This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json) Hash identifier: Z163SXNaPBmayZoAVZE2INoSu4c+76XAXjTx2Y0Vgck= Subject key identifier: 20:EA:C3:2D:7B:EA:BF:B4:19:22:28:85:2B:EB:4F:A0:59:AD:15:9F Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft Manifest number: 0169 Signing time: Fri 05 Dec 2025 02:13:46 +0000 Manifest this update: Fri 05 Dec 2025 02:13:45 +0000 Manifest next update: Fri 12 Dec 2025 02:13:45 +0000 Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: /JGjosv5iou1H9lL5oV290GCqyRbdAxa4Yc7trLj6jI=) 2: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: VTp2ABLnUqS/Ob5XrNRvfYj53nTFMS/ZxCFHhPG4kpU=) 3: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: 5dFzBEhRX2qpf3v3P5WZEcaB5fBRXl7gbbBm5x4xFTk=) 4: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: xLYaayOa6ljsfyz0Fl5EAR812aBmAL1bIciZu3m45qA=) 5: A17C3508168911EFBF38F580C4F9AE02.roa (hash: VX+Jv3bPS3HePtNKEWgfIHtlmIu9qG2L38hEMCHNp/A=) 6: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: QWiwvzdCs9QlEtO4vjDbxuVVXBGO2+18x2vf8VSunOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: Dec 5 02:13:45 2025 GMT Not After : Dec 12 02:13:45 2025 GMT Subject: CN=69323fd9-8b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:8d:b7:d0:ff:a9:14:15:d5:2f:81:40:e7: 6f:2c:96:f5:03:d3:b0:cf:cc:18:2c:ef:6c:43:d1: 35:16:5b:70:c4:c8:53:3f:90:5c:a0:c5:fe:7c:6f: 5c:6a:19:4f:e4:7a:74:96:b4:54:fb:a0:f0:92:d5: 7d:15:36:39:0b:e3:35:d8:49:8e:2c:61:68:bc:82: 22:ad:b1:44:d1:57:6b:77:e7:51:89:15:b0:99:62: 11:ed:2a:0a:f5:63:46:ba:d1:e2:a1:92:51:37:9b: 6c:b1:0e:65:65:f4:eb:42:43:bc:da:08:e1:f7:c9: 49:3d:2b:b2:40:0b:6f:8b:59:57:3a:7d:68:ac:bc: 44:ff:22:61:d6:2f:df:fe:c3:2a:0d:9b:11:92:c5: e9:11:bc:e0:c2:46:0e:61:25:95:ea:4d:fb:a3:bb: 11:4c:5a:36:54:0f:14:58:06:88:1d:bb:4b:47:11: bb:92:7b:3b:98:e2:06:7c:0b:ca:95:cb:e0:68:85: d7:e3:ac:d3:2c:74:59:0b:21:db:cd:d3:15:39:b8: 8b:68:09:cc:42:da:a2:4b:1c:6e:03:7c:cc:1e:5f: 81:e9:ed:f5:5d:c3:5f:06:b4:64:c6:e0:1a:90:fd: 6c:9d:ae:4b:fc:d5:71:10:65:ea:c0:6c:a9:27:8a: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EA:C3:2D:7B:EA:BF:B4:19:22:28:85:2B:EB:4F:A0:59:AD:15:9F X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0e:d2:59:e3:bc:58:7a:ca:3d:bb:45:6c:6f:d6:b2:f2:d2: b8:01:e7:67:5d:42:22:90:c1:c6:52:07:0f:30:85:5f:4a:4d: 1c:86:c0:4c:81:1d:c8:14:b0:b8:fb:b1:a2:4d:0f:11:02:16: b3:60:ab:b8:fe:19:a8:b3:d2:dd:4f:20:ed:e9:d2:3e:9b:49: 8e:61:bd:49:b2:b3:e0:2f:1b:71:4e:db:95:4b:62:9a:30:61: ad:92:66:25:85:e5:37:53:78:70:1f:f8:e6:93:a7:55:f1:fc: 73:27:06:2e:53:21:90:ac:6a:27:53:9c:23:41:75:15:de:11: 9f:09:30:8f:7c:6d:f1:dc:2a:81:12:18:3a:7f:50:63:f8:1c: 2a:01:ea:d7:3d:61:67:74:cf:11:6f:ed:3a:7f:49:9d:7f:d5: 4a:d2:f0:d3:24:81:ef:20:72:9b:c8:cb:40:b9:e9:fa:1b:54: 32:99:67:fc:9d:f8:7f:28:1e:6a:9f:ec:57:88:93:f8:5c:b9: c4:8c:14:d7:ce:82:da:e0:a2:5c:8b:32:95:9a:96:68:b9:9f: 5e:e4:fe:c2:58:d0:a8:e0:5d:2e:20:31:cc:5f:1e:df:03:c4: 09:fb:aa:a9:23:1c:f5:5f:d4:7d:d2:68:b3:42:8e:c2:76:95: c7:d2:45:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjUxMjA1MDIxMzQ1WhcNMjUxMjEyMDIxMzQ1WjAYMRYwFAYD VQQDEw02OTMyM2ZkOS04YjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvSNt9D/qRQV1S+BQOdvLJb1A9Owz8wYLO9sQ9E1FltwxMhTP5BcoMX+fG9c ahlP5Hp0lrRU+6DwktV9FTY5C+M12EmOLGFovIIirbFE0Vdrd+dRiRWwmWIR7SoK 9WNGutHioZJRN5tssQ5lZfTrQkO82gjh98lJPSuyQAtvi1lXOn1orLxE/yJh1i/f /sMqDZsRksXpEbzgwkYOYSWV6k37o7sRTFo2VA8UWAaIHbtLRxG7kns7mOIGfAvK lcvgaIXX46zTLHRZCyHbzdMVObiLaAnMQtqiSxxuA3zMHl+B6e31XcNfBrRkxuAa kP1sna5L/NVxEGXqwGypJ4r/sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDqwy17 6r+0GSIohSvrT6BZrRWfMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9p YVlQNS1abWhRR05pZGJhbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvDtJZ47xYeso9u0Vsb9ay8tK4AednXUIikMHGUgcPMIVfSk0chsBM gR3IFLC4+7GiTQ8RAhazYKu4/hmos9LdTyDt6dI+m0mOYb1JsrPgLxtxTtuVS2Ka MGGtkmYlheU3U3hwH/jmk6dV8fxzJwYuUyGQrGonU5wjQXUV3hGfCTCPfG3x3CqB Ehg6f1Bj+BwqAerXPWFndM8Rb+06f0mdf9VK0vDTJIHvIHKbyMtAuen6G1QymWf8 nfh/KB5qn+xXiJP4XLnEjBTXzoLa4KJcizKVmpZouZ9e5P7CWNCo4F0uIDHMXx7f A8QJ+6qpIxz1X9R90mizQo7CdpXH0kX4 -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:09 2025 by rpki-client