This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft File: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft (raw, json) Hash identifier: BPJ2f2AbPI+jfm0ejp0Fnk2/12G+atHRUpq1cwTr8I8= Subject key identifier: C2:62:D6:4C:BB:C9:24:C4:59:A9:13:64:22:05:9F:83:1A:4B:8D:E8 Authority key identifier: A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE Certificate issuer: /CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Certificate serial: 0995 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft Manifest number: 098F Signing time: Thu 18 Dec 2025 19:35:53 +0000 Manifest this update: Thu 18 Dec 2025 19:35:53 +0000 Manifest next update: Thu 25 Dec 2025 19:35:53 +0000 Files and hashes: 1: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl (hash: 3u71a3bJ+xK9gobynrM6NAobdTOss0IfPgWqZFtUNeI=) 2: 2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa (hash: McDtUaMk7e01xsshJ/22xBrdGiD8USZ0rSk/8TzyXxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2453 (0x995) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FF9D, serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Validity Not Before: Dec 18 19:35:53 2025 GMT Not After : Dec 25 19:35:53 2025 GMT Subject: CN=69445799-65e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:06:d9:e4:b1:f2:3a:a3:40:d8:3d:c2:71: 6f:18:c1:ed:45:d4:10:9a:79:0d:5a:5d:5e:91:c9: b7:e9:90:c7:e9:13:29:f0:92:b3:aa:2a:ef:22:6b: ee:4a:89:4a:a4:da:ee:b0:b8:a4:b3:5f:12:4f:ff: f6:fe:19:df:9a:c9:d6:f0:5a:e8:52:fa:f5:e9:b3: da:b1:11:a2:9c:cf:61:9a:4a:e2:de:da:89:7f:bb: 63:6a:9b:23:46:86:39:39:a0:1e:83:c4:8d:ec:9b: 53:9c:af:df:56:95:c8:f6:23:1d:a5:87:e6:83:0e: ae:a9:8d:4a:79:ab:6c:34:ec:cc:36:4c:88:c9:e0: de:b8:22:6b:d0:81:34:b5:ea:ac:68:06:7a:d1:44: 4e:ec:62:5b:ad:81:b7:67:fd:04:37:4d:2c:62:45: f1:95:e0:cc:e8:03:9d:30:bc:2d:10:2c:d5:92:bf: 7c:0c:2d:b9:86:8d:74:a3:c2:ef:a7:1f:c7:d4:ad: a5:a9:9b:c2:96:50:8d:59:ad:c7:7d:2f:29:9c:9b: a2:29:5a:67:d7:fb:2d:df:79:fb:fa:81:b0:1e:1c: eb:ff:cb:fb:cb:db:b4:17:cc:63:d2:7b:01:48:49: dc:89:37:6b:d5:69:55:95:8e:8c:05:6b:b9:4a:d5: 17:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:62:D6:4C:BB:C9:24:C4:59:A9:13:64:22:05:9F:83:1A:4B:8D:E8 X509v3 Authority Key Identifier: keyid:A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:52:57:62:33:fe:44:a8:81:a0:eb:d0:e8:c6:bb:03:30:20: 15:0d:23:17:fe:22:de:62:d2:6d:34:23:29:9d:48:c7:bd:47: f1:06:eb:86:83:16:56:5f:4a:af:54:82:75:3f:58:1b:63:aa: b7:9a:8f:4a:ce:f4:01:c0:90:32:3e:12:71:93:f1:88:8c:3e: 52:f6:10:43:53:c2:cb:31:60:4d:76:0c:ca:6d:6e:d5:5b:3c: 44:78:1f:a9:7e:7d:10:5e:83:6a:94:8a:73:30:4a:c3:37:6b: b0:3a:2e:c3:78:18:be:71:b1:a7:74:60:9f:b5:1d:83:6e:74: f9:73:08:37:88:0f:d8:9c:6c:19:dd:6a:56:e0:03:93:43:91: 64:57:de:41:19:ed:05:63:6c:8c:58:4a:64:41:ed:06:57:48: 7c:a2:8e:db:09:ef:dd:31:f0:6a:17:7f:45:68:44:dd:8b:7f: 90:1f:c0:e7:d5:7f:2b:d4:a8:0a:b6:b6:09:d5:a8:62:88:8f: 76:21:42:d5:e8:f2:d6:65:54:7d:2a:1b:4f:0e:fa:86:29:8b: 17:9f:f4:48:7c:a8:2e:c4:8d:40:51:44:0d:22:28:c0:c0:a6: 74:fa:ef:18:36:62:7f:d6:82:ab:47:fa:94:d0:ec:c3:64:50: 76:d9:13:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZGOUQxMTAvBgNVBAUTKEE1RkU1MTI5RDQ4MUVEMUEwMEU1NUU5OUNFMzBFMDA4 QjYzRDZDRUUwHhcNMjUxMjE4MTkzNTUzWhcNMjUxMjI1MTkzNTUzWjAYMRYwFAYD VQQDDA02OTQ0NTc5OS02NWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1AG2eSx8jqjQNg9wnFvGMHtRdQQmnkNWl1ekcm36ZDH6RMp8JKzqirvImvu SolKpNrusLiks18ST//2/hnfmsnW8FroUvr16bPasRGinM9hmkri3tqJf7tjapsj RoY5OaAeg8SN7JtTnK/fVpXI9iMdpYfmgw6uqY1KeatsNOzMNkyIyeDeuCJr0IE0 teqsaAZ60URO7GJbrYG3Z/0EN00sYkXxleDM6AOdMLwtECzVkr98DC25ho10o8Lv px/H1K2lqZvCllCNWa3HfS8pnJuiKVpn1/st33n7+oGwHhzr/8v7y9u0F8xj0nsB SEnciTdr1WlVlY6MBWu5StUXNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJi1ky7 ySTEWakTZCIFn4MaS43oMB8GA1UdIwQYMBaAFKX+USnUge0aAOVemc4w4Ai2PWzu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkY5RC9DRjg2RDU4QTlG RTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdSb0E1VjZaempEZ0NMWTli TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmNVJLZFNCN1JvQTVWNlp6akRnQ0xZOWJPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkY5RC9DRjg2RDU4QTlGRTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdS b0E1VjZaempEZ0NMWTliTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcUldiM/5EqIGg69DoxrsDMCAVDSMX/iLeYtJtNCMpnUjHvUfxBuuG gxZWX0qvVIJ1P1gbY6q3mo9KzvQBwJAyPhJxk/GIjD5S9hBDU8LLMWBNdgzKbW7V WzxEeB+pfn0QXoNqlIpzMErDN2uwOi7DeBi+cbGndGCftR2DbnT5cwg3iA/YnGwZ 3WpW4AOTQ5FkV95BGe0FY2yMWEpkQe0GV0h8oo7bCe/dMfBqF39FaETdi3+QH8Dn 1X8r1KgKtrYJ1ahiiI92IULV6PLWZVR9KhtPDvqGKYsXn/RIfKguxI1AUUQNIijA wKZ0+u8YNmJ/1oKrR/qU0OzDZFB22RNq -----END CERTIFICATE-----Generated at Fri Dec 19 21:59:44 2025 by rpki-client