This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json) Hash identifier: sRj1i2MmRmZUhcM92Vrk83f6u93ItUv3L428equXRQ0= Subject key identifier: F4:93:C9:B0:18:CA:D7:F6:E2:20:DC:1E:5C:B5:F5:CD:BA:D9:05:BB Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft Manifest number: 0142 Signing time: Fri 05 Dec 2025 02:30:48 +0000 Manifest this update: Fri 05 Dec 2025 02:30:47 +0000 Manifest next update: Fri 12 Dec 2025 02:30:47 +0000 Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: bigKGeb/OSXk5eCCrODLlx3xj+L006itBD7frZBn1/A=) 2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: Ga1jsRYecaBQWadBOEJf3Y9akBHnUgs+85T4mwwYjp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Validity Not Before: Dec 5 02:30:47 2025 GMT Not After : Dec 12 02:30:47 2025 GMT Subject: CN=693243d8-949d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6c:ef:8d:68:0a:07:57:15:dc:87:9b:e7:35: c5:8e:7a:ee:59:c5:22:30:d9:07:4d:d2:41:eb:a8: ae:7f:0e:61:84:60:9f:6b:db:e7:46:05:86:01:e2: 4d:19:4a:07:e1:7f:33:8b:fd:dc:ce:85:2f:be:07: 66:8e:67:1c:2d:09:6d:d6:37:e0:60:28:0b:33:de: ac:1d:77:a3:4a:dc:d4:58:73:6e:93:2c:e4:56:80: db:bd:b9:1a:49:e7:73:b8:fe:34:9d:64:b0:53:1d: b5:7b:33:c7:ac:ba:6b:5f:cd:02:17:08:8f:34:2b: 68:51:7e:a4:36:d0:28:dd:a7:3e:01:03:0d:2a:ad: fa:1a:65:9e:d6:ce:66:16:d8:20:84:51:f9:fc:8a: 62:56:de:6c:b2:f4:11:33:88:60:0d:2c:24:39:93: 35:0f:5d:96:02:04:f6:bf:bb:d0:ad:7d:75:69:3f: bf:90:b9:51:08:c4:bb:00:bc:d1:98:37:7e:c8:97: 9e:be:e3:60:9f:82:7c:4e:88:f6:76:67:91:03:08: 05:35:ea:6b:88:b8:81:22:b0:d7:84:92:ac:b7:b7: b5:70:6a:14:c0:4c:d0:cb:d5:65:af:4c:64:bd:da: fe:50:db:08:29:71:ca:b6:ab:cc:35:05:2a:c8:a8: 8f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:93:C9:B0:18:CA:D7:F6:E2:20:DC:1E:5C:B5:F5:CD:BA:D9:05:BB X509v3 Authority Key Identifier: keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:df:55:a5:bb:9c:c3:89:88:57:5e:69:de:60:fe:dc:53:84: e9:12:a5:d5:71:4c:ed:47:93:42:d7:4e:c8:0f:b1:39:17:b1: 44:8b:a6:7f:b0:43:54:43:4b:f0:bb:8c:f9:a6:66:2c:2b:3c: 90:2d:d8:6f:70:6a:75:be:32:b2:99:7d:5b:82:90:d2:4b:f2: eb:81:e8:37:a1:22:e2:3c:e1:a5:dd:bb:1d:26:04:0a:6c:96: 94:6c:17:6c:a8:9c:75:a3:d0:01:3f:c8:e5:cf:59:a5:d8:6f: 30:ea:17:c1:11:2d:ce:74:ea:e6:c7:b6:01:6b:1b:f3:56:4f: 54:a6:d0:66:fa:50:c7:0a:c0:58:d0:17:a0:c9:d5:85:10:9e: 46:aa:c9:fe:a1:96:1e:02:88:92:0b:f7:fe:77:3c:10:2a:f4: 06:ab:0a:85:3c:14:28:50:81:73:eb:1b:e1:6e:5e:ef:e7:29: e2:39:fd:4b:ac:c1:fb:ec:ab:7a:d8:ab:f6:3e:02:7e:07:03: 9d:96:da:a7:1e:a2:f3:ce:31:ca:93:0d:52:e9:06:9a:45:9f: b3:73:9b:33:4b:68:b7:20:95:b6:72:47:cb:75:cb:91:a6:f9: 31:8a:93:eb:24:bd:44:c5:96:a9:b8:0a:35:2a:15:71:27:11: 6a:25:fc:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz MzQ3MjEwODIwHhcNMjUxMjA1MDIzMDQ3WhcNMjUxMjEyMDIzMDQ3WjAYMRYwFAYD VQQDEw02OTMyNDNkOC05NDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7WzvjWgKB1cV3Ieb5zXFjnruWcUiMNkHTdJB66iufw5hhGCfa9vnRgWGAeJN GUoH4X8zi/3czoUvvgdmjmccLQlt1jfgYCgLM96sHXejStzUWHNukyzkVoDbvbka SedzuP40nWSwUx21ezPHrLprX80CFwiPNCtoUX6kNtAo3ac+AQMNKq36GmWe1s5m FtgghFH5/IpiVt5ssvQRM4hgDSwkOZM1D12WAgT2v7vQrX11aT+/kLlRCMS7ALzR mDd+yJeevuNgn4J8Toj2dmeRAwgFNepriLiBIrDXhJKst7e1cGoUwEzQy9Vlr0xk vdr+UNsIKXHKtqvMNQUqyKiPqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSTybAY ytf24iDcHly19c262QW7MB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2 NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhB M3cybE96MlRFMll6UnlFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa31Wlu5zDiYhXXmneYP7cU4TpEqXVcUztR5NC107ID7E5F7FEi6Z/ sENUQ0vwu4z5pmYsKzyQLdhvcGp1vjKymX1bgpDSS/Lrgeg3oSLiPOGl3bsdJgQK bJaUbBdsqJx1o9ABP8jlz1ml2G8w6hfBES3OdOrmx7YBaxvzVk9UptBm+lDHCsBY 0BegydWFEJ5Gqsn+oZYeAoiSC/f+dzwQKvQGqwqFPBQoUIFz6xvhbl7v5yniOf1L rMH77Kt62Kv2PgJ+BwOdltqnHqLzzjHKkw1S6QaaRZ+zc5szS2i3IJW2ckfLdcuR pvkxipPrJL1ExZapuAo1KhVxJxFqJfwc -----END CERTIFICATE-----Generated at Sat Dec 6 23:37:22 2025 by rpki-client