This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft File: R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json) Hash identifier: 7LYDxkbohenDoOG2wAlWNfD4Q8ejmdy6lcM+EZp3QYU= Subject key identifier: 14:A2:25:3C:C0:C0:56:47:3F:1B:E0:FE:A0:4B:DC:63:55:38:89:0C Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Certificate serial: 12FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft Manifest number: 12D8 Signing time: Sat 06 Dec 2025 16:35:41 +0000 Manifest this update: Sat 06 Dec 2025 16:35:40 +0000 Manifest next update: Sat 13 Dec 2025 16:35:40 +0000 Files and hashes: 1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: OhVpOLRYgK/+fEu39zgExlfgZDYf7JsKYfjFInZBl80=) 2: 4978C5B2089911F0B2664480C4F9AE02.roa (hash: 00dFUbxtRi+P5zmsb5ryh9HhmqE32J+HOZ/FYXFpiHQ=) 3: 48B8F476089911F0B2664480C4F9AE02.roa (hash: JWTxPbAMnC0V4yG1gFdPedapzuHJ8Aw4XsiM14hADdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4858 (0x12fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Validity Not Before: Dec 6 16:35:40 2025 GMT Not After : Dec 13 16:35:40 2025 GMT Subject: CN=69345b5d-0323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:67:2d:cc:e8:a5:ac:e7:8a:2e:22:ee:d9:e4: 73:8f:c2:13:34:8f:9d:a7:37:8f:94:54:76:89:df: 68:eb:40:dc:ba:87:a4:a1:a0:96:ac:87:6e:53:15: 99:65:fa:51:e3:9e:b4:e3:00:a6:7a:7f:0f:09:0e: 1e:18:0b:ab:e2:1a:0f:76:80:a3:27:fd:5a:4d:f5: 09:8a:6b:b1:4a:c7:6f:80:2e:f0:f0:8f:86:4d:f5: 6b:3c:91:9d:8b:55:dc:2e:c9:09:59:53:ba:c7:c2: 3a:65:1b:e6:10:2c:bf:30:85:f2:e9:74:ff:20:b5: 55:31:0e:ed:99:6f:3a:ef:0b:98:b3:99:03:02:31: 2c:d4:e6:f4:01:40:8d:b4:21:76:20:aa:5e:ae:2d: e4:45:c9:67:4d:2c:35:93:99:3e:61:f6:45:36:4c: 38:12:a7:ea:dd:31:c7:df:1e:eb:c8:54:50:4d:4d: 8b:1b:75:84:e0:8a:d1:d5:c7:68:5e:84:a9:7b:78: 22:4e:35:a1:f0:8f:59:4c:bb:36:86:9d:c8:8e:23: 74:9f:52:97:3c:7e:77:4f:42:dc:8b:f1:96:41:ab: 1c:c9:04:d7:b3:be:f4:f1:14:8d:5a:c3:cf:2a:60: 1e:08:54:d9:54:1d:47:7a:d8:1f:15:95:b1:57:93: 8b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A2:25:3C:C0:C0:56:47:3F:1B:E0:FE:A0:4B:DC:63:55:38:89:0C X509v3 Authority Key Identifier: keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:fa:f3:37:3f:20:78:ab:e7:de:af:34:56:04:ba:1f:d5:88: 45:54:d3:3c:54:4c:0b:6f:52:1d:68:aa:86:8a:73:72:26:42: a0:da:a3:0e:3a:f9:b5:74:b0:7a:73:73:26:0a:d0:8f:b1:a2: 96:45:7f:1e:53:7f:a0:95:24:f9:c0:10:83:bd:0a:10:88:e2: 5f:94:49:a8:39:7e:8c:3c:6c:e0:1f:7a:23:b2:be:c2:33:cc: 76:68:63:42:7f:1f:8c:91:52:44:2d:0d:b1:24:54:04:35:c2: b5:4a:73:3e:67:b6:e3:42:00:d5:66:ef:09:b9:07:2b:c1:0b: 72:1e:de:d6:3a:b8:f0:e8:92:13:92:7b:17:e3:81:e0:6d:4a: f0:3c:78:eb:c1:92:e3:49:38:de:3a:d1:d7:df:da:5d:b5:8c: 1b:a5:13:39:97:ba:b7:9f:d9:da:6e:23:4e:e6:af:6d:27:f3: e4:21:aa:b1:f8:00:17:48:d2:1a:ef:ca:6a:dd:07:ab:54:c3: 49:9e:fd:93:38:17:4a:4b:8b:54:cd:ad:57:40:a2:8d:bf:0c: d1:b4:8a:6b:ac:d3:ed:59:6c:08:7f:8f:c6:8c:12:af:f0:ba: 7d:1c:ac:99:fe:66:01:26:a8:de:b2:bd:52:c4:b2:e9:cc:4f: 50:78:b9:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1RDUxMTAvBgNVBAUTKDQ3NkY1NzJBMzgwMjM2QUYzM0Y2MkQ4MkE1QkEyNjRE MkZCQkFEN0MwHhcNMjUxMjA2MTYzNTQwWhcNMjUxMjEzMTYzNTQwWjAYMRYwFAYD VQQDEw02OTM0NWI1ZC0wMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlGctzOilrOeKLiLu2eRzj8ITNI+dpzePlFR2id9o60DcuoekoaCWrIduUxWZ ZfpR45604wCmen8PCQ4eGAur4hoPdoCjJ/1aTfUJimuxSsdvgC7w8I+GTfVrPJGd i1XcLskJWVO6x8I6ZRvmECy/MIXy6XT/ILVVMQ7tmW867wuYs5kDAjEs1Ob0AUCN tCF2IKperi3kRclnTSw1k5k+YfZFNkw4Eqfq3THH3x7ryFRQTU2LG3WE4IrR1cdo XoSpe3giTjWh8I9ZTLs2hp3IjiN0n1KXPH53T0Lci/GWQascyQTXs7708RSNWsPP KmAeCFTZVB1HetgfFZWxV5OL3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSiJTzA wFZHPxvg/qBL3GNVOIkMMB8GA1UdIwQYMBaAFEdvVyo4AjavM/YtgqW6Jk0vu618 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTVENS80RUJDQUYyNkQw QUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05xOHo5aTJDcGJvbVRTLTdy WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IyOVhLamdDTnE4ejlpMkNwYm9tVFMtN3JYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTVENS80RUJDQUYyNkQwQUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05x OHo5aTJDcGJvbVRTLTdyWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV+vM3PyB4q+ferzRWBLof1YhFVNM8VEwLb1IdaKqGinNyJkKg2qMO Ovm1dLB6c3MmCtCPsaKWRX8eU3+glST5wBCDvQoQiOJflEmoOX6MPGzgH3ojsr7C M8x2aGNCfx+MkVJELQ2xJFQENcK1SnM+Z7bjQgDVZu8JuQcrwQtyHt7WOrjw6JIT knsX44HgbUrwPHjrwZLjSTjeOtHX39pdtYwbpRM5l7q3n9nabiNO5q9tJ/PkIaqx +AAXSNIa78pq3QerVMNJnv2TOBdKS4tUza1XQKKNvwzRtIprrNPtWWwIf4/GjBKv 8Lp9HKyZ/mYBJqjesr1SxLLpzE9QeLmn -----END CERTIFICATE-----Generated at Sat Dec 6 20:30:09 2025 by rpki-client