This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: 1E8QTzvxAbAAeeD8Zv2FolIRqgktvAXPEVo0kg2mnrE= Subject key identifier: F0:7F:A3:09:BF:D1:F0:79:9F:6D:6A:5F:41:D6:D8:AD:CA:78:D9:AA Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 03B1 Signing time: Thu 04 Dec 2025 23:08:48 +0000 Manifest this update: Thu 04 Dec 2025 23:08:48 +0000 Manifest next update: Thu 11 Dec 2025 23:08:48 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: cGMDFALEfz/oDW6nmKlpXn6ninY2jnpa1gvuCX+UoWY=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: OB3c0FOnO7U7Cy2O3WKkzCkZvRGF4Swy8zD33qNbalg=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: PCa5nWLR+HuKgmwdVX9BOmG2ZZvLJrtIyJd8CbPbXng=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: JCVj+AscF7hWsvaIqNJTPDabzygkqnGZEfVjCkrIsro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Dec 4 23:08:48 2025 GMT Not After : Dec 11 23:08:48 2025 GMT Subject: CN=69321480-b4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:9d:ef:3f:9c:b3:8f:a8:56:c9:4b:8d:a2: 6c:db:23:f6:01:99:28:f9:b4:91:07:e0:2e:3b:9c: ae:ab:38:61:95:ef:28:79:09:e6:ed:b5:e6:9a:a0: 5e:df:e9:5b:43:e2:c4:90:f1:82:ad:f6:93:9e:86: 2a:f6:5f:85:39:e8:e5:89:16:ef:c5:cf:3d:92:b3: 5d:6f:46:f1:29:29:a3:5f:bc:ca:6b:a1:ca:a4:d3: b7:e3:41:0b:b9:e3:bd:93:38:16:62:4c:83:be:81: 0d:b6:be:61:aa:ca:d4:0b:e4:e6:80:5b:41:9a:f2: 31:47:44:3b:a3:6f:a5:e7:ab:3b:d0:96:ba:48:91: 87:e9:b0:81:67:b4:a0:66:36:6a:69:93:18:93:50: 64:b3:61:f6:3d:7b:0a:e7:dc:68:7c:f8:03:68:6a: 6f:04:65:f9:59:f4:bf:fa:f2:a9:3e:d1:9d:fa:c3: ab:8a:f8:0e:01:16:e2:a6:35:72:c9:0e:dc:b3:33: 4e:eb:71:ce:c0:d3:2b:46:88:71:13:89:57:5a:5f: 18:00:14:db:1b:b4:83:20:df:8b:1d:13:0d:28:12: 7c:da:f1:db:2d:30:e8:ce:67:2d:57:77:1b:d3:2c: 26:fb:ef:df:74:9f:62:f4:3e:ae:15:03:68:ca:90: b4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7F:A3:09:BF:D1:F0:79:9F:6D:6A:5F:41:D6:D8:AD:CA:78:D9:AA X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:e1:14:79:18:11:cc:24:d6:bd:6c:46:4b:c7:7a:a8:86:44: a0:83:ba:a8:76:73:df:49:75:8d:0e:c2:52:da:f6:85:22:b9: bb:fa:cc:86:86:da:ea:b2:c4:1c:2b:11:f6:49:0a:8b:90:9e: fa:d7:6c:13:fa:7f:e3:a0:aa:b2:ff:19:b6:b7:59:90:f5:64: 04:38:19:94:ab:15:ef:2b:ba:2e:3c:4e:46:ba:1a:4d:c4:3a: 87:25:d2:98:5c:5d:ef:29:a3:d1:53:55:48:bb:6e:38:62:e9: 10:37:f8:57:8b:1a:fe:e1:f9:4e:12:a3:3f:0f:22:f0:55:77: d2:0a:b7:8f:39:44:40:40:12:f6:82:50:6f:f8:4a:29:85:d1: 20:b5:19:48:85:1c:b8:2b:88:67:0a:ec:2c:57:52:46:5c:4f: cf:8b:5f:40:1a:e8:b3:e3:38:5f:b1:4d:50:7e:c5:3f:d7:ed: a8:5f:91:c3:9d:33:ac:e4:3c:bd:49:9f:19:4c:07:a3:5b:e8: 48:23:47:10:9a:5c:26:d6:8b:14:73:1d:9f:87:39:6b:dc:85: f1:1a:cb:fd:20:17:e6:2e:56:68:d5:71:cb:74:d7:94:f6:86: 6c:77:3a:3c:56:0f:70:61:67:7b:65:a9:ea:82:a2:65:6c:d7: 6c:18:cd:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjUxMjA0MjMwODQ4WhcNMjUxMjExMjMwODQ4WjAYMRYwFAYD VQQDEw02OTMyMTQ4MC1iNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMyd7z+cs4+oVslLjaJs2yP2AZko+bSRB+AuO5yuqzhhle8oeQnm7bXmmqBe 3+lbQ+LEkPGCrfaTnoYq9l+FOejliRbvxc89krNdb0bxKSmjX7zKa6HKpNO340EL ueO9kzgWYkyDvoENtr5hqsrUC+TmgFtBmvIxR0Q7o2+l56s70Ja6SJGH6bCBZ7Sg ZjZqaZMYk1Bks2H2PXsK59xofPgDaGpvBGX5WfS/+vKpPtGd+sOrivgOARbipjVy yQ7cszNO63HOwNMrRohxE4lXWl8YABTbG7SDIN+LHRMNKBJ82vHbLTDozmctV3cb 0ywm++/fdJ9i9D6uFQNoypC0hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPB/owm/ 0fB5n21qX0HW2K3KeNmqMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH4RR5GBHMJNa9bEZLx3qohkSgg7qodnPfSXWNDsJS2vaFIrm7+syG htrqssQcKxH2SQqLkJ7612wT+n/joKqy/xm2t1mQ9WQEOBmUqxXvK7ouPE5GuhpN xDqHJdKYXF3vKaPRU1VIu244YukQN/hXixr+4flOEqM/DyLwVXfSCrePOURAQBL2 glBv+EophdEgtRlIhRy4K4hnCuwsV1JGXE/Pi19AGuiz4zhfsU1QfsU/1+2oX5HD nTOs5Dy9SZ8ZTAejW+hII0cQmlwm1osUcx2fhzlr3IXxGsv9IBfmLlZo1XHLdNeU 9oZsdzo8Vg9wYWd7ZanqgqJlbNdsGM2f -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:27 2025 by rpki-client