This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft File: u59Cz844jtxLKepl3rYWKyVtIQI.mft (raw, json) Hash identifier: MsswkdlTg0jK4fyBsmk8aO5HUV0u/S0nml9yvQov7U0= Subject key identifier: 5E:1F:6A:3D:71:31:AD:51:CE:FB:25:BB:04:E9:0A:C2:AC:DA:D0:26 Authority key identifier: BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02 Certificate issuer: /CN=A915DAF1/serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102 Certificate serial: 07AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft Manifest number: 07A0 Signing time: Thu 04 Dec 2025 20:25:59 +0000 Manifest this update: Thu 04 Dec 2025 20:25:59 +0000 Manifest next update: Thu 11 Dec 2025 20:25:59 +0000 Files and hashes: 1: u59Cz844jtxLKepl3rYWKyVtIQI.crl (hash: 1K4bFIj497NIP65KheoS94Vsf8CTBwsiZAtPK2H7OQY=) 2: 84F992E67BB911EFA4CC334CC4F9AE02.roa (hash: YklgGoKPIC5Pmt2tOtwd4ysgwGERG7auCGi5OoDyTlg=) 3: 5A9BEA702D7611EB9827C368C4F9AE02.roa (hash: ebO9+Vms5oQoG4HlIUTD5BkVkXKCz/huR2BUpn+lQwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1962 (0x7aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DAF1, serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102 Validity Not Before: Dec 4 20:25:59 2025 GMT Not After : Dec 11 20:25:59 2025 GMT Subject: CN=6931ee57-7416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:d4:c7:31:19:73:f1:a7:be:cc:72:e8:20: 9c:f0:28:fa:ca:64:8c:af:d5:9f:23:17:fb:a6:05: 47:f1:62:78:50:9d:95:b2:d3:38:90:88:6a:1b:12: 54:5a:11:30:02:1b:45:58:a3:27:83:a8:5b:04:71: 1e:f0:23:f7:19:fd:8c:b7:2e:cb:11:61:57:89:a4: 14:47:43:83:1d:1e:9a:81:79:c0:03:9e:ef:a6:8b: 63:4a:cf:ae:95:1b:ef:90:bf:89:85:09:29:99:46: 45:67:56:d5:39:4c:15:97:a8:3d:f5:fb:4f:35:88: b2:7e:f4:3f:06:d9:dc:d2:4f:ed:df:b5:51:6a:3f: c1:6e:d0:b5:cf:5c:1e:1c:ca:16:d0:20:98:87:8b: 2a:6e:28:c5:fb:24:ff:62:bc:4b:95:1f:9f:e6:d7: 7f:9b:a8:94:1a:f3:a9:26:a6:03:a6:7b:1e:b5:62: 88:d1:e1:e0:c4:31:fa:d0:a4:4e:5c:10:6c:48:ba: 0d:73:1c:a4:63:ee:1c:b7:83:ce:8c:2d:1e:2a:c7: 9c:e3:f8:13:5e:27:42:ef:a7:c7:78:2e:83:cf:7f: f0:f4:b9:c9:e9:89:63:52:bb:48:e5:a2:d7:94:e6: 4e:38:ae:b2:ad:12:8d:64:47:66:1b:db:b5:6e:7d: d8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1F:6A:3D:71:31:AD:51:CE:FB:25:BB:04:E9:0A:C2:AC:DA:D0:26 X509v3 Authority Key Identifier: keyid:BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:eb:6a:7e:0a:86:95:cf:73:52:fc:c2:f6:01:2e:ab:c3:50: