This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json) Hash identifier: EkErDvR5uCXjDEQZTOPSz5+7HmZoE1EJ2XVtfy9xBbg= Subject key identifier: 1E:88:DA:50:3C:BA:B1:4C:7C:FE:70:5A:9E:D0:90:F6:16:57:64:A7 Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Certificate serial: 0AF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft Manifest number: 0ADD Signing time: Sun 28 Dec 2025 18:54:52 +0000 Manifest this update: Sun 28 Dec 2025 18:54:51 +0000 Manifest next update: Sun 04 Jan 2026 18:54:51 +0000 Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: HPQchUxMx5V6kduhddciOfMOVawEJLGAmXkS6OxAfPQ=) 2: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: +qdSnSMI4Cq6GPacx1y6troGvfBHeu8mDwsrgTG91us=) 3: 676A2DE2564911F08353B443C4F9AE02.roa (hash: YM/jqlM3yjwQowPEPNTW8kWHF+17BJwpa8g+tmnEC0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2801 (0xaf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Validity Not Before: Dec 28 18:54:51 2025 GMT Not After : Jan 4 18:54:51 2026 GMT Subject: CN=69517cfc-a769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2e:7e:36:5c:27:a8:14:9b:d0:f3:a7:c8:5f: b6:50:d0:72:ae:3f:fb:d2:20:78:f9:90:f4:c0:7d: 35:9a:6d:67:6f:99:f0:f9:e4:40:3b:c3:1e:04:50: e0:4d:63:87:59:99:72:26:a1:91:fc:e1:87:6f:3e: 30:aa:3d:a0:98:68:48:b4:c6:df:83:80:22:98:34: b9:9d:b0:82:46:0e:be:7e:70:4a:b4:db:4c:cd:34: 4d:43:58:2d:50:45:53:27:37:59:59:28:74:ca:a9: 81:ea:55:1b:39:62:2e:03:e1:69:5f:4c:72:6a:7a: 2f:c6:4d:c7:2c:fb:47:b6:d8:f3:3d:cc:2b:0b:2c: 47:fd:06:8d:e4:0d:9f:02:0c:02:1e:65:c6:e0:63: f4:50:1d:c6:4e:b5:fc:30:6c:2f:5b:e8:a8:56:63: 4e:ef:6b:78:9d:ab:d2:59:ec:57:5d:55:ea:df:a9: 1a:c2:5f:3a:9f:6f:08:b6:ef:2e:b0:ba:56:97:6d: 98:06:4d:16:d8:98:02:f5:1c:14:47:46:8f:a2:bc: ac:eb:5b:68:c7:9f:35:68:46:3d:f2:28:36:11:28: a6:c4:8e:4d:bc:36:28:04:a6:12:0b:93:fe:30:28: 46:29:2a:20:0b:8f:9a:e4:40:e9:ce:34:0b:cc:95: f5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:88:DA:50:3C:BA:B1:4C:7C:FE:70:5A:9E:D0:90:F6:16:57:64:A7 X509v3 Authority Key Identifier: keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:67:f0:61:7d:f8:39:42:05:9c:2e:4d:8d:5d:32:8e:1b:ac: 0f:af:02:aa:5a:ab:92:e4:f6:bb:90:86:3e:44:21:1f:7c:36: 62:47:99:43:ff:e8:0f:27:31:86:6c:0f:89:e9:57:f3:1a:39: ba:04:ba:72:51:d9:fa:ff:00:b5:8c:a9:49:47:46:76:2e:ca: 40:8d:9d:14:46:b2:8a:07:c7:2f:23:96:fa:14:cc:e5:9b:61: df:23:0f:28:48:63:fb:2b:03:a9:e9:a8:1e:d3:5f:0a:17:d0: 38:cb:5b:ec:87:b3:dc:a9:61:11:93:2f:30:22:8d:ff:2c:40: 0e:df:21:14:b4:a1:90:73:50:74:a0:5e:9d:80:59:71:75:4d: 75:3f:f4:7e:a6:d0:70:c7:22:97:64:7f:df:92:b9:e9:66:3b: 97:b4:c9:24:d9:01:e0:df:9e:f5:7a:06:6e:e7:de:0d:59:a1: 7f:e1:f3:d8:24:ca:f3:8f:cd:08:20:50:11:4d:7e:b2:a5:fd: 5b:9c:4c:2f:76:e6:6c:82:24:37:e9:82:f0:ab:df:98:56:05: 44:b1:c4:c0:e5:59:39:8b:91:d6:a1:af:8e:c1:bb:38:d6:b9: 1e:bc:62:ea:56:93:f5:56:36:d2:da:74:6a:4f:dd:28:27:a1: a5:9a:b8:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE QUREOTZDM0QwHhcNMjUxMjI4MTg1NDUxWhcNMjYwMTA0MTg1NDUxWjAYMRYwFAYD VQQDDA02OTUxN2NmYy1hNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6i5+NlwnqBSb0POnyF+2UNByrj/70iB4+ZD0wH01mm1nb5nw+eRAO8MeBFDg TWOHWZlyJqGR/OGHbz4wqj2gmGhItMbfg4AimDS5nbCCRg6+fnBKtNtMzTRNQ1gt UEVTJzdZWSh0yqmB6lUbOWIuA+FpX0xyanovxk3HLPtHttjzPcwrCyxH/QaN5A2f AgwCHmXG4GP0UB3GTrX8MGwvW+ioVmNO72t4navSWexXXVXq36kawl86n28Itu8u sLpWl22YBk0W2JgC9RwUR0aPorys61tox581aEY98ig2ESimxI5NvDYoBKYSC5P+ MChGKSogC4+a5EDpzjQLzJX1/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6I2lA8 urFMfP5wWp7QkPYWV2SnMB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDExOC9CQjgxQTUxNDYyQkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5 MDBza1M5T1NuT19hM1piRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGZ/Bhffg5QgWcLk2NXTKOG6wPrwKqWquS5Pa7kIY+RCEffDZiR5lD /+gPJzGGbA+J6VfzGjm6BLpyUdn6/wC1jKlJR0Z2LspAjZ0URrKKB8cvI5b6FMzl m2HfIw8oSGP7KwOp6age018KF9A4y1vsh7PcqWERky8wIo3/LEAO3yEUtKGQc1B0 oF6dgFlxdU11P/R+ptBwxyKXZH/fkrnpZjuXtMkk2QHg3571egZu594NWaF/4fPY JMrzj80IIFARTX6ypf1bnEwvduZsgiQ36YLwq9+YVgVEscTA5Vk5i5HWoa+Owbs4 1rkevGLqVpP1VjbS2nRqT90oJ6Glmri4 -----END CERTIFICATE-----Generated at Mon Dec 29 23:22:03 2025 by rpki-client