This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft File: 1r894WRB7X2HUG3gnk3V1jjgumk.mft (raw, json) Hash identifier: CKtWa/i7506VfkO62Ame08b4kh2ckYoLq3ruRgdqzm8= Subject key identifier: 82:BF:11:A7:03:8F:16:20:56:F3:2F:3C:ED:FE:90:FB:CE:3B:15:F2 Authority key identifier: D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 Certificate issuer: /CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft Manifest number: 0127 Signing time: Fri 05 Dec 2025 03:02:29 +0000 Manifest this update: Fri 05 Dec 2025 03:02:28 +0000 Manifest next update: Fri 12 Dec 2025 03:02:28 +0000 Files and hashes: 1: 1r894WRB7X2HUG3gnk3V1jjgumk.crl (hash: zt5xwNa5IURtgA/AR7JEmodt5WKCLzGkipEEn0bsVGY=) 2: 23CFDCD244BE11EF8FA8A37FC4F9AE02.roa (hash: vUDH2ZK5OJcy3mBbkdGoudlGrWh6Xv2GZJY44SeKbcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F190, serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Validity Not Before: Dec 5 03:02:28 2025 GMT Not After : Dec 12 03:02:28 2025 GMT Subject: CN=69324b45-79e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cc:4d:b2:03:3c:36:05:4f:e2:03:36:cf:1f: 57:35:c7:b6:20:57:96:9e:8d:10:49:73:b2:e2:b0: 06:6a:00:a3:05:eb:d2:42:2d:ab:5e:c3:96:2a:28: 6f:16:59:17:79:35:b9:96:97:48:0a:c8:48:03:7e: 9b:cc:a1:ba:57:2c:b3:1c:f8:99:d2:21:85:09:76: 16:e0:59:3d:01:aa:4a:61:0d:ff:20:5b:70:aa:7e: 37:17:56:f3:cf:bf:7a:e1:26:9d:a5:cf:1a:41:15: 75:41:43:c3:27:68:ac:d6:5f:9b:b3:b1:84:a9:5f: fa:15:06:d9:9c:a6:34:65:40:53:1b:94:19:df:f9: 22:99:f0:58:69:de:af:1d:70:6d:34:59:16:02:d4: bc:5a:5d:24:20:33:38:da:c9:89:4c:b4:f1:d9:a2: 75:1b:8d:f2:a9:b0:ef:e5:be:5d:90:c2:14:e2:02: 32:52:d8:d3:4d:0e:20:3d:c4:31:51:37:95:09:66: d2:85:9c:5a:57:41:9c:b3:72:f8:0f:7c:b5:ab:c4: 2f:34:40:d6:7c:4d:2b:3e:8f:7e:80:05:43:e8:df: 25:0f:c4:05:82:dc:0e:75:b2:e1:a6:20:d7:b7:9a: 7c:0f:c9:e3:2b:61:3d:40:cf:81:6f:37:fd:44:e4: 97:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BF:11:A7:03:8F:16:20:56:F3:2F:3C:ED:FE:90:FB:CE:3B:15:F2 X509v3 Authority Key Identifier: keyid:D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ae:33:fd:00:07:88:98:2e:79:70:6c:8c:30:3c:d6:49:49: 8c:90:9a:0a:41:d9:4c:7a:a2:72:1c:26:fb:0e:49:07:88:e0: 79:9a:9e:f9:3f:e9:e2:a0:1c:96:43:f8:8d:75:06:f6:23:53: d8:c3:cb:30:40:3b:e0:28:0a:2b:a3:26:a1:87:6f:10:33:c4: f4:92:a8:49:ad:fc:3c:58:ab:f7:11:e7:75:83:23:8f:c2:cb: 80:c8:1e:35:58:c9:1e:8f:3b:2f:92:23:c5:41:fe:14:ce:e9: 4e:71:e7:3c:48:29:27:f1:10:2a:a8:8f:cd:ee:e2:5d:9d:31: ee:e0:2d:67:85:18:6d:7c:8a:00:11:1b:f4:c2:69:ba:35:4a: 10:b8:72:5a:17:bb:ab:7a:b9:0a:44:c3:da:a7:4d:14:8d:54: f3:cf:6a:17:c8:5f:c3:8d:b3:75:e7:dc:ef:63:db:e5:c1:fa: 92:53:e4:48:83:ed:4d:cc:cb:c5:e6:de:f8:d2:cd:03:04:1b: 53:59:4f:3a:94:5a:c2:3a:55:41:98:01:bd:fb:ea:43:ab:d7: d0:fc:8f:2c:4e:21:95:a6:e1:bc:ce:a4:1a:2b:6a:51:6c:23: 73:54:df:53:98:8f:4a:fd:60:fb:63:4f:73:46:a0:90:46:b3: 7f:68:ec:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxOTAxMTAvBgNVBAUTKEQ2QkYzREUxNjQ0MUVEN0Q4NzUwNkRFMDlFNERENUQ2 MzhFMEJBNjkwHhcNMjUxMjA1MDMwMjI4WhcNMjUxMjEyMDMwMjI4WjAYMRYwFAYD VQQDEw02OTMyNGI0NS03OWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsxNsgM8NgVP4gM2zx9XNce2IFeWno0QSXOy4rAGagCjBevSQi2rXsOWKihv FlkXeTW5lpdICshIA36bzKG6VyyzHPiZ0iGFCXYW4Fk9AapKYQ3/IFtwqn43F1bz z7964Sadpc8aQRV1QUPDJ2is1l+bs7GEqV/6FQbZnKY0ZUBTG5QZ3/kimfBYad6v HXBtNFkWAtS8Wl0kIDM42smJTLTx2aJ1G43yqbDv5b5dkMIU4gIyUtjTTQ4gPcQx UTeVCWbShZxaV0Gcs3L4D3y1q8QvNEDWfE0rPo9+gAVD6N8lD8QFgtwOdbLhpiDX t5p8D8njK2E9QM+Bbzf9ROSXrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIK/EacD jxYgVvMvPO3+kPvOOxXyMB8GA1UdIwQYMBaAFNa/PeFkQe19h1Bt4J5N1dY44Lpp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE5MC81N0I0MDU5NDNB ODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8xcjg5NFdSQjdYMkhVRzNnbmszVjFqamd1 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFyODk0V1JCN1gySFVHM2duazNWMWpqZ3Vtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE5MC81N0I0MDU5NDNBODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8xcjg5NFdSQjdY MkhVRzNnbmszVjFqamd1bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtrjP9AAeImC55cGyMMDzWSUmMkJoKQdlMeqJyHCb7DkkHiOB5mp75 P+nioByWQ/iNdQb2I1PYw8swQDvgKAoroyahh28QM8T0kqhJrfw8WKv3Eed1gyOP wsuAyB41WMkejzsvkiPFQf4UzulOcec8SCkn8RAqqI/N7uJdnTHu4C1nhRhtfIoA ERv0wmm6NUoQuHJaF7urerkKRMPap00UjVTzz2oXyF/DjbN159zvY9vlwfqSU+RI g+1NzMvF5t740s0DBBtTWU86lFrCOlVBmAG9++pDq9fQ/I8sTiGVpuG8zqQaK2pR bCNzVN9TmI9K/WD7Y09zRqCQRrN/aOxL -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:52 2025 by rpki-client