This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft File: u59Cz844jtxLKepl3rYWKyVtIQI.mft (raw, json) Hash identifier: GUBAOp4yRcJ+gK2+t17g6vola2aRtVcbhh44OLFrc2Q= Subject key identifier: B5:15:D1:1D:A2:0C:5E:41:83:3D:64:42:00:4B:11:EA:E8:EA:92:65 Authority key identifier: BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02 Certificate issuer: /CN=A915DAF1/serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102 Certificate serial: 07B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft Manifest number: 07A9 Signing time: Mon 22 Dec 2025 20:44:19 +0000 Manifest this update: Mon 22 Dec 2025 20:44:19 +0000 Manifest next update: Mon 29 Dec 2025 20:44:19 +0000 Files and hashes: 1: u59Cz844jtxLKepl3rYWKyVtIQI.crl (hash: r5UfXzPQ76b+e8L3Xl/1V7e4YkP26B+ym79sGkJc/Ao=) 2: 84F992E67BB911EFA4CC334CC4F9AE02.roa (hash: YklgGoKPIC5Pmt2tOtwd4ysgwGERG7auCGi5OoDyTlg=) 3: 5A9BEA702D7611EB9827C368C4F9AE02.roa (hash: ebO9+Vms5oQoG4HlIUTD5BkVkXKCz/huR2BUpn+lQwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1971 (0x7b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DAF1, serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102 Validity Not Before: Dec 22 20:44:19 2025 GMT Not After : Dec 29 20:44:19 2025 GMT Subject: CN=6949ada3-b845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:c0:2c:59:be:1a:5d:d2:14:32:43:36:67: 6c:04:20:75:6b:06:b4:21:ae:ef:e7:03:60:da:68: 8a:41:89:53:4f:0e:11:79:98:85:ee:c1:87:9c:1a: 01:36:35:6d:93:e3:32:c8:7c:54:a1:93:7e:ac:0e: c1:8a:02:80:a1:a2:ee:b8:f6:19:0c:c9:02:63:73: ab:83:4b:31:74:bd:e5:6e:7f:fc:3a:9a:e0:b1:ba: 43:b8:5b:60:dc:2c:91:f0:be:5a:c7:8a:30:03:2c: f1:75:2b:a4:46:06:2f:f8:94:45:46:6c:ec:99:88: d8:7a:81:c6:4c:4d:ed:7b:8e:d4:12:a5:d3:69:a3: e7:56:e1:d3:a2:36:dc:9e:5b:91:cc:8e:f1:cf:02: ad:27:47:6a:ad:84:5c:3e:1a:62:b1:51:1e:93:cd: d7:c1:5c:8e:fb:ee:d4:02:c7:85:56:31:aa:14:04: 3f:9b:ad:e6:34:16:29:f3:f8:6b:f4:e0:13:cb:a7: 41:48:13:c3:88:04:ce:5d:4a:d2:5f:de:96:0f:37: c4:8b:f2:66:ff:4c:79:33:19:a1:e5:68:47:39:ea: e4:4b:8b:4f:ec:4c:e3:20:f5:68:dc:fe:c2:1f:38: 83:a9:fe:87:f7:6c:dc:ab:7b:de:b9:65:61:39:d4: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:15:D1:1D:A2:0C:5E:41:83:3D:64:42:00:4B:11:EA:E8:EA:92:65 X509v3 Authority Key Identifier: keyid:BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:40:98:b6:83:67:84:c8:97:35:3b:be:83:d9:27:18:2b:3b: