This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json) Hash identifier: 2BJcD+Nnk/hGlbBsZwMiY7QuJamFBFqTG18N2io/xMY= Subject key identifier: B8:DE:26:05:23:A9:E9:49:46:D1:3C:1A:1E:E6:12:AC:5C:2B:01:E2 Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft Manifest number: 019F Signing time: Fri 05 Dec 2025 02:35:53 +0000 Manifest this update: Fri 05 Dec 2025 02:35:52 +0000 Manifest next update: Fri 12 Dec 2025 02:35:52 +0000 Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: Hw2/JxyOmUtBwMX1UPeriWXKtRBngJqIFGhi4IGcVRI=) 2: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: 4jQKo5E0XfC+Bh102tpwq0SPDRbmpx2RDfSXwme/Vtk=) 3: 68BCC70EBD2D11F086C1B125C4F9AE02.roa (hash: qFy+PfRK0ljik7CZvuqMAh56bKlP5ErsYf4UfvP1xJQ=) 4: D1825C02598911F0848EA472C4F9AE02.roa (hash: 6FiZKuLIgUtIYIA1D6XNL/A4ah2P8QXaPUVRBeti7CE=) 5: 8F4855FA719D11EF89D9262FC4F9AE02.roa (hash: PwrdrhDZAUvpoeswVRlW4enrKnpklIZJadw0mW5Czq0=) 6: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: nBxiatkIvna62kGHJDpRTxWGzVu/8J7M6fdEO+/Y3Ws=) 7: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: XpEdNMaKGtUEN6hIgRHzqxQfHq0kQwSpdYHVdb7TK5A=) 8: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: 7e1bIIpY60NREKCU3ueEl2g/koitX0hrLn6cquJbTFo=) 9: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: M7jRTXUUxsXllPmDL18I1jFn9NqYlH0GKE7w5Dxvhe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Dec 5 02:35:52 2025 GMT Not After : Dec 12 02:35:52 2025 GMT Subject: CN=69324508-b7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d6:fe:3b:e2:1a:36:b3:39:1b:46:67:6b:10: a9:5b:6c:0b:0f:01:30:1d:c6:e1:1c:35:61:8b:ea: 07:cb:ef:5d:aa:7c:37:cf:92:90:07:67:18:62:50: b4:77:22:46:07:28:d6:0f:cf:12:3e:5d:77:1c:23: 02:c8:2f:06:73:df:c1:08:ff:5d:d2:c2:7f:0b:8f: 98:24:c7:d8:0f:b8:4f:f6:d9:55:08:aa:fb:72:fc: df:b2:73:60:ee:13:74:93:9e:ea:ac:cf:d9:47:dc: e6:eb:44:16:66:25:0b:2a:70:e0:12:12:b6:42:ab: 30:77:d0:e2:9a:10:87:27:e0:d1:10:0d:23:1c:b6: 94:ab:21:b0:4b:28:99:1b:86:f5:f3:98:d6:30:c7: 4d:61:ba:8c:fd:6b:a8:ff:4b:f3:b4:fa:67:62:3e: 10:c9:fb:ce:fe:fd:2f:85:6c:98:47:10:b3:5e:67: 93:27:cb:ec:01:68:be:dc:c0:ee:cb:b4:ef:7d:e9: df:37:bf:ef:64:5e:a5:97:fe:23:7b:c2:65:0c:ab: bd:01:65:54:56:8b:60:76:e0:68:23:59:4e:0f:2b: 1f:ab:a4:52:a9:64:a5:dc:d5:4f:cd:3c:5c:bd:59: 47:2c:d9:ce:ad:fc:32:bb:89:26:8a:18:10:bb:a2: a8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DE:26:05:23:A9:E9:49:46:D1:3C:1A:1E:E6:12:AC:5C:2B:01:E2 X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:fa:94:f1:83:f9:e3:6c:27:ee:23:7d:13:9f:d7:b2:73:7c: 21:5d:7a:39:06:a8:b8:33:49:86:58:f6:17:7b:3c:09:d7:67: 0f:0b:6f:5d:05:48:89:76:91:c5:47:a5:f1:66:33:d8:21:3a: 33:d6:c2:c7:26:7c:a1:94:fd:6a:b3:c5:ee:8b:6b:6b:29:86: bc:26:af:69:22:6a:7c:5a:aa:04:c4:be:45:ba:af:87:c6:ad: 23:97:32:0a:bb:24:39:23:34:5b:d9:2c:b2:2c:53:d7:c6:e0: 16:04:4f:67:fd:2c:0b:02:98:90:a2:56:57:65:9d:50:25:88: e4:89:1f:cc:dd:4e:23:71:8d:df:66:58:d2:db:83:54:e2:0e: 57:70:85:07:9d:26:06:86:db:7f:c9:3a:5e:10:4a:1b:a5:f1: cb:1a:7b:56:d6:b7:a8:7f:87:4b:af:57:f2:6b:50:a2:bd:46: 8d:48:a4:45:6c:d4:fa:79:2f:05:44:57:ba:8f:bc:20:3d:4c: 27:07:49:71:51:92:dd:3c:97:65:78:bf:1a:57:79:33:dd:f2: 60:1a:51:63:4c:f9:6b:cd:bd:3a:74:44:44:bd:d0:16:c4:06: 5a:45:58:e3:93:2e:44:06:fc:d4:88:2e:ca:f1:49:cc:dd:ac: fd:51:4e:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjUxMjA1MDIzNTUyWhcNMjUxMjEyMDIzNTUyWjAYMRYwFAYD VQQDEw02OTMyNDUwOC1iN2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Nb+O+IaNrM5G0ZnaxCpW2wLDwEwHcbhHDVhi+oHy+9dqnw3z5KQB2cYYlC0 dyJGByjWD88SPl13HCMCyC8Gc9/BCP9d0sJ/C4+YJMfYD7hP9tlVCKr7cvzfsnNg 7hN0k57qrM/ZR9zm60QWZiULKnDgEhK2Qqswd9DimhCHJ+DREA0jHLaUqyGwSyiZ G4b185jWMMdNYbqM/Wuo/0vztPpnYj4QyfvO/v0vhWyYRxCzXmeTJ8vsAWi+3MDu y7TvfenfN7/vZF6ll/4je8JlDKu9AWVUVotgduBoI1lODysfq6RSqWSl3NVPzTxc vVlHLNnOrfwyu4kmihgQu6KomwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjeJgUj qelJRtE8Gh7mEqxcKwHiMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4 SVZwSjVDZnhyblFBMTRpX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf+pTxg/njbCfuI30Tn9eyc3whXXo5Bqi4M0mGWPYXezwJ12cPC29d BUiJdpHFR6XxZjPYIToz1sLHJnyhlP1qs8Xui2trKYa8Jq9pImp8WqoExL5Fuq+H xq0jlzIKuyQ5IzRb2SyyLFPXxuAWBE9n/SwLApiQolZXZZ1QJYjkiR/M3U4jcY3f ZljS24NU4g5XcIUHnSYGhtt/yTpeEEobpfHLGntW1reof4dLr1fya1CivUaNSKRF bNT6eS8FRFe6j7wgPUwnB0lxUZLdPJdleL8aV3kz3fJgGlFjTPlrzb06dEREvdAW xAZaRVjjky5EBvzUiC7K8UnM3az9UU5o -----END CERTIFICATE-----Generated at Sun Dec 7 01:38:51 2025 by rpki-client