This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft File: cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft (raw, json) Hash identifier: gcPtIR04rnwxZojK2PAfE8y1klDxNhqk8bA82XrupMc= Subject key identifier: 01:E8:2E:54:EE:6A:8A:8E:18:A3:54:80:AB:13:F1:9B:D9:27:88:4B Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 Certificate issuer: /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Certificate serial: 10D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft Manifest number: 10C8 Signing time: Thu 18 Dec 2025 17:08:45 +0000 Manifest this update: Thu 18 Dec 2025 17:08:45 +0000 Manifest next update: Thu 25 Dec 2025 17:08:45 +0000 Files and hashes: 1: cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl (hash: 7ohlEm7zgkK9sVa61xTwC6CfGk8xCkKIwf/9dggtmwc=) 2: 74087358355111E99EC82E0AC4F9AE02.roa (hash: PB0EHBaY36YHqHC7V47MMIuYWFc+4JG8rzrltMHOFuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4304 (0x10d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D49F, serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Validity Not Before: Dec 18 17:08:45 2025 GMT Not After : Dec 25 17:08:45 2025 GMT Subject: CN=6944351d-a432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:08:dc:01:3e:b7:4c:33:b2:31:84:a4:70:85: f5:8a:fd:e2:a6:58:ab:62:1e:d3:81:85:29:c4:86: 74:04:ec:72:79:a0:3f:1e:a8:2b:47:40:97:a7:cc: 3a:d0:8b:11:5d:f1:71:e4:07:ea:65:32:c2:5d:02: ea:5f:47:7a:d7:16:dc:1b:a1:f8:f7:1c:c5:52:43: 6c:a0:b6:48:af:ea:a1:82:52:fa:0c:9d:80:9d:a3: a6:2f:ce:a7:c9:55:3b:a1:0e:6b:f3:98:ce:e3:16: 77:71:2c:09:7e:41:52:70:4a:d4:a5:82:5e:7b:20: cf:01:5f:7e:2d:a2:fe:8a:c2:68:07:e5:ed:90:f3: 01:06:cd:a9:46:f5:4c:53:27:12:b8:d8:bc:97:bb: fb:e8:a1:2b:fb:c7:a6:97:60:24:4e:c9:51:37:d9: f1:ff:75:60:a3:58:1e:c4:18:ae:fa:88:61:df:a7: 94:de:6f:9a:9b:1a:e2:7d:8e:d4:ce:17:4e:ac:82: 2b:c3:8a:96:77:0d:8d:fd:ff:85:29:f3:be:d2:ca: aa:5e:67:56:5c:76:a5:bd:88:c3:91:9a:20:01:ef: 73:ba:17:91:d6:b3:7c:d3:35:c9:50:52:3a:8a:eb: 45:f7:e0:7a:14:a1:2c:ba:f0:96:a3:07:30:23:2a: 91:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E8:2E:54:EE:6A:8A:8E:18:A3:54:80:AB:13:F1:9B:D9:27:88:4B X509v3 Authority Key Identifier: keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e6:37:7a:17:8f:07:23:dd:1a:bc:b6:47:2f:10:6e:14:95: 3a:6d:d1:df:aa:63:d9:4b:24:83:3f:9c:58:29:63:4b:65:88: f2:c2:41:5e:a3:11:00:17:e0:7e:51:63:80:bb:e5:6e:b0:d5: df:e2:8d:d2:2a:00:52:1a:86:39:06:ed:b0:9c:9d:e3:1a:03: b4:c6:2b:17:cf:bd:f4:49:5d:28:6f:0d:53:e8:22:ab:4d:80: 47:53:8a:d7:51:9a:ee:4c:96:e9:83:68:00:b5:06:02:e9:3f: a8:8d:b5:fc:c8:2b:72:05:11:11:20:09:ea:dd:43:e9:bf:f5: b9:97:26:e7:89:99:96:ca:2a:e7:42:f6:b1:24:43:67:e2:38: 36:4e:e9:5c:ef:9b:60:35:75:71:df:63:c8:02:6b:59:4f:6c: a0:1b:a9:7b:0b:ea:0f:1a:e0:18:ff:2b:87:ee:59:02:75:9d: 19:ad:ea:76:4b:1f:21:af:7d:41:33:db:f8:92:cd:d6:3d:a8: c2:7a:40:a7:e7:f7:af:4b:37:08:e2:a3:75:eb:d3:e0:f9:f3: 33:22:86:a7:d8:e3:6e:f6:f0:9d:f3:ac:e4:d3:73:69:a2:5a: ef:3e:be:a7:73:51:4d:d6:57:05:44:cd:cf:2f:41:02:c1:bf: 26:d4:70:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ0OUYxMTAvBgNVBAUTKDcwN0Q0ODYwNUEwRDg1NzcyRjkwREM0QjExNzJCRUYz MDI5NEEwODcwHhcNMjUxMjE4MTcwODQ1WhcNMjUxMjI1MTcwODQ1WjAYMRYwFAYD VQQDDA02OTQ0MzUxZC1hNDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5gjcAT63TDOyMYSkcIX1iv3iplirYh7TgYUpxIZ0BOxyeaA/HqgrR0CXp8w6 0IsRXfFx5AfqZTLCXQLqX0d61xbcG6H49xzFUkNsoLZIr+qhglL6DJ2AnaOmL86n yVU7oQ5r85jO4xZ3cSwJfkFScErUpYJeeyDPAV9+LaL+isJoB+XtkPMBBs2pRvVM UycSuNi8l7v76KEr+8eml2AkTslRN9nx/3Vgo1gexBiu+ohh36eU3m+amxrifY7U zhdOrIIrw4qWdw2N/f+FKfO+0sqqXmdWXHalvYjDkZogAe9zuheR1rN80zXJUFI6 iutF9+B6FKEsuvCWowcwIyqR3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHoLlTu aoqOGKNUgKsT8ZvZJ4hLMB8GA1UdIwQYMBaAFHB9SGBaDYV3L5DcSxFyvvMClKCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDQ5Ri8wQkFDODU1NjM1 NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhYY3ZrTnhMRVhLLTh3S1Vv SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIMUlZRm9OaFhjdmtOeExFWEstOHdLVW9JYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDQ5Ri8wQkFDODU1NjM1NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhY Y3ZrTnhMRVhLLTh3S1VvSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs5jd6F48HI90avLZHLxBuFJU6bdHfqmPZSySDP5xYKWNLZYjywkFe oxEAF+B+UWOAu+VusNXf4o3SKgBSGoY5Bu2wnJ3jGgO0xisXz730SV0obw1T6CKr TYBHU4rXUZruTJbpg2gAtQYC6T+ojbX8yCtyBRERIAnq3UPpv/W5lybniZmWyirn QvaxJENn4jg2Tulc75tgNXVx32PIAmtZT2ygG6l7C+oPGuAY/yuH7lkCdZ0Zrep2 Sx8hr31BM9v4ks3WPajCekCn5/evSzcI4qN169Pg+fMzIoan2ONu9vCd86zk03Np olrvPr6nc1FN1lcFRM3PL0ECwb8m1HC4 -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:40 2025 by rpki-client