This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft File: 40tPgNnj9wC8rExSxasj61t-37s.mft (raw, json) Hash identifier: bTQIGc06MhlglcKxjZoOX5lljHQV2ZFzT4JMNGeWWPA= Subject key identifier: 7C:73:1A:D0:4C:DC:2C:B6:B3:BA:D1:5E:2D:88:28:02:4B:AD:2B:56 Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft Manifest number: 019C Signing time: Sat 20 Dec 2025 22:44:32 +0000 Manifest this update: Sat 20 Dec 2025 22:44:32 +0000 Manifest next update: Sat 27 Dec 2025 22:44:32 +0000 Files and hashes: 1: 40tPgNnj9wC8rExSxasj61t-37s.crl (hash: xul87YOZE6L1tJN50GG2xwvR5r2jhe4un6hn/G/YyNM=) 2: 1E4ABC8C50C111EFA64C2437C4F9AE02.roa (hash: DiLiUTq4svYLUGh7Zlk/IkFGkuorqIquvoUuPTfglVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Validity Not Before: Dec 20 22:44:32 2025 GMT Not After : Dec 27 22:44:32 2025 GMT Subject: CN=694726d0-8034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b6:55:f8:42:bc:36:52:9b:5d:3f:c4:70:f7: 09:c8:f6:0f:5d:eb:f6:c9:ae:dd:ea:ee:29:88:e4: ad:69:0a:b0:03:70:46:77:9d:2f:b6:91:3c:5f:7b: 2a:af:50:13:14:de:5f:88:c2:5a:22:97:13:f8:8d: 04:8f:b6:ce:c5:34:d8:eb:3e:de:48:2c:95:21:50: 54:17:ba:85:37:04:bc:14:2d:e8:f4:41:18:e0:2b: 72:b4:33:5a:da:b9:00:59:8a:1e:62:dd:ab:71:eb: 02:57:c2:78:ca:b6:9e:36:38:a0:80:ab:f1:43:49: 73:56:b2:11:61:6e:01:b7:55:b0:3f:1e:20:fa:28: ee:d4:30:63:10:66:47:6e:78:70:a2:86:13:e0:38: 01:04:5b:a2:32:69:f1:fd:2d:33:b6:e2:ab:46:80: f9:cc:a4:09:25:db:a8:07:48:08:d8:13:b9:82:6d: 66:c5:36:ed:41:0a:43:a1:d6:b0:ed:7f:8a:a8:f8: 46:23:57:f3:a4:01:a6:35:95:71:94:ed:0f:a6:84: 79:4f:7e:56:be:44:8a:a7:3a:71:31:a8:c5:1b:b1: bd:a7:23:85:a5:40:4e:fc:5a:de:67:20:1d:9b:79: 2d:bb:e6:22:06:07:dc:02:ac:d2:d3:ce:ad:93:48: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:73:1A:D0:4C:DC:2C:B6:B3:BA:D1:5E:2D:88:28:02:4B:AD:2B:56 X509v3 Authority Key Identifier: keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:bb:8d:ab:8e:e6:ff:fa:28:1f:48:28:41:53:23:76:4b:d1: e1:e0:76:2c:7a:ce:30:52:50:4b:5a:c0:f5:be:fb:09:05:b1: 2c:70:93:90:6f:0b:8b:f0:81:3d:88:39:bd:04:fd:7e:6f:ba: e5:58:d8:72:a5:23:8e:06:99:e0:0f:88:e2:62:b1:29:9e:1c: 05:df:d5:39:93:95:02:d2:d7:5c:01:44:f5:45:3a:42:25:e6: 6f:d7:7c:b1:80:79:f8:67:06:34:f9:21:89:9b:f9:5f:ad:dc: 56:5f:bc:1b:37:5d:a0:dd:d0:a7:a6:82:99:48:f6:43:7d:87: b1:52:ed:75:6b:e7:72:cf:03:de:11:b2:bb:76:91:e0:4d:d5: 78:05:0a:29:42:6d:ac:0c:ad:0f:62:1d:2a:68:b1:43:44:05: 18:d0:47:0c:6c:44:72:70:3e:b3:7d:1d:25:c7:9c:f1:7b:d8: e8:7b:5c:93:20:fe:01:7a:33:15:df:20:82:fd:67:f6:3c:5f: c4:3e:8c:23:dc:36:28:e6:a3:c4:89:33:4a:44:52:4c:16:bd: d8:71:78:90:46:f1:d8:c5:ab:67:36:2f:da:f7:29:84:91:84: a4:5e:fc:cd:a7:90:3d:01:3f:0b:3b:43:ba:4c:6b:f4:09:78: 81:be:10:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKEUzNEI0RjgwRDlFM0Y3MDBCQ0FDNEM1MkM1QUIyM0VC NUI3RURGQkIwHhcNMjUxMjIwMjI0NDMyWhcNMjUxMjI3MjI0NDMyWjAYMRYwFAYD VQQDDA02OTQ3MjZkMC04MDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7ZV+EK8NlKbXT/EcPcJyPYPXev2ya7d6u4piOStaQqwA3BGd50vtpE8X3sq r1ATFN5fiMJaIpcT+I0Ej7bOxTTY6z7eSCyVIVBUF7qFNwS8FC3o9EEY4CtytDNa 2rkAWYoeYt2rcesCV8J4yraeNjiggKvxQ0lzVrIRYW4Bt1WwPx4g+iju1DBjEGZH bnhwooYT4DgBBFuiMmnx/S0ztuKrRoD5zKQJJduoB0gI2BO5gm1mxTbtQQpDodaw 7X+KqPhGI1fzpAGmNZVxlO0PpoR5T35WvkSKpzpxMajFG7G9pyOFpUBO/FreZyAd m3ktu+YiBgfcAqzS086tk0h/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxzGtBM 3Cy2s7rRXi2IKAJLrStWMB8GA1UdIwQYMBaAFONLT4DZ4/cAvKxMUsWrI+tbft+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy85NkU2Njc1QTc4 NEUxMUVFQjE5QUQzNERDNEY5QUUwMi80MHRQZ05uajl3QzhyRXhTeGFzajYxdC0z N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQwdFBnTm5qOXdDOHJFeFN4YXNqNjF0LTM3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy85NkU2Njc1QTc4NEUxMUVFQjE5QUQzNERDNEY5QUUwMi80MHRQZ05uajl3 QzhyRXhTeGFzajYxdC0zN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCou42rjub/+igfSChBUyN2S9Hh4HYses4wUlBLWsD1vvsJBbEscJOQ bwuL8IE9iDm9BP1+b7rlWNhypSOOBpngD4jiYrEpnhwF39U5k5UC0tdcAUT1RTpC JeZv13yxgHn4ZwY0+SGJm/lfrdxWX7wbN12g3dCnpoKZSPZDfYexUu11a+dyzwPe EbK7dpHgTdV4BQopQm2sDK0PYh0qaLFDRAUY0EcMbERycD6zfR0lx5zxe9joe1yT IP4BejMV3yCC/Wf2PF/EPowj3DYo5qPEiTNKRFJMFr3YcXiQRvHYxatnNi/a9ymE kYSkXvzNp5A9AT8LO0O6TGv0CXiBvhBQ -----END CERTIFICATE-----Generated at Sun Dec 21 01:50:18 2025 by rpki-client