This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json) Hash identifier: z5i7ns00hfnjOczQOtYHAUgldGGU4v9z8hN5Eu78Jxc= Subject key identifier: 7D:9A:15:B5:6C:EE:FA:09:78:B1:E8:E9:FD:DF:99:6F:7F:38:A4:BF Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Certificate serial: 0673 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft Manifest number: 066E Signing time: Wed 24 Dec 2025 21:49:40 +0000 Manifest this update: Wed 24 Dec 2025 21:49:40 +0000 Manifest next update: Wed 31 Dec 2025 21:49:40 +0000 Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: RQcgaR3EUSFKOSZHkEsumULLuvDCo0k3vyT8m1W6OXQ=) 2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: otn7zJrk0PPbtnlH9qLQ0UvTzJRXUBW5NBaU6fJKloc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 21:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1651 (0x673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Validity Not Before: Dec 24 21:49:40 2025 GMT Not After : Dec 31 21:49:40 2025 GMT Subject: CN=694c5ff4-1fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:18:55:ec:93:be:9e:4f:9b:49:fe:00:d2: 5d:43:67:1e:9f:86:9a:92:49:7c:b8:d1:e0:e0:ce: 2f:3b:a9:a7:de:2a:87:13:9c:66:ad:74:5b:66:f4: 4e:2a:d9:b2:8d:56:2a:e2:83:89:a2:98:44:a7:0c: d7:5e:0c:29:a5:8e:db:a7:a4:59:2d:ab:a5:8e:ad: 3b:5f:6c:47:f0:d2:cb:e2:f6:5a:82:3c:c9:93:be: 0e:a1:3c:eb:e8:8d:2c:c2:97:23:89:ca:74:a0:85: 77:f4:25:91:41:a5:d7:82:55:e5:e5:a8:0a:7f:fe: e6:8a:67:29:cf:f5:c4:a1:6a:0d:d0:70:1c:7a:c6: 41:83:5f:0c:d2:d2:9d:c4:b3:9d:00:bc:9a:70:e6: a2:9f:7c:33:02:2e:67:03:5b:0b:a9:ba:e3:e8:52: bf:d5:dc:b5:b4:08:b1:af:ad:f8:e6:18:83:eb:50: 30:09:7d:8a:56:6e:3c:d3:6e:fe:38:d9:03:27:6d: 2c:40:25:5e:ff:4f:28:27:fb:a5:29:43:3a:e0:36: d4:28:b0:12:3a:e3:e8:3d:75:6c:6d:c7:e7:f6:3c: be:fb:c2:03:61:e1:e1:7f:ef:bd:cd:b6:7e:01:d2: c5:bf:df:d5:ff:5b:15:00:3d:0b:a9:02:10:5e:ef: dc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9A:15:B5:6C:EE:FA:09:78:B1:E8:E9:FD:DF:99:6F:7F:38:A4:BF X509v3 Authority Key Identifier: keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e3:e1:5e:e1:96:15:28:8c:12:c7:11:a0:af:52:d3:c0:c0: 93:ea:1e:38:0c:3a:6b:76:f8:24:18:94:ff:2d:ea:58:3d:11: 56:4d:8d:5d:a4:f3:84:db:f2:b9:5d:83:2b:4f:42:aa:bb:26: 21:83:bf:a4:6e:25:55:92:57:06:6a:ee:56:b5:c1:80:f6:11: 48:a1:ea:5c:36:76:99:f1:4f:83:5e:f0:a2:0a:dd:58:50:ae: e4:60:02:4f:f6:3c:cd:8d:11:c3:c7:fd:3d:05:cd:87:5f:96: b4:f7:38:f4:c4:ff:f8:db:69:d7:ea:de:59:04:bf:ac:99:9e: 0e:19:8f:fd:13:f3:68:7e:a2:a4:c7:5c:17:eb:7a:6d:1c:9f: ba:98:04:b5:9a:35:00:5f:3c:25:4b:63:e1:41:66:f8:8c:45: 05:aa:f7:a3:71:53:bf:97:0d:88:8f:a2:77:14:9b:b6:5a:f8: 0a:70:13:2e:a7:92:c9:51:44:74:40:04:0c:a8:84:ef:d9:d9: 17:82:66:67:7e:ea:dc:58:2a:1d:17:9d:9d:9e:5a:c0:28:c4: 87:b6:6e:2e:2f:08:4a:ff:57:a7:63:e9:ae:9a:23:25:f2:58: d0:4f:b8:4a:9f:61:f3:fc:29:7f:37:1d:aa:83:8f:c5:d5:a9: 49:a9:52:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3NUQxMTAvBgNVBAUTKDcwNTEyQjNEMzJEMDVEQzMyNTQxRTk4RTU3NUEzMUM1 MzIwNzM2NDgwHhcNMjUxMjI0MjE0OTQwWhcNMjUxMjMxMjE0OTQwWjAYMRYwFAYD VQQDDA02OTRjNWZmNC0xZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOYYVeyTvp5Pm0n+ANJdQ2cen4aakkl8uNHg4M4vO6mn3iqHE5xmrXRbZvRO KtmyjVYq4oOJophEpwzXXgwppY7bp6RZLauljq07X2xH8NLL4vZagjzJk74OoTzr 6I0swpcjicp0oIV39CWRQaXXglXl5agKf/7mimcpz/XEoWoN0HAcesZBg18M0tKd xLOdALyacOain3wzAi5nA1sLqbrj6FK/1dy1tAixr6345hiD61AwCX2KVm48027+ ONkDJ20sQCVe/08oJ/ulKUM64DbUKLASOuPoPXVsbcfn9jy++8IDYeHhf++9zbZ+ AdLFv9/V/1sVAD0LqQIQXu/cKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2aFbVs 7voJeLHo6f3fmW9/OKS/MB8GA1UdIwQYMBaAFHBRKz0y0F3DJUHpjldaMcUyBzZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc1RC83RTI3MkY3Q0E2 ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhjTWxRZW1PVjFveHhUSUhO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGRXJQVExRWGNNbFFlbU9WMW94eFRJSE5rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDc1RC83RTI3MkY3Q0E2ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhj TWxRZW1PVjFveHhUSUhOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb4+Fe4ZYVKIwSxxGgr1LTwMCT6h44DDprdvgkGJT/LepYPRFWTY1d pPOE2/K5XYMrT0KquyYhg7+kbiVVklcGau5WtcGA9hFIoepcNnaZ8U+DXvCiCt1Y UK7kYAJP9jzNjRHDx/09Bc2HX5a09zj0xP/422nX6t5ZBL+smZ4OGY/9E/NofqKk x1wX63ptHJ+6mAS1mjUAXzwlS2PhQWb4jEUFqvejcVO/lw2Ij6J3FJu2WvgKcBMu p5LJUUR0QAQMqITv2dkXgmZnfurcWCodF52dnlrAKMSHtm4uLwhK/1enY+mumiMl 8ljQT7hKn2Hz/Cl/Nx2qg4/F1alJqVI0 -----END CERTIFICATE-----Generated at Thu Dec 25 05:15:53 2025 by rpki-client