This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft File: c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft (raw, json) Hash identifier: haFmd46QX1sVxAg6RqaDOVYlXrntWlSVgTB66PqyANM= Subject key identifier: 6C:C9:75:F9:00:33:DA:96:56:29:40:2B:6B:FA:71:A9:64:3D:85:0E Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 Certificate issuer: /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft Manifest number: 0217 Signing time: Tue 23 Dec 2025 01:13:22 +0000 Manifest this update: Tue 23 Dec 2025 01:13:21 +0000 Manifest next update: Tue 30 Dec 2025 01:13:21 +0000 Files and hashes: 1: c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl (hash: Qv+E50JMnO811Ej/vxd3f7YNyVnVxe3I1uYzD4C6uFc=) 2: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (hash: 5/W5EqvBYrwaBbNXisgVsa/BWjLPbFWwbLiAWCjCMGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C3BB, serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Validity Not Before: Dec 23 01:13:21 2025 GMT Not After : Dec 30 01:13:21 2025 GMT Subject: CN=6949ecb1-976f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:02:60:65:71:0d:b3:67:98:07:90:62:3e:a2: ac:bb:cc:44:b3:3e:f2:c0:5e:a0:91:cb:a1:3b:0a: 23:59:4d:73:e6:16:67:f7:17:8a:25:97:af:06:11: e4:59:b9:b4:1c:ca:e8:b0:de:61:2b:6c:79:dc:b4: 22:c8:4d:a6:8f:2c:74:9a:ac:8e:48:5f:53:97:28: cd:cb:00:a6:19:53:03:cd:10:f8:a5:f6:ae:88:24: e7:4b:c6:cf:06:8f:e2:6a:41:b6:76:21:d9:18:cd: 5a:98:d2:38:e9:56:be:c9:65:7b:71:b2:ac:3c:86: 2d:8a:53:6a:1e:79:80:af:47:9c:a3:6a:cc:5c:77: ad:ff:44:75:eb:4a:bf:7a:10:63:d5:a3:8c:b4:b1: 84:53:1a:a0:9d:54:a3:85:e7:01:43:bd:ae:f9:63: 49:f8:34:68:79:22:ac:c5:73:f2:3d:ed:a4:fd:f0: f6:a7:99:03:9c:ee:a4:49:a7:46:c7:37:21:a7:2c: b7:dc:ff:a7:75:18:3b:f5:46:d0:80:91:b6:03:f0: bf:00:a1:26:cc:0e:b3:ac:0a:b4:0d:71:ef:04:02: cb:23:c5:8f:0c:0e:a4:2f:8c:b9:1d:b2:5e:19:a4: c2:aa:20:cc:43:fe:48:17:1b:a2:df:b5:40:4c:47: e6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C9:75:F9:00:33:DA:96:56:29:40:2B:6B:FA:71:A9:64:3D:85:0E X509v3 Authority Key Identifier: keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:96:98:1b:2b:c7:ac:d9:fa:38:83:98:01:da:56:39:4c:98: 0c:7b:52:b9:07:0f:39:ca:00:e3:b0:4a:71:16:ed:0c:1b:03: d2:67:98:09:75:ba:07:39:b2:e6:01:77:ef:e9:c0:66:c6:dc: 9b:d1:cf:fb:44:83:91:db:e9:ae:a4:d3:83:54:45:95:dc:75: 7b:86:38:c1:82:e8:bc:5a:3b:91:af:07:3a:f4:41:40:c0:2f: fb:62:dc:77:87:d8:cd:3f:46:51:5d:7d:cf:a3:94:87:39:74: e9:98:b8:8b:e1:80:2e:54:0f:cc:1f:6d:fd:0d:c7:a8:f2:ae: 24:2a:3d:42:5a:9a:96:68:1a:e9:8a:f4:75:0d:73:c4:a3:70: 9c:9f:94:4a:b7:d1:65:92:76:88:ed:d4:2d:8c:59:f5:04:2a: c7:b4:6e:0f:9e:4e:2d:30:19:28:00:e1:90:40:81:32:ff:b3: b8:8e:e8:1e:d9:84:af:db:5e:25:72:4c:51:07:b1:22:74:df: db:c3:f0:70:6e:07:5b:76:3c:2c:ae:ce:76:25:9e:a9:4f:6e: d6:b0:33:cd:78:2e:7e:04:cc:c1:b5:80:43:5c:30:45:97:3c: 80:fd:fd:52:27:7e:0f:85:a3:41:16:dd:da:98:04:a4:91:c2: 3a:f5:d7:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzQkIxMTAvBgNVBAUTKDczRkJCNThGNTU3MUYzRjRDNjJBNjNGREY1QUZFRjlD QjcwRTc0MDMwHhcNMjUxMjIzMDExMzIxWhcNMjUxMjMwMDExMzIxWjAYMRYwFAYD VQQDDA02OTQ5ZWNiMS05NzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwJgZXENs2eYB5BiPqKsu8xEsz7ywF6gkcuhOwojWU1z5hZn9xeKJZevBhHk Wbm0HMrosN5hK2x53LQiyE2mjyx0mqyOSF9TlyjNywCmGVMDzRD4pfauiCTnS8bP Bo/iakG2diHZGM1amNI46Va+yWV7cbKsPIYtilNqHnmAr0eco2rMXHet/0R160q/ ehBj1aOMtLGEUxqgnVSjhecBQ72u+WNJ+DRoeSKsxXPyPe2k/fD2p5kDnO6kSadG xzchpyy33P+ndRg79UbQgJG2A/C/AKEmzA6zrAq0DXHvBALLI8WPDA6kL4y5HbJe GaTCqiDMQ/5IFxui37VATEfmbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzJdfkA M9qWVilAK2v6calkPYUOMB8GA1UdIwQYMBaAFHP7tY9VcfP0xipj/fWv75y3DnQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzNCQi9DOTA4ODc5QUFC NDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhfVEdLbVA5OWFfdm5MY09k QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfdTFqMVZ4OF9UR0ttUDk5YV92bkxjT2RBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzNCQi9DOTA4ODc5QUFCNDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhf VEdLbVA5OWFfdm5MY09kQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCulpgbK8es2fo4g5gB2lY5TJgMe1K5Bw85ygDjsEpxFu0MGwPSZ5gJ dboHObLmAXfv6cBmxtyb0c/7RIOR2+mupNODVEWV3HV7hjjBgui8WjuRrwc69EFA wC/7Ytx3h9jNP0ZRXX3Po5SHOXTpmLiL4YAuVA/MH239Dceo8q4kKj1CWpqWaBrp ivR1DXPEo3Ccn5RKt9FlknaI7dQtjFn1BCrHtG4Pnk4tMBkoAOGQQIEy/7O4juge 2YSv214lckxRB7EidN/bw/Bwbgdbdjwsrs52JZ6pT27WsDPNeC5+BMzBtYBDXDBF lzyA/f1SJ34PhaNBFt3amASkkcI69dey -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:13 2025 by rpki-client