This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft File: v1g_8H2jVv3igoGfR7zuJHUTEZo.mft (raw, json) Hash identifier: TGawMjpyDOMctVC5WLvCJbUVLyeQeLIBzyzUq4reyWk= Subject key identifier: 31:DF:5D:B6:C3:CF:CB:56:E2:D3:96:F1:0B:A7:71:69:51:43:4E:48 Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A Certificate issuer: /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Certificate serial: 351A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft Manifest number: 3501 Signing time: Thu 04 Dec 2025 14:25:52 +0000 Manifest this update: Thu 04 Dec 2025 14:25:51 +0000 Manifest next update: Thu 11 Dec 2025 14:25:51 +0000 Files and hashes: 1: v1g_8H2jVv3igoGfR7zuJHUTEZo.crl (hash: 6WMM3t+ZKAeeLDaqzkFsjTrv5af+T72/7PCAFrBEAGI=) 2: 6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (hash: st0pVxpUqrAEUwj53Z+GQXs6wx4AnLeV6lm/Wqla7jI=) 3: F73D1642F30B11EFA86D9348C4F9AE02.roa (hash: NAzmMf7NVE534MnJBMzFOT2rLSzUZpBo5WpxUwTckK0=) 4: 60629332FE4611EFB15A9D48C4F9AE02.roa (hash: /zfwzDG7n6E2JjaivpDdu+dOVBIaawCIeVKdcfBcPXY=) 5: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (hash: 8VK+APK/5itIVHmFKGjT+lEuTWBUnDuSseayGMqo1ag=) 6: B3C4F6FCC8E811EFA15E172AC4F9AE02.roa (hash: 7X3op8FxLKCInR/9TSODy+LRMH6+i0DMcG4PbSJZGR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 14:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13594 (0x351a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Validity Not Before: Dec 4 14:25:51 2025 GMT Not After : Dec 11 14:25:51 2025 GMT Subject: CN=693199ef-23ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:72:e7:84:d2:98:d5:05:17:f9:62:01:a7: b3:40:53:f7:54:e1:5d:d2:2b:69:0f:98:45:d0:d5: c3:12:1f:e2:27:90:39:50:6f:c3:48:c7:2f:08:f7: bc:43:66:6e:f4:27:89:7b:1e:5c:69:3c:c3:d4:48: 51:ea:f4:50:8d:e3:df:77:02:3f:02:63:23:a4:12: 86:58:65:85:d3:80:7e:3b:74:48:32:19:65:eb:fe: 4c:86:35:08:3e:c4:5d:ba:98:33:73:b8:44:d2:69: e4:62:b6:c3:aa:bc:92:91:1f:4d:d4:47:75:fc:52: 0b:be:dd:1b:f3:e7:3f:8e:55:55:9f:44:e0:b8:18: 2a:97:09:82:2a:a4:4b:a9:4c:ec:3f:28:67:f6:bd: 6f:1c:52:33:44:50:18:96:10:92:88:6b:39:71:95: 3b:e7:bd:fc:4a:13:9b:98:3c:a8:0a:50:21:ea:25: 0d:8e:34:33:24:82:f8:c6:4b:5f:d3:a8:f4:b2:f8: c4:fa:7f:f1:5d:ac:6d:b7:c6:24:52:8d:af:ee:2e: 89:4a:10:b3:4e:29:0c:a1:72:9c:1f:58:76:a7:b3: 4b:6e:e9:e9:53:f2:46:dd:2b:56:44:8d:b9:7a:f8: 5a:a1:fb:cd:d4:df:f4:c1:e0:f5:b8:b0:e8:54:f6: 37:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DF:5D:B6:C3:CF:CB:56:E2:D3:96:F1:0B:A7:71:69:51:43:4E:48 