This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json) Hash identifier: gwpuf4HXtSV0y5BsZ4xHRnpu0AK6NNu0V8KpTimH/Zc= Subject key identifier: 7B:50:C9:C0:D2:6A:4C:27:33:FB:1B:64:A0:DD:23:9A:B3:65:45:A6 Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft Manifest number: 0818 Signing time: Thu 04 Dec 2025 19:58:25 +0000 Manifest this update: Thu 04 Dec 2025 19:58:25 +0000 Manifest next update: Thu 11 Dec 2025 19:58:25 +0000 Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: Bb/Bu2xZESqG/juVRz7wwjHdWCDt08FNNbpkeApdyZ8=) 2: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: 0MurJBTWr3VBt4BzPGN6YSpJS0KuheQ6jbFiFb2lsDo=) 3: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: EDuSd7q+Wy9A9v2ymA1vM1CdQcsnayUqkzAJ0vginys=) 4: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: 3AbfHAacjnEAWoo2sa+rjsKYetf4drBAdDYIzgNRGw0=) 5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: uh6Udu7tl5B51JnewZD4hvjUOCA+o54nu1BVBecsrkw=) 6: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: KAqNHdwX5NNEjIYv/SrmUHgArBmx24W5Jn9cFOvsuKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Dec 4 19:58:25 2025 GMT Not After : Dec 11 19:58:25 2025 GMT Subject: CN=6931e7e1-d13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:8c:49:bd:18:fa:d1:7a:c3:54:b4:a0:73: cf:32:72:38:13:a6:2d:8b:07:ef:9e:1a:c0:0a:3c: 52:e5:53:cb:b2:37:02:da:56:41:22:fe:d9:1d:6a: 85:b6:07:53:f8:63:eb:3f:8a:72:70:4b:77:27:54: ae:5f:6a:6d:7c:6d:07:59:7f:ba:3b:db:85:8f:ef: 16:2d:d9:e2:47:82:41:52:d5:e8:ff:4f:1a:1c:bb: 6b:a5:05:0b:e7:e6:d9:6b:36:b2:cd:79:4b:ac:09: 3f:e1:9f:5a:da:32:26:b2:ef:39:3d:e7:d9:c4:86: 92:5f:94:19:6e:e7:15:c2:0b:1e:b4:ac:4f:ab:40: b9:68:58:b8:70:b1:e7:3d:0b:89:ae:b0:d5:43:01: fd:60:94:ef:fd:32:6b:e9:d4:8f:68:16:ba:5c:29: 59:c2:73:03:e8:d6:19:ea:e5:e2:28:11:9f:98:fe: e1:b3:df:37:82:0f:d5:d4:8d:c2:ff:57:c9:17:2c: c7:c3:48:c0:2c:05:a4:1c:00:8f:24:26:5f:ea:ff: fe:78:4a:db:91:da:e4:10:dc:48:e9:2b:22:80:cd: 97:d6:25:bd:05:82:f8:8a:91:6a:82:19:52:f9:f0: b1:e8:a7:06:ec:60:66:0c:c1:18:33:bd:09:de:41: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:50:C9:C0:D2:6A:4C:27:33:FB:1B:64:A0:DD:23:9A:B3:65:45:A6 X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:1f:76:53:17:4e:89:68:ab:95:8d:4f:6d:1a:24:3b:71:80: c1:9c:dc:b3:ca:e0:cf:fc:e9:1c:64:3d:a2:cc:1d:ce:6b:57: 20:20:2a:3b:bb:83:9d:90:2d:e8:09:22:fa:78:e3:14:c7:86: 03:4e:11:0a:65:83:84:04:8f:00:67:a6:7f:c6:2f:4b:e3:a8: 83:c4:d7:59:5b:7e:f9:da:0a:ce:92:7b:83:bb:6e:38:d8:b5: 0f:ee:53:70:34:73:93:c2:d7:ff:b9:7a:87:a4:7e:d6:90:01: b1:44:2f:06:fb:c7:71:5c:71:45:71:66:f1:8a:af:78:53:d7: b8:f4:a1:a0:4a:d3:8f:7f:c8:d5:0a:1e:7c:15:31:4a:8c:6d: 37:14:18:f9:20:4a:1e:25:96:c2:81:87:01:34:d8:10:f9:3b: 07:ab:13:f7:13:f0:f9:a5:e4:38:0e:73:f1:14:de:24:3a:3a: ae:dd:98:aa:07:c5:6d:8d:3a:c4:2c:02:6b:5d:49:d2:79:61: 94:dd:bc:f1:80:a8:36:f7:e8:99:23:5c:76:f3:fc:03:3a:cd: de:18:c5:fd:42:af:33:35:2d:2c:f6:c0:db:4a:00:40:c1:e7: 8a:4d:fe:a4:c4:67:d7:44:90:ee:ad:70:16:7f:22:80:8a:b3: 57:7b:6c:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjUxMjA0MTk1ODI1WhcNMjUxMjExMTk1ODI1WjAYMRYwFAYD VQQDEw02OTMxZTdlMS1kMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArK6MSb0Y+tF6w1S0oHPPMnI4E6YtiwfvnhrACjxS5VPLsjcC2lZBIv7ZHWqF tgdT+GPrP4pycEt3J1SuX2ptfG0HWX+6O9uFj+8WLdniR4JBUtXo/08aHLtrpQUL 5+bZazayzXlLrAk/4Z9a2jImsu85PefZxIaSX5QZbucVwgsetKxPq0C5aFi4cLHn PQuJrrDVQwH9YJTv/TJr6dSPaBa6XClZwnMD6NYZ6uXiKBGfmP7hs983gg/V1I3C /1fJFyzHw0jALAWkHACPJCZf6v/+eErbkdrkENxI6SsigM2X1iW9BYL4ipFqghlS +fCx6KcG7GBmDMEYM70J3kG/uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtQycDS akwnM/sbZKDdI5qzZUWmMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr bHdXOEphcVBESjd4QU1tUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZH3ZTF06JaKuVjU9tGiQ7cYDBnNyzyuDP/OkcZD2izB3Oa1cgICo7 u4OdkC3oCSL6eOMUx4YDThEKZYOEBI8AZ6Z/xi9L46iDxNdZW3752grOknuDu244 2LUP7lNwNHOTwtf/uXqHpH7WkAGxRC8G+8dxXHFFcWbxiq94U9e49KGgStOPf8jV Ch58FTFKjG03FBj5IEoeJZbCgYcBNNgQ+TsHqxP3E/D5peQ4DnPxFN4kOjqu3Ziq B8VtjTrELAJrXUnSeWGU3bzxgKg29+iZI1x28/wDOs3eGMX9Qq8zNS0s9sDbSgBA weeKTf6kxGfXRJDurXAWfyKAirNXe2wH -----END CERTIFICATE-----Generated at Sat Dec 6 17:45:54 2025 by rpki-client