This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json) Hash identifier: hWPrIU0EOVRLpL4ud299JfczqYO8ezdwZn/tnwXUDS0= Subject key identifier: 0D:95:45:FE:8F:73:E7:C5:01:2F:4A:27:60:F2:BE:69:9F:C7:DE:56 Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft Manifest number: 0148 Signing time: Wed 17 Dec 2025 03:50:03 +0000 Manifest this update: Wed 17 Dec 2025 03:50:03 +0000 Manifest next update: Wed 24 Dec 2025 03:50:03 +0000 Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: BlhdsMDmRJOSOJcFlQDMSvt5VDTPixO+r+sKwGo55O4=) 2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: Ga1jsRYecaBQWadBOEJf3Y9akBHnUgs+85T4mwwYjp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 03:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Validity Not Before: Dec 17 03:50:03 2025 GMT Not After : Dec 24 03:50:03 2025 GMT Subject: CN=6942286b-2006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ce:03:a1:14:83:7b:ef:02:15:04:e4:9d:b6: 1f:48:37:d3:46:36:23:17:fd:24:29:b1:d1:31:bb: 86:50:8a:44:1f:bd:cf:ee:f3:7c:a2:73:f6:6b:a0: d9:b7:7e:bf:fe:7e:ae:c0:60:9e:27:ca:79:a8:43: ca:31:45:39:ac:fd:3d:43:1f:4d:25:b2:36:2f:1f: 5a:84:dc:43:45:0f:bd:d6:9b:f4:94:af:cd:af:48: c4:79:4b:0c:fe:89:19:f8:c0:85:0d:8d:26:eb:0f: b7:d5:77:ad:3c:4b:1e:8c:29:1b:99:da:67:80:6c: a4:93:98:cf:73:06:85:dc:b7:68:06:80:59:5b:ab: 5d:91:f2:89:54:cf:25:5a:4f:8b:d9:9b:97:77:2e: 42:14:e7:3f:37:8d:c2:74:80:98:dc:83:5d:0d:a6: b4:6c:b9:91:4b:b4:b0:a1:b1:be:46:fb:db:50:fb: ac:d9:5f:50:78:47:96:18:20:8f:b0:06:6e:2c:5f: b4:74:a8:8e:6b:7c:6c:64:d0:52:94:f1:24:6a:4a: 68:87:cd:9e:56:f6:8e:1a:7e:6b:6f:c2:e5:06:7b: 5d:45:e2:1e:df:5a:f9:09:05:71:80:a9:df:6d:c7: 4d:db:fb:1f:4e:47:fd:65:df:ec:23:bd:49:b0:21: f7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:95:45:FE:8F:73:E7:C5:01:2F:4A:27:60:F2:BE:69:9F:C7:DE:56 X509v3 Authority Key Identifier: keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:7f:45:8d:6c:37:fa:d8:df:82:8e:91:a7:1c:2e:18:53:72: 4a:9b:76:63:05:51:39:74:34:7f:af:b1:4a:e6:61:26:ac:4c: c1:40:85:c8:f3:5b:5c:9d:cf:71:4c:5f:b5:2e:02:31:2f:dc: aa:4b:28:49:53:a5:32:40:bd:f0:88:56:f9:4c:ff:a5:8c:f4: 0a:0c:c2:92:f4:85:67:47:84:25:78:6b:9c:8e:12:b6:8c:30: 28:a1:4a:5c:93:76:a6:1f:a4:94:8e:35:7f:84:29:2a:e0:6e: 84:cc:4f:15:e2:2f:07:a3:ac:d9:3c:d4:7b:8c:e2:f6:82:29: c9:33:23:3a:1e:3a:d7:a8:2f:cd:6e:ee:4f:36:da:40:6e:08: a1:c3:c9:d4:d9:d7:38:0f:a8:8f:3c:d0:d6:06:3f:0a:22:85: 90:2f:a2:ba:c6:90:fe:88:26:fa:e3:e7:08:68:e6:b5:b4:c4: 0c:5b:9c:72:ed:fb:79:6c:a8:78:5f:32:a3:6e:0b:0c:b6:e3: b8:46:24:03:64:eb:16:d7:43:b9:34:bd:c3:38:5f:02:c4:ea: bb:2e:19:74:63:4b:44:d3:02:f9:4a:87:f1:d2:47:44:24:c1: 1f:33:43:99:1c:04:1f:86:15:1a:75:0e:2d:57:5c:46:9e:9f: a1:03:81:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz MzQ3MjEwODIwHhcNMjUxMjE3MDM1MDAzWhcNMjUxMjI0MDM1MDAzWjAYMRYwFAYD VQQDDA02OTQyMjg2Yi0yMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5c4DoRSDe+8CFQTknbYfSDfTRjYjF/0kKbHRMbuGUIpEH73P7vN8onP2a6DZ t36//n6uwGCeJ8p5qEPKMUU5rP09Qx9NJbI2Lx9ahNxDRQ+91pv0lK/Nr0jEeUsM /okZ+MCFDY0m6w+31XetPEsejCkbmdpngGykk5jPcwaF3LdoBoBZW6tdkfKJVM8l Wk+L2ZuXdy5CFOc/N43CdICY3INdDaa0bLmRS7SwobG+RvvbUPus2V9QeEeWGCCP sAZuLF+0dKiOa3xsZNBSlPEkakpoh82eVvaOGn5rb8LlBntdReIe31r5CQVxgKnf bcdN2/sfTkf9Zd/sI71JsCH3uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2VRf6P c+fFAS9KJ2Dyvmmfx95WMB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2 NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhB M3cybE96MlRFMll6UnlFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZf0WNbDf62N+CjpGnHC4YU3JKm3ZjBVE5dDR/r7FK5mEmrEzBQIXI 81tcnc9xTF+1LgIxL9yqSyhJU6UyQL3wiFb5TP+ljPQKDMKS9IVnR4QleGucjhK2 jDAooUpck3amH6SUjjV/hCkq4G6EzE8V4i8Ho6zZPNR7jOL2ginJMyM6HjrXqC/N bu5PNtpAbgihw8nU2dc4D6iPPNDWBj8KIoWQL6K6xpD+iCb64+cIaOa1tMQMW5xy 7ft5bKh4XzKjbgsMtuO4RiQDZOsW10O5NL3DOF8CxOq7Lhl0Y0tE0wL5Sofx0kdE JMEfM0OZHAQfhhUadQ4tV1xGnp+hA4Fi -----END CERTIFICATE-----Generated at Thu Dec 18 23:11:05 2025 by rpki-client