This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft File: u4lwRaiPyB_M_jjl92FYT9y6zoU.mft (raw, json) Hash identifier: halZJioM3qedkvm1PlGL9K4x1weuBZqlpOb1E169j/s= Subject key identifier: 1B:C0:31:D0:79:79:70:64:08:84:69:D3:A9:AE:44:B8:CE:0B:99:1B Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 Certificate issuer: /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Certificate serial: 0348 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft Manifest number: 0340 Signing time: Tue 23 Dec 2025 00:01:09 +0000 Manifest this update: Tue 23 Dec 2025 00:01:09 +0000 Manifest next update: Tue 30 Dec 2025 00:01:09 +0000 Files and hashes: 1: u4lwRaiPyB_M_jjl92FYT9y6zoU.crl (hash: Mjw1gdW1NKAppPmWBGc60sy8c6V7cPGIwDh7ydexoD0=) 2: AB8BCCA8908011F0B114A05CC4F9AE02.roa (hash: 1T0eskndL4iFaUJFcifTZvjR+o1R27ZKYdF+XD5eXWc=) 3: 5B4371EC907B11F085A8B481C4F9AE02.roa (hash: KjJmL1gLMQuW3NghzJwADbK1HaHP/M/oXcXExJSaN+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 840 (0x348) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128553, serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Validity Not Before: Dec 23 00:01:09 2025 GMT Not After : Dec 30 00:01:09 2025 GMT Subject: CN=6949dbc5-fe61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:3c:50:23:94:f5:7e:50:f7:53:c3:ca:cf: ee:ee:9a:27:f7:fa:da:87:f1:8d:e2:9d:70:ac:8f: 48:46:6b:97:c4:a0:9a:1a:10:fe:f3:56:20:86:d5: e1:21:2c:4d:35:f7:94:89:e2:c5:bb:90:f9:31:79: 51:21:6e:5a:82:53:42:25:a9:9b:d8:4d:23:15:1a: ed:2f:27:4d:5c:82:2e:a0:b5:36:14:25:58:23:66: 52:73:74:cc:b4:86:23:39:ca:1c:a3:e0:19:04:49: cd:3f:6b:47:22:f8:69:65:fc:c1:56:0c:51:15:4f: 8f:18:85:bc:55:6c:c2:4c:b4:4a:4b:24:01:e7:7e: b5:24:11:ee:9b:e1:35:bc:d9:3b:75:66:da:92:38: 7d:d3:8e:02:d3:56:73:d0:8c:ec:7f:95:86:1a:a5: fa:de:52:1b:66:ea:39:e2:6e:51:19:b7:66:64:87: 4a:ee:01:68:e4:69:dc:9e:34:6b:4b:76:02:bf:f6: c9:a2:20:4f:82:db:07:7f:1a:e3:66:0b:df:f5:1f: 6a:ee:85:06:56:96:90:ba:ab:cf:51:b6:f4:6b:c4: 5f:05:3b:30:a0:3e:cf:d6:3f:d4:15:ac:15:07:6d: a0:a4:1b:38:a6:06:c8:6a:a6:81:62:2c:75:a5:2a: 53:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C0:31:D0:79:79:70:64:08:84:69:D3:A9:AE:44:B8:CE:0B:99:1B X509v3 Authority Key Identifier: keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:27:92:13:be:92:a2:6d:92:35:ba:dd:19:45:3b:ab:11:bb: 92:83:21:a8:e3:88:70:17:dd:26:2b:1f:67:c0:ea:e1:d7:0a: 07:b5:16:b6:1d:52:30:c1:ba:4f:33:d6:27:ac:43:10:30:d2: 41:e2:ba:63:4b:58:1b:97:60:59:4a:e2:b7:4a:37:67:cc:80: de:f5:28:d3:17:98:da:77:35:78:4f:d3:01:6c:3c:01:12:39: e1:e2:19:a5:cf:66:44:70:1b:e0:81:0c:f8:68:48:be:5f:f6: 2c:6b:a2:69:34:5d:ba:bf:35:8d:28:e8:ba:e9:8f:ff:3f:10: 31:87:b6:f6:55:54:6f:9d:57:8c:22:77:a5:81:e4:0c:72:1f: 03:8b:67:f2:57:65:c3:0e:d7:a6:27:f0:34:df:a3:f7:54:68: 25:ba:91:22:0b:8f:27:ab:b3:89:95:69:a9:74:8e:7d:13:e6: 74:cf:c3:26:2d:0a:0b:77:31:43:bd:4d:da:2e:a8:31:45:93: 87:6e:0a:82:a2:18:6f:e2:47:8e:ce:f6:96:21:f3:4b:9f:a1: 47:24:81:c7:ff:eb:5c:a5:a8:81:fa:ea:d2:b9:37:be:66:c3: 85:0a:d9:74:51:d3:78:af:00:7c:1d:0a:1a:d9:76:76:3f:1e: f3:d2:56:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1NTMxMTAvBgNVBAUTKEJCODk3MDQ1QTg4RkM4MUZDQ0ZFMzhFNUY3NjE1ODRG RENCQUNFODUwHhcNMjUxMjIzMDAwMTA5WhcNMjUxMjMwMDAwMTA5WjAYMRYwFAYD VQQDDA02OTQ5ZGJjNS1mZTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYA8UCOU9X5Q91PDys/u7pon9/rah/GN4p1wrI9IRmuXxKCaGhD+81YghtXh ISxNNfeUieLFu5D5MXlRIW5aglNCJamb2E0jFRrtLydNXIIuoLU2FCVYI2ZSc3TM tIYjOcoco+AZBEnNP2tHIvhpZfzBVgxRFU+PGIW8VWzCTLRKSyQB5361JBHum+E1 vNk7dWbakjh9044C01Zz0Izsf5WGGqX63lIbZuo54m5RGbdmZIdK7gFo5GncnjRr S3YCv/bJoiBPgtsHfxrjZgvf9R9q7oUGVpaQuqvPUbb0a8RfBTswoD7P1j/UFawV B22gpBs4pgbIaqaBYix1pSpTnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvAMdB5 eXBkCIRp06muRLjOC5kbMB8GA1UdIwQYMBaAFLuJcEWoj8gfzP445fdhWE/cus6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU1My8xNjRBQkVDNEVC MEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlCX01fampsOTJGWVQ5eTZ6 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0bHdSYWlQeUJfTV9qamw5MkZZVDl5NnpvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU1My8xNjRBQkVDNEVCMEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlC X01fampsOTJGWVQ5eTZ6b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXJ5ITvpKibZI1ut0ZRTurEbuSgyGo44hwF90mKx9nwOrh1woHtRa2 HVIwwbpPM9YnrEMQMNJB4rpjS1gbl2BZSuK3SjdnzIDe9SjTF5jadzV4T9MBbDwB Ejnh4hmlz2ZEcBvggQz4aEi+X/Ysa6JpNF26vzWNKOi66Y//PxAxh7b2VVRvnVeM InelgeQMch8Di2fyV2XDDtemJ/A036P3VGglupEiC48nq7OJlWmpdI59E+Z0z8Mm LQoLdzFDvU3aLqgxRZOHbgqCohhv4keOzvaWIfNLn6FHJIHH/+tcpaiB+urSuTe+ ZsOFCtl0UdN4rwB8HQoa2XZ2Px7z0lZH -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:52 2025 by rpki-client