This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft File: cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft (raw, json) Hash identifier: gc5Dg38xf78bZLOtQZiEv7P1yF0S2F239r8CXYArNd4= Subject key identifier: 43:02:C2:25:6F:F1:23:49:75:A4:20:8C:34:6A:7A:CF:C7:F0:9A:EA Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 Certificate issuer: /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Certificate serial: 10D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft Manifest number: 10C9 Signing time: Sat 20 Dec 2025 17:02:13 +0000 Manifest this update: Sat 20 Dec 2025 17:02:13 +0000 Manifest next update: Sat 27 Dec 2025 17:02:13 +0000 Files and hashes: 1: cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl (hash: Lx/QTa/T2kkScenK/HZ5KthVjmGJaTWh2RWbkp/4ZbA=) 2: 74087358355111E99EC82E0AC4F9AE02.roa (hash: PB0EHBaY36YHqHC7V47MMIuYWFc+4JG8rzrltMHOFuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4305 (0x10d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D49F, serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Validity Not Before: Dec 20 17:02:13 2025 GMT Not After : Dec 27 17:02:13 2025 GMT Subject: CN=6946d695-544d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:84:05:be:6a:3f:0e:f4:3d:42:06:46:ad: e0:e2:eb:e2:15:24:b7:22:da:da:a3:49:57:2a:2c: 7e:3b:ac:60:a6:5b:0f:b3:80:16:8b:08:e2:27:f1: 48:0a:da:f2:29:c0:6a:62:f0:ef:17:53:a8:70:9b: 45:0a:de:3c:91:ec:48:c5:da:d8:72:77:58:ca:dc: f7:b3:1a:25:f7:f2:cc:6a:e1:52:b0:08:12:9f:7e: 1b:93:13:c5:12:1b:71:40:52:5e:2b:b4:da:eb:b5: d6:47:bc:c0:04:71:04:dc:9e:14:c6:e6:11:73:23: 18:05:08:5a:24:7c:a5:78:f4:32:24:5d:07:59:1f: 0d:6b:cd:8f:d7:1f:7e:84:86:a9:2a:d7:c9:1f:1f: 71:b2:57:5c:84:cc:9c:b6:e9:75:86:22:11:2a:87: 63:f1:c4:de:5e:1e:c8:49:92:fe:99:62:28:09:1e: ad:d6:68:cb:9f:73:87:c8:a0:2c:2b:67:25:e5:2f: 36:32:9d:7a:0d:4b:48:39:47:4d:52:d9:6a:0b:7b: 9a:e9:d0:0f:3e:4b:02:d9:7c:62:23:22:b9:30:ed: a1:d7:38:57:f6:59:a3:fb:bf:69:b8:67:95:d1:2a: 72:95:e0:7a:a9:11:ec:bd:f3:fd:23:7a:03:67:6e: 57:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:02:C2:25:6F:F1:23:49:75:A4:20:8C:34:6A:7A:CF:C7:F0:9A:EA X509v3 Authority Key Identifier: keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:31:a6:57:b9:ce:c7:60:8e:4c:e2:81:eb:3c:71:50:d5:c4: e3:a5:58:c0:22:2c:e2:f3:c4:34:db:5d:3f:94:1f:fd:14:62: 20:ff:7f:ef:5f:48:50:74:b1:93:24:15:6d:cf:67:67:12:bc: 2b:25:b8:e6:71:35:34:56:3c:fe:92:0c:c7:02:61:18:1b:86: c9:3c:42:2d:26:8e:5d:54:0b:d0:a1:52:e3:8f:2d:19:8f:22: 68:d9:20:f5:7c:16:20:26:73:6e:49:8f:91:7c:cb:d4:9b:f6: 43:f6:a8:4b:dc:b3:00:5a:c3:ce:08:c4:f8:ee:bf:a2:b1:07: de:03:b5:2f:c0:56:b1:e6:0b:30:2e:30:51:58:de:ee:03:88: e9:1f:02:44:64:51:fd:6c:59:9f:b6:b4:a3:00:af:02:53:bb: 63:76:c3:34:f0:08:46:e5:22:91:8b:0a:fc:82:bd:b1:f9:66: 78:81:b5:f4:23:eb:19:f5:03:05:91:52:97:55:fc:17:08:e7: ce:19:e5:ae:11:72:d8:45:05:91:e5:e4:32:3b:d5:f2:67:e2: 1c:12:80:20:d2:7c:9c:b9:df:a3:04:86:f1:aa:58:9d:84:a4: a5:81:0f:10:78:90:ee:f6:a9:3d:bf:95:89:70:66:41:31:62: 4c:e6:49:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ0OUYxMTAvBgNVBAUTKDcwN0Q0ODYwNUEwRDg1NzcyRjkwREM0QjExNzJCRUYz MDI5NEEwODcwHhcNMjUxMjIwMTcwMjEzWhcNMjUxMjI3MTcwMjEzWjAYMRYwFAYD VQQDDA02OTQ2ZDY5NS01NDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpWEBb5qPw70PUIGRq3g4uviFSS3Itrao0lXKix+O6xgplsPs4AWiwjiJ/FI CtryKcBqYvDvF1OocJtFCt48kexIxdrYcndYytz3sxol9/LMauFSsAgSn34bkxPF EhtxQFJeK7Ta67XWR7zABHEE3J4UxuYRcyMYBQhaJHylePQyJF0HWR8Na82P1x9+ hIapKtfJHx9xsldchMyctul1hiIRKodj8cTeXh7ISZL+mWIoCR6t1mjLn3OHyKAs K2cl5S82Mp16DUtIOUdNUtlqC3ua6dAPPksC2XxiIyK5MO2h1zhX9lmj+79puGeV 0SpyleB6qRHsvfP9I3oDZ25XsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMCwiVv 8SNJdaQgjDRqes/H8JrqMB8GA1UdIwQYMBaAFHB9SGBaDYV3L5DcSxFyvvMClKCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDQ5Ri8wQkFDODU1NjM1 NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhYY3ZrTnhMRVhLLTh3S1Vv SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIMUlZRm9OaFhjdmtOeExFWEstOHdLVW9JYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDQ5Ri8wQkFDODU1NjM1NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhY Y3ZrTnhMRVhLLTh3S1VvSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnMaZXuc7HYI5M4oHrPHFQ1cTjpVjAIizi88Q0210/lB/9FGIg/3/v X0hQdLGTJBVtz2dnErwrJbjmcTU0Vjz+kgzHAmEYG4bJPEItJo5dVAvQoVLjjy0Z jyJo2SD1fBYgJnNuSY+RfMvUm/ZD9qhL3LMAWsPOCMT47r+isQfeA7UvwFax5gsw LjBRWN7uA4jpHwJEZFH9bFmftrSjAK8CU7tjdsM08AhG5SKRiwr8gr2x+WZ4gbX0 I+sZ9QMFkVKXVfwXCOfOGeWuEXLYRQWR5eQyO9XyZ+IcEoAg0nycud+jBIbxqlid hKSlgQ8QeJDu9qk9v5WJcGZBMWJM5kkq -----END CERTIFICATE-----Generated at Sun Dec 21 22:39:48 2025 by rpki-client