This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft File: AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft (raw, json) Hash identifier: jSLct1pQmGgHKgAIgHh2o9dc1bdbj1hfG4dndN0WaNU= Subject key identifier: 30:72:89:0A:0C:2D:82:A2:F7:DC:79:B4:92:89:0D:AE:1E:C9:23:8D Authority key identifier: 03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B Certificate issuer: /CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Certificate serial: 0813 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft Manifest number: 080D Signing time: Sat 20 Dec 2025 20:22:41 +0000 Manifest this update: Sat 20 Dec 2025 20:22:41 +0000 Manifest next update: Sat 27 Dec 2025 20:22:41 +0000 Files and hashes: 1: AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl (hash: bA1vobnEtfIXHt+9dq7+JIyMtHS1jqH0DCu5AHHb4rs=) 2: D3D1C19E0F2111EBBC6E5028C4F9AE02.roa (hash: w8h1UIf5R9tqHa/w+xuW6Fd0IPaJNgBHIyQBoTqMV4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2067 (0x813) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144BAD, serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Validity Not Before: Dec 20 20:22:41 2025 GMT Not After : Dec 27 20:22:41 2025 GMT Subject: CN=69470591-7ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:60:bb:da:fb:9a:8e:2a:9a:ce:82:c0:f4:5f: 19:13:61:ce:d5:0c:da:4f:1a:61:a2:14:4f:e4:13: e5:9a:e0:c6:42:65:6c:73:25:71:14:5d:6d:76:40: 5b:08:08:69:46:2b:4a:b7:a8:7a:ae:49:56:a8:e3: d1:68:30:aa:14:00:e9:cb:80:1a:4a:1a:6a:ac:5e: 6e:61:d1:58:b4:40:34:07:73:ac:b3:52:6d:59:9a: 8f:f7:d8:a1:35:06:2f:a1:3e:e7:09:8f:b5:34:70: 0d:2b:bb:6f:c0:7c:2a:5c:34:76:34:82:2c:53:b0: bd:99:f3:4c:a9:5c:b5:ed:29:50:77:4a:b3:b7:9b: 77:4d:fa:ed:7a:4b:d7:c4:ee:3e:c6:5a:39:95:e2: cc:5b:59:83:17:23:1c:c4:83:88:d5:e6:04:ba:76: 45:af:89:37:f8:ab:80:1c:61:52:ee:b7:dd:9b:46: 70:7a:ab:c2:62:2f:72:a3:32:dd:46:62:fb:57:99: cb:58:18:49:14:9d:b5:80:0a:7e:b7:eb:41:5b:a0: 66:c7:47:f1:06:f1:63:1b:16:f8:8e:ba:be:93:44: 75:2f:45:0c:07:53:e0:4b:72:54:64:2c:2c:f6:e4: bf:5d:9b:ea:97:98:7a:0a:96:64:e6:91:51:de:99: 15:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:72:89:0A:0C:2D:82:A2:F7:DC:79:B4:92:89:0D:AE:1E:C9:23:8D X509v3 Authority Key Identifier: keyid:03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:56:2e:91:d5:b3:71:83:08:f9:ab:2c:1f:30:50:ac:32:65: 7a:f5:40:39:06:ef:07:f9:f8:5c:30:04:77:ff:b6:93:a7:3b: 83:8d:0f:a0:35:f8:e2:b6:5d:62:94:98:e2:5e:0d:46:81:19: 79:fd:5b:e7:f2:4d:fa:b7:14:fc:dd:7b:ac:28:35:61:43:c6: 9d:13:60:da:f3:5c:d4:3d:12:e3:2c:ce:20:5f:55:63:d8:b8: 24:55:87:92:c1:cc:52:fc:88:10:78:29:f5:e2:d9:77:28:bd: cd:a7:19:e1:6f:43:17:2f:c8:70:0f:bf:85:34:a1:cd:56:a4: d4:4e:b4:62:f0:34:31:d1:df:f9:4f:1c:37:2b:b9:71:65:9b: 01:21:7f:68:86:2e:0d:55:23:75:f4:30:0b:49:c7:c3:28:4a: bb:a4:3b:4d:9b:82:a3:2c:a1:04:b5:e2:f7:2e:08:95:c4:3e: be:b4:a9:ec:39:74:9d:7f:90:c2:54:7f:7e:91:b6:92:fb:0e: da:5c:a8:74:02:a5:cb:0f:26:d2:61:a2:4b:f5:56:bb:c0:97: db:6e:2b:6e:70:b7:88:d2:17:ae:ef:7b:7c:e6:9e:7f:86:06: 18:27:fc:20:da:24:94:06:5b:08:f2:c2:87:3b:57:1f:59:d5: ee:ad:03:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRCQUQxMTAvBgNVBAUTKDAzMkFDMjI0MUQxOENGQkJDMUMzM0NBREY1RThGNjU1 NDEyRDRBOEIwHhcNMjUxMjIwMjAyMjQxWhcNMjUxMjI3MjAyMjQxWjAYMRYwFAYD VQQDDA02OTQ3MDU5MS03ZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWC72vuajiqazoLA9F8ZE2HO1QzaTxphohRP5BPlmuDGQmVscyVxFF1tdkBb CAhpRitKt6h6rklWqOPRaDCqFADpy4AaShpqrF5uYdFYtEA0B3Oss1JtWZqP99ih NQYvoT7nCY+1NHANK7tvwHwqXDR2NIIsU7C9mfNMqVy17SlQd0qzt5t3TfrtekvX xO4+xlo5leLMW1mDFyMcxIOI1eYEunZFr4k3+KuAHGFS7rfdm0ZweqvCYi9yozLd RmL7V5nLWBhJFJ21gAp+t+tBW6Bmx0fxBvFjGxb4jrq+k0R1L0UMB1PgS3JUZCws 9uS/XZvql5h6CpZk5pFR3pkVsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDByiQoM LYKi99x5tJKJDa4eySONMB8GA1UdIwQYMBaAFAMqwiQdGM+7wcM8rfXo9lVBLUqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEJBRC9ENUQ3NDM0NjA0 NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3dkJ3enl0OWVqMlZVRXRT b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F5ckNKQjBZejd2Qnd6eXQ5ZWoyVlVFdFNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEJBRC9ENUQ3NDM0NjA0NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3 dkJ3enl0OWVqMlZVRXRTb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeVi6R1bNxgwj5qywfMFCsMmV69UA5Bu8H+fhcMAR3/7aTpzuDjQ+g Nfjitl1ilJjiXg1GgRl5/Vvn8k36txT83XusKDVhQ8adE2Da81zUPRLjLM4gX1Vj 2LgkVYeSwcxS/IgQeCn14tl3KL3Npxnhb0MXL8hwD7+FNKHNVqTUTrRi8DQx0d/5 Txw3K7lxZZsBIX9ohi4NVSN19DALScfDKEq7pDtNm4KjLKEEteL3LgiVxD6+tKns OXSdf5DCVH9+kbaS+w7aXKh0AqXLDybSYaJL9Va7wJfbbitucLeI0heu73t85p5/ hgYYJ/wg2iSUBlsI8sKHO1cfWdXurQN9 -----END CERTIFICATE-----Generated at Sun Dec 21 05:42:02 2025 by rpki-client