This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft File: k32ZUe4fk_ysJDM7CD-dfy458Pk.mft (raw, json) Hash identifier: 2TWjyfT+vIOV/hzQemmtmLqgciii/s3c2cAxpb3znX8= Subject key identifier: 36:FA:64:79:00:C9:C1:4D:5A:DC:92:AF:8A:40:06:F0:1C:0D:E6:E7 Authority key identifier: 93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 Certificate issuer: /CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Certificate serial: 0906 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft Manifest number: 08FF Signing time: Mon 22 Dec 2025 19:42:34 +0000 Manifest this update: Mon 22 Dec 2025 19:42:33 +0000 Manifest next update: Mon 29 Dec 2025 19:42:33 +0000 Files and hashes: 1: k32ZUe4fk_ysJDM7CD-dfy458Pk.crl (hash: ERmAADLA/tfVQL8Vx4MEK1Q4zHgGBouLkd4xOqxtL90=) 2: 6A3C327ABD1711EA8A3C8E20C4F9AE02.roa (hash: chUNg5uPEOUI/4y/JkNyLjCI88SKibEBtbB6b3Giy1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2310 (0x906) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C8C4, serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Validity Not Before: Dec 22 19:42:33 2025 GMT Not After : Dec 29 19:42:33 2025 GMT Subject: CN=69499f2a-9e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f0:d4:1f:c3:c7:e6:d4:c5:d1:2e:0f:8d:f7: 10:e5:38:0f:cb:a1:e5:ad:8e:16:c9:17:24:87:1d: 76:48:33:57:60:49:f2:d2:50:15:0d:cb:a7:94:ce: 1d:65:72:3b:8a:51:59:62:a7:05:88:3c:63:fc:99: db:eb:79:54:f6:a7:69:79:95:4b:b1:ef:57:fe:17: a8:b5:09:5f:e5:15:5e:dd:db:26:14:7e:58:62:70: e1:e7:79:91:08:75:20:b9:8e:33:4d:03:f4:8a:9a: d2:86:e2:37:02:f5:3f:b9:da:54:11:0a:f5:19:2d: 4a:23:27:55:02:95:a7:c2:1b:6a:68:ca:48:f2:51: 7d:66:4b:6f:32:34:71:c4:c8:5e:8f:0b:ee:20:64: d3:91:70:3c:99:7c:13:3c:b3:da:51:8f:db:85:4d: f3:b2:98:fe:99:b5:c3:9d:4a:e6:f3:3f:ef:ed:cc: 39:e1:fd:5b:c3:a4:93:4f:88:aa:63:27:b6:24:c1: 52:c5:70:75:72:42:11:d6:f9:13:c4:27:10:23:e4: e3:bd:33:f2:43:51:f8:04:19:f0:5e:e3:4a:ea:e6: e7:9c:d7:2f:36:0c:c2:f2:d9:f3:50:60:e0:ef:a8: 5e:1f:94:b7:67:ed:13:61:d3:f2:bd:dc:69:d8:4d: 30:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FA:64:79:00:C9:C1:4D:5A:DC:92:AF:8A:40:06:F0:1C:0D:E6:E7 X509v3 Authority Key Identifier: keyid:93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3d:90:d7:38:5e:5c:b0:16:3f:4c:13:ab:24:9f:52:75:ac: 33:8d:d0:66:df:34:8e:a6:0f:3f:ed:65:a3:db:01:47:98:cf: 17:31:d1:40:39:1a:dc:e1:95:54:cb:7c:3b:7b:5f:29:de:3e: 28:33:38:36:88:9b:55:c1:d9:b7:33:f6:aa:98:e8:7c:1f:b9: 65:72:8a:eb:8e:52:fc:53:03:cc:20:13:22:92:64:49:3f:66: 3a:f7:45:e9:21:34:8e:10:2f:58:54:7e:60:26:c9:fd:77:75: 81:c1:a4:06:07:3c:03:99:0f:ed:77:6b:d1:35:81:76:c2:c1: 00:4f:6d:65:64:5c:2b:72:e1:c0:38:ca:a6:de:e5:b5:be:95: b2:8a:a6:d3:e6:af:d7:7b:83:34:94:8e:b9:26:ad:59:7e:38: 77:71:05:cb:f8:72:24:f5:06:67:a5:4d:ac:b2:0b:83:7f:9a: 9f:56:6d:c4:a1:f6:45:ee:76:b8:43:52:71:e1:40:76:cc:5e: 3e:c8:db:72:52:f6:ea:81:de:4a:c4:d0:16:e3:39:cd:da:36: 5c:9c:a3:a5:9b:ce:32:48:e8:98:fc:4f:51:c3:de:10:98:5b: 7f:70:1f:53:f9:0f:91:2b:93:6c:fd:99:0e:9e:5f:21:84:00: ef:53:06:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4QzQxMTAvBgNVBAUTKDkzN0Q5OTUxRUUxRjkzRkNBQzI0MzMzQjA4M0Y5RDdG MkUzOUYwRjkwHhcNMjUxMjIyMTk0MjMzWhcNMjUxMjI5MTk0MjMzWjAYMRYwFAYD VQQDDA02OTQ5OWYyYS05ZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fDUH8PH5tTF0S4PjfcQ5TgPy6HlrY4WyRckhx12SDNXYEny0lAVDcunlM4d ZXI7ilFZYqcFiDxj/Jnb63lU9qdpeZVLse9X/heotQlf5RVe3dsmFH5YYnDh53mR CHUguY4zTQP0iprShuI3AvU/udpUEQr1GS1KIydVApWnwhtqaMpI8lF9ZktvMjRx xMhejwvuIGTTkXA8mXwTPLPaUY/bhU3zspj+mbXDnUrm8z/v7cw54f1bw6STT4iq Yye2JMFSxXB1ckIR1vkTxCcQI+TjvTPyQ1H4BBnwXuNK6ubnnNcvNgzC8tnzUGDg 76heH5S3Z+0TYdPyvdxp2E0whQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDb6ZHkA ycFNWtySr4pABvAcDebnMB8GA1UdIwQYMBaAFJN9mVHuH5P8rCQzOwg/nX8uOfD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzhDNC9DMjQ0QzgzQUJE MTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0ZmtfeXNKRE03Q0QtZGZ5NDU4 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szMlpVZTRma195c0pETTdDRC1kZnk0NThQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzhDNC9DMjQ0QzgzQUJEMTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0Zmtf eXNKRE03Q0QtZGZ5NDU4UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOPZDXOF5csBY/TBOrJJ9SdawzjdBm3zSOpg8/7WWj2wFHmM8XMdFA ORrc4ZVUy3w7e18p3j4oMzg2iJtVwdm3M/aqmOh8H7llcorrjlL8UwPMIBMikmRJ P2Y690XpITSOEC9YVH5gJsn9d3WBwaQGBzwDmQ/td2vRNYF2wsEAT21lZFwrcuHA OMqm3uW1vpWyiqbT5q/Xe4M0lI65Jq1Zfjh3cQXL+HIk9QZnpU2ssguDf5qfVm3E ofZF7na4Q1Jx4UB2zF4+yNtyUvbqgd5KxNAW4znN2jZcnKOlm84ySOiY/E9Rw94Q mFt/cB9T+Q+RK5Ns/ZkOnl8hhADvUwYo -----END CERTIFICATE-----Generated at Tue Dec 23 12:38:54 2025 by rpki-client