This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft File: pBUE5m4xRDSGJRkGluDoj_sfUnA.mft (raw, json) Hash identifier: uTznP5k1K0+bfKXXQsmBMYomqwVYjNkTq0H2PvZq0RY= Subject key identifier: 92:5A:61:B3:27:DE:FA:6D:EE:E4:52:47:56:BE:75:F5:95:C1:EF:FC Authority key identifier: A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70 Certificate issuer: /CN=A915D9C1/serialNumber=A41504E66E3144348625190696E0E88FFB1F5270 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft Manifest number: CA Signing time: Tue 23 Dec 2025 04:47:58 +0000 Manifest this update: Tue 23 Dec 2025 04:47:58 +0000 Manifest next update: Tue 30 Dec 2025 04:47:58 +0000 Files and hashes: 1: pBUE5m4xRDSGJRkGluDoj_sfUnA.crl (hash: WqYKtOzwTzAaICeBwAlZMj3hfDRvm92lxBoHDLsUmkI=) 2: C17B1042AD7211EFBD28595FC4F9AE02.roa (hash: 6k1OeDAZbCrNksIQf+J6HTs1CPc04jpy2MtgiZuWAoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D9C1, serialNumber=A41504E66E3144348625190696E0E88FFB1F5270 Validity Not Before: Dec 23 04:47:58 2025 GMT Not After : Dec 30 04:47:58 2025 GMT Subject: CN=694a1efe-205c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:d7:ca:56:72:4c:ab:b5:dc:9b:58:02:08: cf:fc:e6:56:3b:4a:75:1d:52:e5:a6:fc:cd:07:e4: 34:cd:84:e7:46:0f:17:d4:51:d9:a8:5c:03:0f:8f: e3:dd:ca:43:d3:46:c9:c5:47:e5:4d:b2:a4:6e:02: e9:a8:ec:66:af:c4:33:36:46:b2:47:c1:3e:90:75: 31:cb:33:7e:02:23:e0:2e:03:22:29:2d:41:87:ef: 3b:e0:23:61:19:4d:ac:aa:31:8f:c1:2d:93:b9:36: bc:cd:9e:14:81:b4:5e:1e:b5:de:f0:57:da:38:fb: 5e:74:46:17:3b:84:81:b7:f9:86:be:14:ad:c3:56: 71:6d:1e:24:9e:8d:ff:e1:91:dd:64:f7:2b:67:bc: 39:55:e8:09:10:f0:6e:aa:6a:c5:38:ed:0b:40:d8: 6a:1e:21:f1:41:72:e0:f7:9c:be:34:2b:67:91:36: e5:f7:15:c7:ec:27:22:23:82:8d:6f:8c:d7:b6:17: 5f:ed:9a:44:1a:84:cb:77:06:77:47:31:59:94:8e: 9f:a9:5c:0a:c8:2f:e9:d1:2c:f9:ee:f9:a4:b8:d5: 86:c0:82:ba:93:9d:a5:e0:c7:ab:1c:22:53:e9:8a: 4a:28:71:ab:a8:1e:a2:8f:11:b5:9e:7c:44:16:72: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5A:61:B3:27:DE:FA:6D:EE:E4:52:47:56:BE:75:F5:95:C1:EF:FC X509v3 Authority Key Identifier: keyid:A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:60:70:2c:63:44:4c:f0:86:c1:28:c5:c1:5a:ef:a5:6d:f4: 6d:fb:b9:d8:68:63:77:4e:8d:85:46:4b:d1:d7:33:04:44:cf: 