X509v3 Authority Key Identifier: keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:00:cd:a1:c8:d1:13:d6:8b:47:6c:a7:e5:30:99:bd:67:ea: 99:24:55:73:61:b3:3a:75:1b:74:e8:5d:0d:76:24:20:fc:40: 47:76:dc:a6:c8:8c:9c:ea:a6:b7:47:cf:a8:59:1b:99:64:7f: 37:a2:41:5b:6e:d3:f3:e3:82:e5:76:30:ce:5e:67:f8:a5:ad: 72:fe:33:77:d6:9c:bf:96:f4:38:26:94:2c:29:53:53:3b:e4: 24:f3:6d:6d:6a:b2:77:0a:ab:06:9f:0d:f9:06:f1:c8:d9:c7: 7d:65:b2:32:c6:11:36:ed:c1:75:51:f6:02:75:ef:23:dc:fb: a5:b1:55:6f:70:43:7d:db:6d:95:0d:69:49:93:fd:9a:08:38: a2:e3:09:e7:04:91:8e:ed:27:d6:36:af:42:90:ca:3e:cc:e5: a2:ec:43:23:fc:b1:b7:d5:28:42:2e:f5:57:44:72:6f:55:09: b8:b3:05:8d:e3:56:58:8f:07:6e:9d:9d:0f:64:0b:c8:e1:66: f4:0f:66:a8:b3:a0:a4:30:ed:b1:c1:0e:1c:f3:18:31:d9:47: 3d:10:ea:78:6e:e8:d5:9a:5a:64:33:42:ab:11:84:5f:09:20: ad:ad:46:59:8b:5e:0c:3c:10:3b:0a:b3:60:9d:9f:9b:f4:3c: 00:53:19:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEJGNTgzRkYwN0RBMzU2RkRFMjgyODE5RjQ3QkNFRTI0 NzUxMzExOUEwHhcNMjUxMjA0MTQyNTUxWhcNMjUxMjExMTQyNTUxWjAYMRYwFAYD VQQDEw02OTMxOTllZi0yM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHpy54TSmNUFF/liAaezQFP3VOFd0itpD5hF0NXDEh/iJ5A5UG/DSMcvCPe8 Q2Zu9CeJex5caTzD1EhR6vRQjePfdwI/AmMjpBKGWGWF04B+O3RIMhll6/5MhjUI PsRdupgzc7hE0mnkYrbDqrySkR9N1Ed1/FILvt0b8+c/jlVVn0TguBgqlwmCKqRL qUzsPyhn9r1vHFIzRFAYlhCSiGs5cZU75738ShObmDyoClAh6iUNjjQzJIL4xktf 06j0svjE+n/xXaxtt8YkUo2v7i6JShCzTikMoXKcH1h2p7NLbunpU/JG3StWRI25 evhaofvN1N/0weD1uLDoVPY3JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHfXbbD z8tW4tOW8QuncWlRQ05IMB8GA1UdIwQYMBaAFL9YP/B9o1b94oKBn0e87iR1ExGa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yMEIzN0NGRTFE ODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2M2lnb0dmUjd6dUpIVVRF Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxZ184SDJqVnYzaWdvR2ZSN3p1SkhVVEVaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yMEIzN0NGRTFEODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2 M2lnb0dmUjd6dUpIVVRFWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNAM2hyNET1otHbKflMJm9Z+qZJFVzYbM6dRt06F0NdiQg/EBHdtym yIyc6qa3R8+oWRuZZH83okFbbtPz44LldjDOXmf4pa1y/jN31py/lvQ4JpQsKVNT O+Qk821tarJ3CqsGnw35BvHI2cd9ZbIyxhE27cF1UfYCde8j3PulsVVvcEN9222V DWlJk/2aCDii4wnnBJGO7SfWNq9CkMo+zOWi7EMj/LG31ShCLvVXRHJvVQm4swWN 41ZYjwdunZ0PZAvI4Wb0D2aos6CkMO2xwQ4c8xgx2Uc9EOp4bujVmlpkM0KrEYRf CSCtrUZZi14MPBA7CrNgnZ+b9DwAUxk6 -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:46 2025 by rpki-client