This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft File: Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json) Hash identifier: pXqQWYV5nKkCSTBQmBfmCBAVsSiwpJx5TT7sK4+FhQ8= Subject key identifier: A9:9F:72:E3:66:DD:E1:DF:DE:90:90:74:60:89:66:02:B5:F0:1C:57 Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Certificate serial: 2452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft Manifest number: 243C Signing time: Mon 22 Dec 2025 15:38:05 +0000 Manifest this update: Mon 22 Dec 2025 15:38:05 +0000 Manifest next update: Mon 29 Dec 2025 15:38:05 +0000 Files and hashes: 1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: 8jX/+wJjbu0EXWa9jWNNfYBKqzqjslDuoIHi7twRCe0=) 2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: 8qQ0fcDr/aGVnyD7P+G/6xo5kjUt3vBtdFXB7xYrVKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9298 (0x2452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Validity Not Before: Dec 22 15:38:05 2025 GMT Not After : Dec 29 15:38:05 2025 GMT Subject: CN=694965dd-003a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:d0:74:33:97:f3:6f:02:96:ac:c9:e6:7a: 67:db:08:dd:5b:a5:e3:54:64:c9:eb:83:48:c8:59: 55:a3:f4:49:bd:4a:f5:4a:71:e5:c5:53:79:ce:05: ee:bb:ba:a1:5b:19:53:d4:da:51:46:15:ce:18:0c: a9:23:3f:73:2a:1e:bb:bf:7c:37:2c:81:a3:93:0a: 6b:7a:56:25:29:45:a9:35:18:ec:a6:64:5a:d3:ed: 37:c9:4a:59:48:b3:72:72:30:b4:f8:f2:2a:80:5b: 28:c6:f4:d4:30:81:47:7b:d8:b2:c4:d2:9b:b3:52: 70:2f:f6:86:85:ab:e8:93:63:a0:b9:1d:08:55:a0: a4:c2:37:df:8b:f7:7f:98:55:eb:1b:4c:32:cd:e6: 5b:97:67:78:bd:52:a6:3e:24:06:e5:ad:7e:64:1c: a5:83:27:6e:8c:27:24:90:ee:7f:9d:ee:5a:af:7d: 0e:d4:48:dc:3a:56:fd:4d:19:34:d4:fd:9a:32:ee: f8:e1:e1:5b:5c:5d:af:fc:3f:6b:fc:88:2b:a5:41: 18:21:e5:20:3a:86:40:0c:2e:ef:3e:6d:14:eb:56: 6a:f2:a5:14:2e:60:d2:0b:36:75:7a:e1:23:92:a9: bc:71:71:3c:b0:88:55:e1:ce:59:c1:c6:6c:1e:25: 59:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9F:72:E3:66:DD:E1:DF:DE:90:90:74:60:89:66:02:B5:F0:1C:57 X509v3 Authority Key Identifier: keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:e8:35:09:2e:02:69:c9:aa:51:76:b3:9d:96:19:94:ba:a0: 60:e0:d0:70:23:9e:6c:02:36:18:a2:53:f2:d6:02:d7:73:9a: dd:ee:24:36:5d:39:a8:c0:39:55:40:b3:88:c5:ea:35:4b:d7: 14:f0:ce:1b:ea:c8:93:ab:8f:39:ee:c3:2f:2e:97:07:85:06: 68:86:7e:55:58:b7:70:ea:7b:e6:0f:b0:d3:58:1f:ad:a4:56: 57:22:26:22:41:2e:11:14:2a:f9:40:e7:1c:67:3e:53:6b:39: d2:c1:81:c1:2f:8c:09:5d:cf:1b:cf:97:15:1a:ff:3b:36:18: 82:df:f7:e8:8b:62:32:1f:bd:7c:d9:dc:65:fe:f2:4a:6b:34: b2:98:3d:31:67:35:76:b8:de:67:a2:03:f3:a3:04:07:67:f9: f7:0e:7b:93:08:d1:6b:80:61:9a:d7:3b:db:7b:22:38:5e:00: a4:35:b9:a6:8b:c2:10:b0:e4:76:13:96:e2:94:42:b8:1d:92: dc:fd:ed:20:ed:aa:a3:8c:a7:de:f5:c5:f0:b7:4b:c3:06:a3: 7a:99:99:2c:3e:6a:38:cf:ba:82:50:3e:7b:cf:0b:48:f3:29: 6d:76:a3:23:5c:84:42:3b:c0:84:17:4d:20:ea:fb:7f:92:05: 02:52:17:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw RUI5NDQ2OTEwHhcNMjUxMjIyMTUzODA1WhcNMjUxMjI5MTUzODA1WjAYMRYwFAYD VQQDDA02OTQ5NjVkZC0wMDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIjQdDOX828ClqzJ5npn2wjdW6XjVGTJ64NIyFlVo/RJvUr1SnHlxVN5zgXu u7qhWxlT1NpRRhXOGAypIz9zKh67v3w3LIGjkwprelYlKUWpNRjspmRa0+03yUpZ SLNycjC0+PIqgFsoxvTUMIFHe9iyxNKbs1JwL/aGhavok2OguR0IVaCkwjffi/d/ mFXrG0wyzeZbl2d4vVKmPiQG5a1+ZBylgydujCckkO5/ne5ar30O1EjcOlb9TRk0 1P2aMu744eFbXF2v/D9r/IgrpUEYIeUgOoZADC7vPm0U61Zq8qUULmDSCzZ1euEj kqm8cXE8sIhV4c5ZwcZsHiVZjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmfcuNm 3eHf3pCQdGCJZgK18BxXMB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5 MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ3RS8zRTZCRUM1NjY5MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJ Y2JlcnptNk5lRElPdVVScEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDP6DUJLgJpyapRdrOdlhmUuqBg4NBwI55sAjYYolPy1gLXc5rd7iQ2 XTmowDlVQLOIxeo1S9cU8M4b6siTq4857sMvLpcHhQZohn5VWLdw6nvmD7DTWB+t pFZXIiYiQS4RFCr5QOccZz5TaznSwYHBL4wJXc8bz5cVGv87NhiC3/foi2IyH718 2dxl/vJKazSymD0xZzV2uN5nogPzowQHZ/n3DnuTCNFrgGGa1zvbeyI4XgCkNbmm i8IQsOR2E5bilEK4HZLc/e0g7aqjjKfe9cXwt0vDBqN6mZksPmo4z7qCUD57zwtI 8yltdqMjXIRCO8CEF00g6vt/kgUCUhfW -----END CERTIFICATE-----Generated at Tue Dec 23 17:41:54 2025 by rpki-client