This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft File: u51dUPdVgZcvw68cbOavz1fPuT8.mft (raw, json) Hash identifier: B32cNlBsEFhFiKoa5fy3J5/hpaITDyEsIJm0eOvXJI0= Subject key identifier: F1:81:BA:22:56:A4:BC:A3:3B:8D:DA:2D:A5:D9:31:53:0A:19:32:50 Authority key identifier: BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F Certificate issuer: /CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F Certificate serial: 084B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft Manifest number: 0833 Signing time: Mon 22 Dec 2025 20:17:53 +0000 Manifest this update: Mon 22 Dec 2025 20:17:52 +0000 Manifest next update: Mon 29 Dec 2025 20:17:52 +0000 Files and hashes: 1: u51dUPdVgZcvw68cbOavz1fPuT8.crl (hash: 3A9+n4zcZbqKHKFsg47DBRNeDaMN4OJPJYwFrABCC78=) 2: 862720F4031611EB9086351AC4F9AE02.roa (hash: 0U1qDwyT+BXkTCNxIT2/eM9Em/bib1Kk+8kHpIN2HS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD6A, serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F Validity Not Before: Dec 22 20:17:52 2025 GMT Not After : Dec 29 20:17:52 2025 GMT Subject: CN=6949a771-a2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:20:bd:a4:7b:9e:c3:37:24:c8:ab:36:a1: e7:e0:b9:f8:38:0f:25:2b:c6:c6:40:91:a9:2f:37: b5:71:1c:91:5b:1e:1f:3e:42:c3:6f:39:1d:be:f5: 0d:90:af:91:42:83:9c:52:b1:5e:1e:32:31:fc:c2: 12:68:f6:d1:65:f6:e2:20:ac:7e:52:3f:e0:f6:0d: ce:75:7d:63:ae:76:2a:86:b7:c8:16:b8:97:56:13: e1:82:4b:7c:47:93:31:c0:8d:98:52:2f:67:f5:80: 58:81:09:09:02:cc:c6:44:88:fe:3e:c1:73:89:f5: 8f:3b:33:04:ff:ba:f4:16:9b:eb:6d:d7:6e:a3:1c: 18:f3:f1:d3:96:64:e8:b1:22:c7:54:b0:22:a6:5a: a8:58:bc:ae:4b:4a:9b:a2:53:16:ea:02:cd:0a:b1: 91:64:df:4d:51:ae:34:88:3d:83:31:eb:ea:78:ee: e8:23:14:d9:5f:0f:6f:82:fc:7e:1d:9b:3d:4c:aa: 24:f8:47:2f:6e:46:0a:b2:54:bd:6a:c4:ad:1b:e5: f6:2a:8d:93:82:05:ae:22:e6:ae:34:80:ca:6d:b7: 50:c4:5f:89:82:d5:0b:7a:86:af:32:b7:00:1a:fd: ee:f7:64:d7:49:35:d1:cc:a8:a0:af:59:2e:bb:f1: d1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:81:BA:22:56:A4:BC:A3:3B:8D:DA:2D:A5:D9:31:53:0A:19:32:50 X509v3 Authority Key Identifier: keyid:BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:99:d4:fc:47:33:56:a9:4e:a7:e6:e0:29:7f:26:31:d7:14: ae:e1:16:ce:33:fc:52:0f:9e:ce:6c:08:a2:38:77:dd:f4:62: b9:bc:8a:87:f7:0d:be:66:a7:db:4b:1b:d3:aa:d3:50:33:a6: ba:4e:c2:e5:f4:c1:dd:e5:69:0c:a9:4e:18:3e:ee:22:65:61: e3:3c:5d:48:de:87:85:db:17:08:92:41:25:2e:4e:c1:3c:2e: d1:e9:23:5b:21:93:19:1e:82:d0:fc:c2:e7:5a:c7:5b:74:4f: c5:91:30:92:87:98:38:66:77:f4:a7:93:7b:96:df:47:fe:6c: 2e:d5:37:6c:29:6f:df:de:4e:ea:e2:e5:a5:ed:1c:50:de:ae: 4d:b2:42:dc:b1:52:e4:c1:98:72:71:d9:45:f4:cb:45:5f:73: 3d:99:e9:86:01:8e:e3:15:97:da:59:77:fb:4b:f4:6b:e0:42: dd:1a:07:33:11:d7:67:be:48:21:73:d4:b1:d9:97:10:ce:9d: 50:1d:db:f1:c5:c5:a9:ad:1c:34:6f:b6:f3:92:54:46:65:09: 1d:97:01:4e:f2:3e:f3:d8:29:56:20:25:c8:1b:79:a2:c8:11: c9:7b:77:be:e1:c5:38:81:2d:d8:20:34:da:9a:94:49:ca:1b: 3e:f0:b0:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RENkExMTAvBgNVBAUTKEJCOUQ1RDUwRjc1NTgxOTcyRkMzQUYxQzZDRTZBRkNG NTdDRkI5M0YwHhcNMjUxMjIyMjAxNzUyWhcNMjUxMjI5MjAxNzUyWjAYMRYwFAYD VQQDDA02OTQ5YTc3MS1hMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAno4gvaR7nsM3JMirNqHn4Ln4OA8lK8bGQJGpLze1cRyRWx4fPkLDbzkdvvUN kK+RQoOcUrFeHjIx/MISaPbRZfbiIKx+Uj/g9g3OdX1jrnYqhrfIFriXVhPhgkt8 R5MxwI2YUi9n9YBYgQkJAszGRIj+PsFzifWPOzME/7r0FpvrbdduoxwY8/HTlmTo sSLHVLAiplqoWLyuS0qbolMW6gLNCrGRZN9NUa40iD2DMevqeO7oIxTZXw9vgvx+ HZs9TKok+EcvbkYKslS9asStG+X2Ko2TggWuIuauNIDKbbdQxF+JgtULeoavMrcA Gv3u92TXSTXRzKigr1kuu/HRYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGBuiJW pLyjO43aLaXZMVMKGTJQMB8GA1UdIwQYMBaAFLudXVD3VYGXL8OvHGzmr89Xz7k/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ2QS8zOUY0OEExMDAz MTUxMUVCQjU1RDIyMTlDNEY5QUUwMi91NTFkVVBkVmdaY3Z3NjhjYk9hdnoxZlB1 VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1MWRVUGRWZ1pjdnc2OGNiT2F2ejFmUHVUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REQ2QS8zOUY0OEExMDAzMTUxMUVCQjU1RDIyMTlDNEY5QUUwMi91NTFkVVBkVmda Y3Z3NjhjYk9hdnoxZlB1VDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABmdT8RzNWqU6n5uApfyYx1xSu4RbOM/xSD57ObAiiOHfd9GK5vIqH 9w2+ZqfbSxvTqtNQM6a6TsLl9MHd5WkMqU4YPu4iZWHjPF1I3oeF2xcIkkElLk7B PC7R6SNbIZMZHoLQ/MLnWsdbdE/FkTCSh5g4Znf0p5N7lt9H/mwu1TdsKW/f3k7q 4uWl7RxQ3q5NskLcsVLkwZhycdlF9MtFX3M9memGAY7jFZfaWXf7S/Rr4ELdGgcz Eddnvkghc9Sx2ZcQzp1QHdvxxcWprRw0b7bzklRGZQkdlwFO8j7z2ClWICXIG3mi yBHJe3e+4cU4gS3YIDTampRJyhs+8LA8 -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:37 2025 by rpki-client