This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: EmhohnP0MHAm3lM+tsDw0j2hhi1PmCOy56ra2blt6m0= Subject key identifier: BF:F8:AB:A2:B6:65:98:1A:C8:79:27:0B:F1:A6:2A:DD:10:6B:0C:E8 Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0B78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0B70 Signing time: Sat 20 Dec 2025 18:41:02 +0000 Manifest this update: Sat 20 Dec 2025 18:41:01 +0000 Manifest next update: Sat 27 Dec 2025 18:41:01 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: cwcMWLdTPrCYEoJWCXQ6tTir9xSmE3bnRL7jDeELZz4=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: Q+t5vtr4zi9qbMz+XlbKgiQudk9xrXCU2lb+B14yXgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2936 (0xb78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: Dec 20 18:41:01 2025 GMT Not After : Dec 27 18:41:01 2025 GMT Subject: CN=6946edbd-1099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dc:64:c9:78:0e:17:a5:cc:f4:ea:e5:3a:24: 24:70:06:b2:45:f2:de:71:97:4c:c4:7b:23:38:1d: e4:ff:e3:c9:67:63:69:5f:a6:62:0a:f0:6a:00:9b: 49:e0:f1:d2:cc:5c:72:96:28:47:e0:d5:69:5e:66: 18:65:92:f4:28:16:1f:d6:8f:5b:a8:87:03:d9:1a: 48:68:61:4b:75:6f:7f:49:d8:25:7c:6b:48:50:c1: e5:6e:ea:30:38:7f:35:61:ac:a3:cc:d9:ed:7b:c0: 06:21:d5:21:40:72:0a:f6:bb:fd:50:0e:ba:ce:ad: 46:d4:10:79:c3:26:b3:75:12:1a:9d:c1:db:84:8d: a1:ad:02:ba:0b:26:e4:65:92:7f:df:3e:21:c0:7c: c6:25:1a:39:37:03:a9:2e:33:e7:bf:90:f8:54:91: 3b:6a:83:99:71:33:92:86:6f:99:c8:6a:1b:2c:25: 3d:e8:2b:32:7a:09:9f:0e:cc:c9:af:3e:4e:55:f0: 5c:6f:4d:e8:fa:66:1b:aa:b4:d8:1b:77:74:a6:b2: 31:f9:98:59:a7:a2:0a:6b:1c:31:cf:9e:64:af:af: a7:32:6c:dc:8b:82:46:b0:66:8f:f1:48:fc:59:6f: f8:f8:2f:01:b5:da:68:6a:7b:3e:67:88:f1:3b:7e: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F8:AB:A2:B6:65:98:1A:C8:79:27:0B:F1:A6:2A:DD:10:6B:0C:E8 X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:27:2a:24:c4:ef:93:be:59:bf:66:6a:2f:01:d0:a7:c9:42: 5a:21:a7:4c:e4:b1:cd:37:b1:af:48:a6:41:f8:bf:f9:c4:63: a1:e3:e1:bf:d4:55:86:fd:69:df:46:e8:fa:2a:f3:f6:00:ed: 1f:cc:03:5d:bd:0b:7d:97:aa:7f:9e:78:4e:42:0f:d4:43:c6: ac:bf:a0:52:41:b9:e4:6e:cd:5f:95:36:21:ee:a7:8e:13:b0: 39:2b:3a:31:d8:6c:56:93:39:3d:10:89:24:1b:83:6e:5d:a1: 41:06:4b:ee:d9:93:f7:d9:0d:50:3b:88:db:96:2c:c7:9a:7f: 1b:34:ed:f6:7e:8b:49:ed:0f:9a:ae:30:ec:88:78:ac:5d:2a: c2:7c:43:5a:d9:45:c2:42:11:66:d5:9c:58:b2:65:be:8a:95: f6:7b:de:25:80:48:f2:a1:c2:b7:3d:5b:79:66:5c:fa:8e:bc: 4f:45:65:71:b4:8e:98:8c:4c:5f:cd:4e:9c:4a:f4:25:4e:c7: 30:89:71:36:86:1a:4c:78:51:c0:df:8a:49:0d:73:11:45:cd: c0:72:26:84:a4:91:96:58:0f:44:fc:44:28:54:a7:ad:55:62: 19:22:ed:a0:69:47:54:ea:99:fb:b6:0a:8e:f9:b7:95:22:c2: 81:b1:60:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjUxMjIwMTg0MTAxWhcNMjUxMjI3MTg0MTAxWjAYMRYwFAYD VQQDDA02OTQ2ZWRiZC0xMDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdxkyXgOF6XM9OrlOiQkcAayRfLecZdMxHsjOB3k/+PJZ2NpX6ZiCvBqAJtJ 4PHSzFxylihH4NVpXmYYZZL0KBYf1o9bqIcD2RpIaGFLdW9/SdglfGtIUMHlbuow OH81YayjzNnte8AGIdUhQHIK9rv9UA66zq1G1BB5wyazdRIancHbhI2hrQK6Cybk ZZJ/3z4hwHzGJRo5NwOpLjPnv5D4VJE7aoOZcTOShm+ZyGobLCU96CsyegmfDszJ rz5OVfBcb03o+mYbqrTYG3d0prIx+ZhZp6IKaxwxz55kr6+nMmzci4JGsGaP8Uj8 WW/4+C8Btdpoans+Z4jxO35y1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/4q6K2 ZZgayHknC/GmKt0QawzoMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcJyokxO+Tvlm/ZmovAdCnyUJaIadM5LHNN7GvSKZB+L/5xGOh4+G/ 1FWG/WnfRuj6KvP2AO0fzANdvQt9l6p/nnhOQg/UQ8asv6BSQbnkbs1flTYh7qeO E7A5Kzox2GxWkzk9EIkkG4NuXaFBBkvu2ZP32Q1QO4jblizHmn8bNO32fotJ7Q+a rjDsiHisXSrCfENa2UXCQhFm1ZxYsmW+ipX2e94lgEjyocK3PVt5Zlz6jrxPRWVx tI6YjExfzU6cSvQlTscwiXE2hhpMeFHA34pJDXMRRc3AciaEpJGWWA9E/EQoVKet VWIZIu2gaUdU6pn7tgqO+beVIsKBsWCa -----END CERTIFICATE-----Generated at Sun Dec 21 14:41:05 2025 by rpki-client