This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft File: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft (raw, json) Hash identifier: ZgSE219Hg99tA+zS5WRvt9deVYSC6iB7Gejk2sGU3UI= Subject key identifier: 7A:15:05:12:A1:9E:B9:89:84:13:48:0E:C6:80:93:24:D1:7B:F9:B6 Authority key identifier: EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 Certificate issuer: /CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Certificate serial: 0EBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft Manifest number: 0EB5 Signing time: Sat 20 Dec 2025 17:21:42 +0000 Manifest this update: Sat 20 Dec 2025 17:21:41 +0000 Manifest next update: Sat 27 Dec 2025 17:21:41 +0000 Files and hashes: 1: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl (hash: jeW8gzMEeOpimAVAuW4t3qiYs90Vv9lZ0+Ip9mafZWs=) 2: 0DFAD3529E1611E98059B049C4F9AE02.roa (hash: Fk/MM5a7XloGNvh5BBzETAolL1qXnjEN3DS8ILJUook=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3774 (0xebe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FEA1, serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Validity Not Before: Dec 20 17:21:41 2025 GMT Not After : Dec 27 17:21:41 2025 GMT Subject: CN=6946db26-4f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d1:e5:79:99:4d:aa:4a:ff:92:6d:75:88:83: 65:37:74:01:48:1d:08:e0:59:60:16:84:17:00:87: a0:e8:1d:5b:a4:4d:a8:8e:21:60:2f:c6:cf:03:e0: 4a:74:1d:59:f2:f8:87:de:3b:8f:0c:6d:39:06:67: 3c:95:1a:71:7b:f7:de:f6:60:fe:82:f4:89:a1:56: c7:21:65:f8:12:4b:9b:90:e3:03:12:18:97:36:d1: 62:87:54:3b:65:42:5e:1f:12:a2:55:ff:b6:78:f0: af:74:09:0f:2a:37:6c:d0:f7:a1:d0:c9:3f:fb:25: 0c:34:36:fa:8e:6e:9e:f4:b5:6f:71:2f:c6:8a:56: 8d:b8:69:bd:00:f7:cb:78:9c:ff:1d:f3:6c:eb:8a: c3:c8:67:be:d7:a1:6a:de:72:40:b5:3a:6e:3b:8e: fa:9e:ee:54:95:9f:26:5f:61:a1:a2:8c:69:b5:35: 4f:9a:a1:45:df:00:9e:fb:d3:af:27:3b:9c:57:6d: 71:0e:bf:24:98:a7:ce:07:32:49:06:6d:62:f4:74: c1:8a:ce:59:11:85:09:5f:44:74:b6:d0:9b:92:36: 47:ef:db:13:3a:2d:cb:37:1e:0f:31:b9:9f:99:b5: 81:12:d9:09:08:a8:11:8e:55:97:b9:79:52:54:7f: 75:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:15:05:12:A1:9E:B9:89:84:13:48:0E:C6:80:93:24:D1:7B:F9:B6 X509v3 Authority Key Identifier: keyid:EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:51:25:67:57:24:75:40:9a:62:8b:81:ff:02:63:d9:c6:55: 13:50:32:4b:55:d8:e5:70:18:9c:e6:63:cb:3a:86:ed:30:51: 21:6d:95:c3:73:d0:0a:ce:36:0f:86:18:6f:5a:8e:e8:89:52: 5f:e3:9e:85:0b:03:81:d2:22:c5:d1:69:33:07:70:e4:27:1c: c0:35:de:af:b0:42:bc:d7:73:24:e4:53:9f:3e:fd:e1:30:91: 82:21:8c:96:48:ab:84:4e:7d:e9:f6:bd:01:d9:cf:52:ac:c9: 3d:c9:6e:78:a0:e6:99:4e:3d:4b:ff:cb:0d:02:28:90:ab:cd: 61:77:b8:9b:7a:ba:80:1a:2f:ce:03:d6:ae:29:48:c4:ac:c8: 60:cb:db:60:e6:27:11:89:dd:1f:28:f8:c3:a3:33:23:7b:c2: 7b:06:a1:3a:ef:1d:4d:9f:c2:90:2e:bc:07:e1:53:06:53:bd: d2:51:d3:d8:96:e1:6d:46:7b:27:65:46:c0:75:f2:3e:f1:ac: 59:9f:76:25:92:99:bd:cb:45:31:eb:d5:c6:69:a3:c4:9e:67: 91:2c:9f:41:b9:ae:9a:8a:24:43:db:40:0c:8e:fe:7d:17:9c: 5c:0c:2d:87:25:2d:f2:2d:ce:40:4b:d1:99:a6:76:a2:1f:3f: f4:b6:4f:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFQTExMTAvBgNVBAUTKEVGNkMxOTRCQjI4OTREMzNFNkRFMDY0MjIzMkQ5NENF NEU5RUYxOTQwHhcNMjUxMjIwMTcyMTQxWhcNMjUxMjI3MTcyMTQxWjAYMRYwFAYD VQQDDA02OTQ2ZGIyNi00ZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAktHleZlNqkr/km11iINlN3QBSB0I4FlgFoQXAIeg6B1bpE2ojiFgL8bPA+BK dB1Z8viH3juPDG05Bmc8lRpxe/fe9mD+gvSJoVbHIWX4EkubkOMDEhiXNtFih1Q7 ZUJeHxKiVf+2ePCvdAkPKjds0Peh0Mk/+yUMNDb6jm6e9LVvcS/GilaNuGm9APfL eJz/HfNs64rDyGe+16Fq3nJAtTpuO476nu5UlZ8mX2GhooxptTVPmqFF3wCe+9Ov JzucV21xDr8kmKfOBzJJBm1i9HTBis5ZEYUJX0R0ttCbkjZH79sTOi3LNx4PMbmf mbWBEtkJCKgRjlWXuXlSVH91cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoVBRKh nrmJhBNIDsaAkyTRe/m2MB8GA1UdIwQYMBaAFO9sGUuyiU0z5t4GQiMtlM5OnvGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkVBMS9CRkNCODVFQzlF MTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRUUG0zZ1pDSXkyVXprNmU4 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyd1pTN0tKVFRQbTNnWkNJeTJVems2ZThaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkVBMS9CRkNCODVFQzlFMTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRU UG0zZ1pDSXkyVXprNmU4WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWUSVnVyR1QJpii4H/AmPZxlUTUDJLVdjlcBic5mPLOobtMFEhbZXD c9AKzjYPhhhvWo7oiVJf456FCwOB0iLF0WkzB3DkJxzANd6vsEK813Mk5FOfPv3h MJGCIYyWSKuETn3p9r0B2c9SrMk9yW54oOaZTj1L/8sNAiiQq81hd7iberqAGi/O A9auKUjErMhgy9tg5icRid0fKPjDozMje8J7BqE67x1Nn8KQLrwH4VMGU73SUdPY luFtRnsnZUbAdfI+8axZn3Ylkpm9y0Ux69XGaaPEnmeRLJ9Bua6aiiRD20AMjv59 F5xcDC2HJS3yLc5AS9GZpnaiHz/0tk/J -----END CERTIFICATE-----Generated at Sun Dec 21 01:48:29 2025 by rpki-client