This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft File: cPhdBJUBOFatAizAkilp4Mj8ReI.mft (raw, json) Hash identifier: rGecfVcOxg+Nux8yggnosVsf7qavb8b/xQDtXzeiMyo= Subject key identifier: D4:B1:C7:5E:1F:89:DA:CE:43:AF:6B:B4:66:CF:30:AF:23:95:C8:21 Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 Certificate issuer: /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft Manifest number: 05EA Signing time: Thu 04 Dec 2025 21:40:44 +0000 Manifest this update: Thu 04 Dec 2025 21:40:44 +0000 Manifest next update: Thu 11 Dec 2025 21:40:44 +0000 Files and hashes: 1: cPhdBJUBOFatAizAkilp4Mj8ReI.crl (hash: 1L3UuXaJX3AXdfYZyc4lPbShGk6G8La5Y+8w03IXF8I=) 2: 8FE569EC776B11F0B156EB5AC4F9AE02.roa (hash: 05ONJ6gn6THBNIdjw9547Y3Ra4e7ZSd6nxQro/5YWpc=) 3: 872A7C2A73A111F0A653E239C4F9AE02.roa (hash: eJZB22mbfBjXQGnbEMxJ+IY2H2YTZ4yy9O9aqK+bNis=) 4: A7F88866489611EFA3CACC09C4F9AE02.roa (hash: t7eknxpJ+dZ+sJQnSi245edufycu6QV4awrd/RTcAXE=) 5: E90DFC9CF00111EFB541185CC4F9AE02.roa (hash: TuWKlHncV9ol4wZzYVUEuu8aecG1wWBFbcB1ZNq2FKQ=) 6: C454E4B4D94F11EBAB5C652FC4F9AE02.roa (hash: 8GLZSq2u4K0rZRuLFUVu2DZuH9B8VodmiF5KxyYmSr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F2D, serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Validity Not Before: Dec 4 21:40:44 2025 GMT Not After : Dec 11 21:40:44 2025 GMT Subject: CN=6931ffdc-dc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:90:b9:dc:10:e0:da:3a:ae:f3:48:29:e8:25: 24:2b:ab:9d:5f:3b:9a:1e:be:21:29:bc:fb:33:60: cc:9e:f7:5f:93:3e:9c:74:80:89:1d:39:be:aa:a3: ad:43:b3:b9:2b:64:0d:f6:e1:36:51:52:18:a7:f8: 6e:c3:e9:ef:e5:ae:aa:26:06:4b:42:9a:b4:e9:b3: d4:4c:80:ef:26:84:4a:27:e1:3c:43:23:92:0c:12: f0:4c:98:05:10:b3:4e:66:89:d4:03:84:f8:76:9d: cb:e4:05:c0:12:4e:62:d6:78:76:94:3c:2e:2c:a2: ac:83:bf:a3:58:33:a0:fe:33:7e:bb:ea:f1:92:38: 30:fc:50:73:1a:5a:3a:3f:b8:0c:b3:f7:90:71:57: d3:dd:56:75:af:ec:3a:ff:e3:4a:37:14:df:8c:bf: 86:3c:c1:9c:5d:04:f1:0f:70:54:fd:41:b3:b1:e5: 2b:b1:00:61:7a:10:ab:cf:2b:a1:95:af:b6:6b:a5: c4:8b:c5:c5:93:44:78:23:94:7e:cc:06:b8:a2:0f: f4:4d:24:e6:35:4a:77:b1:4f:70:14:68:01:ed:a7: 21:18:e4:3a:cf:17:6b:be:33:15:0a:c3:bb:a5:6d: bb:7c:f7:31:af:dd:f3:bc:86:2c:75:23:da:43:46: 73:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B1:C7:5E:1F:89:DA:CE:43:AF:6B:B4:66:CF:30:AF:23:95:C8:21 X509v3 Authority Key Identifier: keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:55:97:0b:08:4c:fd:dc:86:71:64:ad:6b:ee:e0:45:92:5b: 26:19:4b:5e:d7:e0:a6:df:5f:ba:46:e5:35:d8:4c:8d:ca:71: bf:23:cf:19:ad:7e:e2:5e:bd:cc:97:fd:58:c9:7c:23:b9:34: 52:75:67:5a:2f:c7:a9:9b:f3:90:78:d1:7f:fb:3d:ad:e6:6a: 39:f3:da:e4:3d:93:72:cc:48:60:0f:32:da:20:ef:62:b4:99: 20:2e:34:03:46:08:e2:0e:5b:b7:fb:9a:85:f9:d4:c9:ac:95: 29:cd:cd:7d:f2:50:e6:98:2d:0a:d5:be:16:d1:62:ef:c4:28: 35:86:5e:ac:30:0d:35:b4:5c:51:18:8c:b8:83:3e:27:85:e2: a2:fc:ba:55:e7:d5:ae:38:90:20:9b:5d:4a:58:a6:94:d2:50: d0:36:24:9f:96:4d:9c:69:41:97:c6:28:d9:9c:b3:01:4e:f9: 5b:e4:99:0e:af:e3:ad:a7:48:bd:dd:c8:8b:0b:d2:e0:3f:fd: 55:0d:41:63:31:02:55:a4:2e:dd:ff:3f:40:26:70:ec:f9:ea: 5a:a8:a2:69:ce:b1:8f:c0:7d:8d:50:38:31:d9:32:74:c2:67: 0b:98:c5:ce:af:f1:76:59:f7:62:4e:45:3c:5d:04:2b:6d:a0: 3c:33:9f:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGMkQxMTAvBgNVBAUTKDcwRjg1RDA0OTUwMTM4NTZBRDAyMkNDMDkyMjk2OUUw QzhGQzQ1RTIwHhcNMjUxMjA0MjE0MDQ0WhcNMjUxMjExMjE0MDQ0WjAYMRYwFAYD VQQDEw02OTMxZmZkYy1kYzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZC53BDg2jqu80gp6CUkK6udXzuaHr4hKbz7M2DMnvdfkz6cdICJHTm+qqOt Q7O5K2QN9uE2UVIYp/huw+nv5a6qJgZLQpq06bPUTIDvJoRKJ+E8QyOSDBLwTJgF ELNOZonUA4T4dp3L5AXAEk5i1nh2lDwuLKKsg7+jWDOg/jN+u+rxkjgw/FBzGlo6 P7gMs/eQcVfT3VZ1r+w6/+NKNxTfjL+GPMGcXQTxD3BU/UGzseUrsQBhehCrzyuh la+2a6XEi8XFk0R4I5R+zAa4og/0TSTmNUp3sU9wFGgB7achGOQ6zxdrvjMVCsO7 pW27fPcxr93zvIYsdSPaQ0ZzoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSxx14f idrOQ69rtGbPMK8jlcghMB8GA1UdIwQYMBaAFHD4XQSVAThWrQIswJIpaeDI/EXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEYyRC9DRkJFRDM3MEQ5 NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9GYXRBaXpBa2lscDRNajhS ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NQaGRCSlVCT0ZhdEFpekFraWxwNE1qOFJlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEYyRC9DRkJFRDM3MEQ5NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9G YXRBaXpBa2lscDRNajhSZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiVZcLCEz93IZxZK1r7uBFklsmGUte1+Cm31+6RuU12EyNynG/I88Z rX7iXr3Ml/1YyXwjuTRSdWdaL8epm/OQeNF/+z2t5mo589rkPZNyzEhgDzLaIO9i tJkgLjQDRgjiDlu3+5qF+dTJrJUpzc198lDmmC0K1b4W0WLvxCg1hl6sMA01tFxR GIy4gz4nheKi/LpV59WuOJAgm11KWKaU0lDQNiSflk2caUGXxijZnLMBTvlb5JkO r+Otp0i93ciLC9LgP/1VDUFjMQJVpC7d/z9AJnDs+epaqKJpzrGPwH2NUDgx2TJ0 wmcLmMXOr/F2WfdiTkU8XQQrbaA8M59J -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:10 2025 by rpki-client