This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft File: racwBjpGGMJtFVQ1gZU7AYX9nIU.mft (raw, json) Hash identifier: emcGsdggPVCeFLBIgpRnRUtwGrbcWgc6k+tObWprFX4= Subject key identifier: A7:D1:C2:F7:CE:BB:B2:3C:57:2A:5B:51:CC:4B:6A:C6:45:4B:56:18 Authority key identifier: AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85 Certificate issuer: /CN=A9199231/serialNumber=ADA730063A4618C26D15543581953B0185FD9C85 Certificate serial: 07A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft Manifest number: 1325 Signing time: Thu 18 Dec 2025 18:41:58 +0000 Manifest this update: Thu 18 Dec 2025 18:41:57 +0000 Manifest next update: Thu 25 Dec 2025 18:41:57 +0000 Files and hashes: 1: racwBjpGGMJtFVQ1gZU7AYX9nIU.crl (hash: 8sT/8+0d5usASqDSMXpS5OKUOFoLmtB0vRuTba3UvrI=) 2: 84DF7DDE361211EBACEF8647C4F9AE02.roa (hash: 3j6fcjarkwTsrFF+jI5l1fkUVOMv+A+fXywGLnEk9ME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199231, serialNumber=ADA730063A4618C26D15543581953B0185FD9C85 Validity Not Before: Dec 18 18:41:57 2025 GMT Not After : Dec 25 18:41:57 2025 GMT Subject: CN=69444af5-75be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:e3:a5:9e:91:f6:4f:44:f6:5b:fc:b4:fe: 89:84:a1:71:5b:2b:8c:56:2c:0a:c4:59:e2:57:bd: 5a:fd:14:71:da:e9:d6:1f:c4:eb:44:ca:18:9a:a2: 70:e7:67:53:9b:ea:a3:10:4e:31:49:b6:5f:93:8b: 31:93:cd:52:53:65:84:5f:9f:05:ae:40:bc:1f:6d: 2b:38:ad:df:96:2e:47:ac:da:5a:1c:2a:68:18:73: a7:61:be:2e:fc:4d:66:e3:e2:75:14:4f:6e:06:b2: 2c:af:40:ba:73:2c:af:d9:0a:19:43:d7:10:85:af: d4:5a:1a:25:75:77:86:c2:15:a0:ed:d2:bd:a7:6b: 96:c1:e2:9f:cd:e6:5e:d2:5b:6a:0c:7a:15:d4:9c: af:91:7f:57:dd:c5:c5:7c:3f:1f:b3:4e:d2:ac:2d: 39:7b:87:72:8c:9c:17:5d:74:84:dc:f9:d5:13:75: f6:a3:c5:af:42:7b:31:a7:01:cf:37:ff:2f:2a:62: 89:79:ce:dc:1b:c8:3b:37:ce:8f:07:70:de:c7:80: 8d:3b:9f:bd:f8:d7:72:f7:fa:02:2b:e0:47:d6:19: 87:52:0e:bd:70:9c:84:56:df:66:27:19:36:0f:ba: 2d:f9:4e:a8:8b:cd:d4:30:8a:bf:9b:e0:35:04:e6: be:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D1:C2:F7:CE:BB:B2:3C:57:2A:5B:51:CC:4B:6A:C6:45:4B:56:18 X509v3 Authority Key Identifier: keyid:AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:ad:d3:1d:70:a2:cb:68:91:e4:f3:e8:54:53:22:e8:bd:f6: 5a:25:43:af:09:d4:88:d5:34:7a:e6:27:3e:5f:2d:b3:03:3e: