This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: cPYde6eSYe2bye+sL0cFjOgIrBrX0YvFD4uL9r63c9E= Subject key identifier: 7B:F8:47:12:F7:F8:ED:1E:6A:0A:0D:4B:06:E6:E6:D2:97:FA:24:0D Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 02B0 Signing time: Thu 04 Dec 2025 23:50:18 +0000 Manifest this update: Thu 04 Dec 2025 23:50:17 +0000 Manifest next update: Thu 11 Dec 2025 23:50:17 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: Xm2/ChvtuMvLTb2K6ELPS+0B2aZK6iLffNeiUxI+z5E=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: nUMhsxhIRqeHeQEDGBtbEEh0D5JOlIzRcfpKkf1PF5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: Dec 4 23:50:17 2025 GMT Not After : Dec 11 23:50:17 2025 GMT Subject: CN=69321e39-5d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:09:27:14:20:23:30:79:9a:97:a7:81:3a:8d: ad:b5:26:70:8d:79:4a:08:aa:53:2c:ca:ec:63:b7: 70:ef:82:a9:b2:03:46:a8:07:36:eb:e8:41:02:15: 74:4c:a0:5b:71:3e:b1:a2:8d:a4:53:af:87:17:ad: e9:f4:18:d8:5d:7c:8a:69:7b:b2:a5:f6:80:9c:33: 77:8f:3a:94:07:50:9a:6f:ec:96:8f:01:61:18:85: df:69:ce:14:96:fe:68:74:7b:01:66:89:6b:29:3b: c7:89:91:17:cd:1e:7f:87:00:b0:75:1a:55:cb:2a: df:a8:63:e9:69:b6:58:3d:1b:9a:dd:22:d3:2b:8c: 7f:f0:b5:c0:84:e5:69:b1:99:e6:d3:73:da:01:53: 45:2b:84:73:4f:68:b0:11:49:6d:59:2b:33:29:e0: 13:1e:e2:2d:d7:b6:5a:83:b8:f8:9c:eb:1c:9e:1f: 3d:78:e2:a5:37:fd:a2:8d:b9:a9:aa:f4:b7:7f:19: bf:d6:ca:3c:52:65:f7:a2:f6:18:36:dd:25:a9:00: f3:fb:13:a8:fb:89:36:b5:2f:1e:fa:e8:c1:4b:0e: 67:29:e9:f0:e4:b8:59:95:e3:2c:9b:b5:6b:6f:47: d8:e4:66:9c:ab:9d:69:9b:76:9c:87:a8:c0:ac:80: 69:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F8:47:12:F7:F8:ED:1E:6A:0A:0D:4B:06:E6:E6:D2:97:FA:24:0D X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:25:6a:c6:b0:b5:f5:4b:ba:0c:b6:13:e2:f2:f6:b0:72:60: db:75:97:b2:97:e2:a2:97:05:3c:51:8e:32:ad:f6:73:7a:e2: 2b:0a:47:ea:aa:87:37:1d:64:79:7b:13:ea:91:b5:b1:b5:af: 86:04:cc:ad:bf:4c:2d:42:ed:11:b4:3a:bf:24:bf:2b:02:62: 4a:29:7f:18:57:7f:66:13:d7:6b:37:b3:00:37:a1:08:0c:54: fe:6e:33:7c:ee:90:42:e7:fb:b1:c8:a8:a8:20:3d:ff:4d:55: ca:eb:0c:75:42:e3:7c:8d:f7:b4:28:19:90:3e:2e:b0:c8:3c: 03:98:8b:dd:21:59:e7:e7:f8:69:92:a4:62:3f:df:88:1a:3c: e9:1d:cb:a9:4f:95:a2:64:80:5b:72:fa:64:56:a9:2f:69:0e: fd:20:6d:af:d3:2b:4d:cf:a3:c5:92:0c:af:3e:82:4f:33:c6: 2a:5b:77:8d:51:ce:bc:99:46:1b:d9:6a:30:88:c2:d3:0f:e1: 81:c6:47:9a:8b:4c:bc:cd:22:7f:06:e8:c4:c9:46:a7:7f:57: a9:2b:e1:2f:a3:76:6f:3d:22:79:2d:bf:e3:d4:52:ae:9b:b6: 69:54:4f:16:c4:2c:5c:1f:af:30:d2:86:e7:f6:d1:39:12:83: 5c:a8:36:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjUxMjA0MjM1MDE3WhcNMjUxMjExMjM1MDE3WjAYMRYwFAYD VQQDEw02OTMyMWUzOS01ZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wknFCAjMHmal6eBOo2ttSZwjXlKCKpTLMrsY7dw74KpsgNGqAc26+hBAhV0 TKBbcT6xoo2kU6+HF63p9BjYXXyKaXuypfaAnDN3jzqUB1Cab+yWjwFhGIXfac4U lv5odHsBZolrKTvHiZEXzR5/hwCwdRpVyyrfqGPpabZYPRua3SLTK4x/8LXAhOVp sZnm03PaAVNFK4RzT2iwEUltWSszKeATHuIt17Zag7j4nOscnh89eOKlN/2ijbmp qvS3fxm/1so8UmX3ovYYNt0lqQDz+xOo+4k2tS8e+ujBSw5nKenw5LhZleMsm7Vr b0fY5Gacq51pm3ach6jArIBp/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHv4RxL3 +O0eagoNSwbm5tKX+iQNMB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2JWrGsLX1S7oMthPi8vawcmDbdZeyl+KilwU8UY4yrfZzeuIrCkfq qoc3HWR5exPqkbWxta+GBMytv0wtQu0RtDq/JL8rAmJKKX8YV39mE9drN7MAN6EI DFT+bjN87pBC5/uxyKioID3/TVXK6wx1QuN8jfe0KBmQPi6wyDwDmIvdIVnn5/hp kqRiP9+IGjzpHcupT5WiZIBbcvpkVqkvaQ79IG2v0ytNz6PFkgyvPoJPM8YqW3eN Uc68mUYb2WowiMLTD+GBxkeai0y8zSJ/BujEyUanf1epK+Evo3ZvPSJ5Lb/j1FKu m7ZpVE8WxCxcH68w0obn9tE5EoNcqDbi -----END CERTIFICATE-----Generated at Sun Dec 7 00:58:17 2025 by rpki-client