This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft File: u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json) Hash identifier: cvVJRoTf9sg8DT8Xt6/4YvppFUdtEM9z8u16fwUjcm8= Subject key identifier: 1F:79:99:4C:86:B3:5B:03:E1:25:93:E5:26:03:98:B1:B4:8E:D7:59 Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 Certificate issuer: /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft Manifest number: 01B1 Signing time: Mon 22 Dec 2025 23:53:01 +0000 Manifest this update: Mon 22 Dec 2025 23:53:00 +0000 Manifest next update: Mon 29 Dec 2025 23:53:00 +0000 Files and hashes: 1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: xxiP582HOY9TjBWZxBNGbyWqwFP2mV9TpOMWlYfJ88Q=) 2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: leuMzpLaxFsvYZtfj5XFjNm4DVLoebp+rvO2FUHNRVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Validity Not Before: Dec 22 23:53:00 2025 GMT Not After : Dec 29 23:53:00 2025 GMT Subject: CN=6949d9dd-e489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0b:57:4e:33:05:0b:d0:5a:b6:b0:9d:2f:f1: 62:7b:3a:d6:b8:05:77:8b:3f:bd:5e:ce:17:a4:a4: be:3f:ca:1c:92:e9:4c:84:0b:63:02:e7:3e:96:f2: 93:22:f7:55:8e:0f:e5:3c:10:f4:35:7e:6f:f0:85: 0d:3f:7f:d2:d7:69:49:f4:0d:fe:2b:cd:b8:0a:ba: b1:d0:14:64:7b:ed:8d:f8:47:3a:3e:79:7f:bd:cb: da:da:d9:45:72:f3:34:25:16:f5:f6:62:a2:4f:cd: 33:40:93:ac:5c:7d:3c:c8:17:59:ec:11:bb:ea:3f: 12:49:63:51:20:ad:4d:04:ba:5e:2f:fd:ee:f9:2c: 70:de:9f:f0:c4:25:4f:d2:f3:f5:ad:61:ca:8f:70: 7b:91:81:e5:26:87:8d:26:13:2b:db:81:1f:9e:22: b6:9c:19:ca:ff:46:47:e1:06:70:7e:f3:e2:28:73: 52:7c:49:0f:24:c2:80:ac:b6:c9:06:4b:49:8a:e7: 3d:5a:9a:b8:4c:4f:92:6c:88:64:81:18:c7:e1:a9: af:f8:b7:14:1d:9d:66:d5:02:e7:13:16:db:5c:a9: 62:09:5b:02:60:ea:ff:8a:30:39:70:9e:19:b6:54: 4b:1f:bc:95:18:df:b0:28:bf:a7:38:3c:b2:b7:c3: 59:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:79:99:4C:86:B3:5B:03:E1:25:93:E5:26:03:98:B1:B4:8E:D7:59 X509v3 Authority Key Identifier: keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6a:a1:55:dd:ba:29:c9:65:5b:35:bb:29:5c:73:93:e0:4f: 04:0a:ff:a0:bd:34:51:f7:05:b7:af:2a:d6:c3:26:39:f4:83: 82:47:da:9f:f8:89:3c:1f:a9:7a:44:ee:9f:2a:bd:b0:ee:ae: f4:aa:79:9e:70:71:b7:41:76:11:de:5c:c2:cb:cc:68:87:b9: b4:da:7b:01:93:e5:a1:37:2c:fc:dd:8d:74:93:c7:14:30:64: 0d:90:d9:d1:69:72:ec:70:fe:a6:10:e9:15:a6:24:c2:6f:61: 39:5a:06:ad:f9:2e:fc:a9:45:fc:0f:eb:86:d9:84:79:24:f4: bb:36:36:e1:fb:c7:c9:2e:88:c2:29:ff:c4:62:78:e0:9b:6e: b2:e1:7d:f4:ab:55:7a:86:d4:a1:7a:6b:86:16:a9:19:f9:3d: 2a:8a:76:09:da:d5:b4:90:44:72:4e:5d:5b:19:73:99:bc:b2: 12:bb:13:f6:b6:b3:14:f5:ce:d4:a0:31:3e:bd:90:a7:30:65: 40:db:23:76:c7:b4:58:d6:53:35:0b:9f:a0:bd:71:7f:e5:ea: 2d:1c:cd:59:b0:d2:57:2b:eb:28:aa:c2:b8:ed:c5:0c:e1:57: 6d:55:93:54:4b:bc:54:ff:c9:1a:fa:55:3e:4a:a4:44:8d:69: 26:d5:e0:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKEJCOUFEMUFGNjkzMTRCMkVGMkY2NDk0MUYwMzZGREUw RjdDQzRGMDIwHhcNMjUxMjIyMjM1MzAwWhcNMjUxMjI5MjM1MzAwWjAYMRYwFAYD VQQDDA02OTQ5ZDlkZC1lNDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQtXTjMFC9BatrCdL/FiezrWuAV3iz+9Xs4XpKS+P8ockulMhAtjAuc+lvKT IvdVjg/lPBD0NX5v8IUNP3/S12lJ9A3+K824Crqx0BRke+2N+Ec6Pnl/vcva2tlF cvM0JRb19mKiT80zQJOsXH08yBdZ7BG76j8SSWNRIK1NBLpeL/3u+Sxw3p/wxCVP 0vP1rWHKj3B7kYHlJoeNJhMr24EfniK2nBnK/0ZH4QZwfvPiKHNSfEkPJMKArLbJ BktJiuc9Wpq4TE+SbIhkgRjH4amv+LcUHZ1m1QLnExbbXKliCVsCYOr/ijA5cJ4Z tlRLH7yVGN+wKL+nODyyt8NZDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB95mUyG s1sD4SWT5SYDmLG0jtdZMB8GA1UdIwQYMBaAFLua0a9pMUsu8vZJQfA2/eD3zE8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy81NDZFRjNCQTRC OTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5N3k5a2xCOERiOTRQZk1U d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U1clJyMmt4U3k3eTlrbEI4RGI5NFBmTVR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy81NDZFRjNCQTRCOTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5 N3k5a2xCOERiOTRQZk1Ud0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8aqFV3bopyWVbNbspXHOT4E8ECv+gvTRR9wW3ryrWwyY59IOCR9qf +Ik8H6l6RO6fKr2w7q70qnmecHG3QXYR3lzCy8xoh7m02nsBk+WhNyz83Y10k8cU MGQNkNnRaXLscP6mEOkVpiTCb2E5Wgat+S78qUX8D+uG2YR5JPS7Njbh+8fJLojC Kf/EYnjgm26y4X30q1V6htShemuGFqkZ+T0qinYJ2tW0kERyTl1bGXOZvLISuxP2 trMU9c7UoDE+vZCnMGVA2yN2x7RY1lM1C5+gvXF/5eotHM1ZsNJXK+soqsK47cUM 4VdtVZNUS7xU/8ka+lU+SqREjWkm1eAX -----END CERTIFICATE-----Generated at Wed Dec 24 22:57:03 2025 by rpki-client