e9:f5:99:05:40:81:00:93:60:32:b0:9d:5c:ec:7a:f8:aa:95: 88:5a:50:80:2b:fc:8d:db:bb:ad:48:b5:a5:7e:1a:69:50:39: 01:ff:3b:4f:c1:19:1d:1e:ac:3e:24:52:9c:2f:fd:8f:97:1b: bd:8d:e2:67:d4:33:97:62:63:fc:22:bf:32:89:03:6e:19:6e: d0:e2:1c:e8:d7:20:45:03:bc:ec:a1:ce:9b:2b:77:08:c2:bf: 5e:84:dd:16:a6:8a:d4:41:bd:0e:84:ec:0e:c8:34:0e:29:ae: 6b:f1:24:66:23:93:5f:4a:ab:99:4c:aa:9b:4f:1d:c1:5c:ba: 35:c7:4b:e5:16:75:5a:ea:50:ab:57:0e:25:38:b0:0d:da:97: 68:09:61:0b:e0:23:70:84:15:5c:83:99:8d:25:5e:29:e9:6f: a9:a9:93:72:39:a7:63:cb:90:7e:3d:e8:66:76:b2:00:45:37: a5:a4:25:72:38:c0:f0:bc:fe:8e:81:af:02:33:3e:e1:bc:2a: aa:e6:c6:fa:33:68:92:2f:0f:98:de:93:fb:0b:78:0d:8a:18: 5e:84:62:98:76:2d:c4:60:95:10:f5:ed:46:ee:bd:e4:d1:2c: 9f:05:7e:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBRjExMTAvBgNVBAUTKEJCOUY0MkNGQ0UzODhFREM0QjI5RUE2NURFQjYxNjJC MjU2RDIxMDIwHhcNMjUxMjIyMjA0NDE5WhcNMjUxMjI5MjA0NDE5WjAYMRYwFAYD VQQDDA02OTQ5YWRhMy1iODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/nALFm+Gl3SFDJDNmdsBCB1awa0Ia7v5wNg2miKQYlTTw4ReZiF7sGHnBoB NjVtk+MyyHxUoZN+rA7BigKAoaLuuPYZDMkCY3Org0sxdL3lbn/8OprgsbpDuFtg 3CyR8L5ax4owAyzxdSukRgYv+JRFRmzsmYjYeoHGTE3te47UEqXTaaPnVuHTojbc nluRzI7xzwKtJ0dqrYRcPhpisVEek83XwVyO++7UAseFVjGqFAQ/m63mNBYp8/hr 9OATy6dBSBPDiATOXUrSX96WDzfEi/Jm/0x5Mxmh5WhHOerkS4tP7EzjIPVo3P7C HziDqf6H92zcq3veuWVhOdSUAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUV0R2i DF5Bgz1kQgBLEero6pJlMB8GA1UdIwQYMBaAFLufQs/OOI7cSynqZd62FislbSEC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REFGMS8wQjJCOTBBNDJE NzUxMUVCOTM2RTM0NThDNEY5QUUwMi91NTlDejg0NGp0eExLZXBsM3JZV0t5VnRJ UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1OUN6ODQ0anR4TEtlcGwzcllXS3lWdElRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REFGMS8wQjJCOTBBNDJENzUxMUVCOTM2RTM0NThDNEY5QUUwMi91NTlDejg0NGp0 eExLZXBsM3JZV0t5VnRJUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwQJi2g2eEyJc1O76D2ScYKzvp9ZkFQIEAk2AysJ1c7Hr4qpWIWlCA K/yN27utSLWlfhppUDkB/ztPwRkdHqw+JFKcL/2Plxu9jeJn1DOXYmP8Ir8yiQNu GW7Q4hzo1yBFA7zsoc6bK3cIwr9ehN0WporUQb0OhOwOyDQOKa5r8SRmI5NfSquZ TKqbTx3BXLo1x0vlFnVa6lCrVw4lOLAN2pdoCWEL4CNwhBVcg5mNJV4p6W+pqZNy Oadjy5B+PehmdrIARTelpCVyOMDwvP6Oga8CMz7hvCqq5sb6M2iSLw+Y3pP7C3gN ihhehGKYdi3EYJUQ9e1G7r3k0SyfBX5Z -----END CERTIFICATE-----Generated at Wed Dec 24 04:45:56 2025 by rpki-client