a7:72:fa:fa:0e:71:2d:5b:7f:5f:ad:5a:dc:99:3c:36:26:d5: 67:ab:95:a1:24:3f:f3:e4:d5:87:9e:00:d0:43:8a:80:9a:a3: 2a:2b:f4:a4:fe:22:49:06:28:67:fd:cc:37:f2:1f:83:0c:87: 76:9c:dc:06:11:d1:f1:f5:e4:bc:aa:0b:fa:bc:bf:da:e2:39: 5a:dd:db:9e:6b:fb:c4:5e:12:cf:f9:d5:97:9c:40:6e:f3:e4: e0:f3:d0:c8:75:62:c5:52:10:40:4c:29:ca:cb:24:71:7c:cd: d0:16:65:92:03:4b:ca:50:f5:88:99:4c:49:f7:ed:b0:99:d8: 2d:82:24:03:71:46:70:db:1d:07:05:78:9a:5f:82:4b:c4:23: 49:72:b7:70:d9:50:70:99:bf:28:d6:50:fb:c0:8c:1d:0d:67: c0:e6:e9:a4:93:90:ba:a2:1b:0f:55:0e:6a:ba:45:78:63:f7: 95:21:a6:27:b5:11:5c:7b:78:30:22:40:2c:c1:0c:62:7e:a4: dc:f9:29:2f:67:fc:6f:89:ea:ea:97:5e:ee:96:65:6f:2a:10: ed:1a:05:b1:8f:8d:f0:73:d9:fe:a3:48:78:27:94:66:60:54: 08:5b:32:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBRjExMTAvBgNVBAUTKEJCOUY0MkNGQ0UzODhFREM0QjI5RUE2NURFQjYxNjJC MjU2RDIxMDIwHhcNMjUxMjA0MjAyNTU5WhcNMjUxMjExMjAyNTU5WjAYMRYwFAYD VQQDEw02OTMxZWU1Ny03NDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunDUxzEZc/Gnvsxy6CCc8Cj6ymSMr9WfIxf7pgVH8WJ4UJ2VstM4kIhqGxJU WhEwAhtFWKMng6hbBHEe8CP3Gf2Mty7LEWFXiaQUR0ODHR6agXnAA57vpotjSs+u lRvvkL+JhQkpmUZFZ1bVOUwVl6g99ftPNYiyfvQ/Btnc0k/t37VRaj/BbtC1z1we HMoW0CCYh4sqbijF+yT/YrxLlR+f5td/m6iUGvOpJqYDpnsetWKI0eHgxDH60KRO XBBsSLoNcxykY+4ct4POjC0eKsec4/gTXidC76fHeC6Dz3/w9LnJ6YljUrtI5aLX lOZOOK6yrRKNZEdmG9u1bn3Y2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4faj1x Ma1RzvsluwTpCsKs2tAmMB8GA1UdIwQYMBaAFLufQs/OOI7cSynqZd62FislbSEC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REFGMS8wQjJCOTBBNDJE NzUxMUVCOTM2RTM0NThDNEY5QUUwMi91NTlDejg0NGp0eExLZXBsM3JZV0t5VnRJ UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1OUN6ODQ0anR4TEtlcGwzcllXS3lWdElRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REFGMS8wQjJCOTBBNDJENzUxMUVCOTM2RTM0NThDNEY5QUUwMi91NTlDejg0NGp0 eExLZXBsM3JZV0t5VnRJUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ62p+CoaVz3NS/ML2AS6rw1Cncvr6DnEtW39frVrcmTw2JtVnq5Wh JD/z5NWHngDQQ4qAmqMqK/Sk/iJJBihn/cw38h+DDId2nNwGEdHx9eS8qgv6vL/a 4jla3duea/vEXhLP+dWXnEBu8+Tg89DIdWLFUhBATCnKyyRxfM3QFmWSA0vKUPWI mUxJ9+2wmdgtgiQDcUZw2x0HBXiaX4JLxCNJcrdw2VBwmb8o1lD7wIwdDWfA5umk k5C6ohsPVQ5qukV4Y/eVIaYntRFce3gwIkAswQxifqTc+SkvZ/xvierql17ulmVv KhDtGgWxj43wc9n+o0h4J5RmYFQIWzIV -----END CERTIFICATE-----Generated at Fri Dec 5 07:12:35 2025 by rpki-client