This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: jGfTeDgtW42g0R4HhTtCCJ5B6nPleqwkmq4zdQC7BQc= Subject key identifier: 26:CF:E6:A7:61:7D:50:12:E5:BA:3D:E2:34:79:A9:1E:EA:A7:F1:86 Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 059D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 0589 Signing time: Sat 20 Dec 2025 22:36:47 +0000 Manifest this update: Sat 20 Dec 2025 22:36:47 +0000 Manifest next update: Sat 27 Dec 2025 22:36:47 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: PjBN6hwqHA1Pyt2ft3rszRbi93Jj8mj0MzfUl/5PZAM=) 2: F307B7F4912A11F0B418B448C4F9AE02.roa (hash: yjx/NrxzZgDiEgxVTNY6l8PB/PX5P1BrG3zGpxB5GDo=) 3: 27023558912A11F09F7D4044C4F9AE02.roa (hash: +v5rysmnVhOkTUg6d0tgPtn6VplDudh8Q8DnVgzZQm0=) 4: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: QC4EhNSXvJgfmvNa3iGuDkLhBq1A6Ut/uA6vL0hAWZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Dec 20 22:36:47 2025 GMT Not After : Dec 27 22:36:47 2025 GMT Subject: CN=694724ff-41a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fb:b8:fa:25:16:aa:fa:d1:65:92:79:46:0c: a3:04:c8:ce:37:17:8e:1e:d1:e9:44:f5:4d:c8:4d: 43:dd:01:8e:bc:01:12:e0:44:bd:b6:b5:95:1a:91: 32:0f:d0:e1:96:df:c8:04:86:18:c7:d8:82:dc:c1: 98:10:45:eb:88:ff:4c:62:c6:3b:24:8a:8c:7d:99: 15:50:09:64:5f:ef:45:ff:a6:63:70:ae:79:88:51: b1:c2:68:d1:3c:f1:94:55:08:9c:49:22:7e:e9:6c: fb:bc:b0:13:07:5a:40:96:48:b5:01:d7:49:f9:89: b8:16:0f:38:97:d1:58:e1:6a:9f:b5:9e:f9:a1:17: c3:0b:51:fc:15:12:f1:8f:6e:15:90:43:0e:a5:f0: fd:b9:7a:05:5d:8b:bc:99:bf:8f:ff:72:01:27:97: 44:8c:b0:69:cc:ec:d2:48:4d:29:a3:1f:f2:93:a2: c0:a4:76:a4:76:0c:37:c2:32:12:dc:ea:21:40:fa: 8f:f0:b6:02:c7:b3:94:26:60:3d:8e:0b:5f:90:85: 48:51:83:93:ac:42:b9:71:be:0b:5e:66:9b:27:96: 43:97:08:73:95:19:e5:9f:92:4f:b8:86:0e:ac:68: b3:0f:1b:82:50:4c:e8:3e:4f:0c:01:ad:a3:ae:37: 4e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CF:E6:A7:61:7D:50:12:E5:BA:3D:E2:34:79:A9:1E:EA:A7:F1:86 X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:e2:0c:43:c0:e5:d4:80:ce:39:6d:f8:43:f4:66:db:fb:c0: 14:18:02:2b:28:54:0b:fa:ae:8b:a3:d6:5f:02:b8:c6:1c:ea: 1c:15:d8:36:66:94:c7:3b:5e:0a:20:b9:70:87:a9:41:aa:25: b2:8c:03:ac:bd:86:fa:c5:9e:bb:51:a7:84:2f:5b:c1:90:24: a5:fe:fa:f1:1c:2e:46:07:3f:f4:a0:10:ec:5d:14:1c:1f:26: f1:08:92:ad:ec:18:d3:53:be:a8:6a:2c:32:d3:d8:4f:34:e1: 1a:4e:17:5d:a5:9b:12:34:26:b1:ed:62:65:9d:38:ff:4c:da: 6f:db:99:5a:b4:00:2c:de:6b:76:f9:5c:81:c7:83:a4:62:17: 86:8a:c0:f8:ca:c5:d1:d6:7b:4d:bc:0e:c2:d5:82:90:2f:94: 2f:8c:ca:1f:f8:e4:c8:d0:63:ea:90:21:1e:d8:cf:18:ec:cf: 3d:7c:e7:c9:52:ff:d6:5b:48:c8:f0:95:3c:e9:76:3f:e3:26: ae:a1:71:d5:04:a8:45:73:e2:b1:a4:a6:07:7c:8f:e4:37:a2: 50:7a:26:d7:13:3a:e0:3b:21:60:36:45:f8:34:88:ae:7b:ef: 95:ec:3e:68:81:78:8d:ab:36:a2:12:4d:75:09:56:69:44:54: b2:97:89:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjUxMjIwMjIzNjQ3WhcNMjUxMjI3MjIzNjQ3WjAYMRYwFAYD VQQDDA02OTQ3MjRmZi00MWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovu4+iUWqvrRZZJ5RgyjBMjONxeOHtHpRPVNyE1D3QGOvAES4ES9trWVGpEy D9Dhlt/IBIYYx9iC3MGYEEXriP9MYsY7JIqMfZkVUAlkX+9F/6ZjcK55iFGxwmjR PPGUVQicSSJ+6Wz7vLATB1pAlki1AddJ+Ym4Fg84l9FY4WqftZ75oRfDC1H8FRLx j24VkEMOpfD9uXoFXYu8mb+P/3IBJ5dEjLBpzOzSSE0pox/yk6LApHakdgw3wjIS 3OohQPqP8LYCx7OUJmA9jgtfkIVIUYOTrEK5cb4LXmabJ5ZDlwhzlRnln5JPuIYO rGizDxuCUEzoPk8MAa2jrjdOLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbP5qdh fVAS5bo94jR5qR7qp/GGMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx4gxDwOXUgM45bfhD9Gbb+8AUGAIrKFQL+q6Lo9ZfArjGHOocFdg2 ZpTHO14KILlwh6lBqiWyjAOsvYb6xZ67UaeEL1vBkCSl/vrxHC5GBz/0oBDsXRQc HybxCJKt7BjTU76oaiwy09hPNOEaThddpZsSNCax7WJlnTj/TNpv25latAAs3mt2 +VyBx4OkYheGisD4ysXR1ntNvA7C1YKQL5QvjMof+OTI0GPqkCEe2M8Y7M89fOfJ Uv/WW0jI8JU86XY/4yauoXHVBKhFc+KxpKYHfI/kN6JQeibXEzrgOyFgNkX4NIiu e++V7D5ogXiNqzaiEk11CVZpRFSyl4lP -----END CERTIFICATE-----Generated at Sun Dec 21 02:59:18 2025 by rpki-client