This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft File: aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft (raw, json) Hash identifier: 8Mm+S9rTwE2WeVy3b6yUI4aZNxAaIJJkIrPs39S/sYA= Subject key identifier: 5E:A4:BB:4D:69:93:7F:4D:EA:72:A9:65:18:E5:44:B1:25:A1:32:F5 Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Certificate serial: 0676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft Manifest number: 0801 Signing time: Mon 22 Dec 2025 21:53:29 +0000 Manifest this update: Mon 22 Dec 2025 21:53:29 +0000 Manifest next update: Mon 29 Dec 2025 21:53:29 +0000 Files and hashes: 1: aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl (hash: JzR0f5gpoDeIq8bSbsipnYqsPJ/YptDWouYv112IzJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A, serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Validity Not Before: Dec 22 21:53:29 2025 GMT Not After : Dec 29 21:53:29 2025 GMT Subject: CN=6949bdd9-38f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a7:c6:8f:a2:ab:55:93:7d:1c:ec:ce:2c:3e: be:5b:67:cc:93:83:bc:34:58:42:36:c4:f9:64:9d: 7f:62:2c:23:52:ec:2e:05:1e:f2:bc:e5:93:20:ab: e5:1e:7c:48:7c:2f:3e:be:cf:97:06:1b:49:fb:56: ca:f6:68:35:e1:0a:20:8d:c7:43:7d:00:2a:0e:24: c8:a2:96:5e:37:3e:12:f4:33:65:c5:13:e6:18:f0: 64:47:6e:d5:ff:7e:5f:78:01:fa:45:95:12:09:b3: aa:99:61:28:61:82:1b:c7:f1:93:ec:89:b0:4e:a2: 26:b2:14:cb:43:f7:4d:f1:e0:6a:7e:fc:0f:dd:da: ae:fd:bb:77:40:f9:cc:a8:00:1b:5e:96:24:a8:65: e9:ba:6e:d8:a1:78:00:2c:8b:7e:5a:f1:50:ef:21: e3:7b:da:1a:69:a5:ed:3d:ed:cf:35:50:2b:96:05: 4a:3b:3d:6d:41:3c:84:91:92:a3:e5:7d:f0:10:00: d8:11:9e:d3:ee:35:0d:80:f7:39:e5:68:aa:77:76: df:e4:54:8f:91:47:e1:ce:14:b8:85:9d:d8:64:74: cb:a5:9e:bd:8f:e0:80:11:8d:9a:1a:af:b4:63:03: cb:88:f5:fb:a7:0b:a7:da:5a:e4:d1:38:e4:02:62: 2f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A4:BB:4D:69:93:7F:4D:EA:72:A9:65:18:E5:44:B1:25:A1:32:F5 X509v3 Authority Key Identifier: keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:e9:f6:f9:73:3b:dc:b3:16:a6:9c:9e:89:de:0e:c1:11:6b: 95:eb:cf:6e:f5:02:57:a8:b7:65:d9:f7:53:4b:d1:13:8f:fc: 23:2a:9e:82:d9:2b:57:37:cc:8b:ee:c4:99:b0:89:4a:0f:f6: 75:ea:b3:08:d1:3f:48:fa:08:b3:ba:da:85:fa:31:5f:d8:41: 89:b2:b2:db:b0:f7:2d:b1:fe:12:0e:48:13:ef:5d:00:71:e1: 99:fa:76:3f:da:b7:dd:eb:2d:58:81:57:a7:82:b6:c7:86:3c: 7c:07:a0:bb:b3:3c:eb:34:54:b9:ff:97:f7:df:22:7f:79:1f: 60:45:73:9a:85:4c:e4:c4:48:87:cf:2e:b4:74:48:a0:70:c9: 3f:88:0f:5a:ce:7e:4b:20:f7:26:0f:bf:7f:3d:54:e1:b9:1b: 90:9d:44:a4:bc:fb:73:61:ae:2c:c6:8a:b6:f9:fc:5b:43:35: 98:cb:e2:c0:a1:9a:5e:e2:c7:22:a2:02:46:12:6e:f7:ca:5e: 5c:34:8f:56:b9:09:0b:9b:50:96:ed:a1:03:27:cc:28:f7:30: ea:94:c9:19:41:51:fa:32:b1:47:40:07:ba:17:57:92:e0:77: 6b:67:38:38:8d:3c:dd:e6:9c:92:80:0b:07:73:33:d0:83:49: 69:6d:30:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKDY4ODBEMzIzQUEzRjJENTE0NjA1MDY0MEYzMjFBNjEy OTAwMERGMDMwHhcNMjUxMjIyMjE1MzI5WhcNMjUxMjI5MjE1MzI5WjAYMRYwFAYD VQQDDA02OTQ5YmRkOS0zOGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxafGj6KrVZN9HOzOLD6+W2fMk4O8NFhCNsT5ZJ1/YiwjUuwuBR7yvOWTIKvl HnxIfC8+vs+XBhtJ+1bK9mg14QogjcdDfQAqDiTIopZeNz4S9DNlxRPmGPBkR27V /35feAH6RZUSCbOqmWEoYYIbx/GT7ImwTqImshTLQ/dN8eBqfvwP3dqu/bt3QPnM qAAbXpYkqGXpum7YoXgALIt+WvFQ7yHje9oaaaXtPe3PNVArlgVKOz1tQTyEkZKj 5X3wEADYEZ7T7jUNgPc55Wiqd3bf5FSPkUfhzhS4hZ3YZHTLpZ69j+CAEY2aGq+0 YwPLiPX7pwun2lrk0TjkAmIv0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6ku01p k39N6nKpZRjlRLEloTL1MB8GA1UdIwQYMBaAFGiA0yOqPy1RRgUGQPMhphKQAN8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xWRkdCUVpBOHlHbUVwQUEz d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJRFRJNm9fTFZGR0JRWkE4eUdtRXBBQTN3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xW RkdCUVpBOHlHbUVwQUEzd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj6fb5czvcsxamnJ6J3g7BEWuV689u9QJXqLdl2fdTS9ETj/wjKp6C 2StXN8yL7sSZsIlKD/Z16rMI0T9I+gizutqF+jFf2EGJsrLbsPctsf4SDkgT710A ceGZ+nY/2rfd6y1YgVengrbHhjx8B6C7szzrNFS5/5f33yJ/eR9gRXOahUzkxEiH zy60dEigcMk/iA9azn5LIPcmD79/PVThuRuQnUSkvPtzYa4sxoq2+fxbQzWYy+LA oZpe4sciogJGEm73yl5cNI9WuQkLm1CW7aEDJ8wo9zDqlMkZQVH6MrFHQAe6F1eS 4HdrZzg4jTzd5pySgAsHczPQg0lpbTCG -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:13 2025 by rpki-client