This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft File: _z4OD6f_JX29huYrEpqZTYpJ2E4.mft (raw, json) Hash identifier: rYth3Z30w5CO94qaXVX0yDgGZTSDvBLMoMAKReHP7gQ= Subject key identifier: 83:42:F8:02:3D:FF:E2:5C:73:FC:8D:07:11:76:8E:12:91:B7:96:2B Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E Certificate issuer: /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E Certificate serial: 0279 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft Manifest number: 0275 Signing time: Thu 04 Dec 2025 23:57:35 +0000 Manifest this update: Thu 04 Dec 2025 23:57:35 +0000 Manifest next update: Thu 11 Dec 2025 23:57:35 +0000 Files and hashes: 1: _z4OD6f_JX29huYrEpqZTYpJ2E4.crl (hash: nT5JsyMXS2kd8QDryCwohz+Z0I5rAgvQzm4QgDjRUsE=) 2: 28536FDC340111EDB747A054C4F9AE02.roa (hash: 767ZJ3Zu0HqcoNrNoqHbrHeEu3FFQ1fr2JP5wUeYGvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 633 (0x279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B1F5, serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E Validity Not Before: Dec 4 23:57:35 2025 GMT Not After : Dec 11 23:57:35 2025 GMT Subject: CN=69321fef-6cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:32:91:9f:9f:f6:a2:a2:97:e5:4d:a4:26:ea: 37:06:84:e8:4c:6d:b8:c1:d0:2b:ea:21:97:a1:84: 6e:40:a3:1e:0f:1d:0b:b4:00:b6:3d:4c:5f:bd:8d: 11:00:00:14:7a:77:cc:ba:9c:1f:a8:26:62:61:b9: 80:26:4f:ae:16:ac:df:54:a9:24:58:3c:6e:1d:28: fa:1f:d9:ce:f2:22:ca:a8:7f:e9:e2:2c:a2:59:e7: 17:63:b1:e0:ab:6f:17:4a:11:9a:40:c1:87:f1:35: 0f:a1:06:1b:dc:44:67:9e:45:9b:07:fa:70:97:d9: c6:62:18:78:f5:47:c8:10:9f:3d:c7:47:e6:46:43: ab:f3:a3:92:51:74:d3:30:f1:8e:52:79:99:0f:f9: aa:72:dd:4b:bd:17:21:0b:e5:2d:06:3b:ad:16:70: 86:ab:52:df:49:59:a9:40:62:c5:32:4f:8a:a9:d2: ae:a0:6f:9d:3f:fe:00:64:22:4a:a1:29:66:f9:4c: 01:49:2f:0e:6c:cd:11:fb:67:5c:31:91:7a:17:e6: 1e:b3:f1:fd:d8:bd:c3:98:4f:03:5a:8a:ae:fa:05: eb:f5:ff:90:8f:89:1e:93:f9:fe:af:93:5b:40:c0: bd:37:83:28:83:32:d2:f7:bb:63:43:23:86:87:94: e2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:42:F8:02:3D:FF:E2:5C:73:FC:8D:07:11:76:8E:12:91:B7:96:2B X509v3 Authority Key Identifier: keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:80:9e:6f:5c:9a:1f:e3:82:d9:d5:62:69:7f:04:43:81:2b: 74:73:2c:3d:d6:e1:72:1c:5b:3c:a2:ec:24:50:73:2c:fc:2c: d4:b5:52:90:96:6a:cb:4a:6a:31:88:d2:2d:10:49:f5:de:a2: d3:4d:6c:02:18:e2:ca:9c:2f:05:6f:e2:a8:ad:a2:de:94:aa: 31:5e:a8:5a:3b:33:ef:aa:0d:5b:4a:52:8c:aa:c4:fa:27:bb: 92:db:25:7b:be:de:59:53:3d:f1:92:c4:98:ea:df:ec:0b:8b: c1:61:3f:52:1c:55:cb:92:c1:83:02:cf:16:24:0e:92:41:a3: d0:d9:4a:d1:e9:d9:6c:93:6d:54:d3:74:dd:88:cb:4f:fa:fd: 6c:74:8c:d3:1b:0b:54:b7:63:7b:9b:1e:34:3e:4c:8a:e6:c9: 4a:76:eb:43:60:e7:ce:19:4d:cc:da:77:fe:19:fd:70:ad:ef: a4:f5:26:7a:f6:f2:36:0b:09:a4:ef:30:c2:8f:53:6e:0e:42: fe:ee:8a:d3:4a:2a:53:5c:be:99:23:ed:69:e8:53:c1:12:7c: 91:bc:b2:3c:64:b7:37:d7:75:90:61:6b:ef:fe:b2:e5:b5:1a: da:0c:7e:6c:d6:02:c2:dc:3f:e5:67:66:8b:0a:d4:59:04:85: 76:18:3e:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxRjUxMTAvBgNVBAUTKEZGM0UwRTBGQTdGRjI1N0RCRDg2RTYyQjEyOUE5OTRE OEE0OUQ4NEUwHhcNMjUxMjA0MjM1NzM1WhcNMjUxMjExMjM1NzM1WjAYMRYwFAYD VQQDEw02OTMyMWZlZi02Y2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDKRn5/2oqKX5U2kJuo3BoToTG24wdAr6iGXoYRuQKMeDx0LtAC2PUxfvY0R AAAUenfMupwfqCZiYbmAJk+uFqzfVKkkWDxuHSj6H9nO8iLKqH/p4iyiWecXY7Hg q28XShGaQMGH8TUPoQYb3ERnnkWbB/pwl9nGYhh49UfIEJ89x0fmRkOr86OSUXTT MPGOUnmZD/mqct1LvRchC+UtBjutFnCGq1LfSVmpQGLFMk+KqdKuoG+dP/4AZCJK oSlm+UwBSS8ObM0R+2dcMZF6F+Yes/H92L3DmE8DWoqu+gXr9f+Qj4kek/n+r5Nb QMC9N4MogzLS97tjQyOGh5TiIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINC+AI9 /+Jcc/yNBxF2jhKRt5YrMB8GA1UdIwQYMBaAFP8+Dg+n/yV9vYbmKxKamU2KSdhO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjFGNS8wRDIxM0VEQzMz RkQxMUVEQUJGN0NGNEJDNEY5QUUwMi9fejRPRDZmX0pYMjlodVlyRXBxWlRZcEoy RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL196NE9ENmZfSlgyOWh1WXJFcHFaVFlwSjJFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjFGNS8wRDIxM0VEQzMzRkQxMUVEQUJGN0NGNEJDNEY5QUUwMi9fejRPRDZmX0pY MjlodVlyRXBxWlRZcEoyRTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCgJ5vXJof44LZ1WJpfwRDgSt0cyw91uFyHFs8ouwkUHMs/CzUtVKQ lmrLSmoxiNItEEn13qLTTWwCGOLKnC8Fb+KoraLelKoxXqhaOzPvqg1bSlKMqsT6 J7uS2yV7vt5ZUz3xksSY6t/sC4vBYT9SHFXLksGDAs8WJA6SQaPQ2UrR6dlsk21U 03TdiMtP+v1sdIzTGwtUt2N7mx40PkyK5slKdutDYOfOGU3M2nf+Gf1wre+k9SZ6 9vI2Cwmk7zDCj1NuDkL+7orTSipTXL6ZI+1p6FPBEnyRvLI8ZLc313WQYWvv/rLl tRraDH5s1gLC3D/lZ2aLCtRZBIV2GD6w -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:15 2025 by rpki-client