This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft File: aFCqv5vavya_oJKDAh_pE9aVbjI.mft (raw, json) Hash identifier: LYEItZkT/WCIMyyu25BnODV7w7ryiFZMaqKSkvYSEJg= Subject key identifier: 86:67:D3:C7:A3:65:8E:66:9F:C1:5B:FB:63:F5:DD:CB:09:82:BA:F3 Authority key identifier: 68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32 Certificate issuer: /CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32 Certificate serial: 1373 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft Manifest number: 1362 Signing time: Sat 20 Dec 2025 16:45:22 +0000 Manifest this update: Sat 20 Dec 2025 16:45:22 +0000 Manifest next update: Sat 27 Dec 2025 16:45:22 +0000 Files and hashes: 1: aFCqv5vavya_oJKDAh_pE9aVbjI.crl (hash: cIBmhR2Jv5SNjYQJdgNuklIUkTsAOAYbUuGO8ldA4gg=) 2: 583F2920A6E611EF9BD0C728C4F9AE02.roa (hash: 2Gji4G+Q8to0sVMvyUq5wjYv71c4JLksDjj2P3IW/B4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4979 (0x1373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F978, serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32 Validity Not Before: Dec 20 16:45:22 2025 GMT Not After : Dec 27 16:45:22 2025 GMT Subject: CN=6946d2a2-4498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:19:f2:c6:12:1d:d5:4d:9b:1b:20:75:b7: 1a:da:b3:2c:bf:7a:13:76:fe:97:aa:41:aa:07:b9: 6f:fe:c2:b0:e4:a5:85:6c:44:0a:98:c5:e5:f5:d0: b8:0d:61:c0:81:98:17:e6:67:43:ac:ed:f4:1d:e1: a0:66:4c:0c:c6:a4:a7:d1:d1:c0:dc:b2:91:89:4d: 3b:5f:e5:d2:2b:97:1a:85:36:8c:4b:70:10:bf:25: fc:70:a9:72:ca:26:80:a2:05:73:b2:53:54:2b:b7: 8d:cb:65:19:61:bf:a4:fd:c0:86:fe:93:7f:86:de: a5:44:eb:aa:f4:6e:ed:d6:2c:50:36:a7:8f:8b:3c: 40:7b:e1:18:89:c7:6e:f0:bb:3d:a0:b2:d1:2e:58: 06:78:74:e3:70:a8:d4:94:cd:76:6c:1f:1c:d7:5b: 56:6f:91:eb:c2:c0:ed:e2:48:ec:87:fb:dc:f1:b0: be:6d:a1:b4:80:1f:f4:f2:a1:f8:b2:31:96:2e:0b: 26:2b:2d:23:dd:da:fb:61:8e:d3:01:e7:94:05:14: 64:fc:8a:85:4c:f7:34:03:79:3b:cd:57:95:cd:b2: 67:27:aa:0b:e9:73:e3:42:68:d1:41:71:d3:f0:9e: 94:c2:13:ac:5a:ff:f3:1b:15:ee:53:b1:d2:17:f5: d5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:67:D3:C7:A3:65:8E:66:9F:C1:5B:FB:63:F5:DD:CB:09:82:BA:F3 X509v3 Authority Key Identifier: keyid:68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:25:ff:82:b3:2b:95:c2:cc:96:86:be:2f:dc:52:64:cf:ef: df:b2:c6:29:12:6e:7a:43:62:7b:4c:22:0b:de:00:67:cb:cb: d5:c7:76:42:e4:0a:5d:3c:eb:81:f0:ed:09:7e:3a:33:1f:e1: 17:bc:90:1e:3f:ae:60:5e:b4:61:cf:be:73:61:08:76:c2:12: 51:2d:a9:df:5a:43:23:0d:3b:01:5b:d2:97:48:d8:9c:cd:f7: 7f:cb:d9:27:69:a2:a2:3b:b9:13:cd:c5:a0:a0:68:9c:11:f5: 99:e3:c5:ba:7c:ee:db:5a:1d:6e:44:fb:9f:a4:10:a4:b8:14: d9:fa:31:87:b0:14:f8:26:3a:71:c8:fc:80:c6:64:c9:7b:19: d3:4c:1d:6b:98:bb:84:ed:6a:c8:3d:c2:49:dd:a4:3a:df:d0: 6d:9c:5f:5c:66:54:0a:b1:9d:e6:7f:ad:d3:a5:a2:c0:0a:6a: b1:c3:b1:eb:70:53:f1:6a:97:7c:c0:86:84:00:11:95:c6:49: 7f:19:d0:2c:81:5e:fb:55:d2:82:cb:9c:b8:16:1a:91:80:d4: 92:4b:2e:04:c6:d2:d0:ab:bc:12:d8:3b:b5:70:9f:af:48:65: 84:77:9b:9d:10:97:2f:d6:70:46:ed:26:28:05:0a:b4:49:d8: e5:d9:b2:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY5NzgxMTAvBgNVBAUTKDY4NTBBQUJGOUJEQUJGMjZCRkEwOTI4MzAyMUZFOTEz RDY5NTZFMzIwHhcNMjUxMjIwMTY0NTIyWhcNMjUxMjI3MTY0NTIyWjAYMRYwFAYD VQQDDA02OTQ2ZDJhMi00NDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3UZ8sYSHdVNmxsgdbca2rMsv3oTdv6XqkGqB7lv/sKw5KWFbEQKmMXl9dC4 DWHAgZgX5mdDrO30HeGgZkwMxqSn0dHA3LKRiU07X+XSK5cahTaMS3AQvyX8cKly yiaAogVzslNUK7eNy2UZYb+k/cCG/pN/ht6lROuq9G7t1ixQNqePizxAe+EYicdu 8Ls9oLLRLlgGeHTjcKjUlM12bB8c11tWb5HrwsDt4kjsh/vc8bC+baG0gB/08qH4 sjGWLgsmKy0j3dr7YY7TAeeUBRRk/IqFTPc0A3k7zVeVzbJnJ6oL6XPjQmjRQXHT 8J6UwhOsWv/zGxXuU7HSF/XVUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZn08ej ZY5mn8Fb+2P13csJgrrzMB8GA1UdIwQYMBaAFGhQqr+b2r8mv6CSgwIf6RPWlW4y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjk3OC83RTIyQjM3NEI2 OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5YV9vSktEQWhfcEU5YVZi akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FGQ3F2NXZhdnlhX29KS0RBaF9wRTlhVmJqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjk3OC83RTIyQjM3NEI2OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5 YV9vSktEQWhfcEU5YVZiakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuJf+CsyuVwsyWhr4v3FJkz+/fssYpEm56Q2J7TCIL3gBny8vVx3ZC 5ApdPOuB8O0JfjozH+EXvJAeP65gXrRhz75zYQh2whJRLanfWkMjDTsBW9KXSNic zfd/y9knaaKiO7kTzcWgoGicEfWZ48W6fO7bWh1uRPufpBCkuBTZ+jGHsBT4Jjpx yPyAxmTJexnTTB1rmLuE7WrIPcJJ3aQ639BtnF9cZlQKsZ3mf63TpaLACmqxw7Hr cFPxapd8wIaEABGVxkl/GdAsgV77VdKCy5y4FhqRgNSSSy4ExtLQq7wS2Du1cJ+v SGWEd5udEJcv1nBG7SYoBQq0Sdjl2bLd -----END CERTIFICATE-----Generated at Sun Dec 21 15:21:47 2025 by rpki-client