This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft File: AryISFcqsaDRBj5XuCIPK1LWvec.mft (raw, json) Hash identifier: HFVYwqj82ipj5z7hWaGOukKgkr9RqYuogpTIBRjeZ3I= Subject key identifier: 58:D2:50:75:5D:88:4D:1E:06:59:E9:DA:6E:5B:AD:8D:71:FC:C9:60 Authority key identifier: 02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7 Certificate issuer: /CN=A9153B58/serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft Manifest number: 06 Signing time: Tue 23 Dec 2025 06:56:39 +0000 Manifest this update: Tue 23 Dec 2025 06:56:39 +0000 Manifest next update: Tue 30 Dec 2025 06:56:39 +0000 Files and hashes: 1: AryISFcqsaDRBj5XuCIPK1LWvec.crl (hash: Gjlp3d5XrjFd98sPfyYXK4gG0TmnqfiZAFlS4m1RkHM=) 2: 36256C16D96011F0BB00DFAC96D3641D.roa (hash: 6+W+vKMYiOsOm+Y3GN2oawDDGZir37CFnIYDqFPexks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153B58, serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7 Validity Not Before: Dec 23 06:56:39 2025 GMT Not After : Dec 30 06:56:39 2025 GMT Subject: CN=694a3d27-8de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:32:c3:b7:8b:33:9b:73:ac:9d:d4:e4:b2: da:11:75:79:13:9f:96:b0:5d:72:6c:1f:e7:8b:69: 21:d3:81:c2:61:cd:4c:ea:d2:2f:92:ec:5a:86:04: c9:08:8e:47:22:af:b4:4f:6a:52:e6:64:02:44:91: 3b:29:d4:de:c4:81:77:fe:88:2a:3b:f3:11:3d:1d: f0:ef:e6:26:bb:e7:d7:bc:6b:ba:77:a9:e8:40:79: 80:87:a7:03:ad:e5:00:43:2e:ce:ec:78:b0:1f:ed: 44:da:4b:bb:28:d8:56:6d:70:cb:75:8c:2a:b6:87: d2:f9:70:4b:32:f8:d1:a4:2a:d1:3d:2e:67:82:72: 85:13:4a:0b:60:67:81:ac:b9:95:51:64:70:b0:1b: de:35:27:cb:ec:2c:9d:a2:42:92:0d:d0:2b:f5:bb: 00:d5:43:a3:0c:46:d1:f1:c4:d5:14:cd:93:69:c8: 82:87:d8:66:db:69:3a:e8:73:2f:65:d6:f9:74:e6: e0:13:f8:3c:9a:fc:12:68:8c:08:88:8e:9f:6e:54: 72:ba:10:2e:ec:96:e9:10:ed:7f:1e:b7:e8:f5:ff: 66:a1:2a:95:89:92:b7:f3:91:f4:52:4f:ea:a5:53: 43:0c:d0:7b:15:b2:82:d7:09:1d:f3:4d:c8:37:e7: 23:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D2:50:75:5D:88:4D:1E:06:59:E9:DA:6E:5B:AD:8D:71:FC:C9:60 X509v3 Authority Key Identifier: keyid:02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:40:86:6d:c6:9e:15:d8:b2:e9:e6:21:d7:9c:47:25:f3:68: cd:47:08:5e:47:5f:cb:48:b7:ba:c1:cb:b3:d5:9d:aa:43:08: 03:94:5f:07:8c:bf:f7:d7:6d:c4:2e:fe:5f:01:3e:17:c5:a4: c9:4f:e1:ec:83:bf:ea:04:52:6e:a3:e1:c8:8c:cf:f1:20:b0: 2b:b1:ec:af:3b:92:ac:27:dd:e0:46:ac:90:8e:98:68:43:20: c9:c9:61:fc:22:82:7b:5d:76:ea:9d:52:bf:cc:60:74:01:b6: 6a:14:3d:f0:ed:f5:15:90:e1:c7:eb:34:e9:34:68:2c:9c:64: 3b:f1:4e:12:c5:b8:4e:ac:af:bc:b3:9f:f4:ec:d3:26:25:e2: b1:4c:5e:9d:ad:17:14:be:da:b8:ca:e0:b2:21:7a:f3:c6:dc: 4c:c7:e8:e5:4a:c3:1f:ef:9e:04:5f:b6:98:c3:84:3b:45:75: f7:bf:85:b0:41:6e:3e:91:58:f9:53:ad:2a:90:c8:85:9d:73: d2:34:8a:07:5b:75:20:a4:f2:50:3c:0c:cb:33:bb:87:89:cf: 67:48:75:cb:be:80:ce:ec:fd:ce:46:17:f8:5d:cf:b6:0f:9f: 2a:a8:2d:e9:f1:ed:e9:3b:1e:20:d6:1b:5f:4b:ff:8a:dd:58: 18:ad:77:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0I1ODExMC8GA1UEBRMoMDJCQzg4NDg1NzJBQjFBMEQxMDYzRTU3QjgyMjBGMkI1 MkQ2QkRFNzAeFw0yNTEyMjMwNjU2MzlaFw0yNTEyMzAwNjU2MzlaMBgxFjAUBgNV BAMMDTY5NGEzZDI3LThkZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC60TLDt4szm3OsndTkstoRdXkTn5awXXJsH+eLaSHTgcJhzUzq0i+S7FqGBMkI jkcir7RPalLmZAJEkTsp1N7EgXf+iCo78xE9HfDv5ia759e8a7p3qehAeYCHpwOt 5QBDLs7seLAf7UTaS7so2FZtcMt1jCq2h9L5cEsy+NGkKtE9LmeCcoUTSgtgZ4Gs uZVRZHCwG941J8vsLJ2iQpIN0Cv1uwDVQ6MMRtHxxNUUzZNpyIKH2GbbaTrocy9l 1vl05uAT+Dya/BJojAiIjp9uVHK6EC7slukQ7X8et+j1/2ahKpWJkrfzkfRST+ql U0MM0HsVsoLXCR3zTcg35yO1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWNJQdV2I TR4GWenablutjXH8yWAwHwYDVR0jBBgwFoAUAryISFcqsaDRBj5XuCIPK1LWvecw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzQjU4LzQyQTUyNjQ0RDk1 RjExRjBBQTE1ODZBMTk2RDM2NDFEL0FyeUlTRmNxc2FEUkJqNVh1Q0lQSzFMV3Zl Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQXJ5SVNGY3FzYURSQmo1WHVDSVBLMUxXdmVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz QjU4LzQyQTUyNjQ0RDk1RjExRjBBQTE1ODZBMTk2RDM2NDFEL0FyeUlTRmNxc2FE UkJqNVh1Q0lQSzFMV3ZlYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM1Ahm3GnhXYsunmIdecRyXzaM1HCF5HX8tIt7rBy7PVnapDCAOUXweM v/fXbcQu/l8BPhfFpMlP4eyDv+oEUm6j4ciMz/EgsCux7K87kqwn3eBGrJCOmGhD IMnJYfwigntdduqdUr/MYHQBtmoUPfDt9RWQ4cfrNOk0aCycZDvxThLFuE6sr7yz n/Ts0yYl4rFMXp2tFxS+2rjK4LIhevPG3EzH6OVKwx/vngRftpjDhDtFdfe/hbBB bj6RWPlTrSqQyIWdc9I0igdbdSCk8lA8DMszu4eJz2dIdcu+gM7s/c5GF/hdz7YP nyqoLenx7ek7HiDWG19L/4rdWBitd4Q= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:27 2025 by rpki-client