5WRIkG5/QJcQ7VV9GMK7yIcYbFCv6mZB+JEilk9 3igMOSHvdT6npDkYXVP+zVbofc3xuIfdin4oa0dw2Q2toSvXUPLiBUVP3N8PEFZD nHm74sGIKbmsRsqC6WwxhWRlJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4NC6Ad UXk/8ZMALGQUFyY0VnOrMB8GA1UdIwQYMBaAFHD4XQSVAThWrQIswJIpaeDI/EXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEYyRC9DRkJFRDM3MEQ5 NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9GYXRBaXpBa2lscDRNajhS ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NQaGRCSlVCT0ZhdEFpekFraWxwNE1qOFJlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEYyRC9DRkJFRDM3MEQ5NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9G YXRBaXpBa2lscDRNajhSZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFMovFloXBM6f+ThoNxadvlFyFXZOfucKajMUuzA9oyu4/9eutS6mF BpsoyY+G2S/PP9HgUk6Bjwmpu4boPeO1piBL/hSXZwWSR1KOCjYmaRdeUqIPnrbh 6JRjvDdjgLzAanp6abWeTa5uGnBRU/xIpOw7u0NWACw3e7eQvkDbI/+SobYcbWLV 1Ud2SUZamRaXHZELRz9fsiG2o+MQN6wwqGUHjUnANvvwFMyEhTiKZYKs1yQ/Ttor ycN1/4tzH603nF3EdOQTueXE7tgoSebSCcFvH8UnqDoOZ2AOT0TQktRsnG0uerro rc3sVeXTNnfe55u66yJW2yd8QKY4G+b3 -----END CERTIFICATE-----Generated at Fri Dec 26 02:25:37 2025 by rpki-client