This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft File: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft (raw, json) Hash identifier: v3SmqrXtuGfH/cXOKreAYesihh5UHiDgMqChkmMUrrY= Subject key identifier: 11:0C:90:DC:DF:09:CE:6D:6F:4F:90:CE:A1:BD:C2:FF:E4:92:4F:CD Authority key identifier: 0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 Certificate issuer: /CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Certificate serial: 3514 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft Manifest number: 3503 Signing time: Mon 22 Dec 2025 14:59:45 +0000 Manifest this update: Mon 22 Dec 2025 14:59:45 +0000 Manifest next update: Mon 29 Dec 2025 14:59:45 +0000 Files and hashes: 1: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl (hash: a3PJgXir/jBa6uASpywMY/fafT2n/gIJobUXmUmyrus=) 2: 514DBDFC98C711EAA0CFE582C4F9AE02.roa (hash: l+r465/YNbsSePCYzOqNrThMuqt7t44YKkUIR4UnTJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13588 (0x3514) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132AEB, serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Validity Not Before: Dec 22 14:59:45 2025 GMT Not After : Dec 29 14:59:45 2025 GMT Subject: CN=69495ce1-356c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d7:e1:35:d1:74:44:a3:c0:94:65:8d:07:9c: 49:9f:ab:af:6d:c1:00:ee:13:1e:4c:24:de:51:3f: a0:5a:06:c4:89:80:35:dd:92:ee:f6:7f:e2:b1:89: 60:58:d7:ed:95:03:1e:37:59:3d:07:90:f9:34:31: 0e:fa:4f:1f:8e:f8:3c:03:76:06:b7:04:dc:26:93: 3f:8c:35:27:67:11:36:b8:b7:24:fe:32:dd:b0:e8: 5c:18:06:08:35:45:f1:6f:1b:d9:01:d2:80:19:e6: 8d:58:d7:a5:a6:96:68:0f:8c:87:41:44:58:0b:34: 69:f2:30:89:ad:0b:b8:b6:40:2c:12:de:da:c7:85: 32:b3:af:43:6d:58:da:ca:37:16:2c:95:14:7e:43: 42:55:92:73:cf:8e:4f:08:14:9f:62:cf:b1:42:29: 4e:56:82:f3:58:b0:dd:51:da:30:8b:bf:57:6b:12: a6:88:01:34:81:35:0d:c6:98:d5:4e:16:eb:0e:d0: 37:df:fd:f2:b8:d7:e7:ed:af:58:bf:05:3d:3d:11: d9:8a:6a:a2:56:64:1d:d3:80:98:c7:ec:fa:9c:68: f8:1e:4d:41:80:5b:3f:1a:5e:52:d9:a0:16:e5:9b: 1a:45:7b:a4:14:a9:3f:5b:56:eb:a9:bd:ad:12:7b: 92:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0C:90:DC:DF:09:CE:6D:6F:4F:90:CE:A1:BD:C2:FF:E4:92:4F:CD X509v3 Authority Key Identifier: keyid:0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:a6:9a:a2:6d:2f:db:ec:98:3e:59:d5:df:d2:a0:8d:8a:9a: b1:6c:df:eb:fa:c1:fe:26:cd:7d:4e:70:62:1a:12:1f:18:b8: a2:35:57:f5:26:74:8b:bf:09:36:97:2f:87:4c:5d:95:f1:d9: 38:3e:14:d4:3b:ac:94:79:0d:f3:bd:4a:90:11:7f:89:1b:93: 0c:22:6e:b5:b8:c2:71:82:9e:8b:6c:43:21:90:10:0c:1e:81: b3:fc:0b:fa:54:48:be:60:c3:b0:94:ce:40:b6:81:46:0c:41: 48:54:00:60:5d:09:41:9f:cb:22:8d:70:9b:67:d6:05:06:40: 56:ac:c2:ae:77:86:a5:36:52:fd:1a:0e:d0:21:1a:44:54:88: 40:b3:d9:55:74:4c:42:63:c5:7c:8b:14:56:cb:05:21:bd:7f: 1c:f9:02:a8:6a:26:68:46:02:e8:12:4e:41:c9:c2:3d:eb:3c: c1:8c:10:47:78:37:3b:cd:5e:37:31:be:46:43:69:38:d5:41: b6:24:3e:be:c4:4e:28:4f:da:f8:71:41:89:83:ab:06:39:65: a6:ca:83:9e:7c:4c:b8:6b:f9:29:fb:d0:44:53:00:30:44:cd: 8e:98:da:85:93:5b:74:5b:e1:1d:24:a8:c4:e4:5c:6a:ae:a1: 9b:0f:54:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJBRUIxMTAvBgNVBAUTKDBGOTUyQTI3RUYzRUYyN0NFQTA4QzU3RDIwMkEzODA2 OUVDQjU4NDAwHhcNMjUxMjIyMTQ1OTQ1WhcNMjUxMjI5MTQ1OTQ1WjAYMRYwFAYD VQQDDA02OTQ5NWNlMS0zNTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNfhNdF0RKPAlGWNB5xJn6uvbcEA7hMeTCTeUT+gWgbEiYA13ZLu9n/isYlg WNftlQMeN1k9B5D5NDEO+k8fjvg8A3YGtwTcJpM/jDUnZxE2uLck/jLdsOhcGAYI NUXxbxvZAdKAGeaNWNelppZoD4yHQURYCzRp8jCJrQu4tkAsEt7ax4Uys69DbVja yjcWLJUUfkNCVZJzz45PCBSfYs+xQilOVoLzWLDdUdowi79XaxKmiAE0gTUNxpjV ThbrDtA33/3yuNfn7a9YvwU9PRHZimqiVmQd04CYx+z6nGj4Hk1BgFs/Gl5S2aAW 5ZsaRXukFKk/W1brqb2tEnuSLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEMkNzf Cc5tb0+QzqG9wv/kkk/NMB8GA1UdIwQYMBaAFA+VKifvPvJ86gjFfSAqOAaey1hA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkFFQi9FRjI5QkEyQTFE QTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThuenFDTVY5SUNvNEJwN0xX RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1VXFKLTgtOG56cUNNVjlJQ280QnA3TFdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkFFQi9FRjI5QkEyQTFEQTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThu enFDTVY5SUNvNEJwN0xXRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzppqibS/b7Jg+WdXf0qCNipqxbN/r+sH+Js19TnBiGhIfGLiiNVf1 JnSLvwk2ly+HTF2V8dk4PhTUO6yUeQ3zvUqQEX+JG5MMIm61uMJxgp6LbEMhkBAM HoGz/Av6VEi+YMOwlM5AtoFGDEFIVABgXQlBn8sijXCbZ9YFBkBWrMKud4alNlL9 Gg7QIRpEVIhAs9lVdExCY8V8ixRWywUhvX8c+QKoaiZoRgLoEk5BycI96zzBjBBH eDc7zV43Mb5GQ2k41UG2JD6+xE4oT9r4cUGJg6sGOWWmyoOefEy4a/kp+9BEUwAw RM2OmNqFk1t0W+EdJKjE5FxqrqGbD1TV -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:49 2025 by rpki-client