This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft File: 28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json) Hash identifier: r3bRamH3Tu5oaJ132LuNm46q67zUKuiB4Gdu8Lo/Tqs= Subject key identifier: 7A:8A:01:D2:BC:8D:35:7B:E0:05:01:A9:8E:0E:77:21:6D:E1:E9:C0 Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 Certificate issuer: /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Certificate serial: 02E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft Manifest number: 02E3 Signing time: Tue 23 Dec 2025 00:17:23 +0000 Manifest this update: Tue 23 Dec 2025 00:17:23 +0000 Manifest next update: Tue 30 Dec 2025 00:17:23 +0000 Files and hashes: 1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: K3b3cKX+dt7ViH53AMTxPBNYTtWjul1wnaQ/8Gc0Dwo=) 2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: gKrsb4dZgy0MTcPqjVyZ2IoWxdZknG0vr+R6U+hRwFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 743 (0x2e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C477, serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1 Validity Not Before: Dec 23 00:17:23 2025 GMT Not After : Dec 30 00:17:23 2025 GMT Subject: CN=6949df93-2261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:89:5f:a8:25:f9:18:ba:8a:1d:c7:5a:cc:0d: 4d:c5:d0:e4:e6:3a:24:a2:6e:85:33:24:69:ca:ce: 7e:15:cf:e1:20:5c:3e:89:03:55:e2:52:85:aa:95: 30:7b:54:6a:22:61:b6:31:ec:4b:b0:f0:a3:71:cd: 5d:5d:f7:2d:c3:2f:22:21:50:87:df:d8:7d:7d:15: 2a:0f:be:fb:9d:3e:29:96:83:a1:7c:e0:ea:05:a8: ff:4b:b4:0b:b2:ee:c0:8c:82:4b:c2:e2:c0:76:34: 63:49:a6:95:70:72:31:fc:b3:1e:2a:88:35:e8:59: 4a:03:cc:71:31:24:18:3b:e4:e1:0c:81:ca:5d:7b: cd:51:a2:07:cc:3c:80:ac:8f:73:b1:cb:11:93:fa: 86:28:92:ed:51:32:d6:2f:89:53:0a:a1:70:50:2a: 7d:24:4b:cb:cc:0f:c9:ec:a0:d0:16:7b:2e:9d:a5: 26:b0:35:be:c7:0b:21:28:44:0b:b0:81:34:6c:bc: ef:64:f8:8f:bf:cd:d2:fe:83:e4:53:6c:9c:81:62: b8:56:86:17:35:74:80:f7:5f:72:34:45:35:28:fe: 59:e7:fa:f6:28:4d:8a:b2:2d:f7:39:8b:33:9a:3c: 96:07:86:0d:10:e2:bf:f0:19:e4:8f:6d:37:35:05: 51:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8A:01:D2:BC:8D:35:7B:E0:05:01:A9:8E:0E:77:21:6D:E1:E9:C0 X509v3 Authority Key Identifier: keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:66:35:fa:7f:51:f3:f8:63:a3:5f:f9:b9:41:01:5d:86:5d: 16:03:e3:57:03:0b:ca:5e:55:21:7f:6c:03:eb:a4:d7:4b:e1: 99:9f:24:c9:54:00:93:7f:c3:9f:b2:33:0d:c6:23:b6:13:63: 3e:db:36:fe:83:6f:2e:3a:e9:6f:d3:66:91:b8:d7:49:13:3a: b0:ef:d2:3a:4f:7b:2b:58:8d:f6:f7:f8:47:b0:c2:0b:9b:c0: 34:0c:43:5c:70:4a:1a:6b:59:dd:c8:25:17:23:6a:f5:29:0f: 25:09:be:f3:dd:74:ea:6c:35:7d:15:dc:b1:27:23:e6:6d:a6: 6d:13:67:20:c1:e3:18:97:eb:df:17:eb:90:fa:34:b6:04:a6: ec:21:22:ba:34:09:22:f2:c2:8f:f0:31:f2:0d:a1:a4:a7:cf: 04:04:a9:e6:ce:06:2e:6a:6d:e8:f1:9b:6e:8e:2d:44:be:5c: 46:e2:fc:47:ee:73:40:ec:76:3e:ff:7a:14:d1:da:d5:06:aa: 6e:f9:60:7e:47:df:fb:bc:03:12:9a:7b:e3:af:08:46:1b:b2: 5d:f4:47:3d:65:60:b6:00:2f:21:79:0e:47:af:fd:5a:c7:27: 07:8b:39:e1:6e:a4:6d:21:51:37:5b:a3:99:3f:8b:76:37:17: f7:bc:fd:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM0NzcxMTAvBgNVBAUTKERCQ0E2RDJBQTUyOEM0QjI0NTU2REIwN0ZDQjU2OUMz NkFDMkZFQjEwHhcNMjUxMjIzMDAxNzIzWhcNMjUxMjMwMDAxNzIzWjAYMRYwFAYD VQQDDA02OTQ5ZGY5My0yMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIlfqCX5GLqKHcdazA1NxdDk5jokom6FMyRpys5+Fc/hIFw+iQNV4lKFqpUw e1RqImG2MexLsPCjcc1dXfctwy8iIVCH39h9fRUqD777nT4ploOhfODqBaj/S7QL su7AjIJLwuLAdjRjSaaVcHIx/LMeKog16FlKA8xxMSQYO+ThDIHKXXvNUaIHzDyA rI9zscsRk/qGKJLtUTLWL4lTCqFwUCp9JEvLzA/J7KDQFnsunaUmsDW+xwshKEQL sIE0bLzvZPiPv83S/oPkU2ycgWK4VoYXNXSA919yNEU1KP5Z5/r2KE2Ksi33OYsz mjyWB4YNEOK/8Bnkj203NQVRfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqKAdK8 jTV74AUBqY4OdyFt4enAMB8GA1UdIwQYMBaAFNvKbSqlKMSyRVbbB/y1acNqwv6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzQ3Ny9ENTVGMjlGNDBD MkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hMSkZWdHNIX0xWcHcyckNf ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4cHRLcVVveExKRlZ0c0hfTFZwdzJyQ19yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzQ3Ny9ENTVGMjlGNDBDMkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hM SkZWdHNIX0xWcHcyckNfckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5ZjX6f1Hz+GOjX/m5QQFdhl0WA+NXAwvKXlUhf2wD66TXS+GZnyTJ VACTf8OfsjMNxiO2E2M+2zb+g28uOulv02aRuNdJEzqw79I6T3srWI329/hHsMIL m8A0DENccEoaa1ndyCUXI2r1KQ8lCb7z3XTqbDV9FdyxJyPmbaZtE2cgweMYl+vf F+uQ+jS2BKbsISK6NAki8sKP8DHyDaGkp88EBKnmzgYuam3o8Ztuji1EvlxG4vxH 7nNA7HY+/3oU0drVBqpu+WB+R9/7vAMSmnvjrwhGG7Jd9Ec9ZWC2AC8heQ5Hr/1a xycHiznhbqRtIVE3W6OZP4t2Nxf3vP30 -----END CERTIFICATE-----Generated at Tue Dec 23 12:54:59 2025 by rpki-client