8f:0b:e5:2e:71:58:d7:14:1f:c3:a1:25:5d:b3:df:3a:3f:7d: d5:4d:8c:fb:09:f1:88:ef:6b:ea:2e:34:88:ae:9b:dc:9c:3b: 9a:65:af:ef:e2:36:50:b6:64:7c:92:15:8c:9a:9a:88:03:7d: 4d:7a:ca:96:eb:ba:10:58:f4:1b:47:4a:82:e5:2e:8a:67:43: a3:04:60:c4:6f:75:da:dc:a0:fd:9f:64:46:86:39:42:05:01: 64:a1:05:ca:a8:1b:89:dc:8a:90:cc:19:c2:f6:b1:88:fe:1b: 75:5c:18:46:60:ce:d4:a9:ce:2b:d5:75:97:9d:2a:51:ab:07: d2:c4:a2:34:38:22:96:2b:e6:28:8c:27:fb:bd:69:de:d1:3e: 28:8d:cd:6d:d2:ea:2c:c9:60:5a:04:9b:20:eb:85:9e:c1:d9: 51:03:7f:23:d9:c5:dc:20:b2:4f:78:00:51:f5:ee:d9:a5:30: 6f:cb:98:26:bb:4a:98:a1:36:39:b5:1b:06:4c:02:2b:59:74: 80:0c:4f:46:43:cc:67:3b:77:12:48:b7:ac:61:8f:7f:7f:53: 85:72:ca:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ5QzExMTAvBgNVBAUTKEE0MTUwNEU2NkUzMTQ0MzQ4NjI1MTkwNjk2RTBFODhG RkIxRjUyNzAwHhcNMjUxMjIzMDQ0NzU4WhcNMjUxMjMwMDQ0NzU4WjAYMRYwFAYD VQQDDA02OTRhMWVmZS0yMDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr27XylZyTKu13JtYAgjP/OZWO0p1HVLlpvzNB+Q0zYTnRg8X1FHZqFwDD4/j 3cpD00bJxUflTbKkbgLpqOxmr8QzNkayR8E+kHUxyzN+AiPgLgMiKS1Bh+874CNh GU2sqjGPwS2TuTa8zZ4UgbReHrXe8FfaOPtedEYXO4SBt/mGvhStw1ZxbR4kno3/ 4ZHdZPcrZ7w5VegJEPBuqmrFOO0LQNhqHiHxQXLg95y+NCtnkTbl9xXH7CciI4KN b4zXthdf7ZpEGoTLdwZ3RzFZlI6fqVwKyC/p0Sz57vmkuNWGwIK6k52l4MerHCJT 6YpKKHGrqB6ijxG1nnxEFnKVywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJaYbMn 3vpt7uRSR1a+dfWVwe/8MB8GA1UdIwQYMBaAFKQVBOZuMUQ0hiUZBpbg6I/7H1Jw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDlDMS8zMDgwNUNBQUFE NzIxMUVGQURGMjM0NUVDNEY5QUUwMi9wQlVFNW00eFJEU0dKUmtHbHVEb2pfc2ZV bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BCVUU1bTR4UkRTR0pSa0dsdURval9zZlVuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDlDMS8zMDgwNUNBQUFENzIxMUVGQURGMjM0NUVDNEY5QUUwMi9wQlVFNW00eFJE U0dKUmtHbHVEb2pfc2ZVbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+YHAsY0RM8IbBKMXBWu+lbfRt+7nYaGN3To2FRkvR1zMERM+PC+Uu cVjXFB/DoSVds986P33VTYz7CfGI72vqLjSIrpvcnDuaZa/v4jZQtmR8khWMmpqI A31NesqW67oQWPQbR0qC5S6KZ0OjBGDEb3Xa3KD9n2RGhjlCBQFkoQXKqBuJ3IqQ zBnC9rGI/ht1XBhGYM7Uqc4r1XWXnSpRqwfSxKI0OCKWK+YojCf7vWne0T4ojc1t 0uosyWBaBJsg64WewdlRA38j2cXcILJPeABR9e7ZpTBvy5gmu0qYoTY5tRsGTAIr WXSADE9GQ8xnO3cSSLesYY9/f1OFcsqe -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:35 2025 by rpki-client