ea:59:2f:14:c9:21:86:20:74:fd:bd:98:5a:13:1e:e1:f5:95: 0e:08:35:2b:37:b5:6c:dd:b0:48:a8:81:72:fa:fb:76:b4:83: e3:c0:2e:87:a5:bf:b3:b3:d1:81:6d:66:80:51:f9:7e:4f:d6: b8:2a:87:38:89:11:33:36:58:dc:d9:33:fb:82:2e:ec:8e:88: 70:af:a0:46:61:f5:da:6c:9b:55:87:c6:ac:9e:81:5b:ea:c9: 7d:bf:2c:3e:18:76:05:86:42:86:27:83:88:66:fa:a1:3a:e0: f7:21:71:b6:fb:23:0a:9b:b3:be:f6:8c:0a:ab:14:93:0d:ac: 16:d0:fb:bd:ae:30:06:2d:08:0f:77:c4:87:1e:3f:d7:0c:f4: 4e:ac:97:47:01:33:bf:9e:23:e4:ee:c2:f5:69:52:0c:46:7f: 65:e4:a6:e6:a4:c7:ab:d6:95:ea:b2:2d:77:5a:51:cf:dc:46: 27:07:a0:74:5d:f6:14:bd:1b:a3:80:e6:43:57:16:1b:1f:bc: d8:3d:62:b8:3f:42:ab:0f:99:56:79:d0:bc:77:25:1e:cf:bc: 3c:2b:eb:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkyMzExMTAvBgNVBAUTKEFEQTczMDA2M0E0NjE4QzI2RDE1NTQzNTgxOTUzQjAx ODVGRDlDODUwHhcNMjUxMjE4MTg0MTU3WhcNMjUxMjI1MTg0MTU3WjAYMRYwFAYD VQQDDA02OTQ0NGFmNS03NWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWLjpZ6R9k9E9lv8tP6JhKFxWyuMViwKxFniV71a/RRx2unWH8TrRMoYmqJw 52dTm+qjEE4xSbZfk4sxk81SU2WEX58FrkC8H20rOK3fli5HrNpaHCpoGHOnYb4u /E1m4+J1FE9uBrIsr0C6cyyv2QoZQ9cQha/UWholdXeGwhWg7dK9p2uWweKfzeZe 0ltqDHoV1JyvkX9X3cXFfD8fs07SrC05e4dyjJwXXXSE3PnVE3X2o8WvQnsxpwHP N/8vKmKJec7cG8g7N86PB3Dex4CNO5+9+Ndy9/oCK+BH1hmHUg69cJyEVt9mJxk2 D7ot+U6oi83UMIq/m+A1BOa+AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfRwvfO u7I8VypbUcxLasZFS1YYMB8GA1UdIwQYMBaAFK2nMAY6RhjCbRVUNYGVOwGF/ZyF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTIzMS8wOEZEQ0Q1MDND ODExMUVBODIwRDdGNDlDNEY5QUUwMi9yYWN3QmpwR0dNSnRGVlExZ1pVN0FZWDlu SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhY3dCanBHR01KdEZWUTFnWlU3QVlYOW5JVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTIzMS8wOEZEQ0Q1MDNDODExMUVBODIwRDdGNDlDNEY5QUUwMi9yYWN3QmpwR0dN SnRGVlExZ1pVN0FZWDluSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCprdMdcKLLaJHk8+hUUyLovfZaJUOvCdSI1TR65ic+Xy2zAz7qWS8U ySGGIHT9vZhaEx7h9ZUOCDUrN7Vs3bBIqIFy+vt2tIPjwC6Hpb+zs9GBbWaAUfl+ T9a4Koc4iREzNljc2TP7gi7sjohwr6BGYfXabJtVh8asnoFb6sl9vyw+GHYFhkKG J4OIZvqhOuD3IXG2+yMKm7O+9owKqxSTDawW0Pu9rjAGLQgPd8SHHj/XDPROrJdH ATO/niPk7sL1aVIMRn9l5KbmpMer1pXqsi13WlHP3EYnB6B0XfYUvRujgOZDVxYb H7zYPWK4P0KrD5lWedC8dyUez7w8K+t6 -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:16 2025 by rpki-client