This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: jBTR4sElhjq9brhWtlT5ZRuRe5gR45CMZI4CDSD+ii8= Subject key identifier: 15:DB:FC:61:4A:BC:ED:D7:7C:C6:80:92:51:6D:AD:4D:6C:F2:00:3C Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 084E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 0843 Signing time: Mon 22 Dec 2025 20:08:34 +0000 Manifest this update: Mon 22 Dec 2025 20:08:33 +0000 Manifest next update: Mon 29 Dec 2025 20:08:33 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: 0wP6jM/OofqXkoB4EEq1yHjExX3hle83vhiyeAWujxY=) 2: F9C379F2674F11F09FFF0F5BC4F9AE02.roa (hash: LcAbunDijFcAPxaxvvLn15sAYA8KilXQ0gSd3Vwnavw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2126 (0x84e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Dec 22 20:08:33 2025 GMT Not After : Dec 29 20:08:33 2025 GMT Subject: CN=6949a542-7227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:62:45:c1:3f:27:25:27:d9:91:63:bb:00:a0: 00:05:cc:4e:b8:79:34:eb:01:e7:e1:15:f7:9d:71: eb:03:4b:57:f2:9b:d8:21:2f:a4:09:b0:48:d4:12: 85:6e:23:43:49:6b:35:a3:6f:f0:9b:12:81:25:f9: 44:33:65:6f:42:fb:47:f3:c7:b1:29:dd:c6:23:cb: a8:6f:c0:d3:ad:94:1e:41:e8:8d:59:a7:1a:7e:b4: 72:e4:64:e0:74:0d:5b:4c:02:ff:3c:a0:a8:9f:5c: bf:ca:b8:83:81:69:25:ad:fb:9b:9e:7e:13:57:47: 0d:ad:fe:ed:1c:b9:ae:86:10:bf:89:f2:c3:94:3c: 34:51:0c:9d:93:f8:d4:a3:7e:04:f7:57:61:88:dc: a4:b8:4f:4b:04:3b:6b:22:e2:fa:e0:bb:3e:69:7b: 15:9a:76:09:c4:f9:58:87:e3:be:cd:23:41:91:60: 4e:63:84:ab:5e:53:37:54:61:68:4f:df:62:80:c6: ff:94:51:37:e3:ee:bd:4b:6a:a2:7d:8a:ca:f5:c1: dc:13:51:3a:7d:be:61:35:4c:88:57:f0:f5:60:17: 05:12:eb:fa:93:80:00:cd:f0:16:da:90:8b:70:96: d6:10:96:3d:e4:89:70:3e:1d:cf:32:b2:16:c3:75: b6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DB:FC:61:4A:BC:ED:D7:7C:C6:80:92:51:6D:AD:4D:6C:F2:00:3C X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:91:17:f9:13:6e:97:cf:2c:1f:55:4c:08:03:87:e2:e1:ce: 1f:69:cb:a4:ab:53:c4:ec:5b:49:aa:3f:3d:8d:95:c2:d0:62: fe:0c:bb:65:6e:f9:07:fb:2a:91:43:39:80:6e:25:46:1b:24: ce:10:32:b9:f9:41:44:9e:56:bd:56:f4:ef:97:76:1b:15:d8: f7:91:18:dc:94:85:2c:18:ed:b9:2a:82:d8:89:95:69:1b:3f: f7:1b:0e:56:ff:c8:53:77:2d:68:e5:1d:01:80:0d:81:01:0a: 9a:2c:29:e0:c8:d4:45:7c:da:3b:8e:75:01:ae:bd:4f:56:8b: bb:20:a3:99:ae:3e:fa:61:00:02:a2:46:16:21:ed:cb:ed:e2: b3:8e:d8:9d:16:b1:63:03:a4:70:73:2d:36:0a:2b:eb:35:b0: 5f:b4:74:d9:53:83:06:68:fc:37:1d:d9:7c:fd:2f:ba:38:40: 8e:e4:a0:c3:fc:18:b5:4e:af:78:b7:4e:aa:d2:02:e7:b7:39: 65:fd:ea:4a:fe:82:98:7d:5c:d4:7f:74:09:d7:ec:d9:20:50: 19:6e:30:91:94:e8:27:6b:6e:f6:11:e6:7e:f0:59:7b:42:cf: 76:f6:8a:3d:ee:55:bd:96:e9:ad:6d:7e:4a:28:e4:b5:34:90: 88:05:75:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjUxMjIyMjAwODMzWhcNMjUxMjI5MjAwODMzWjAYMRYwFAYD VQQDDA02OTQ5YTU0Mi03MjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjGJFwT8nJSfZkWO7AKAABcxOuHk06wHn4RX3nXHrA0tX8pvYIS+kCbBI1BKF biNDSWs1o2/wmxKBJflEM2VvQvtH88exKd3GI8uob8DTrZQeQeiNWacafrRy5GTg dA1bTAL/PKCon1y/yriDgWklrfubnn4TV0cNrf7tHLmuhhC/ifLDlDw0UQydk/jU o34E91dhiNykuE9LBDtrIuL64Ls+aXsVmnYJxPlYh+O+zSNBkWBOY4SrXlM3VGFo T99igMb/lFE34+69S2qifYrK9cHcE1E6fb5hNUyIV/D1YBcFEuv6k4AAzfAW2pCL cJbWEJY95IlwPh3PMrIWw3W2VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXb/GFK vO3XfMaAklFtrU1s8gA8MB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApkRf5E26XzywfVUwIA4fi4c4facukq1PE7FtJqj89jZXC0GL+DLtl bvkH+yqRQzmAbiVGGyTOEDK5+UFEnla9VvTvl3YbFdj3kRjclIUsGO25KoLYiZVp Gz/3Gw5W/8hTdy1o5R0BgA2BAQqaLCngyNRFfNo7jnUBrr1PVou7IKOZrj76YQAC okYWIe3L7eKzjtidFrFjA6Rwcy02CivrNbBftHTZU4MGaPw3Hdl8/S+6OECO5KDD /Bi1Tq94t06q0gLntzll/epK/oKYfVzUf3QJ1+zZIFAZbjCRlOgna272EeZ+8Fl7 Qs929oo97lW9lumtbX5KKOS1NJCIBXVG -----END CERTIFICATE-----Generated at Tue Dec 23 16:16:54 2025 by rpki-client