This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft File: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft (raw, json) Hash identifier: fA13ia3pS93b3nR5dp6/A4XMYjK9C2NkvYwWTNGlZzA= Subject key identifier: 96:2D:BB:3A:82:47:8F:6D:42:F1:7F:39:CD:48:EF:93:EF:B2:2B:A7 Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 Certificate issuer: /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft Manifest number: 20 Signing time: Fri 05 Dec 2025 05:38:33 +0000 Manifest this update: Fri 05 Dec 2025 05:38:32 +0000 Manifest next update: Fri 12 Dec 2025 05:38:32 +0000 Files and hashes: 1: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl (hash: Ae3xOrgzOrnAnc20KX4tnapKC6Hcj4qOGn6AqN3NAxk=) 2: 2DC89280AB5E11F087B3A63DC4F9AE02.roa (hash: qw+b9++3jbgvyWDf4TRTK+L4oMfB+u2I6pJFYXdg4kg=) 3: 3DA866FACE8E11F0B0195B54C4F9AE02.roa (hash: xbTDiVIyKDzMW7zYjhqubgm4Cfj7K4g8sYm9DWTJzDs=) 4: 2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (hash: 3NnIsPy3TJxVPi78UblbPiBZvd4erKTpjfLkh2fTRX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Validity Not Before: Dec 5 05:38:32 2025 GMT Not After : Dec 12 05:38:32 2025 GMT Subject: CN=69326fd8-8215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:82:aa:64:6e:2f:0f:a0:c8:9c:51:fd:66: 31:e3:14:b4:52:6a:02:42:bf:5d:78:3b:6f:2b:4c: 5d:17:88:0c:db:1e:15:00:e8:9b:1d:01:b3:13:ee: 3f:90:72:34:24:02:00:6a:9c:7c:6d:92:26:cb:07: 42:eb:53:05:7f:46:b8:4c:04:e3:5a:d2:e1:12:8a: 04:78:5e:03:ba:9a:3c:54:6d:fd:5a:a7:01:7e:bd: 1c:14:e9:55:e7:40:ed:b0:f7:f1:f4:f3:ac:74:fd: 9f:c7:6a:85:1f:2c:af:ed:92:74:89:f9:64:98:b5: 40:da:83:22:2e:7d:c6:24:6b:4a:d9:12:bf:c3:c9: c0:53:e1:72:c4:ef:1f:50:86:36:3b:13:1c:f5:32: a8:40:a2:e3:75:a6:c6:81:63:38:8c:d2:45:c1:82: cd:c8:bb:25:52:70:99:f2:ee:00:50:fe:43:81:9e: 9c:fe:63:ad:f6:c9:39:08:59:ab:ca:d1:5f:b7:7e: 5b:ce:77:07:51:52:67:0e:36:de:00:96:ae:ea:15: df:e3:16:e4:cd:32:e2:2b:dc:fc:93:77:a4:ba:f2: 95:04:06:46:3f:10:f9:21:b8:19:79:a4:62:fb:0b: 70:d0:c8:16:41:c1:a6:8a:bf:80:f2:78:42:73:a3: 40:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2D:BB:3A:82:47:8F:6D:42:F1:7F:39:CD:48:EF:93:EF:B2:2B:A7 X509v3 Authority Key Identifier: keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:c1:20:04:23:98:f4:58:b0:e5:54:82:77:3c:58:cb:52:7e: d0:a0:89:61:b2:11:c2:8e:62:cf:13:54:c5:79:e1:b1:97:97: 0e:84:bc:9a:ad:44:db:ac:93:3c:1f:3e:56:5c:65:33:1f:1b: 18:81:48:16:c7:29:73:a3:9f:91:c3:8a:5d:00:e3:1b:b6:81: 03:13:61:c6:0a:42:95:13:d5:79:b2:96:3c:9d:d4:43:f3:c9: 10:66:00:d4:b7:9a:bc:d7:1f:1f:ea:40:bb:68:a1:d8:64:e9: c3:f5:21:db:42:97:47:2e:2d:8c:e5:21:46:ea:7f:51:86:9d: 96:0a:5d:1e:c1:0c:2a:cb:47:a0:31:c2:89:56:e4:28:e2:ed: 40:45:10:4e:9e:44:85:1b:da:ef:7f:23:f9:1a:09:5a:b7:37: e6:8f:8f:c6:47:b2:81:dd:7c:2a:d3:6a:ea:81:7d:48:2b:47: ca:8b:75:68:88:e3:9f:09:c1:d9:b5:59:e0:30:e3:7a:fd:21: 68:6e:68:cc:92:10:a0:a9:9c:83:61:b7:41:fd:ee:be:38:7b: 9d:82:60:e0:bc:a2:07:2a:51:ba:08:7f:bd:f4:3b:00:46:5c: 64:14:84:75:1c:77:a1:d4:b3:a5:5d:0f:e4:1d:de:cf:fb:b5: 58:a9:e1:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjFDQTExMC8GA1UEBRMoQUY4Q0RDRTZFRDQyNzdFQ0ZCMEZEQTg4MkFENDc0OTJE RTg1OEZCNjAeFw0yNTEyMDUwNTM4MzJaFw0yNTEyMTIwNTM4MzJaMBgxFjAUBgNV BAMTDTY5MzI2ZmQ4LTgyMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1QIKqZG4vD6DInFH9ZjHjFLRSagJCv114O28rTF0XiAzbHhUA6JsdAbMT7j+Q cjQkAgBqnHxtkibLB0LrUwV/RrhMBONa0uESigR4XgO6mjxUbf1apwF+vRwU6VXn QO2w9/H086x0/Z/HaoUfLK/tknSJ+WSYtUDagyIufcYka0rZEr/DycBT4XLE7x9Q hjY7Exz1MqhAouN1psaBYziM0kXBgs3IuyVScJny7gBQ/kOBnpz+Y632yTkIWavK 0V+3flvOdwdRUmcONt4Alq7qFd/jFuTNMuIr3PyTd6S68pUEBkY/EPkhuBl5pGL7 C3DQyBZBwaaKv4DyeEJzo0BfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUli27OoJH j21C8X85zUjvk++yK6cwHwYDVR0jBBgwFoAUr4zc5u1Cd+z7D9qIKtR0kt6Fj7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMUNBLzJERjVCQjgwQUIz MDExRjA4RkMwQzk0OEM0RjlBRTAyL3I0emM1dTFDZC16N0Q5cUlLdFIwa3Q2Rmo3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjR6YzV1MUNkLXo3RDlxSUt0UjBrdDZGajdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MUNBLzJERjVCQjgwQUIzMDExRjA4RkMwQzk0OEM0RjlBRTAyL3I0emM1dTFDZC16 N0Q5cUlLdFIwa3Q2Rmo3WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL3BIAQjmPRYsOVUgnc8WMtSftCgiWGyEcKOYs8TVMV54bGXlw6EvJqt RNuskzwfPlZcZTMfGxiBSBbHKXOjn5HDil0A4xu2gQMTYcYKQpUT1Xmyljyd1EPz yRBmANS3mrzXHx/qQLtoodhk6cP1IdtCl0cuLYzlIUbqf1GGnZYKXR7BDCrLR6Ax wolW5Cji7UBFEE6eRIUb2u9/I/kaCVq3N+aPj8ZHsoHdfCrTauqBfUgrR8qLdWiI 458Jwdm1WeAw43r9IWhuaMySEKCpnINht0H97r44e52CYOC8ogcqUboIf730OwBG XGQUhHUcd6HUs6VdD+Qd3s/7tVip4aM= -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:35 2025 by rpki-client